Privacy Notice

01Data and purposes

We process account, phone, profile, verified photo, age, declared gender, match preference, language, country/city, approximate location signals, device/install identifiers, App Check signals, notification tokens, usage analytics, catalog preferences, offers, chats, media, reports, support, and purchase entitlement records.

• Purposes include account security, discovery filtering, predefined campaign-eligibility assessment where permitted, 24-hour offers, permanent chats, translation/transcription, billing entitlement, notifications, fraud prevention, moderation, support, analytics, legal compliance, and deletion.
• Match preference may be corrected during onboarding and is locked after profile verification. It is deleted through the account-deletion workflow, subject only to the limited anti-abuse retention described below.
• The store processes payment-card details; 72 receives product, transaction, status, territory, and entitlement information rather than full card data.
• For billing and token delivery, 72 processes account-linked product and transaction identifiers, store environment/status, period dates, provider-reported usage totals, reservations, balance and usage-ledger entries, refunds and verification/reconciliation records. These support delivery, fraud prevention, disputes and accounting; the store handles full payment-card details.

02Liveness and face-consistency

With separate explicit consent, camera captures are used to confirm a live person and maintain consistency between the verified person and the primary profile photo.

• Liveness video and non-reference capture frames are retained for up to 30 days for restricted automated checks, randomized human moderation/quality review, fraud prevention, and outcome appeals; they are then deleted unless a documented safety or legal hold applies.
• Up to four strongest verified reference frames are retained while the account remains active so later primary-photo changes can be checked; they are deleted through account deletion unless a legal hold applies.
• Evidence from a rejected or failed final decision is also scheduled for deletion after 30 days unless a documented safety or legal hold applies.
• OpenAI API temporary input files created for analysis are deleted promptly after the response cleanup path runs.

03AI model training

72 does not use your profile, verification, message, voice, photo, video, support, or analytics data to train a general-purpose AI model for 72 or a third party.

• Data may be processed to produce the requested verification, moderation, transcription, translation, or assistant result and to secure the service.
• If a future training purpose is proposed, it will not begin without a new notice and the separate legal basis or explicit consent required by applicable law.

04Retention

Retention is limited by purpose, product state, safety, and legal duties.

• Pending offers normally expire after 24 hours.
• Chats and media remain while needed for the active service or until deleted, blocked, expired, moderated, or the account is deleted, subject to report evidence and legal holds.
• Moderation evidence is normally retained for the disclosed review period; account-deletion anti-abuse identifiers may be retained in restricted form for up to 90 days before final purge.
• Push tokens and active-session records are removed or invalidated when no longer needed.
• Restricted purchase, token-ledger and refund records may need to remain after account deletion for transaction reconciliation, fraud/chargeback disputes and applicable accounting or legal retention duties. This is separate from the 90-day account-deletion anti-abuse identifier schedule; access is restricted and records are retained only for the relevant purpose or legal obligation.

05Your rights and controls

Depending on your location, you may request access, correction, deletion, restriction, objection, portability, withdrawal of consent, or review of an automated outcome.

• Withdrawing a consent does not make earlier lawful processing unlawful, but features that require that processing may stop.
• You can control catalog visibility, notification preferences, blocking, reporting, subscription management, and in-app account deletion.
• Contact support@ai72app.com and include your account phone country code only through the secure support flow when possible.

06Age and eligibility data

72 is only for users who are at least 18. Age, birthdate, age range, eligibility declarations, account history, and safety signals may be processed for age gating, safety review, preference limits, and introduction constraints.

• Suspected underage use may lead to review, restriction, suspension, closure, or preservation of safety records.
• These checks do not provide legal identity verification or a guaranteed age/identity outcome.

07Account and authentication data

72 may process account data for account creation, sessions, security, support, and legal records.

• Firebase/Auth UID, phone number, auth provider, auth state, account creation date, login/session state, and account status.
• Push tokens, device tokens, app install/device/session identifiers, and limited device records.
• Legal consent records, accepted policy version, consent timestamp, account deletion requests, support, appeal, and recovery records.

08Verification, liveness, and profile consistency

72 may process live camera capture, verification video, verification frames, liveness challenge, real-camera, anti-replay, screen-replay risk signals, face-continuity, audio/video sync, selfie/profile photo consistency, declared name/gender/city consistency, verification metadata, verification result, and primary profile photo moderation/verification result.

• These checks are for risk reduction, profile consistency, liveness, anti-abuse, and safety signals.
• They are not official identity verification, KYC, guaranteed age/gender/location verification, or a guarantee that a user is safe.
• In some jurisdictions, face geometry or face data may be biometric or sensitive data and may be handled under applicable law, consent, and jurisdiction-specific retention/transfer rules.

09Translation, transcription

72 may process original text, translated text, detected language, selected display language, voice-message audio, transcripts, and original/translation toggle state. These features may use AI, speech, translation, cloud, or safety providers. AI outputs, translations, transcripts, may be inaccurate.

10Reports, blocks, moderation, and safety

72 may process profile reports, message reports, media reports, blocks, unblocks, moderation decisions, media quarantine/disable/remove states, safety review queue records, appeal/support communications, abuse-prevention records, fake-report detection, ban-evasion, and legal request records. The reporting user identity is generally not shared with the reported user.

11Notification and chat action data

72 may process push tokens, device records, notification preview settings, message preview settings, notification delivery metadata, notification actions, chat action metadata, and privacy-first notification preferences.

