Privacy Policy

• Account data: email, authentication tokens.
• Profile data: display name, age, pronouns, bio, games, in-game roles, play style, prompts, avatar, optional Discord handle.
• Riot account data (optional): if you connect a Riot ID we store your Riot PUUID, in-game name and current ranked tier/division for League of Legends, Teamfight Tactics and Valorant. We never see or ask for your Riot password.
• Activity: likes, matches, messages (including images, GIFs and voice notes you send), LFG lobbies and lobby chats.
• Purchase data: the plan or power-up purchased, store transaction identifiers, currency and status, received from Apple, Google or our subscription provider. We never receive your card details.
• Device data: push notification tokens and basic device/platform info so notifications reach you.
• Safety data: blocks and reports you submit, and moderation decisions about content you post.

Payments are processed entirely by Apple and Google. We receive confirmation of what you bought and when, so we can unlock your plan or power-ups, and we keep that record for accounting and support. Refunds are handled by the store you purchased from.

• To suggest compatible matches based on your filters and preferences.
• To deliver messages and notifications between matched users.
• To enforce our community guidelines and protect users from harm.
• To improve the product (in aggregated, anonymized form).

• Other users: your public profile fields are visible to authenticated users in Discover and Matches.
• Your matches: the messages you send are only visible to the person you sent them to.
• DuoMatch staff: only when investigating reports or technical issues.
• We do not sell your data to advertisers.

Data is stored on managed cloud infrastructure with encryption in transit and at rest. Row-level security policies restrict access to your own data.

• Contract: to create your account, show matches and deliver messages and purchases.
• Legitimate interests: safety, fraud and abuse prevention, and improving the product.
• Consent: optional features such as connecting a Riot account, push notifications and, where required, sensitive profile details you choose to share. You can withdraw consent at any time.
• Legal obligation: tax, accounting and responding to lawful requests.

We keep profile and activity data while your account is open. When you delete your account, your profile, messages, likes and media are removed; limited records (purchase receipts, safety reports and ban records) are retained where we must for legal, accounting or abuse-prevention reasons, then deleted.

Our infrastructure providers may process data outside your country. Where data leaves the EEA or UK we rely on Standard Contractual Clauses or an equivalent safeguard.

• Access and portability: view your data in the app or request a copy.
• Correction: edit your profile at any time.
• Deletion: delete your account from Settings — this removes your profile, messages, and likes permanently.
• Object or restrict: ask us to stop certain processing based on legitimate interests.
• Withdraw consent: disconnect your Riot account or turn off notifications at any time.
• Complain: you can lodge a complaint with your local data protection authority.
• California residents: we don't sell or share personal information for cross-context behavioural advertising, and you won't be discriminated against for exercising your rights.

DuoMatch is for users 18 and over. We do not knowingly collect data from minors, and we delete accounts found to belong to anyone under 18.

If we materially change this policy we'll notify you in-app before the change takes effect.

For privacy questions, email privacy@duomatch.app. EU Digital Services Act notices: legal@duomatch.app.