Privacy

• Account data: email address and password (stored hashed by our auth provider).
• Profile data: username, bio, prompt answers, gender and who you're interested in.
• Media you upload: profile photo and anything you send in a chat.
• Activity: matches, messages, room presence, games, gifts, and reports you file.
• Compatibility signals derived from your own answers and profile text.

No precise or background location. No contact-list import. No advertising trackers. Any opt-in visibility feature is coarse and short-lived by design.

To run your account, show you matches, keep conversations working, verify your subscription, and enforce safety rules. Profile photos and chat media are served through short-lived private links rather than public URLs.

Sensitive profile fields are restricted at the database level and are only revealed through the in-app reveal flow you control. Compatibility results never disclose another member's private answers, and mutual-connection hints require consent from everyone involved.

Profile → Your data lets you download a JSON export of your own Chord data, or permanently delete your account. Exports exclude other members' private data. Deletion anonymizes and removes your profile, ends your chats, deletes your uploaded media, and removes your login.

On mobile, purchases are processed by Apple or Google and entitlements are verified with RevenueCat. Chord never stores card details. Our backend, database, and file storage are hosted by our cloud provider.

Privacy questions: privacy@chord.love.