Dates.careThis policy explains what personal information Dates.care collects, why we collect it, who we share it with, how long we keep it, and the choices you have. It applies to the Dates.care website and web app at dates.care and to every account created on them.
Dates.care is an online dating service operated by DATES CARE, a sole proprietorship registered in Ontario, Canada under Business Identification Number (BIN) 1001737281. We handle personal information in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). If you are outside Canada, your information is processed in Canada and the United States under this policy.
You must be 18 or older to use Dates.care. We do not knowingly collect information from anyone under 18. If we learn that we have, we delete the account and its data.
1. Information we collect
1.1 Information you give us
| Category | What it includes |
|---|---|
| Account | Name, email address, password (stored only as a salted hash), date of birth, gender and the gender you are looking for. |
| Profile | Photos, biography, location (city or region), interests, and anything else you choose to add to your profile. |
| Verification | Where you request verification: a government-issued photo ID and a verification selfie, used only to confirm you are a real adult person. |
| Content | Messages, mail, photos and videos you send, gifts you send or receive, and reports you file about other members. |
| Support | Anything you send us by email or through a support form. |
| Invitations | If you join through another member's invitation link, we record which member invited you, the date, and whether the conditions for their thank-you credits were met. If you share your own link, we record who joined through it. We never read or import anyone's contacts. |
1.2 Information we collect automatically
- IP address, approximate location derived from it, browser and device type, and operating system.
- Log data: pages viewed, features used, timestamps, and errors.
- Session identifiers stored in your browser so you stay signed in.
1.3 Information from third parties
If you sign in with Google, or with any other sign-in provider offered on the sign-in screen, that provider sends us a limited set of information so we can create or open your account. From Google Sign-In we receive:
- your name and profile picture,
- your primary Google Account email address, and
- a stable identifier that lets us recognise you on your next sign-in.
Google user data - limited use. We use the information received through Google Sign-In only to create and authenticate your Dates.care account and to prefill your name, email and profile picture. We do not use it for advertising, we do not sell it, we do not transfer it to anyone except as described in section 4, and we do not allow humans to read it except with your consent, for security or legal reasons, or where it has been aggregated and anonymised. We do not request access to your Gmail, Drive, Contacts, Calendar or any other Google service. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. You can revoke our access at any time at myaccount.google.com/permissions.
We do not receive your card or bank details from our payment processor - only whether a payment succeeded, the amount, and a reference for the transaction.
2. Why we use your information
| Purpose | Basis |
|---|---|
| Creating your account, signing you in, and keeping you signed in | Performance of our contract with you |
| Showing your profile to other members and showing you theirs | Performance of our contract with you |
| Delivering messages, mail, gifts, and audio and video calls | Performance of our contract with you |
| Taking payment and crediting your account | Performance of our contract with you |
| Verifying age and identity | Legal obligation and our legitimate interest in member safety; express consent for the ID document itself |
| Moderating photos and messages, investigating reports, blocking fraud and abuse | Legitimate interest in a safe platform |
| Diagnosing faults and improving the service | Legitimate interest |
| Service emails you cannot opt out of, such as password resets and security notices | Performance of our contract with you |
| Marketing emails | Consent - withdraw it at any time |
We do not sell your personal information, and we do not use your messages or photos to train advertising profiles.
3. Automated processing
Photographs you upload — to your profile, the community feed, a chat or a mail — are screened automatically before they are published. Each image is sent to Google Cloud Vision (SafeSearch) for that check. Sexual or violent images are refused; borderline images are published but queued for a person to look at; and contact details written inside a picture are covered over before it is delivered. That is the only automated decision we make about your content. Messages and profile text are not screened by machine, beyond the masking described below. No account is suspended or removed without a person looking at it first. You can contest any decision by writing to admin@dates.care.
Phone numbers and email addresses are masked automatically in messages. That is formatting, not a decision about you.
4. Who we share information with
We share personal information only with the service providers that make Dates.care work, and only as far as each one needs. They act on our instructions and may not use your information for their own purposes.
| Who | What for |
|---|---|
| Supabase | Database, authentication and file storage |
| Vercel | Website hosting and delivery |
| Google (and any other sign-in provider shown on the sign-in screen) | Sign-in, where you choose to use it |
| NOWPayments | Processing payments |
| Twilio | Carrying audio and video calls, and sending verification text messages |
| Google Cloud Vision | Screening uploaded photographs before they are published |
| Email delivery provider | Sending service and receipt emails |
We also disclose information where the law requires it - a court order, a lawful request from police or a regulator - or where it is necessary to protect someone's safety or to establish or defend a legal claim. If Dates.care is ever sold or merged, your information may transfer to the buyer; we will tell you before that happens and this policy continues to apply until you are told otherwise.
5. What other members can see
Your profile - your name, photos, age, location and anything you write on it - is visible to other signed-in members. Your email address, phone number, date of birth and any verification documents are never shown to other members. Anything you send in a message is visible to the person you sent it to, and may be seen by our moderators if it is reported.
6. Where your information is held
Your information is stored on servers in Canada and the United States. Where information is transferred outside Canada, it remains subject to this policy and to contractual protections with our providers, and it may be accessible to authorities in those countries under their laws.
7. How long we keep it
- Active accounts - for as long as your account exists.
- Deleted accounts - you can delete your account at any time from your account settings. Your profile is hidden immediately and the account is reviewed and deleted within 14 days. Records that the law requires us to keep - such as payment records and records needed to respond to lawful requests - are archived for as long as the law requires and are not visible to members.
- Verification documents - deleted within 90 days of the check completing.
- Payment records - kept for seven years, as tax and accounting law requires.
- Safety records - where an account was suspended for abuse or fraud, we keep a minimal record so the same person cannot simply return.
8. How we protect it
- All traffic is encrypted in transit with TLS, and data is encrypted at rest.
- Passwords are stored only as salted hashes and are never readable by us.
- Database access is restricted by row-level security so members can reach only their own data.
- Staff access is limited to those who need it, and is logged.
No system is perfectly secure. If a breach occurs that creates a real risk of significant harm, we will notify you and the Office of the Privacy Commissioner of Canada as PIPEDA requires.
9. Your rights
- Access - ask for a copy of the personal information we hold about you.
- Correction - have inaccurate information fixed.
- Deletion - delete your account and its data, in your account settings or by asking us.
- Portability - receive your data in a common machine-readable format.
- Withdraw consent - for anything you consented to, including marketing and, where you signed in with Google, by revoking access at myaccount.google.com/permissions.
- Complain - to us first, and then to the Office of the Privacy Commissioner of Canada at priv.gc.ca.
Write to admin@dates.care and we will respond within 30 days. We may ask you to confirm your identity first.
10. Cookies and similar technologies
We use only what the service needs to function: a session cookie or local storage entry that keeps you signed in, and a preference store for settings such as theme. We do not use advertising cookies and we do not run third-party ad trackers. Clearing your browser storage signs you out.
11. Changes to this policy
If we change this policy we will update the date at the top and, where the change is significant, tell you in the app or by email at least 21 days before it takes effect.
12. Contact us
Chief Privacy Officer
DATES CARE (BIN 1001737281)
22 Metropolitan Road, Suite 1175a
Scarborough, Ontario M1R 2T6
Canada
Email: admin@dates.care
Support: admin@dates.care
Telephone: +1 209 348 6842