Privacy Policy

This document is a template prepared for Kilig and must be reviewed by qualified legal counsel before launch.

Last updated: November 8, 2026

Kilig is built on a simple idea: you should be able to look for connection without giving up control of your personal life. This Privacy Policy explains what information Kilig Labs, Inc. ("Kilig," "we," "us," or "our") collects when you use Kilig on the web, as an installed web app (PWA), or through our iOS and Android apps (together, the "Service"). It also explains how we use and share that information, how long we keep it, and the choices and rights you have.

Kilig Labs, Inc. is the controller of your personal information. If you have questions, contact us at privacy@tinder.zowebo.com.

Privacy at a glance

• We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not use advertising cookies.
• Your location is approximate by design. We snap coordinates to a grid of roughly 1.1 km before we store them, and we show other members distances rounded to whole kilometers, never less than "2 km."
• We strip hidden metadata from your photos, including EXIF data and GPS coordinates, when you upload them.
• Sensitive profile fields are optional and hidden by default. You decide who can see each one: everyone, matches only, or only you.
• We never see your full card number. Payments are processed by Stripe, the Apple App Store, or Google Play.
• You can download or delete your data at any time from Settings → Your data and Settings → Account.

1. Information we collect

1.1 Information you give us when you create an account

• Contact and sign-in details: your email address and/or mobile phone number, and a password if you choose one. We store passwords only in a hashed form that we cannot read.
• Sign-in provider details: if you use Sign in with Google or Sign in with Apple, we receive a unique account identifier and the name and email address the provider shares with us. If you use Apple's "Hide My Email," we receive a relay address instead of your real one.
• Date of birth: we use it to confirm that you are at least 18 and to show your age (unless you choose to hide it, where that option is available).
• Security settings: for example, whether two-factor authentication is turned on. If you use an authenticator app, we store an encrypted secret used to check your codes, and hashed versions of your recovery codes.

1.2 Profile information

• Basic profile: your first name or chosen display name, gender, who you want to meet, relationship intentions, photos and short videos, prompts and answers, interests, and optional lifestyle details such as height, education, work, languages, pets, and habits.
• Optional sensitive fields: you may choose to add information such as your sexual orientation, religion, political views, or ethnicity. These fields are always optional. They are hidden by default ("Only me"), and each one has its own audience control (Everyone, Matches only, or Only me) that you set explicitly. Where the law requires it, we ask for your explicit consent before we process this information, and you can remove it or change who sees it at any time in Settings → Privacy (/app/settings/privacy).

Please keep in mind that some information you share on a dating service can reveal sensitive details about you even if you don't fill in a sensitive field. For example, your gender and who you want to meet may suggest your sexual orientation. We treat this information with the same care.

1.3 Photos and videos

You can upload photos and videos of up to 15 seconds to your profile, and send photos in chat. When you upload a photo, we remove its embedded metadata, including EXIF data and GPS coordinates, before it is stored or shown to anyone. We may also create resized or compressed copies so that images load quickly.

1.4 Location

With your permission, we collect your device's location to show you people nearby and to show others an approximate distance to you. See Section 6, Location privacy for exactly how we limit and protect this information. If you don't grant location permission, you can set your city manually.

1.5 Activity, matches, and messages

• Discovery activity: likes, passes, super likes, rewinds, boosts, matches, unmatches, and the profiles you view.
• Messages and calls: the text, photos, GIFs, stickers, voice messages, and shared profiles you send through Kilig, and records of voice and video calls (for example, the time, duration, and participants). We do not record the audio or video of calls. Messages are encrypted in transit and at rest, but they are not end-to-end encrypted, because our safety systems need to be able to screen for scams and abuse (see Section 2).
• Blocks and reports: people you block, reports you make, and reports others make about you, including any details or screenshots attached.

1.6 Payment information

If you buy a subscription or virtual items such as boosts or super likes:

• On the web, payments are processed by Stripe. Stripe collects your card or payment details directly. We receive limited information such as the payment method type, card brand, last four digits, expiration month and year, billing country and postal code, and transaction status.
• In our iOS or Android apps, payments are processed by the Apple App Store or Google Play. We receive a transaction record (such as a purchase identifier, product, price, currency, and renewal status), not your payment details.

