Privacy Policy

Introduction

PartnerShe is a women-only app for finding platonic friendships. This Privacy Policy describes what information we collect when you use our mobile app or website, why we collect it, and how we handle it.

By using PartnerShe you agree to the practices described here. If you don't agree, please don't use the service.

What we collect and why

We collect only what's needed to run the service and comply with our legal obligations. The table below lists every category, the purpose, and the legal basis under GDPR Article 6. Each row here maps 1:1 to a line in our Play Store Data Safety declaration.

Data	Why	Legal basis
Email address	Account creation, authentication, essential service communications	Contract performance (6(1)(b))
Display name	Identity within the app	Contract performance
Date of birth	Age verification (18+), age display to other users	Legal obligation + Contract
Gender (implicit)	Women-only service eligibility	Contract performance
Profile photos	Display to potential matches	Consent (6(1)(a))
Bio	User self-expression	Consent
Life stages	Matching algorithm	Contract performance
Interest tags	Matching algorithm	Contract performance
Coarse location	Distance-based discovery (stored ~1km precision, shown bucketed)	Consent
Chat messages	Enabling communication between matched users	Contract performance
Swipe actions	Matching algorithm, preventing re-showing same profiles	Contract performance
Reports you file	Safety enforcement	Legitimate interest (6(1)(f))
Reports about you	Safety enforcement, preserved after deletion	Legitimate interest
Push tokens	Push notifications	Consent (OS-level opt-in)
IP address	Security, abuse prevention, regional delivery	Legitimate interest
Device & OS info	Error debugging, crash reporting	Legitimate interest
Biometric selfie (future)	Identity verification — women-only service	Explicit consent (9(2)(a))

Who we share it with

We don't sell your data. We don't share it with advertisers. We rely on these service providers to run the app:

Supabase — database, authentication, storage, realtime. Data is stored in Paris, France (European Union). See Supabase's privacy policy.
Vercel — website hosting and serverless functions. See Vercel's privacy policy.
Sentry — error monitoring. Sentry receives scrubbed technical error data only: stack traces, anonymous user IDs, app version, device type. Sentry does not receive message content, photos, email addresses, or location data.
Expo / Google FCM— push notification delivery on Android. They see push tokens and notification titles (e.g. "Sarah: new message"), not message content in our schema.
Google — Google Sign-In (OAuth). If you sign in with Google, Google sees the sign-in event. See Google's privacy policy.

Your data is currently stored on Supabase infrastructure in Paris, France (European Union). We may store or process data in other jurisdictions with comparable data protection standards as we expand. Where data is transferred outside the EU, we rely on recognized legal mechanisms (adequacy decisions, Standard Contractual Clauses) to maintain equivalent protection.

How long we keep it

Data	Retention
Account profile (active)	Until account deletion
Account profile (deleted)	Tombstone row retained indefinitely; PII fields nulled
Profile photos	Deleted immediately on account deletion
Chat messages (between active users)	Until both parties delete their accounts
Chat messages (one party deleted)	Retained for the other party; sender shown as "Deleted User"
Reports	Retained indefinitely for safety enforcement (GDPR 6(1)(f) carve-out)
Swipes	Retained indefinitely for matching algorithm integrity
Push tokens	Deleted on account deletion or when device unregisters
Backups	Supabase point-in-time recovery on Pro tier; none on Free tier
Error logs (Sentry)	30 days default Sentry retention

Your rights and how to delete your account

Under GDPR, CCPA, and similar laws, you have the right to access, correct, delete, or port your personal data; to object to or restrict processing; and to withdraw consent.

To delete your account, open the PartnerShe app and go to Profile → Settings → Delete My Account, or visit partnershe.com/delete-account.

When you delete your account we immediately remove your profile, photos, interests, and push tokens. Your match rows are deactivated and messages you sent to others are preserved (attributed to "Deleted User") so your matches don't lose their conversation history. Reports you filed or that were filed about you are preserved for safety, even after deletion.

Security, children, and cookies

All data is encrypted in transit (TLS 1.2+) and at rest. Database access is guarded by row-level security policies — other users cannot query your data directly. Passwords are hashed with bcrypt before storage.

PartnerShe is strictly 18+. We verify age at signup and do not knowingly collect data from anyone under 18. If you believe we have collected data from a minor, email us and we will delete it promptly.

We use a single authentication session cookie. We do not use tracking cookies, advertising cookies, or third-party analytics.

Contact and changes

Questions, requests, or complaints: support@partnershe.com.

We may update this policy. Material changes will be notified by email to the address on your account. Continued use after an update means you accept the revised policy. The "Last updated" date at the top reflects the most recent revision.