Privacy Policy

Effective Date: July 9, 2025

This Privacy Policy describes how Flirt-o-Matic ("Company", "we", "us", or "our") collects, uses, discloses, and safeguards personal information when individuals ("users" or "you") access or use the Company’s digital products and services, including but not limited to:

• the website located at https://flirt-o-matic.com;
• the mobile application Flirt-o-Matic, available for iOS and Android;
• any other related services, products, communications, or interactions referencing this Privacy Policy (collectively, the "Services").

By using the Services, you confirm that you are at least 18 years of age. If we become aware that personal information has been collected from an individual under the age of 18 without verified parental consent, we will take appropriate steps to delete such information. To report such an instance, please contact us at [email protected].

1. Information We Collect

1.1 Information Provided by Users

We may collect the following categories of personal data directly from users:

• Account Information: Full name, email address, username, and password, provided during account registration and used for authentication, account management, and service delivery.
• Social Login Data: When registering through Apple ID, Google Sign-In, or similar providers, we may receive personal information such as name and email address as authorized by the third-party platform.
• Uploaded Content: Photographs or screenshots that you explicitly upload to the Services, including any related metadata, for use within core application features.
• Communications: Information provided in support requests, user inquiries, or other correspondence, including contact details and message content.
• Payment Information: We do not collect or store payment card data. Purchases made through the Services are processed by authorized third-party payment processors, who may collect payment-related information on our behalf.

1.2 Information Collected Automatically

When accessing or using the Services, we may automatically collect technical and usage-related information, including but not limited to:

• Device type, operating system (including Android/iOS version), browser type, IP address, language settings, time zone;
• Service usage data such as interactions with features, page visits, time spent, and error reports (e.g., crash logs);
• Device identifiers and event data for diagnostics, performance monitoring, and security analysis.

We may use cookies and similar tracking technologies. Details are available in our Cookie Policy.

2. Purposes of Processing

We process personal data only where there is a lawful basis and in accordance with applicable data protection regulations. The purposes for processing include, but are not limited to:

• Providing access to and functionality of the Services;
• Facilitating account creation and login processes;
• Responding to inquiries, support tickets, and other user-initiated communications;
• Sending administrative notifications, including updates to policies and terms;
• Processing payments and managing transactions (via third-party providers);
• Ensuring the security and integrity of the Services;
• Performing analytics and service improvements;
• Complying with legal obligations.

3. Legal Bases for Processing (GDPR / UK GDPR)

We rely on one or more of the following legal grounds when processing personal data:

• Consent: When users voluntarily provide data or authorize specific actions (e.g., uploading photos, receiving marketing emails).
• Contractual Necessity: Processing is required to fulfill a contract with the user, including delivery of the Services.
• Legitimate Interests: Processing supports our legitimate business interests, provided such interests do not override user rights and freedoms.
• Legal Obligation: Processing is required to comply with legal or regulatory obligations.

4. Data Disclosure and Sharing

We may disclose personal information in the following circumstances:

• Service Providers and Contractors: Third parties engaged to provide infrastructure, analytics, hosting, customer support, or other operational services.
• Affiliates and Subsidiaries: Entities under common ownership or control with the Company, subject to this Privacy Policy.
• Business Transfers: In the context of a merger, acquisition, restructuring, or asset sale.
• Publicly Shared Content: Information voluntarily posted in public forums within the Services may become accessible to third parties.
• Legal Compliance: Where required by law, court order, or governmental request.

All recipients of personal data are contractually obligated to protect the information and use it solely for the specified purposes.

5. Third-Party Links and Services

The Services may contain links to external websites, platforms, or third-party integrations. We are not responsible for the privacy practices of such third parties and encourage users to review their privacy policies independently.

6. Cross-Border Data Transfers

Your personal data may be transferred to and processed in jurisdictions outside your country of residence, including countries with differing levels of data protection. Where applicable, we implement safeguards such as Standard Contractual Clauses approved by the European Commission. Our primary data storage is located in the United States.

7. Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes described herein or as required by applicable law. When retention is no longer necessary, data is deleted or anonymized. In some instances, data may be retained for extended periods to comply with tax, accounting, or regulatory requirements.

8. Data Security

We implement appropriate technical and organizational measures to safeguard personal data against unauthorized access, loss, misuse, or alteration. Despite these efforts, no system can guarantee absolute security. Users acknowledge this inherent risk when using the Services.

9. Data Subject Rights

Depending on your jurisdiction, you may have the right to:

• Access or request a copy of your personal data;
• Request correction of inaccurate data;
• Request deletion of personal data, subject to legal exceptions;
• Withdraw consent at any time (where applicable);
• Object to or restrict certain processing activities;
• Lodge a complaint with a supervisory authority.

To exercise your rights, please contact [email protected]. We will process requests in accordance with applicable legal requirements.

10. Do Not Track Signals

While the mobile applications respect platform-level privacy settings (e.g., permissions in Android and iOS), the website does not currently respond to browser-based Do Not Track (DNT) signals due to the absence of a standardized response mechanism.

11. Jurisdiction-Specific Rights

California and Virginia Residents

Pursuant to the California Consumer Privacy Act (CCPA) and the Virginia Consumer Data Protection Act (VCDPA), users in these states have additional rights, including:

• The right to know what personal data is collected, used, shared, or sold;
• The right to access personal data;
• The right to request deletion;
• The right to opt out of the sale or sharing of personal data;
• The right to correct inaccuracies.

Requests must be submitted to [email protected] with the subject line "California Privacy Rights" or "Virginia Privacy Rights" and must include full name, mailing address, and email address. We are not responsible for incomplete or improperly labeled submissions.

12. Changes to This Policy

We reserve the right to amend this Privacy Policy at any time. Material changes will be communicated via the Services or by direct notification where required. Continued use of the Services after such changes constitutes acceptance of the updated terms.

13. Contact Information

For inquiries, data subject requests, or concerns regarding this Privacy Policy, please contact:

Email: [email protected]
Website: https://flirt-o-matic.com