We never see or store your full card number.

1.7 Verification information

Verification is optional, but it helps members trust that you are who your photos say you are.

• Photo verification: we ask you to take a live selfie copying a randomly chosen pose. We use automated face-comparison technology to compare it to the photos on your profile, and a trained member of our team may review the result if the automated check is uncertain. This process creates facial geometry data, which some laws treat as biometric information. We ask for your explicit consent before photo verification, use the data only to verify you and to keep the Service safe, and do not sell it or use it for advertising.
• ID verification: if you choose ID verification, a trusted third-party identity verification provider checks your government-issued ID and a selfie on our behalf. This also confirms that you are at least 18. The provider shares the result with us (for example, whether the check passed and confirmation of your date of birth), not a copy of your ID document. Your legal name is never shown on your profile. The provider processes your information under its own privacy terms and our agreement with it, and keeps it only as long as needed for the check and its legal obligations.

1.8 Device and usage information

When you use the Service, we automatically collect:

• Device details: device type and model, operating system and version, app version, browser type, language, time zone, and push notification tokens.
• Network details: IP address and the approximate location derived from it (for example, city or region), used for security and fraud prevention.
• Login history: the date, time, device, IP address, and approximate location of sign-ins, which you can review in Settings → Security.
• Usage information: features you use, screens you visit, settings you choose, notifications you receive and open, and diagnostic data such as crash reports and performance logs.
• Bot-protection signals: when you sign up, sign in, reset your password, or request a text message code, we check that the request comes from a person using a genuine app: on the web with Cloudflare Turnstile, on iOS with Apple App Attest, and on Android with Google Play Integrity. We receive a verdict (for example, whether the check passed, whether the app is genuine, and whether the device passes integrity checks) and a key that identifies the app install, not your contacts, photos, or other app data. We use these signals only for security, fraud prevention, and stopping fake accounts.

1.9 Information from your communications with us

When you contact support, submit an appeal, answer a survey, or reach out to our Trust & Safety team, we collect what you share with us and our replies.

1.10 Information from other sources

• Other members, for example when they report you or share your profile with a friend through Kilig.
• Sign-in providers (Google and Apple), as described above.
• Our identity verification provider, as described above.
• App stores and payment processors, about your purchases and refunds.
• Fraud-prevention and security partners, for example signals that an email address, phone number, or payment method has been associated with fraud.

1.11 Contacts, only if you use Hide from contacts

If you turn on Hide from contacts, you choose to share the email addresses and phone numbers of people you know, from your device's address book, your browser's contact picker, or by pasting them. They are sent over an encrypted connection and immediately converted into keyed one-way hashes; we never store the original addresses, numbers, or names. We compare the hashes with the verified email addresses and phone numbers of members so that you and those members don't see each other in discovery or likes. You can clear the list at any time in Settings → Privacy, and it is deleted with your account.

2. How we use your information

We use your information only for the purposes described here.

Purpose	Examples	Main information used
Provide the Service	Create and secure your account, show your profile, let you match, message, and call	Account, profile, photos, activity, messages, device
Matching and discovery	Rank profiles by compatibility, including distance, shared interests, intentions, lifestyle, and recent activity; apply your filters and dealbreakers	Profile, approximate location, activity, preferences
Safety and moderation	Screen profiles, photos, and messages for scams, spam, nudity, hate, threats, and signs that someone may be under 18; review reports; enforce our Community Guidelines	Profile, photos, messages, reports, device, activity
Fraud prevention and security	Detect fake accounts, account takeovers, payment fraud, and ban evasion; send login alerts	Account, device, network, login history, payments
Payments	Process purchases, renewals, grace periods, refunds, and promo codes	Payment and transaction records, account
Communications	Send verification codes, match and message notifications, security alerts, receipts, and (if you opt in) product news	Account, device, notification preferences
Support	Answer your questions, handle appeals and data requests	Communications, account, relevant activity
Analytics and improvement	Understand how features are used, fix bugs, improve performance, and develop new features	Usage and device information, in aggregated or pseudonymized form where possible
Legal compliance	Respond to lawful requests, keep financial records, meet our legal obligations	As required

