Privacy policy

DatingAppBoost SRL, Square Ambiorix 11, 1000 Brussels, Belgium. For any question about your data: contact@datingappboost.com.

• Your email address — to create your account and send you the sign-in link. Legal basis: performance of the contract.
• Your profile photos — to produce the analysis, to show you your report again later, and to compare two analyses. They are resized in your browser, sent to our server, kept in a private storage space tied to your account, and passed to Google for as long as it takes to produce the analysis — or to Anthropic if Google is momentarily unavailable. The detail is in the "Your photos" section below. Legal basis: performance of the contract.
• Your bio and your questionnaire answers — to produce the analysis and the bios. Kept in your account. Legal basis: performance of the contract.
• The generated reports (score, problems detected, bios, openers) — kept in your account so you can read them again.
• The profiles you follow and your conversations — if you use "My matches". That data also concerns another person: the section "The people you talk to" is devoted entirely to them.
• Usage counters (date and type of analysis, without content) — to enforce the quotas and prevent abuse. Legal basis: legitimate interest.
• Technical counters of model calls (model used, number of tokens, cost, success or failure). Neither your photos, nor your texts, nor the model's answers appear there: that is a constraint written into the code, not an intention. Legal basis: legitimate interest.
• Your billing data — processed by Stripe. We neither receive nor store any card number: only a customer identifier and the state of your subscription are recorded on our side.

Your photos, your bios and your analyses are neither sold, nor published, nor used for advertising purposes. Nor are they used, by us, to train an AI model.

This is the most sensitive data you entrust to us; it deserves its own section.

• They are kept. Every analysis stores the screenshots you sent in a private storage space, filed under a folder specific to your account. That is what makes it possible to reopen a report, to display the annotated photos and to compare a before / after.
• A rebuild also keeps the photos it discards. When you drop a gallery into "Rebuild", every photo is stored the same way — including the ones the sorting throws out. That is what lets you close the tab and pick the sorting back up later, or from another device, without uploading everything again. You can delete a rebuild at any time: its photos go with it.
• They are never public. No permanent address exists. Display goes through signed links generated on demand, valid for thirty minutes, and only after checking that the report requested is indeed yours.
• They are passed to Google for as long as it takes to produce the analysis, since that is the model that reads them. If Google is unavailable — outage, limit reached — the analysis is automatically retried with Anthropic (United States): your photos may therefore go to one or the other, and to nobody else. Which provider actually handled each analysis is recorded; you can ask us for the detail.
• They live as long as your account. We set no automatic deletion period. You keep control: deleting your account erases the files, immediately.
• One exception, where nothing is written anywhere: conversation screenshots in "Matches". They go to the model, then disappear — only the text read from them is stored. A match's profile screenshots are kept: see the next section, which is devoted to them.
• Before you even have an account, if you choose your photos from the home page, they are kept in your own browser (local storage, key dab:pending-photos) for one hour at most, long enough for you to create your account. They do not leave your device until the analysis is started, and are erased as soon as it begins. On a shared computer, finish or abandon the flow rather than leaving the tab open.

The "My matches" feature reads the profile and the messages of somebody else. That person asked us for nothing, will never read what is written about them, and has not consented to this processing. We have taken it seriously.

What is kept: the first name you give them (a label, not an identity), the platform, the text read on their profile — their bio, their age if it is written in plain text, the conversation hooks — the thread of the conversation as you gave it to us to read, and the screenshots of their profile.

Those profile screenshots are kept, and that has to be said plainly. They live in the same private storage as your own photos, under a folder of their own for that card, and are only ever served through signed links valid for thirty minutes. They are not published, not shared, and not used for anything other than producing what you ask for on that card. Two reasons, and not one more: letting you recognise your cards in the list, and regenerating openers without making you upload the same images again.

Conversation screenshots, on the other hand, are never stored. They go to the model for the time it takes to read them, only the text remains. That distinction is more than an intention: there is nowhere in the code to write a conversation screenshot.

What is never produced about them: no score, no rating, no ranking, no judgement about their appearance or their "worth", no inference about their origin, health, religion, orientation or income, no hypothesis about what they think or feel. That prohibition is written into the instructions given to the model, and the analysis deliberately contains no numeric criterion about them: a score that exists always ends up being displayed. No persistence or manipulation tactic is suggested either, and clear disinterest is reported as such rather than worked around.

