سياسة الخصوصية

1. Who we are

PrimePaire is run by its founder, Issar Arab, 81541 Munich, Germany ("PrimePaire", "we", "us"), who is responsible for your personal data. Under the EU General Data Protection Regulation (GDPR), this is the controller.

A company is being founded to run PrimePaire. When it takes over, it will become the controller of your data: we will tell you before that happens, and this policy will name it.

For anything about your data, write to privacy@primepaire.com.

2. In short

• We ask only for what PrimePaire needs: who you are, your studies and work, and what you choose to share on your profile.
• There is no password. You sign in with a code we send to your email address, or with Google.
• Other members see your profile and your age, never your date of birth, and an approximate distance, never your position.
• Religion and ethnic origin are optional, and you can always prefer not to say. You add them only with your explicit consent. Other members see them, and can find you by them in a search, only if you choose to show them, and you can remove them at any time.
• You can delete your account yourself, at once, from your profile.
• We do not sell your data, we show no advertising, and we use no advertising or analytics trackers.
• Your data is stored on servers in Germany.

3. What we collect

Your account

Your email address, your name, a username, your date of birth, and how you sign in: a code sent to your email address, or your Google account. When you sign in with Google, Google gives us your name, your email address, whether Google has confirmed that address, and an identifier of your Google account. We never receive your Google password.

Your studies and work

Your highest degree (a bachelor's degree or above is required to join), whether you work or study further, and your job title and employer, or your university and field of study.

Your profile

Your photos, a short text about you, your gender and who you are looking for, your city and country, the languages you speak, your interests, and the details you choose to add: your height, marital status, children, when you hope to marry, whether you would move, and whether you smoke. If you choose to blur your photos: a blurred copy of each, and the requests to see them (who asked, your answer, and when).

Special categories, only with your consent

If you choose to add them: your religion or belief, how you practise it, how often you pray, how you dress, and your ethnic or cultural background. You can always answer "Other" or "Prefer not to say". The GDPR calls these special categories of personal data. We ask for your explicit consent before you add them and record when you gave it. Other members see each of them, and can find you by it in a search, only if you switch it on in your profile. How often you pray is never shown and never searched. We never use them to rank the people we suggest. You can remove them at any time, which withdraws your consent.

Your search settings

Who you want to see, and the ages, distance or country, hobbies and languages you choose.

Your location

With your permission, the position of your device, to show you people within the distance you choose. We store it to work out distances, and to tell you the nearest town your search is centred on, which we look up on our own servers. Other members see only an approximate distance in kilometres, with your city and country.

Your activity

Who you like, pass on or superlike, your matches, your messages, when the messages sent to you reached your device and when you read them, the people you block, the reports you make, and the notifications we show you.

Sign in and security records

When you sign up and each time you sign in: the date, the way you signed in, and the internet (IP) address it came from. The devices where you are signed in, so that you can sign out of them. For a short time, records that limit how often anyone can try to sign in or ask for codes. Sign in codes and these records are stored only as keyed hashes, never in a readable form.

The emails we send you

For each email we send you, such as a sign in code, a record that it was handed to our email provider, so that our team can help if one does not arrive. This record holds neither your address nor the content of the email.

When you write to us

Your name, your email address and your message, when you use the contact form on our website or write to us.

Premium

Your plan and its dates, your coin balance, and each change to it: how many coins, when, and why (a premium plan, a superlike, or a gift or correction by our team, with the name of the team member who made it). The apps do not take payments yet. When they do, this policy will say how payments are handled.

4. Why we use it, and on what legal basis

We do not use your data for advertising and we do not sell it. We do not take decisions about you based solely on automated processing that have legal or similarly significant effects. The people we suggest to you are a ranking you are free to ignore. When a date of birth shows that someone is under 18, the sign up is refused, as the law requires; if you think this is a mistake, write to us.

5. What other members see

Your name and username, your age (worked out from your date of birth, which they never see), your gender, your city and country, an approximate distance, your photos, the text about you, your interests and languages, your degree and what you do (your job title, or your field of study), the details you added to your profile, the special categories you chose to show, your premium plan if you have one, and when you were last active. The name of your employer or university is shown only if you choose to show it. If you blur your photos, they see only the blurred copies, except the people you let see the originals. Your email address, your date of birth, your position and how often you pray are never shown.

Your profile is shown to other members once it is complete: at least one photo, the basics about you, and your studies and work. A member you matched with can see it for as long as the match lasts. Nobody you blocked, or who blocked you, sees it.

What you write in a conversation is seen by the member you write to. Think before you share contact details or anything private.

The member you are talking to also sees when their messages reached your device and when you read them, and that you are typing while you write to them. Nobody else sees any of this.

A notification about a new message names the sender by their first name. It never contains what they wrote, so the notifications on your devices do not show your conversations.

6. Who else receives your data

• Hetzner Online GmbH, Gunzenhausen, Germany, which hosts our servers in Germany.
• Brevo (Sendinblue SAS), Paris, France, which delivers our emails.
• Google (Google Ireland Limited and Google LLC), only if you choose to sign in with Google. Google's own privacy policy applies to your Google account.
• Cloudflare (Cloudflare, Inc.), when you ask for a sign in code: its Turnstile check tells a person from a program. It receives your internet address and information about your browser or device, and sets no advertising cookie.
• Our domain provider, which forwards the emails you send to our addresses to our team.
• Authorities, courts and the police, when the law requires it, or when it is necessary to protect someone's life or safety.
• A buyer of PrimePaire or of its business, if that ever happens, who would have to respect this policy.

