Privacy Policy

About this policy

Bindr is a dating app for bisexual, lesbian and LGBTQ people. This policy explains what personal information we collect, why, who we share it with, and the choices you have. The data controller is [LEGAL ENTITY NAME — confirm with counsel], registered at [REGISTERED ADDRESS — confirm with counsel]. Where a UK or EU representative is required, it is [REPRESENTATIVE — confirm with counsel].

What we collect

Account and profile

Your email address, a password (never stored in readable form) and your date of birth — we need that because Bindr is for adults only. Then whatever you put on your profile: display name, age, photos, a bio, the area you want to be shown in, and any identity, orientation, pronoun or interest fields you fill in. Beyond the minimum, those are optional and you can change or remove them at any time.

Photos and messages

Photos you upload, including a verification photo if you choose to verify. Message content, and a record of who messaged whom and when — we hold it so the service works and so we can investigate reports of abuse. We do not sell it or use it to target advertising.

Device, location and payment

IP address, device type, operating system, app version, crash data, and identifiers that keep you signed in and help us spot abusive accounts. If you allow it, your device's approximate location, so we can show you people nearby — switch it off in your settings and distance features stop working. If you subscribe, payment runs through the app store or payment provider, not us; we see that a purchase happened, never your card number.

Why we use it

• To run your account and show your profile to other members.
• To power matching, search, filters and distance sorting.
• To deliver messages, notifications and service emails.
• To keep people safe: reviewing reports, detecting fake accounts, enforcing the rules.
• To answer support requests and fix problems.
• To meet legal obligations and respond to lawful requests.
• To send marketing you have asked for.

The basis we rely on depends on the purpose and on where you live. Broadly, we expect to rely on performance of our agreement with you to run the service, legitimate interests for safety and abuse prevention, your consent for optional things such as location and marketing, and legal obligation where a law requires it. [LAWFUL BASIS MAPPING — each purpose, each jurisdiction, for counsel to determine. The bases named here are a starting point, not a conclusion.]

Sensitive information: orientation and gender identity

Bindr exists for LGBTQ people, so information about sexual orientation and gender identity sits at the centre of the service. It carries a higher level of legal protection than ordinary personal data: special category data under UK GDPR and the Data Protection Act 2018, and sensitive information under Canada's PIPEDA, Australia's Privacy Act and the Australian Privacy Principles, and New Zealand's Privacy Act 2020. In each case the bar for consent and careful handling is higher.

In practice: you tell us these things only if you choose to, we use them to run matching and to show your profile to the people you want to see it, and we neither advertise with them nor sell them. Being outed is a serious harm and we treat it as one.

[HIGHEST-RISK AREA FOR REVIEW.] The consent mechanism around this data — how it is asked for, worded, captured, recorded and withdrawn — must be reviewed by counsel for each jurisdiction before launch. Nothing here confirms it meets those standards.

Who we share it with

Other members see what your profile shows and what you send them. Beyond that we share personal information with service providers who run parts of Bindr for us: hosting and storage, email and push delivery, payment processing, crash reporting and analytics, and moderation tooling. [SUB-PROCESSOR LIST — to be completed before publication: provider name, what it processes, where, and the contract in place. This page must not go live with the list unpopulated.]

We may also disclose information where the law requires it, to respond to a valid legal request, or to protect someone from serious harm. We do not sell your personal information.

Sending information overseas

Bindr operates across several countries and so do our providers, so your information may be stored or processed outside the country you live in. Where that happens a transfer mechanism has to be in place, and the rules differ by market. [TRANSFER MECHANISM — standard contractual clauses, the UK International Data Transfer Addendum, an adequacy finding, or the accountability route under NZ IPP 12 — to be confirmed by counsel per provider.]

How long we keep it

We keep your information while your account is open. When you delete it we begin deleting or de-identifying that information, apart from records we are required to keep — evidence attached to a safety report, a payment record, or anything a law obliges us to retain. [RETENTION PERIODS — confirm with counsel. Real figures are needed for account data after deletion, message content, moderation records, payment records and backup cycles. This page states no period because no verified period exists yet.]

Security

We encrypt information in transit, restrict internal access to what people need for their job, and monitor for unusual activity. No online service can promise perfect security and we will not pretend otherwise. If a breach puts you at risk we will tell you and notify the relevant regulator. [BREACH NOTIFICATION — thresholds, recipients and deadlines differ across UK GDPR, PIPEDA, the Australian Notifiable Data Breaches scheme and the NZ Privacy Act 2020. Confirm each.]

Your rights

Depending on where you live, you can ask us to:

• Give you a copy of the information we hold about you.
• Correct anything wrong or out of date.
• Delete your account and the information attached to it.
• Send your information to you, or to someone else, in a portable format.
• Stop or limit a particular use, or object to it.
• Withdraw a consent you gave us, including location consent.
• Complain to the privacy regulator in your country.

To do any of these, email support@bindr.dating. We will ask you to confirm the account is yours first, and withdrawing consent does not undo what we did beforehand. [PRIVACY CONTACT AND RESPONSE TIMES — confirm the dedicated privacy address, whether a data protection officer must be named, the statutory response deadline per market, and the regulator a person can complain to in each market.]

Cookies and analytics

Our website uses cookies and similar technologies to keep you signed in, remember preferences and understand how pages are used. Some are necessary; others are optional, and where consent is required first, we ask for it. [COOKIE INVENTORY AND CONSENT MECHANISM — every cookie, its purpose, duration and category, plus the banner behaviour, confirmed against the live build.]

Under-18s

Bindr is for people aged 18 and over, and we do not knowingly collect information from anyone under 18. If we find an account belongs to someone under 18 we remove it. If you think a minor is using Bindr, report the profile.

Changes, and how to reach us

If we change this policy we will post the new version here and update the date at the top, and where a change materially affects you we will give you notice first. [NOTICE PERIOD AND METHOD — confirm with counsel.] Questions about this policy, or about anything we hold about you: support@bindr.dating. [Postal address to be added once the entity details are confirmed.]