Automated screening and decisions

To keep Kilig safe at scale, we use automated tools, including machine-learning models, to screen profiles, photos, and messages and to detect patterns associated with scams, spam, and other harmful behavior. Depending on the result, our systems may hold content for review, show a safety warning in a conversation, limit an account's activity, or send the case to our Trust & Safety team. Significant enforcement decisions, such as suspensions or bans, are made or confirmed by a person except in clear-cut cases such as known spam patterns. You can always ask for a human review of a decision through the appeals process described in our help article on appeals.

Some messages and profile text, such as early messages with a new match, messages from new accounts, a small random sample of other messages, and new or changed bios and prompt answers, may also be screened by an AI service provider acting as our processor, to detect scams and abuse. Before any text is sent, we remove names, email addresses, phone numbers, and similar identifiers. The provider processes it only to return a safety assessment to us. Its results help our Trust & Safety team decide what to review first and count as one of the signals in our risk checks; they do not remove content or ban accounts on their own. The provider is listed with our other service providers in Section 4.2.

Our discovery ranking also uses automated processing to estimate compatibility. It does not rank people by popularity or attractiveness, and it does not produce legal or similarly significant effects on you.

3. Legal bases for processing (EEA, UK, and Switzerland)

If you are in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases:

• Performance of a contract: to provide the Service you signed up for, including your account, profile, matching, messaging, calls, and purchases.
• Legitimate interests: to keep the Service safe and secure, prevent fraud and ban evasion, improve and personalize the Service, and communicate with you about your account. We balance these interests against your rights, and you can object (see Section 9).
• Consent: to process optional sensitive fields, to process facial geometry for photo verification, to access your device's precise location, to use analytics cookies on the web, and to send marketing messages. You can withdraw consent at any time without affecting processing that happened before.
• Legal obligation: to keep financial records, respond to lawful requests, and meet other legal requirements.
• Vital interests: in rare cases, to protect someone's life or physical safety.

4. How we share your information

4.1 With other members

Your profile is visible to other members according to your settings. Other members can see your public profile information, including your photos, first name, age (unless hidden), approximate distance (unless hidden), and any fields whose audience you set to "Everyone." Fields set to "Matches only" are visible only to people you've matched with. Fields set to "Only me" are never shown to anyone. Your messages are visible to the people you send them to. Learn more in Privacy controls.

4.2 With service providers

We share information with companies that help us run the Service. They may only use it on our instructions and must protect it. The categories are:

Category	What they do
Cloud hosting and storage	Host our servers, databases, and media files
Content delivery	Deliver photos and app content quickly and securely
Payment processing	Stripe (web), Apple App Store, Google Play
Identity verification	Check government IDs and confirm age for ID verification
Messaging delivery	Send emails, SMS verification codes, and push notifications
Voice and video infrastructure	Connect in-app voice and video calls
Safety and moderation tools	Help detect spam, scams, and harmful images or text, including an AI service provider that screens message and profile text with identifiers removed
Customer support tools	Manage support tickets and help center requests
Analytics and diagnostics	Measure feature usage (with consent on the web) and report crashes
Fraud prevention and security	Detect fraudulent accounts, payments, and attacks, including bot checks by Cloudflare (Turnstile), Apple (App Attest), and Google (Play Integrity)

A current list of our key service providers is available on request at privacy@tinder.zowebo.com.

4.3 For legal reasons and to protect people

We may share information with law enforcement, government authorities, or other parties if we believe in good faith that it is required by law or valid legal process, or that it is necessary to prevent imminent harm to someone, investigate fraud or safety issues, or enforce our Terms of Service. We review every request carefully, require appropriate legal process, and, where we are allowed to, notify the affected member.