Our providers act on our instructions under data processing agreements and may not use your data for their own purposes. We do not sell your data and we do not share it with advertisers.

Within our team, a small number of authorised people can access account data, only to run the service, handle reports and requests, investigate abuse, or answer lawful requests.

Your conversations are private: our team does not browse them. When a member reports a message or a conversation, the report holds the reported message as it was. While the report waits for a decision, a senior member of the team may read that conversation to decide on it, after writing down why. Each reading is recorded with their name and the reason, and many readings by one person raise an alert to the team.

7. Where your data is stored

Our servers are in Germany, in the European Union, and so are our backups. Our email provider processes data in the European Union. If you sign in with Google, Google may process data in the United States, and Cloudflare may process its check there, both under the EU and US Data Privacy Framework.

8. How long we keep it

• Your account, profile and search settings: for as long as your account exists.
• Your coins and the history of their changes: for as long as your account exists.
• The requests to see blurred photos: for as long as both accounts exist.
• When you delete your account, it is deleted at once: your profile, photos, studies and work, special categories, search settings, coins and their history, likes, matches, conversations, notifications, signed in devices and sign in methods. For up to 12 months we keep only what safety requires: reports made by you or about you, with the message a report concerns, without a link to your account.
• An account our team closed for breaking our Terms stays switched off for 12 months after it was last used, so that someone who was banned cannot simply come back, and is then deleted.
• An account nobody signs in to for 24 months: we write to its email address, and delete it 30 days later unless you sign in again.
• A conversation that ended with an unmatch or a block: deleted 30 days after it ended, so that a report can still be looked into, and kept while a report about it waits for a decision.
• Reports: 12 months after our team decided on them.
• Notifications: 90 days. Who you passed on: 30 days, after which they can appear in your suggestions again.
• Sign in codes work for 10 minutes and are deleted a day later. Records that limit attempts are deleted after a day. A signed in device stays signed in until you sign out or its session runs out.
• Internet addresses in sign in and security records: removed after 12 months.
• Backups: our database and photos are copied every hour, encrypted, and each copy is deleted after at most 30 days. What you delete leaves our backups within 30 days.
• A sign up refused because the person is under 18: a keyed hash of the email address, for one day, so that the same address cannot simply try again.
• Messages you send our team: as long as we need to answer, then up to 12 months.
• Longer only when the law requires it: for example, German law requires invoices to be kept for up to 10 years.

To delete your account, open your profile in the app and choose Delete my account (how to delete your account). If you cannot sign in, write to privacy@primepaire.com from the email address of your account.

9. How we protect it

Every connection to PrimePaire is encrypted, and so are the emails we send and our backups. There is no password to steal: sign in codes are short-lived, work once, and are stored only as keyed hashes. Deleting an account needs a code sent to its email address, so that nobody holding your unlocked phone can do it. We limit how often anyone can try to sign in or open profiles, and access to our systems is restricted and recorded. No system is perfectly secure. If a breach ever put your data at risk, we would tell you and the authorities as the law requires.

10. Your rights

Under the GDPR you have the right to:

• access the data we hold about you and get a copy of it;
• have it corrected when it is wrong or incomplete;
• have it deleted;
• have its use restricted;
• receive the data you gave us in a structured, machine-readable format, and have it sent to another service;
• object to its use when we rely on our legitimate interest;
• withdraw your consent at any time, without affecting what was done before;
• not be subject to a decision based solely on automated processing that has legal or similarly significant effects on you.

You can change most of your profile yourself in the app, choose which special categories others see or remove them, sign out of all your devices, and delete your account, all from your profile. For anything else, write to privacy@primepaire.com from the email address of your account. We answer within one month.

You also have the right to complain to a data protection supervisory authority, in particular in the country where you live or work, or where you think the law was broken.

11. Adults only

PrimePaire is only for people aged 18 or older. We ask for a date of birth and refuse anyone younger. If you believe a minor is using PrimePaire, tell us at contact@primepaire.com and we will close the account.

12. Cookies and storage on your device

We use no advertising cookies and no analytics. To keep you signed in, the web app stores your sign in tokens in your browser's storage, and the mobile apps in your phone's secure storage. The website remembers the language and the currency you chose, in your browser, and the apps remember a few choices you make on that device, such as your language and the day you chose to complete your profile later. When Google sign in is offered, the web app's sign in page loads Google's sign in button, and on Android the phone's own Google account service shows your Google accounts; Google's policies apply to them. When you ask for a sign in code, the page loads Cloudflare's check, and Cloudflare's policies apply to it. These are needed for the service you ask for, and we store nothing else on your device.

13. Changes to this policy

We will update this policy when PrimePaire changes. The date at the top says when it last changed. When a change matters, we will tell you in the app or by email before it applies.

14. Contact us

Issar Arab, 81541 Munich, Germany

Email: privacy@primepaire.com