This is a kink-forward app. We treat your data with the discretion that implies. Here's what we collect and how it's handled.
What we collect
Account: email and (if you use it) password. Profile: pseudonym, date of birth, city, photos, prompts, and the identity and interest fields you fill out. Activity: likes, matches, messages, and reports. Device basics: IP address and a coarse device fingerprint for safety and abuse prevention.
What other users see
Your pseudonym, age (not your date of birth), city, photos, and prompt answers. Your email, password, exact birthday, and any private notes stay private.
Why we collect it
To run the app, match you with people, keep minors out, enforce our Guidelines, and respond to legal requests.
Who we share it with
Only the service providers we need to run Encord, each under contract and only for what they're hired to do. Today that's Supabase (database, authentication, and encrypted media storage), Cloudflare (hosting, CDN, and abuse protection), Mailgun (delivery of account emails such as confirmations and password resets), and Lovable (application platform). We don't sell your data or share it with advertisers. We may disclose information when legally required, or to protect someone from harm.
Cookies and analytics
We use a small number of first-party cookies and local storage entries to keep you signed in and remember app preferences. We use privacy- preserving product analytics to count events like sign-ups and matches. We do not run advertising trackers or third-party ad pixels.
Retention
We keep your data while your account is active. When you delete your account, your profile, photos, prompts, quiz results, and messages are removed within 30 days. Safety records tied to reports, blocks, bans, and age verification are kept for up to 24 months so removed users can't simply return. Aggregate, non-identifying counts may be kept indefinitely.
Your choices
You can edit your profile from Settings, pause or hide your profile, and delete your account at any time. To request a copy of your data or its deletion, email privacy@getencord.com from your account address. We respond within 30 days. Where the law gives you additional rights (GDPR, UK GDPR, CCPA/CPRA), we honor them, including the right to object, restrict, correct, or complain to your local regulator.
Where your data lives
Encord is operated from the United States and your data is processed there. If you're in the EU, UK, or Switzerland, transfers rely on Standard Contractual Clauses with our providers.
Minors
Encord is strictly 18+. We don't knowingly collect data from anyone under 18, and we delete accounts we believe belong to a minor.
Security
Data is encrypted in transit and at rest, photos are served through expiring signed links, and access is scoped per user at the database level. No system is bulletproof, so use a strong unique password and let us know if something looks off.
Contact
Privacy and data requests: privacy@getencord.com. Safety, abuse, and urgent reports: safety@getencord.com. Everything else: support@getencord.com.
DRAFT, placeholder language. Review with a lawyer before launch.