4.4 Business transfers

If Kilig is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

4.5 With your consent

We may share information in other ways when you ask us to or agree to it.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

5. Your profile and visibility settings

You have detailed control over who sees what:

• Set each sensitive field's audience to Everyone, Matches only, or Only me. Sensitive fields start as Only me.
• Snooze your profile for 1, 3, 7, or 30 days to stop appearing in discovery.
• Hide your online status and turn read receipts off.
• Hide from contacts, so people in your contacts and you don't see each other (see Section 1.11).
• With Kilig Plus or Premium, hide your age or distance and use incognito mode, so only people you've liked can see you.

You'll find all of these in Settings → Privacy (/app/settings/privacy).

6. Location privacy

We designed our location features to show you people nearby without revealing where you are.

• Grid snapping: before we store your location, we snap your coordinates to the center of a grid cell of approximately 1.1 km. Your exact coordinates are never stored.
• Rounded distances: other members see distances rounded to whole kilometers, and never less than "2 km," even if you are closer than that. This helps prevent anyone from pinpointing your location by comparing distances.
• No location history: we keep only your current approximate location. Each update replaces the previous one.
• When we update it: we update your location when you open or use the app, not continuously in the background.
• Manual city: you can choose not to share device location and set your city manually instead. Your location is then based on the city center.
• Travel mode: Kilig Plus and Premium members can set their location somewhere else in the world. The same grid and rounding rules apply, and your profile shows that you are visiting.
• Hide distance: Kilig Plus and Premium members can hide their distance from their profile.

You can turn off location permission at any time in your device or browser settings. Learn more in Location and distance.

7. Photo metadata

Photos taken on phones often contain hidden metadata, such as the device model, the date taken, and the GPS coordinates of where the photo was taken. We remove EXIF and GPS metadata from every photo you upload, whether it's for your profile or a chat, before it is stored or shown to anyone.

8. How long we keep your information

We keep personal information only as long as we need it for the purposes in this policy, or as required by law.

Information	How long we keep it
Account and profile data	While your account is open. When you delete your account, it enters a 14-day deletion grace period during which you can restore it by signing back in. After that, your data is deleted or anonymized. Copies in backups are overwritten on our regular backup cycle.
Photos and videos	Until you remove them or delete your account
Messages	Until you or your match unmatches or deletes your account, except conversations that have been reported, which we keep for safety review
Current approximate location	Until it is replaced by an update or you delete your account (no location history)
Photo verification selfie and facial geometry	Deleted within 30 days after the check is completed, unless needed for an open safety investigation. Your verification status is kept while your account is open.
ID verification result	While your account is open, and as part of safety records where needed to prevent underage or banned users from returning
Financial and transaction records	As long as required by tax, accounting, and other laws
Safety and moderation records	Reports, enforcement decisions, and limited identifiers (such as hashed email addresses, phone numbers, and device identifiers) are kept as long as necessary to prevent ban evasion and protect members, and reviewed periodically
Login history	365 days
Bot-protection verdicts	365 days
Hide from contacts hashes	Until you clear the list or delete your account
Profile views	90 days
Read notifications	120 days after they are read
Support conversations	As long as needed to resolve your request and meet our legal obligations
Analytics data	In aggregated or pseudonymized form

See Delete your account for what happens step by step.

9. Your rights and choices

Depending on where you live, you may have the right to:

• Access and export your data. Download a copy of your information at any time from Settings → Your data (/app/settings/data). See Download your data.
• Correct your data. Edit most information directly in your profile or settings, or ask us to fix anything you can't change yourself.
• Delete your data. Delete your account from Settings → Account → Delete account. See Delete your account.
• Object to processing based on our legitimate interests, including profiling, and restrict processing in certain cases.
• Data portability. Receive your data in a structured, machine-readable format (your export includes JSON files and your photos).
• Withdraw consent at any time, for example by removing sensitive fields, turning off location permission, or changing your cookie choices.
• Not be subject to decisions based solely on automated processing that significantly affect you, and to ask for human review.
• Complain to a supervisory authority, such as your local data protection authority. We'd appreciate the chance to address your concern first.

