Draft for legal review. This Privacy Policy is a draft. It has not been reviewed by a lawyer yet and is not final. Text in [square brackets] still has to be completed.

Privacy Policy

Draft of 6 November 2026 · not yet in effect

Instant Duo is a dating app. You create a profile with a few photos, and the app suggests one person at a time who may suit you. This policy explains what personal data we collect, why we use it, who can see it, how long we keep it and what rights you have.

1. Who we are

Instant Duo (instantduo.com) is run by [operator's legal name], [address], [country] (“we”, “us”). We decide how your data is used. For any privacy question or request, write to [contact email].

2. What we collect

Account: your email address and password. The password is stored by our sign-in provider only in hashed form; we never see it.
Profile: display name, date of birth, gender (man, woman or other), who you are looking for, height, weight (optional), body type, the body types you are attracted to (optional), the maximum age difference you accept, city (optional) and a short bio (optional). We also record when you gave your consent to photo analysis.
Photos: 2 to 5 photos, including at least one instant photo taken with your camera in the app. Before upload, the app resizes each photo in your browser to at most 720 pixels on its longest side and saves it as a new JPEG file, which leaves out data embedded in the original file, such as where it was taken.
Matches: who the app suggested to you and to whom you were suggested, the match percentage, the reasons shown with it, and whether each of you accepted or skipped.
Chats: your messages, your date proposals (day, time and place) and the answers to them.
Safety: the people you block and the reports you send.
Technical data: when you use the app, our providers process your IP address, browser type and the time of each request, and keep sign-in records (for example sign-in times and IP address) to run and protect the service.
On your device: your browser keeps your sign-in session and a copy of your profile details in its local storage, so you stay logged in. Logging out removes them. We do not use cookies for advertising or analytics.

3. Sensitive information

Your gender together with who you are looking for can reveal your sexual orientation, and a dating profile can say something about your sex life. Data protection law treats this as a special category of data. We use it only to suggest matches and to show your profile to the people you are matched with. The legal basis for this is [to be confirmed: your explicit consent].

4. Your photos and photo analysis

Your photos are kept in private storage. Other users can only open them through temporary links that expire after one hour, and only after the app has suggested the two of you to each other (see section 6).

When you create your profile, we ask for your express consent to analyse your photos with AI to find your match. At the moment, matching uses only the profile details in section 2: your photos are not analysed automatically. Before we start any photo analysis, we will update this policy to explain what is analysed, by whom and for how long.

You can withdraw your consent at any time by deleting your account in the app (Account → Delete account), which deletes all your photos, or by writing to us. Withdrawing your consent does not affect what was done before.

5. How matching works

When you toss the coin, our database looks for people whose gender and preferences fit yours and whose age difference is within both of your limits, and who have their two required photos. It scores them on age difference, heights, body types and body-type preferences, weight (only if both of you gave it) and city, and shows you the best one. Nobody reviews the suggestions by hand. A suggestion has no legal effect: you decide whether to accept it, and a chat opens only when you both accept.

People you are matched with. Users who are suggested to you, and users you are suggested to, see your profile card: display name, age (not your date of birth), gender, city, height, body type, bio, your photos, the match percentage and its reasons. Once a suggestion has been made, the other person can keep opening your photos through the app's temporary links even if one of you skips it, unless one of you blocks the other.
Your chats. When you both accept, you can chat. The other person sees your messages and date proposals.
Never shown to other users: your email address, your exact date of birth, your weight, and your body-type preferences.
Blocking. When either of you blocks the other, the chat closes for both of you, you can no longer open each other's photos and you will not be suggested to each other again.
Us. The people who run Instant Duo can access the database when needed to run and secure the service, to handle reports, or to comply with the law.
Our service providers, who process data on our behalf: Supabase (database, sign-in, photo storage and live chat; servers in [region]), Cloudflare (website hosting, network and security), Google Fonts (delivers the fonts when a page opens and receives your IP address) and jsDelivr (delivers the Supabase JavaScript library when the app opens and receives your IP address).
Authorities, when the law requires us to share data.

We do not sell your data and do not share it for advertising. The short video before a match and the paid ad-free month are currently simulated: no ad network and no payment provider receives your data. If we add real ads or payments, we will update this policy before they start.

7. Transfers outside your country

Some of our providers are based in, or use servers in, the United States and other countries. Where the law requires it, these transfers rely on safeguards such as the European Commission's standard contractual clauses or the EU–U.S. Data Privacy Framework. [To be confirmed for each provider.]

8. How long we keep your data

We keep your data for as long as your account exists.
When you delete your account in the app (Account → Delete account), we immediately delete your account, profile, photos, matches, chats (for both people in each chat), blocks and reports, both the reports you made and the reports about you.
Our providers may keep backups and technical logs for a limited time: [retention periods to be confirmed].

9. Your rights

Depending on where you live, you have the right to access your data, to correct it, to have it deleted, to restrict or object to how we use it, to receive it in a portable format, and to withdraw your consent at any time. You can delete your account and all its data yourself in the app. For any other request, write to [contact email]; we answer within the time the law sets. You also have the right to complain to a data protection authority, for example in the country where you live or work.

10. Security

The app uses encrypted connections (HTTPS). Database rules let each user read only their own profile and what the app shows them about their matches, and photos are kept in private storage and shared only through links that expire after one hour. No system is perfectly secure; if a security incident affects your data, we will inform you and the authorities as the law requires.

11. Adults only

Instant Duo is only for adults (see the Terms for the minimum age). We do not knowingly collect data from anyone younger. If we learn that a user is under age, we delete the account.

12. Changes to this policy

We will publish any change on this page with a new date. If a change is important, we will also tell you in the app before it applies.

Instant Duo · Back to the app · Terms (draft)