Privacy Policy

This notice describes personal data flowing through charmflingg.org, native apps, and support email. We minimize collection, encrypt in transit by default, and document subprocessors upon request.

Last Updated: March 25, 2026

1. Information We Collect

1.1 Information You Provide Directly

Depending on features you enable, we may process:

  • Credentials & profile: Email, hashed password, birthdate band, pronouns, photos, free-text prompts.
  • Interactions: Message bodies, attachments, abuse reports, support tickets.
  • Trust & safety: Liveness selfies or document snippets for higher-assurance badges (retention minimized).
  • Money rails: Tokenized payment references from Apple/Google/stripe—never your full card on our disks.

1.2 Information Collected Automatically

When you use our platform, we automatically collect:

  • Usage Data: How you interact with the app, features used, time spent, pages viewed
  • Device Information: Device type, operating system, unique device identifiers, browser type
  • Location Data: Approximate location based on IP address or GPS (with your consent)
  • Log Data: IP address, access times, app crashes, performance data

1.3 Information from Third Parties

We may receive information about you from:

  • Social Media: If you choose to connect your social media accounts
  • Verification Services: Third-party identity verification providers
  • Advertising Partners: Limited information for analytics and advertising purposes

2. How We Use Your Information

Purpose Information Used Legal Basis
Provide and maintain our services Account data, profile information Contract fulfillment
Personalize your experience Preferences, usage data, location Legitimate interests
Facilitate connections between users Profile data, preferences, location Consent
Ensure safety and prevent fraud All data, verification information Legitimate interests, legal obligation
Communicate with you Contact information, usage data Consent, legitimate interests
Improve our services Usage data, feedback, analytics Legitimate interests
Process payments Payment information Contract fulfillment

Important Note

We never sell your personal data to third parties. We only share information as described in this policy and always prioritize your privacy.

3. How We Share Your Information

3.1 With Other Users

Your profile information (photos, bio, interests) is visible to other CharmFling users according to your privacy settings. You control what information is shared through your account settings.

3.2 With Service Providers

We work with trusted third-party providers who help us operate our platform:

  • Hosting Services: Secure cloud infrastructure providers
  • Payment Processors: PCI-DSS compliant payment gateways
  • Analytics Providers: To understand usage patterns and improve our service
  • Customer Support: Ticketing and communication systems
  • Verification Services: Third-party identity verification

3.3 For Legal Reasons

We may disclose your information if required by law, such as:

  • To comply with legal obligations or court orders
  • To protect the safety of any person
  • To prevent fraud or abuse of our platform
  • To defend our legal rights

3.4 Business Transfers

If CharmFling is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and outline your choices.

4. Data Security

4.1 Security Measures

We implement industry-standard security measures to protect your data:

  • Encryption: All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption
  • Access Controls: Strict access controls and authentication protocols
  • Regular Audits: Security audits and vulnerability assessments
  • Secure Development: Security-first development practices
  • Data Minimization: We only collect data necessary for our services

4.2 Data Retention

We retain your information only as long as necessary:

  • Active Accounts: Data is retained while your account is active
  • Inactive Accounts: Accounts inactive for 24 months are scheduled for deletion
  • Upon Deletion: When you delete your account, we permanently delete your data within 30 days
  • Legal Requirements: Some data may be retained to comply with legal obligations

Your Responsibility

While we implement robust security measures, no system is 100% secure. We encourage you to:

  • Use a strong, unique password
  • Enable two-factor authentication if available
  • Never share your login credentials
  • Log out from shared devices
  • Be cautious about what information you share in your profile

5. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal data:

5.1 Access and Portability

You can request a copy of the personal data we hold about you in a structured, machine-readable format.

5.2 Correction

You can update or correct inaccurate or incomplete information in your profile at any time.

5.3 Deletion

You can request deletion of your personal data, subject to certain legal exceptions.

5.4 Objection and Restriction

You can object to certain processing of your data or request restriction of processing.

5.5 Marketing Preferences

You can opt out of marketing communications at any time by:

  • Clicking "unsubscribe" in any marketing email
  • Adjusting your notification settings in the app
  • Contacting us directly

5.6 How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

6. Cookies and Tracking Technologies

6.1 What We Use

We use cookies and similar technologies to:

  • Authenticate users and maintain sessions
  • Remember your preferences and settings
  • Analyze how our platform is used
  • Personalize content and advertisements

6.2 Types of Cookies

Type Purpose Duration
Essential Required for basic functionality Session
Performance Analytics and performance measurement 1-2 years
Functional Remember preferences and settings 1 year
Advertising Personalized advertising (opt-in) 90 days

6.3 Managing Cookies

You can control cookies through your browser settings. However, disabling essential cookies may affect platform functionality.

7. Children's Privacy

CharmFling is strictly for adults aged 18 and over. We do not knowingly collect, use, or share personal information from children under 18.

Age Verification

We employ multiple age verification methods including:

  • Requiring users to confirm they are 18+ during registration
  • Manual review of profile photos
  • Third-party age verification services for suspicious accounts
  • Reporting mechanisms for users to report underage individuals

If we learn that we have collected personal information from a child under 18, we will delete that information immediately.

8. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements.

8.1 Notification of Changes

When we make material changes to this policy, we will:

  • Post the updated policy on this page with a new "Last Updated" date
  • Notify you through the app or via email for significant changes
  • Provide a summary of key changes

8.2 Your Continued Use

Your continued use of CharmFling after any changes to this Privacy Policy constitutes acceptance of those changes.

8.3 Previous Versions

Previous versions of this Privacy Policy are available upon request by contacting us at [email protected].

Questions About Our Privacy Policy?

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact our Data Protection Officer.

Contact Privacy Team

Contact Information

  • Email: [email protected]
  • Response Time: Within 48 hours
  • Data Protection Officer: Alex Morgan

For security reasons, please include your username or email associated with your account in all privacy-related communications.