Skip to content
EN

Language

Français English Español Deutsch Italiano
Get the app

Privacy policy

Version 1.0, published on

This policy explains what data Dualove collects, why, who it is shared with and what your rights are. It applies to the app (Android, iOS) and to the website dualove.app.

In short

  • Your phone number or email is only used to sign you in and is never displayed.
  • Your exact location is never recorded: it is randomly offset, and the distances shown are rounded to the nearest kilometer.
  • No selling of data, no data brokers.
  • A message or a bio is only translated when you tap "Translate", and only that text is sent to the provider.
  • You can export or delete your data from the app.

1. Controller

The data controller is Yannis Catounaud, sole trader under French law (micro-entreprise), registered with the French National Business Register under SIREN 821 821 345, the publisher of Dualove. For any question about your data: hello@dualove.app or +33 6 95 33 99 84.

2. The data we process

To create and secure your account

  • Your phone number or email address, with the country code, and, if you use them, the technical identifier and the email passed on by Apple or Google.
  • One-time login codes, stored only in hashed form and valid for 5 minutes.
  • Your sessions and devices: hashed login tokens, device model and operating system, app version, language, time zone, push notification token, IP address at login.

Your profile

  • Your first name, your date of birth (only your age is displayed), your gender, the people you want to meet, the age range and the search radius.
  • Your photos, up to six, plus the derived versions needed to display them (cropped, resized, blurred, loading thumbnail).
  • Your bio and its language, the languages you speak, the app language.

Your location

  • With your permission, your device's GPS location; otherwise the city you choose, looked up through a places service.
  • The stored location is randomly offset by a few hundred meters, once and for all per account: your exact coordinates are never stored. Other people see a distance rounded to the nearest kilometer (or mile) and the name of your city.

Your activity

  • The face-off: the profiles shown to you, your picks, your likes (and the face-offs you revisited), your matches and the people you block.
  • Your messages: content, date, read status, plus translation requests (text and target language).
  • Reports you make and reports about you: reason, description and, attached automatically, the last 30 messages of the conversation, kept in a separate snapshot.
  • Your consent log (terms, privacy, community rules, precise location, usage analytics), with the date, IP address and device.
  • Your exchanges with support and your appeals.

Dualove Plus

  • The transaction and subscription identifiers passed on by the App Store or Google Play, the plan you subscribed to, its status and its dates. We never receive your payment details: they stay with the store.

Technical data

  • Server logs: IP address, request, request identifier, app version, errors. They are used for security and for diagnosing outages.
  • Anti-abuse counters (number of codes requested, messages sent, reports filed) and the log of actions taken by our moderation team.
  • Aggregated usage analytics, only if you have opted in under "Privacy and data".

3. Why, and on what legal basis

  • Performance of the contract: creating your account, showing you profiles, running matches and messaging, providing Dualove Plus, answering support requests.
  • Your consent: precise location, usage analytics, sending your data export to a verified email address. You can withdraw it at any time in the settings, without affecting past processing.
  • Our legitimate interest: securing the service, preventing fraud and abuse, moderating content and behavior, improving the app, enforcing our rights.
  • Our legal obligations: consumer law, the EU Digital Services Act, responding to requests from authorities, keeping accounting records of transactions.
  • No decision with legal effects on you is made in a fully automated way: sanctions are decided by a person. The order of profiles in the face-off depends on proximity, on each person's preferences and on the profiles already seen, not on any deeper profiling.

4. Who sees what

  • Other people see: your first name, your age, the rounded distance and your city, your photos, your bio (and its translation if they ask for one), the languages you speak and your gender. When you like someone, your profile may appear in their "They liked you" list.
  • No one sees your phone number, your email, your date of birth or your exact location.

