Last updated: October 7, 2026

Privacy Policy

Plain English:We collect the information you give us (email, photos, bio, messages, rough location) to help you find friends nearby. We don't sell it, we don't share it with advertisers, and you can delete your account at any time.

Introduction

PartnerShe is a women-only app for finding platonic friendships. This Privacy Policy describes what information we collect when you use our mobile app or website, why we collect it, and how we handle it.

By using PartnerShe you agree to the practices described here. If you don't agree, please don't use the service.

What we collect and why

We collect only what's needed to run the service and comply with our legal obligations. The table below lists every category, the purpose, and the legal basis under GDPR Article 6. Each row here maps 1:1 to a line in our Play Store Data Safety declaration.

Data	Why	Legal basis
Email address	Account creation, authentication, essential service communications	Contract performance (6(1)(b))
Display name	Identity within the app	Contract performance
Date of birth	Age verification (18+), age display to other users	Legal obligation + Contract
Gender (implicit)	Women-only service eligibility	Contract performance
Profile photos	Display to potential matches	Consent (6(1)(a))
Bio	User self-expression	Consent
Life stages	Matching algorithm	Contract performance
Interest tags	Matching algorithm	Contract performance
Coarse location	Distance-based discovery (stored ~1km precision, shown bucketed)	Consent
Chat messages	Enabling communication between matched users	Contract performance
Swipe actions	Matching algorithm, preventing re-showing same profiles	Contract performance
Reports you file	Safety enforcement	Legitimate interest (6(1)(f))
Reports about you	Safety enforcement, preserved after deletion	Legitimate interest
Coupon reports you send	Fixing coupons and deals that don't work (the reason, your optional note and your user ID are stored and emailed to our support team)	Legitimate interest (6(1)(f))
Push tokens	Push notifications	Consent (OS-level opt-in)
IP address	Security, abuse prevention, regional delivery	Legitimate interest
Device & OS info	Error debugging, crash reporting	Legitimate interest
Biometric selfie (future)	Identity verification — women-only service	Explicit consent (9(2)(a))

Who we share it with

We don't sell your data. We don't share it with advertisers. We rely on these service providers to run the app:

Supabase — database, authentication, storage, realtime. Data is stored in Paris, France (European Union). See Supabase's privacy policy.
Vercel — website hosting and serverless functions. See Vercel's privacy policy.
Sentry — error monitoring. Sentry receives scrubbed technical error data only: stack traces, anonymous user IDs, app version, device type. Sentry does not receive message content, photos, email addresses, or location data.
PostHog (EU) — product usage analytics: which screens and features are used (for example, opening a coupon), a pseudonymous user ID, your life stages and account status, app version, device platform, and language, plus standard technical details (browser and operating system, screen size, time zone, the referring website and any campaign tags in the link you arrived from). PostHog does not receive message content, photos, email addresses, or location, and we have configured it not to store IP addresses. You can switch this off in Settings → Share usage analytics.
Expo / Google FCM— push notification delivery on Android. A notification we send them contains your device's push token, the sender's display name, a fixed alert line ("Sent you a message"), and an internal reference number for the match so that tapping the notification opens the right conversation. It never contains the text of a message, a photo, or the venue named in a meet-up suggestion — you read those in the app after tapping the notification.
Resend— email delivery. We use it to send account emails (such as your sign-up confirmation) and the internal email our support team receives when someone reports a coupon, which contains the coupon, the reason, the optional note and the reporter's user ID and display name — not their email address. Resend processes the recipient address and the content of those emails on our behalf. See Resend's privacy policy.
Google — Google Sign-In (OAuth). If you sign in with Google, Google sees the sign-in event. See Google's privacy policy.

Your data is currently stored on Supabase infrastructure in Paris, France (European Union). We may store or process data in other jurisdictions with comparable data protection standards as we expand. Where data is transferred outside the EU, we rely on recognized legal mechanisms (adequacy decisions, Standard Contractual Clauses) to maintain equivalent protection.

How long we keep it

Data	Retention
Account profile (active)	Until account deletion
Account profile (deleted)	Tombstone row retained indefinitely; PII fields nulled
Profile photos	Deleted immediately on account deletion
Chat messages (between active users)	Until both parties delete their accounts
Chat messages (one party deleted)	Retained for the other party; sender shown as "Deleted User"
Reports	Retained indefinitely for safety enforcement (GDPR 6(1)(f) carve-out)
Swipes	Retained indefinitely for matching algorithm integrity
Push tokens	Deleted on account deletion or when device unregisters
Coupon reports	Deleted when you delete your account (the email already sent to our support team is kept in its inbox)
Backups	Supabase point-in-time recovery on Pro tier; none on Free tier
Error logs (Sentry)	30 days default Sentry retention
Usage analytics (PostHog)	1 year, then deleted automatically

Your rights and how to delete your account

Under GDPR, CCPA, and similar laws, you have the right to access, correct, delete, or port your personal data; to object to or restrict processing; and to withdraw consent.

To delete your account, open the PartnerShe app and go to Profile → Settings → Delete My Account, or visit partnershe.com/delete-account.

When you delete your account we immediately remove your profile, photos, interests, push tokens, and any coupon reports you sent. Your match rows are deactivated and messages you sent to others are preserved (attributed to "Deleted User") so your matches don't lose their conversation history. Safety reports you filed or that were filed about you are preserved for safety, even after deletion.

Security, children, and cookies

All data is encrypted in transit (TLS 1.2+) and at rest. Database access is guarded by row-level security policies — other users cannot query your data directly. Passwords are hashed with bcrypt before storage.

PartnerShe is strictly 18+. We verify age at signup and do not knowingly collect data from anyone under 18. If you believe we have collected data from a minor, email us and we will delete it promptly.

We use a single authentication session cookie. We do not use tracking or advertising cookies. We use PostHog for privacy-configured usage analytics, as described above; you can turn it off at any time in Settings → Share usage analytics, or email us at support@partnershe.com to delete your analytics data. On the website PostHog keeps its identifier in your browser's local storage rather than in cookies, and our public landing page stores nothing on your device for analytics. In the mobile app, a pseudonymous analytics identifier is stored on your device.

Contact and changes

Questions, requests, or complaints: support@partnershe.com.

We may update this policy. Material changes will be notified by email to the address on your account. Continued use after an update means you accept the revised policy. The "Last updated" date at the top reflects the most recent revision.