What we collect, and how long we keep it
Identity & profile. Your name, email, date of birth, gender, and who you're seeking.
Retention: While your account is active; removed when you delete your account unless a legal hold applies.
Sensitive personal information — sexual orientation. Orientation is optional and opt-in. It is sensitive personal information under the CPRA and special-category data under the GDPR.
Retention: Only while you choose to share it; removed when you deselect it or delete your account.
Location. For matching, we store only a grid-snapped and jittered current-location value and show other members a distance band, never your exact location. If you provide a birthplace for chart math, that place is treated as a sensitive astrology input and is never shown on your profile.
Retention: Current-location coordinates are privatized while active; removed on deletion. Birthplace inputs remain until you remove them or delete your account.
Astrology inputs. Your birth date, and optionally your birth time and birthplace, used to compute your chart and compatibility.
Retention: While your account is active; birth time and birthplace are optional and removable.
User content & messages. Your photos, video, bio, prompt answers, saved profile-visible astrology tool results, private astrology tool history, private Ask ZoëDate AI prompt history, reports, and the contents of your messages.
Retention: While your account is active; removed on deletion unless preservation is required for safety, legal, or abuse investigations. Message contents are SPI.
Derived data. Compatibility scores, match history, likes, passes, blocks, and moderation labels.
Retention: While your account is active; removed on deletion.
Payment. Card payments are tokenized by Stripe. We store only subscription status and limited billing metadata, not your full card number.
Retention: Payment records are kept up to 7 years for tax, accounting, fraud prevention, and legal compliance.
Automatically collected. Device and IP information, cookies, Vercel Analytics and Speed Insights events, product usage, security events, and operational logs that keep the service working and secure.
Retention: Device, usage, and error logs are kept up to 24 months unless security investigations require longer.
How we use information
- Operate the app: account access, matching, messaging, moderation, billing, and support.
- Protect members: report review, block enforcement, spam prevention, and legally required preservation.
- Improve product quality: aggregate analytics, crash diagnostics, and abuse-pattern detection.
- If enabled later, generate optional AI-assisted features only where the product clearly labels them as suggestions.
Who processes data for us
As of 2026-06-23, these are the service providers that run ZoëDate or process data for a feature you use:
- Supabase — authentication, database, Realtime, and media storage.
- Vercel — hosting, serverless functions, crons, Web Analytics, and Speed Insights.
- Vercel AI Gateway and Anthropic — optional Premium AI narrative, coaching, Ask ZoëDate AI astrology Q&A, and Smart Inbox model processing.
- Stripe — payment processing, billing portal, subscriptions, receipts, and fraud controls.
- Resend — transactional, lifecycle, safety, and account email delivery.
We do not currently use a third-party product analytics processor outside Vercel Analytics. If we enable another analytics, error-monitoring, AI, or media-classification processor that receives personal information, we will update this section before sending that data.
Data sources and attributions
We do not sell your information
We do not sell or share your sensitive personal information, and we do not sell your personal information. Global Privacy Control (GPC) opt-outs are honored by default because we do not run a sale or cross-context behavioral-ad sharing path.
Your rights
Depending on where you live, including under the California CCPA/CPRA, you can request to know, access, correct, delete, or export your personal information, and opt out of any sale or sharing. We won't discriminate against you for exercising privacy rights.
You can export or delete your data from your account settings. For privacy, correction, access, or authorized-agent requests, use our contact page.
Limit the use of my sensitive personal information
Under CPRA §1798.121 you can direct us to limit the use of sensitive personal information to what's necessary to provide ZoëDate. For ZoëDate, that includes sexual orientation, precise location before privatization, birth-place inputs, and message contents. Because we use this data only to operate and protect the service, that limit is our default.
You can remove optional sensitive fields, like orientation or birth time, anytime in your settings.
Adults only
ZoëDate is for adults 18 and older. We do not knowingly allow minors to create accounts. If you believe a minor is using ZoëDate, report the profile or use the contact page.
EU/UK (GDPR) and contact
If you're in the EU or UK, our legal basis for processing special-category data, such as sexual orientation, is your explicit consent, which you can withdraw at any time. You also have rights of access, rectification, erasure, and portability.
For GDPR questions or data-rights follow-up, use the contact page. See also our Terms of Service and Safety Center.