Privacy Policy

1. Information We Collect

Information You Provide

• Account Identity: When you create an account, you sign in with Apple or Google. We receive a unique account identifier from the provider, your email address, and (on first Apple sign-in) your name. We use Firebase Authentication to verify your sign-in.
• Email Address: Received from Apple or Google at sign-in. Used for account identity, account-related communications, and (if you opt in) email updates.
• Profile Information: Age, gender, interests, relationship preferences, education level, personality traits, values, life goals, and other details you choose to share
• Open-Ended Questionnaire Answers: Optional free-text responses describing yourself and what you are looking for in a partner. These answers are used by AI to assess deeper compatibility for "Deep Match" tier matches.
• Match Feedback: Optional post-match feedback you submit about qualities you noticed in a match that you would or would not want in a partner. This is collected once per match and used by AI to improve future match recommendations for you.
• AI-Synthesized Preference Profile: A short narrative summary generated by AI from your open-ended answers and accumulated match feedback. This profile is maintained per user and used to inform future Deep match assessments. It is updated automatically each time you submit match feedback.
• Location Data: GPS coordinates when location sharing is toggled on and you are outside one of your designated Privacy Zones, used to find nearby matches (retained only as long as necessary for the matching service, then automatically deleted on a rolling basis)
• Messages: Content of messages sent through the app once you have been matched with another user
• Photos: If you send a photo in a chat, the image is transmitted to our servers, screened by automated moderation before delivery, shown only to your matched recipient, and automatically deleted after 24 hours

Information Automatically Collected

• Usage Data: How you interact with the app, features used, and timestamps
• Device Information: Device type, operating system, app version, unique device identifiers
• Match Data: Match acceptance/rejection decisions, match durations, and outcomes

2. How We Use Your Information

We use your information to:

• Provide the Service: Match you with compatible people nearby and facilitate communication
• Send Push Notifications: Alert you about matches and important updates
• Matching: Generate compatibility scores and create personalized match descriptions based on values, personality traits, life goals, and other personal attributes, and improve matching algorithms
• Deep Match Assessment: Open-ended questionnaire answers and AI-synthesized preference profiles are sent to OpenAI to evaluate whether a specific pair of users has deeper compatibility beyond structured questionnaire results. This assessment is run at the time a potential match is activated.
• Preference Profile Synthesis: Open-ended answers and match feedback are sent to OpenAI to synthesize a personalized preference profile narrative that is stored on your account and used in future Deep match evaluations.
• Account Management: Authenticate you through Apple or Google sign-in (via Firebase Authentication)
• Safety & Security: Prevent fraud, investigate reports, enforce our Terms of Service and Safety Policy, and maintain user safety
• Improve the Service: Analyze usage patterns, fix bugs, develop new features, improve matching algorithms and prompts
• Email Communications: Send welcome emails, dating tips, local recommendations, and service updates to users who have opted in to receive emails. You can opt out at any time via the unsubscribe link included in every email.
• Legal Compliance: Respond to legal requests and protect our rights

3. How We Share Your Information

With Other Users

• Match Information: When matched, users see your age, gender, level of education, and a compatibility description (your raw profile information is never shown)
• Messages: Delivered to other users in the in-app messaging service
• Location: Only used to determine proximity (never shared directly with other users and automatically deleted on a rolling basis)

With Service Providers

• Supabase: Database hosting for user profiles, match data, and app content
• Apple & Google (Sign-In): We use Sign in with Apple and Sign in with Google, via Firebase Authentication (Google), to create and authenticate your account. We receive a unique identifier and your email address from the provider you choose. Your use of these sign-in services is also governed by Apple's and Google's respective privacy policies.
• OpenAI: We share profile information you provide (such as personality traits, values, and relationship preferences) with OpenAI's API to generate compatibility assessments, match descriptions, and opening questions. We also share open-ended questionnaire answers, match feedback, and AI-synthesized preference profiles with OpenAI's API to generate Deep match compatibility assessments and to synthesize per-user preference profiles. In addition, photos shared in chat are sent to OpenAI's moderation service to screen for prohibited content before delivery; this is automated classification only and photos are not used to train OpenAI's models. This data is sent via API and is not used by OpenAI to train or improve their AI models. OpenAI's data handling is governed by their API data usage policy at openai.com/policies/api-data-usage-policies. No location data, phone numbers, or direct contact information is shared with OpenAI.
• Firebase Cloud Messaging (Google): Push notification delivery service for match alerts, reminders, and service updates
• Vercel: Application hosting
• Meta (Facebook): We use the Meta App Events SDK to measure advertising effectiveness and attribute app installs and purchases to our Meta ad campaigns. We send Meta a limited set of conversion events (app activation, account registration, checkout initiation, and token purchases) along with your device advertising identifier where permitted. On iOS, the advertising identifier is shared only if you grant App Tracking Transparency permission. We do not send your profile answers, messages, photos, location, or match history to Meta. Meta's data handling is governed by the Meta Privacy Policy.
• Google Play / Apple App Store: App distribution and subscription management
• Microsoft Clarity: Session analytics service that records anonymized user interactions (taps, scrolls, navigation patterns) and generates heatmaps to help us understand how users interact with the app and website. Clarity does not collect personal identifiers. Data is processed by Microsoft and governed by the Microsoft Privacy Statement.