Legal basis: legitimate interest (art. 6(1)(f) GDPR) — yours, in preparing a conversation. That interest has been balanced against the rights of the person concerned, and that is what justifies the limits above: no scoring, no inference, no conversation image kept, no distribution, and profile screenshots held in private storage for the lifetime of the card only.

Informing the person concerned: we hold no contact details that would let us warn them, and contacting them would mean collecting more data about them — a greater intrusion than the processing itself. We therefore rely on article 14(5)(b) GDPR. In return, this processing is described publicly here, its limits are strict, the images that are kept are held in private storage and only for the lifetime of the card, and anyone who comes forward can exercise their rights at the address below. The exemption and its balancing test are documented in our record of processing activities.

Duration: as long as you keep the card. Deleting a card erases the associated profile, its screenshots and the conversation; deleting your account erases everything.

Your responsibility: you must only upload exchanges you took part in yourself, and nothing falling within a special category of data. If the person concerned wishes to exercise their rights, they can write to us at contact@datingappboost.com and we will do what is needed.

• Supabase — authentication, database and photo storage.
• Google (analysis) — the analysis model currently used (Gemini models). Your photos and your texts are passed to it for as long as it takes to produce the analysis.
• Anthropic — backup analysis model (United States), called automatically when Google is unavailable. It then receives the same data.
• OpenAI — alternative analysis provider and, where applicable, automatic text moderation (United States). Called only if the operator configures that provider.
• Google (sign-in) — a processing operation distinct from the one above: only if you choose "Continue with Google" to sign in. Google then learns that you use this site.
• Stripe Payments Europe, Limited (Ireland) — payment, billing and subscription management.
• Vercel Inc. (United States) — hosting of the application.

Some of these providers are established outside the European Union. Every transfer rests on a mechanism provided for in chapter V GDPR:

• Supabase Pte. Ltd (Singapore) — European Commission standard contractual clauses (decision 2021/914), modules 2 and 3, supplemented by the UK addendum. Supabase undertakes contractually to store and process the data — photos included — in the region we chose when the project was created.
• Google (analysis) — EU–US Data Privacy Framework. The analysis service used does not allow the processing region to be chosen.
• Anthropic PBC (United States) — standard contractual clauses, incorporated by default into the commercial terms accepted.
• OpenAI — data from the European Economic Area is processed by OpenAI Ireland Limited; the standard contractual clauses and the UK addendum apply to onward transfers.
• Stripe — the contracting entity is Irish. Any transfers to its US entities fall under its transfer addendum, based as the case may be on the standard contractual clauses or on the EU–US Data Privacy Framework.
• Vercel Inc. (United States) — standard contractual clauses (decision 2021/914) and UK addendum.
• Google (sign-in) — only in the case of sign-in through Google, on the basis of the EU–US Data Privacy Framework.

• Analysed photos: kept as long as your account exists, with no automatic deletion period. Deleting the account erases them immediately.
• Screenshots from "My matches" and from photo sorting: never stored.
• Photos pending before account creation: one hour at most, and only in your browser.
• Account, analyses, reports, bios, answers, cards and conversations: kept as long as your account exists. Deleting the account erases them permanently.
• Usage counters and technical counters: erased with the account.
• Invoices and accounting records: kept by Stripe after the account is deleted, for seven years, the statutory retention period for accounting records in Belgium.

You have a right of access, rectification, erasure, restriction, objection and portability. Two of them can be exercised in one click from "My account":

• "Download my data" — a JSON file containing your account, your analyses, your reports, your profiles, your cards and your conversations. That is your right of access and portability, served immediately.
• "Delete my account and my data" — erases everything, including the stored photos, and cancels the current subscription.

For other requests — rectification, restriction, objection — write to contact@datingappboost.com.

You may lodge a complaint with the Belgian Data Protection Authority (Rue de la Presse 35, 1000 Brussels — autoriteprotectiondonnees.be).

The site sets only the cookies necessary for your authentication. No advertising or analytics cookie is used, and no statistics tool is installed: there is therefore no consent banner to display. The detail is on the cookies page.

The score and the recommendations are produced automatically. They have no legal effect and are simply editorial suggestions that you remain free to follow or ignore. The how the AI works page explains what the model does, what it does not do, and how to obtain human intervention.