Privacy Policy & GDPR Compliance Statement

Last Updated: June 13, 2026

At Evol Match, protecting your personal data, its security, and compliance with the General Data Protection Regulation (GDPR) and national data protection laws (such as KVKK) is our highest priority. This Privacy Policy details how we collect, process, and protect your information when you use our services.

1. Data We Collect

To provide you with matching services and maintain a secure community, we process the following types of personal data:

• Profile Information: Name, date of birth (for age verification), gender, sexual orientation/matching preferences, interests, and profile description.
• Media Files: Profile photos uploaded by you and chat media sent inside the chatrooms by Gold users. (Note: EXIF/location metadata is automatically stripped on your device before transfer to ensure your location privacy).
• Biometric Data: If you optionally request account verification (Blue Verification Tick), we process the short video selfie you upload and the face biometrics/geometry data extracted from it. This is sensitive personal data processed solely for user verification based on your explicit consent.
• Location Data: Exact or last known GPS coordinates (if permission is granted) to suggest the nearest matches.
• Chat History: Text messages and voice messages. All communication history is encrypted end-to-end for your privacy and security.
• Payment & Transaction Info: Purchase history for Silver or Gold tiers (payment processing is handled directly by Google Play/App Store Billing; we do not store card credentials on our servers).

2. How and Why We Use Your Data

We process your personal information under the following legal bases and functional reasons:

• To verify your identity and manage your account.
• To suggest matches nearby based on your location.
• To run uploaded images through TensorFlow Lite NSFW algorithms to prevent nudity, fake profiles, and scams.
• To optionally perform liveness checks and award the verified blue checkmark by processing video selfie and facial biometrics data.
• To enforce tier limits (swipe counts, media upload permissions).
• To handle user blocks, moderation reports, and support requests.

3. Data Protection and Security Shields

Evol Match employs state-of-the-art security shielding to protect your records:

• Media Shielding: Direct public access to uploads is blocked. Medias are strictly accessible only via valid JWT authorization and authenticated request headers (X-App-Client).
• HMAC Signature Verification: All mobile client API requests are digitally signed with a client-side HMAC signature using timestamps to prevent request tampering and man-in-the-middle attacks.
• End-to-End Encryption: Text messages are encrypted inside the database to keep them visible only to the conversation participants.

4. Data Retention and Deletion

We retain your profile data as long as your account is active. Once you request account deletion through the "Delete Account" option in the application settings, all your profile fields, media, matches, and chat history are permanently deleted from our databases. (Anonymous logs for legal claims or safety investigations may be kept for statutory limitation periods).

5. Website Cookies and Analytics (Google Analytics)

When you visit our website (evolmatch.com), we use Google Analytics integrated via Cloudflare Zaraz to analyze website traffic and improve user experience. The following data may be processed automatically through your browser:

• Your IP address (anonymized/masked),
• Pages visited and duration of visit,
• Referrer website (how you arrived at our site),
• Browser type, operating system, and device information.

This data is not used to identify you personally and is processed solely for aggregated statistical purposes. You can block or delete cookies through your browser settings or via the cookie consent settings on our website. Please note that Google Analytics is not used within our mobile application; we only utilize Firebase Crashlytics (a crash/error reporting tool) to monitor app stability and debug issues.

6. Your GDPR Rights

Under the GDPR (General Data Protection Regulation), users residing in the EU/EEA hold specific data subject rights:

• Right of Access: You can request a copy of your personal data stored on our servers.
• Right to Rectification: You can update or correct inaccurate data.
• Right to Erasure (Right to be Forgotten): You can delete your account and all associated records.
• Right to Data Portability: You can request your data in a structured, machine-readable format.
• Right to Object: You can restrict or object to the processing of your data.

To exercise any of these rights, you can contact us at any time via our Contact page or at support@evolmatch.com.