12Payment and subscriptions

72 may process start/end timestamps for 7-day or 365-day app-level access, the promotion campaign identifier, promotion-disclosure acknowledgement, verification and campaign eligibility, promotion eligibility based on declared gender or account type, subscription status, entitlement state, weekly/monthly plan type, App Store / Google Play transaction identifiers, receipt metadata, renewal/cancellation/refund/status metadata, fraud/dispute/support records, and tax/accounting records. The app-granted 7-day and 365-day periods are not Apple or Google subscription free trials; no card is required and no subscription starts. Full card data is generally handled by Apple or Google and may not be directly visible to 72.

13Account deletion and user rights

Users may start deletion in-app or through support. Depending on applicable law, users may have access, correction, deletion, portability, objection, restriction, consent withdrawal, automated processing challenge, or human review rights. Deletion may not immediately remove security records, reports, legal compliance records, transaction/tax records, abuse-prevention records, appeals, moderation history, or backup copies.

14Children and minors

72 is not for users under 18. Suspected underage use or content may lead to restriction, suspension, closure, preservation, review, or reporting where appropriate.

15Security

72 uses reasonable technical and organizational safeguards. No system is perfectly secure. Users should protect their devices, phone numbers, accounts, verification codes, and personal information.

16Website preferences and optional measurement

The website remembers your selected language and analytics choice in local browser storage. If you allow optional website analytics, a page-view event can include the page path and title, language preferences, referring website hostname, device category, screen and viewport size, time zone and request time. The reporting service derives hashed identifiers from request IP and browser information for daily visitor counts and rate limiting, and may use approximate country or city information supplied by the hosting infrastructure. These are pseudonymous signals, not a promise of irreversible anonymity. The event does not contain app chat content, passwords or payment-card details. Optional page-view measurement is not sent until you allow it; you can change that choice through the website’s privacy settings. Refusing does not block access to the website or legal documents. Necessary hosting and security request records remain separate. Beta application information is submitted only when you send the form.

17Profile, discovery and communication data

Your name, age, declared gender, match preference, country, city, language, biography, approved profile photo and published gallery items support your profile and discovery. Visibility is restricted by eligibility, blocking, privacy, subscription and gallery-access rules. A friend ID is a shareable search identifier; changing it stops future searches using the old ID but does not erase existing chats or material another person already saw. Chats may contain original messages, translations, audio, transcripts, video subtitles, images, videos, timestamps, reactions and delivery/read state. These data are processed to provide those features and, where necessary, support, security and report review. The app does not make a promise of end-to-end encryption.

18Website beta applications and contact choices

A beta application may collect the fields you submit, such as name, email, device platform, country, city, language, declared gender, optional contact details or notes, and records of age, privacy and contact choices. It does not create an app account. We use the application to organise testing, assess eligibility, avoid duplicate or abusive applications and communicate about the requested test access. Optional marketing is separate from a requested operational reply. You can request correction, withdrawal from the beta list or deletion through support@ai72app.com. Do not enter unnecessary sensitive information.

19Optional usage analytics and essential operation

Usage analytics is optional in the app and can be changed in Privacy settings. Choosing not to participate does not prevent normal use of the app. Essential authentication, security, delivery, purchase verification, support and abuse-prevention records still need to be processed to operate those features; these are not a substitute for optional analytics consent. Website language preferences may be stored locally to remember your selection. Sending a beta application transmits the information you choose to submit. This notice itself does not obtain consent or enable analytics.

20Purposes, legal bases and your requests

Account operation, messaging and purchases require information to provide the service you request. Security and abuse prevention, responding to reports, resolving disputes and meeting legal duties may require limited additional processing. We seek consent where it is required, including the separate choices shown for sensitive verification processing, relevant international AI/cloud processing and optional analytics or marketing. The applicable legal basis depends on the purpose and local law; consent is not a blanket waiver of your rights. You can request information about a specific use, access, correction, deletion, portability, restriction, objection, consent withdrawal or human review through support@ai72app.com. We may verify ownership before disclosing or deleting data. You may also complain to your competent privacy authority.

21Providers, international processing and limits

Firebase/Google Cloud provides account, storage and infrastructure services; OpenAI supports the AI features described in the AI disclosure; Apple and Google provide relevant store, purchase and push services. Only data needed for a particular feature should be sent to its provider. Providers may process data outside your country under the applicable contractual, technical and legal safeguards. Asking for an AI feature can involve sending its text, audio, image or verification input to the relevant provider. A general acceptance of this notice does not replace any separate consent or transfer safeguard required by law.

22Deletion, retention and copies

Retention follows the specific periods and exceptions stated in this notice and the Account Deletion policy. Removing an item from a screen is not necessarily the same as erasing every related record. Account deletion restricts ordinary profile use and starts deletion work; restricted security, promotion-abuse, purchase, dispute and legal records may remain for their stated purposes. Routine verification video retention is 30 days, while the limited verification frames described above are retained during the account lifetime, subject to deletion and applicable exceptions. Some anti-abuse identifiers have a 90-day retention period. Financial records and active legal or safety evidence follow their separate requirements. Backups and local device caches are not an immediate visibility or access guarantee.

23Other people and external recording

Only share content you are comfortable sharing with the intended recipient. Access controls and blurred previews reduce exposure but cannot prevent every screenshot, screen recording, second-device recording or misuse after someone sees content. Do not copy, publish, expose or use another person’s private content without the rights and permission to do so. Report suspected misuse through the app or support.