Privacy Policy

We collect information you give us, information generated by your use of the Service, and limited technical information:

• Account data: email address and password (stored only as a secure hash).
• Profile data: name, age, school, major, year, gender, who you’re looking for, photos, and prompt answers.
• Sensitive data you choose to share: because this is a dating service, information you add to your profile or messages may reveal characteristics such as sexual orientation. You provide this voluntarily and consent to our processing it to operate the Service.
• Activity data: likes, matches, the friends who swipe for you (your wingmen), notes your wingmen add, and messages you send to matches.
• Safety data: reports, blocks, and related signals used to keep the community safe.
• Technical data: IP address and basic device/log information used for security, rate-limiting, and abuse prevention.

We use your information to:

• create and operate your profile and account;
• show you and your wingmen potential matches and enable messaging with mutual matches;
• keep the Service secure and investigate fraud, abuse, and violations of our Terms;
• respond to reports and provide support;
• comply with legal obligations and enforce our agreements.

We do not sell your personal information for money.

Where the GDPR or UK GDPR applies, we process your information based on: performance of our contract with you (to provide the Service); your consent (for sensitive data and optional features); our legitimate interests (to secure and improve the Service and prevent abuse), balanced against your rights; and compliance with legal obligations. You may withdraw consent at any time, without affecting prior processing.

• With other users: your profile is visible to other users and to the wingmen you authorize. Notes your wingmen write may be shown to the other side’s wingmen as part of a potential match. Messages are visible to you and your match.
• With service providers: vendors who operate the Service on our behalf, under contracts that limit their use of your data to providing services to us. Today these are Vercel (website hosting and photo storage), MongoDB Atlas (database hosting), and Resend (verification and password-reset emails). If you choose to sign in with Google, Google processes that sign-in. We update this list when our providers change.
• For legal reasons: to comply with law, respond to lawful requests, enforce our Terms, or protect the rights, safety, and property of Wingman, our users, or the public.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, your information may be transferred as a business asset, subject to this Policy.

• Edit your profile and photos at any time in the app.
• Block or report other users from any conversation.
• Delete your account permanently from the Profile screen. Deletion removes your profile, photos, matches, and messages, subject to the limited retention described below.

Depending on where you live, you may have rights to access, correct, delete, port, or restrict processing of your personal information, to object to certain processing, and to opt out of “sale” or “sharing” of personal information as those terms are defined by California and other U.S. state laws. We do not sell or share personal information for cross-context behavioral advertising. To exercise any right, email support@wingman33.com. We will not discriminate against you for exercising your rights, and we will verify your request before acting on it.

We keep your information while your account is active and delete it when you delete your account, except where we must retain limited records to comply with legal obligations, resolve disputes, enforce our agreements, or address safety and fraud (for example, retaining a record that an account was banned for abuse). Retained data is limited to what is reasonably necessary for those purposes.

We use reasonable technical and organizational measures to protect your information, including transport encryption and secure on-device storage of session tokens (iOS Keychain). However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

We operate in the United States, and your information may be processed in the U.S. or other countries whose data-protection laws may differ from those in your country. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for cross-border transfers.

Wingman is intended only for users 18 and older. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected information from a person under 18, we will delete it. If you believe a minor is using the Service, contact us immediately.

Our website may use cookies and similar technologies that are necessary to operate the Service and to understand usage in aggregate. You can control cookies through your browser settings. We honor applicable opt-out preference signals where required by law.

We may update this Policy from time to time. If we make material changes, we will take reasonable steps to notify you and will update the “Last updated” date. Your continued use of the Service after changes take effect means you accept the updated Policy.

Questions about this Policy or your data, or to exercise your rights? Email support@wingman33.com.