To make a request, use the tools in Settings or email privacy@tinder.zowebo.com. We will verify your identity before acting on a request, usually by asking you to sign in or confirm a code. We respond within the time the law requires (for example, one month under the GDPR or 45 days under the CCPA), and we won't treat you differently for exercising your rights.

10. Additional information for US residents

This section applies to residents of California and other US states with comprehensive privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA).

• Categories we collect: identifiers (such as email, phone, and device identifiers); personal records (such as name and contact details); characteristics of protected classifications you choose to share (such as gender, sexual orientation, religion, or ethnicity); commercial information (purchases); biometric information (facial geometry from photo verification, with consent); internet or network activity (usage data and login history); approximate geolocation; audio and visual information (photos, videos, and voice messages); and inferences about compatibility used for discovery. The sources, purposes, and recipients of each category are described in Sections 1, 2, and 4.
• Sensitive personal information: we use sensitive personal information (such as account credentials, optional sensitive profile fields, biometric information, and the contents of messages) only to provide the Service, keep it safe and secure, and for other purposes permitted by law. We do not use it to infer characteristics about you for other purposes.
• Do not sell or share: we do not sell personal information and do not share it for cross-context behavioral advertising, and we have not done so in the past 12 months. We do not knowingly sell or share the personal information of anyone under 16. We honor Global Privacy Control (GPC) signals as a request to opt out.
• Your rights: you can request to know, access, correct, and delete your personal information, and to limit the use of sensitive personal information, as described in Section 9. You may use an authorized agent; we may ask the agent for proof of authorization and ask you to verify your identity.
• Non-discrimination: we will not deny you service, charge you a different price, or provide a different quality of service because you exercised your privacy rights.
• Consumer health data: some state laws, such as Washington's My Health My Data Act, protect consumer health data. We don't ask for health information, but details you choose to share in your profile or messages could reveal it. We use that information only to provide the Service you asked for and to keep members safe, we never sell it, and you can access or delete it as described in Section 9.

11. Children

Kilig is only for adults. You must be at least 18 years old to use the Service. We do not knowingly collect information from anyone under 18. If we learn that an account belongs to someone under 18, we remove the account and its data, keeping only what we need to prevent the person from signing up again until they are eligible. If you believe someone under 18 is using Kilig, please report their profile in the app or email safety@tinder.zowebo.com.

12. International data transfers

Kilig Labs, Inc. is based in the United States, and we and our service providers may process your information in the United States and other countries. When we transfer personal information from the EEA, UK, or Switzerland to countries that have not been found to provide adequate protection, we use appropriate safeguards, such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, and we assess and add supplementary measures where needed. You can request more information about these safeguards at privacy@tinder.zowebo.com.

13. How we protect your information

We use administrative, technical, and physical safeguards designed to protect your information, including:

• Encryption in transit (TLS) and encryption at rest for our databases and media storage
• Hashed passwords and optional two-factor authentication with an authenticator app
• Login alerts, a list of your active sessions, and the ability to sign out everywhere
• Strict access controls, so only staff who need information for their role can access it, with access logged and reviewed
• Regular security testing, monitoring, and employee privacy and security training

No system is perfectly secure. If we learn of a security incident that affects your personal information, we will notify you and the authorities as required by law. You can help protect your account by using a strong, unique password and turning on two-factor authentication. See Sign-in and security. To report a security vulnerability, email support@tinder.zowebo.com with "Security" in the subject line.

14. Cookies and similar technologies

We use strictly necessary cookies to run the website and, only with your consent, analytics cookies to understand how it's used. We do not use advertising cookies. Read our Cookie Policy for details and to learn how to manage your choices.

15. Changes to this policy

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you in the app or by email before they take effect, and we'll update the "Last updated" date above. Where the law requires your consent to a change, we will ask for it.

16. Contact us

If you have questions or requests about this policy or your personal information, contact us:

• Email: privacy@tinder.zowebo.com

For safety concerns, email safety@tinder.zowebo.com. For help with your account, email support@tinder.zowebo.com. For legal notices, email legal@tinder.zowebo.com.