Legal Requirements

We may disclose your information if required by law, court order, or to protect the rights, property, or safety of Fortuito, our users, or others.

We Never Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We share limited conversion-event data and advertising identifiers with Meta solely to measure and attribute our own advertising, as described above; we do not sell this information. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All categories above exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

4. Push Notifications & Email Communications

Push Notifications

Push notifications are our primary communication method for match alerts, connection updates, and time-sensitive information. You can manage push notification preferences in your device settings or the app.

Notification Frequency: Varies based on your activity and matches. You may receive multiple notifications per day when actively using the service.

Opt-Out:

• Push Notifications: Disable in your device settings or app settings (this will effectively pause your account)
• Email: Click the unsubscribe link included in every email

Email Communications

During sign-in, you may opt in to receive emails from Fortuito. If you opt in, we may send you:

• Welcome Sequence: A series of onboarding emails explaining how the app works, referral codes, and tips for getting the most out of Fortuito
• Weekly Emails: Dating tips, local business recommendations, and community updates (typically sent on Thursdays or Fridays)
• Service Updates: Important announcements about new features or changes to the service

Every email includes an unsubscribe link. You can opt out at any time, and we will stop sending you marketing emails promptly. Unsubscribing from email does not affect push notifications or your account status.

5. Location Data & Privacy Zones

Fortuito uses location data responsibly:

• Background Location: The app shares your location only when you have enabled location sharing to detect nearby compatible matches
• Short-Term Retention: All location data is automatically deleted on a rolling basis and is not used to build a historical profile of your movements
• Privacy Zones: You can set privacy zones (like your home, workplace, or other sensitive locations) where the app will not track your location or notify you of matches. Privacy Zones are stored on your device only—Fortuito does not have access to your Privacy Zone locations
• No Longitudinal Tracking: We do not build a historical record of where you've been
• Proximity Only: Other users never see your exact location—only whether you're nearby

6. Data Retention

• User Profiles: Retained until you delete your account
• Location Data: Automatically deleted on a rolling basis; not retained long-term
• Active Matches: Match data and messages retained until the match is deleted by both users (may be retained longer for a match that is reported by a user for safety concerns)
• Chat Photos: Automatically deleted after 24 hours; photos that are reported are retained longer for safety review
• Match History: Basic match metadata (date, outcome) retained for safety and service improvement purposes
• Match Feedback: Retained until you delete your account or request deletion. Each feedback entry is linked to a specific match and cannot be edited after submission.
• AI Preference Profiles: Regenerated after each feedback submission. Deleted upon account deletion or upon request.
• Deleted Accounts: Personal data deleted within 30 days (some safety-related data retained as detailed below)

Data Retained After Account Deletion (For Safety)

For user safety and to prevent abuse, we retain the following after account deletion:

• An opaque account identifier, retained so that a banned account cannot be re-created by signing in again, and so that you can reactivate your account if you return. This identifier is not your name, email, or phone number.
• Safety reports and investigations indefinitely
• Banned user identifiers indefinitely

7. Your Privacy Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update inaccurate or incomplete information through the app
• Deletion: Request deletion of your account and personal data (subject to safety-related retention). You may also request deletion of your match feedback data and AI-synthesized preference profile at any time without deleting your account — contact us with "Privacy Request" in the subject line.
• Opt-Out: Disable notifications in app settings
• Data Portability: Receive your data in a portable format
• Object: Object to certain uses of your data

To exercise these rights, contact us at the information below or use the in-app account deletion feature.

8. Security

We implement reasonable security measures to protect your information, including:

• Encryption of data in transit and at rest
• Secure authentication via Apple and Google sign-in (Firebase Authentication)
• Anonymous messaging to protect personal information
• Device token authentication for all app requests
• Regular security audits and updates
• Limited employee access to personal data
• Rate limiting to prevent abuse

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

9. Children's Privacy

Fortuito is not intended for users under 18 years of age. We do not knowingly collect information from minors. If we become aware that we have collected personal information from someone under 18, we will delete it immediately.

10. International Users

Fortuito is operated in the United States. If you are accessing the service from outside the U.S., your information will be transferred to, stored, and processed in the United States. By using our service, you consent to this transfer.

11. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information (subject to safety-related exceptions)
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising CCPA rights

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. We may also notify you through the app. Your continued use of the service after changes constitutes acceptance of the updated policy.

13. Contact Us