Privacy Policy
1. Data controller
The controller of your personal data is 8CELLS Jarosław Kaczmarski, Tax ID (NIP): 7962621938, Business Registry No. (REGON): 366811404, based in Poland (hereinafter: “we”, “us”, or the “Controller”). Contact: hi@sprintdate.app.
2. What data we collect
As part of using the SprintDate app, we may collect the following data:
- Registration data — first name, phone number (login via SMS code), date of birth, gender
- Profile data — photos, bio, partner preferences
- Video conversation data — call metadata (duration, timestamp). We do not record the content of video conversations.
- Camera and microphone data — the app requires access to the camera and microphone in order to run video conversations as part of speed dating
- Transaction data — information about tickets purchased for events (payments are handled by Stripe — we do not store payment card data), including any organizer discount code used and the discount amount
- Technical data — IP address, device type, operating system version, error logs (Sentry)
- Activity data — post-conversation ratings, matches, event history, your role at an event (assigned by the organizer or chosen by you where the organizer allows it), and membership of an event team if you accept an organizer’s invitation (co-host with read-only access to the event panel, or door staff who check tickets)
- Visit source / sign-up attribution data — when you visit our website (including event pages), the website stores in your browser, only for the current tab session (sessionStorage, not cookies), where the visit came from: the campaign parameters of the link (utm_source, utm_medium, utm_campaign, utm_content, utm_term), a referral code in the link, the first page visited and the domain of the referring website. The mobile app keeps the same values from a link that opened it on your device until you register. When you create a profile, we store these values with your profile once, right after registration, together with the platform (iOS app, Android app, web app or event-page sign-up). This record contains no IP address or device identifiers, and we use no cookies or third-party trackers for it.
- Followed organizers — we store which organizers you follow and since when. When an organizer you follow publishes a new public event, you may receive a push notification about it (at most one such notification per day). An organizer may also invite participants of their earlier, completed events to a new event — each of those people receives one push notification about that event (an organizer can send such an invitation at most once every 7 days). We send both kinds of notification only if you have new-event notifications turned on, and never when there is a block between you and the organizer. We record which events we have already notified you about, so that notifications are not repeated. The organizer and other users see only the number of followers, and the organizer only the number of people an invitation reached; they do not see who these people are. You can unfollow at any time.
- Seat alerts — when you ask to be told that a seat has freed up at a full event, we store the request (the event, when you asked and when we last notified you). The notification does not reserve a seat: whoever books first gets it.
- “Second chance” after an event — if, after an event ends, at least one of the people you answered “maybe” answered “yes” to you, you receive a notification and for 24 hours you can change your own “maybe” answers from that event to “yes”. The list shows everyone you answered “maybe” and never indicates which of them answered “yes” to you. The other person does not learn your answer or that you changed it unless a mutual match results. We store when the window opened and when it closes, and which answers were changed to “yes”.
3. Purpose of data processing
We process your data in order to:
- Provide speed dating services and match participants
- Run video conversations via Agora technology
- Handle payments and settlements
- Communicate with users (notifications, messages)
- Improve service quality and analyze errors
- Ensure security and prevent abuse
- Measure the effectiveness of acquisition channels (campaigns, referrals) as aggregate statistics
- Send notifications about events: reminders, freed-up seats and new events of organizers you follow or whose earlier events you attended
4. Legal basis
We process data on the following basis:
- Art. 6(1)(b) GDPR — performance of a contract (provision of services, including seat alerts, notifications from organizers you follow, and the “second chance”)
- Art. 6(1)(a) GDPR — consent (e.g., for processing profile data)
- Art. 6(1)(f) GDPR — legitimate interest (analytics, security, and a single push notification about a new event of an organizer whose earlier event you attended — you can turn it off with the new-event notification setting)
5. Data sharing
Your data may be shared with the following parties:
- Cloudflare — hosting of the app, database, and photos; if enabled, Cloudflare Web Analytics: cookie-less aggregate website statistics
- Twilio — sending SMS codes at login (the phone number is shared)
- Agora — running video calls (only session tokens are shared)
- OpenAI — automated moderation of profile photos (the photo is shared in order to detect prohibited content)
- Stripe — payment processing
- Sentry — application error monitoring
- Firebase Cloud Messaging (Google) and Apple Push Notification service — sending push notifications (the device token is shared)
- Google Play / Apple App Store — app distribution; store links on our website carry campaign labels for install statistics, which the stores process under their own privacy policies
We do not sell your personal data to third parties.
6. Camera and microphone permissions
The SprintDate app requires access to the device’s camera and microphone in order to enable video conversations during speed dating events. This access is used only during active video calls. We do not record or store the content of conversations. You can revoke the permissions at any time in your device settings.
7. Retention period
We store personal data for the period you use the app and for up to 30 days after the account is deleted. We store transaction data for the period required by tax law (5 years).
Some features use shorter periods: seat alerts are deleted within 2 days after the event starts or is cancelled, and the record of a “second chance” window 30 days after it closes. We keep the list of organizers you follow until you remove it in the app or delete your account.
8. Your rights
Under the GDPR, you have the following rights:
- The right to access your data
- The right to rectify your data
- The right to erasure of data (the “right to be forgotten”)
- The right to restrict processing
- The right to data portability
- The right to object to processing
- The right to withdraw consent at any time
You can download a copy of your data (the right to portability) yourself in the App: Settings → Data export — you will receive a JSON file to save or share. You can delete your account along with your data yourself in the App (Settings → Delete account) or by following the instructions on the Account deletion page. To exercise your other rights, contact us at hi@sprintdate.app.
9. Security
We apply appropriate technical and organizational measures to protect your data, including encryption of connections (TLS/SSL), token-based authentication, and access control to the database.
10. Contact
If you have any questions about this privacy policy, please contact us:
Email: hi@sprintdate.app