5. Who we share your data with

We rely on processors that handle data on our behalf, under contract and on our instructions:

  • Sending login SMS: Twilio (United States).
  • Sending emails: Mailjet (France).
  • City and place search: HERE (Netherlands).
  • Push notifications: Firebase Cloud Messaging (Google) and Apple Push Notification service.
  • Sign in with Apple or Google: Apple, Google.
  • Subscriptions: Apple App Store, Google Play.
  • On-demand translation: Anthropic (United States). Only the text to translate and the target language are sent to them, never your identity or your profile.
  • Hosting and storage of data and photos: OVH SAS (France), servers located in the European Union.

We may also disclose data to authorities that request it in the manner provided for by law, and, if Dualove were taken over, to a successor that takes on our commitments, in which case you would be informed. We never sell or rent your data.

6. Transfers outside the European Union

Some processors are based in the United States. These transfers rely on the European Commission's standard contractual clauses, or on the EU-US Data Privacy Framework where the processor is certified under it, and are limited to what is strictly necessary.

The other way round, if you sign up from Canada or the United States, your data is hosted in the European Union: it is stored outside your province or state, under the protection of European law.

7. How long

  • Your account data is kept for as long as your account exists.
  • When you delete your account, it becomes invisible immediately and you have 30 days to cancel by logging back in. After that, your photos, messages, likes and matches are erased and your account is anonymized.
  • Kept after deletion, separately and only for as long as needed: the snapshots attached to reports and the history of sanctions (moderation, legal obligations), and the references of Dualove Plus transactions (accounting obligations).
  • Login codes expire after 5 minutes; a session lasts 180 days at most; technical logs are kept for as long as security requires, then erased.
  • An account found to belong to a minor is deleted immediately, with nothing kept.

8. Security

Connections are encrypted (TLS). Login codes and tokens are stored only in hashed form; access tokens are signed and short-lived; your location is offset before it is stored; rate limits protect against abuse; photos are stored outside the web root and served through signed links; access to data is restricted to the people who need it, and every moderation action is logged. No system is infallible: if you find a vulnerability, write to us.

9. Your rights

  • You can access your data, rectify it, erase it, restrict its processing, object to processing based on our legitimate interest, receive your data in a machine-readable format and withdraw consent at any time.
  • From the app: edit your profile, change your consents, request your data export (sent within 48 hours to your verified email) or delete your account, under "Privacy and data".
  • By email: hello@dualove.app. We may ask you to confirm your identity, and we reply within one month.
  • You can lodge a complaint with the data protection authority of your country, in France the CNIL.
  • If you live in the United States, depending on the law of your state you have the right to know what data we process about you, to obtain a copy of it, to have it corrected or deleted, and not to be discriminated against for exercising those rights. We do not sell your data and do not share it for targeted advertising. Information revealing your sexual orientation is sensitive data: it is processed only to provide the service you request. In California, those rights are the ones set out by the CCPA/CPRA, and you may appoint an authorised agent to exercise them on your behalf.
  • If you live in Canada, the Personal Information Protection and Electronic Documents Act applies and you can contact the Office of the Privacy Commissioner of Canada. In Quebec, Law 25 applies: the person responsible for the protection of personal information is the publisher, Yannis Catounaud, reachable at hello@dualove.app, and the competent authority is the Commission d'accès à l'information du Québec.
  • If you live in Switzerland, the Federal Act on Data Protection applies and you can contact the Federal Data Protection and Information Commissioner.
  • If you live in the United Kingdom, you have the same rights under the UK GDPR and can lodge a complaint with the ICO.

10. Minors

Dualove is for people aged 18 and over only. We delete any account belonging to a minor; if you spot one, report it.

11. Website and cookies

The website dualove.app uses only one functional cookie, which remembers your language, and no trackers or ads. The app embeds no advertising SDK and never reads an advertising identifier (Apple IDFA, Android advertising ID); notifications and location access go through the system permissions, which you can revoke at any time.

12. Changes

We may update this policy. Significant changes are announced in the app; the version and date appear at the top of the document.

13. Contact

To exercise your rights or ask a question: hello@dualove.app, +33 6 95 33 99 84, or the help section in the app's settings. The legal notice on the website carries the publisher's full identity.