Privacy Policy
Last updated: 9 July 2026
This policy explains what data Sweaty ("we", "us") collects, why, and what your rights are. It applies to the Sweaty mobile app and this website. Contact for anything privacy-related: [email protected].
1. Data we collect
Account and profile. When you sign up (with Apple, Google, or email) we collect your email address, name, date of birth (to verify you are 18+), gender, the photos you upload, your bio, your sports and interests, and your matching preferences.
Location. With your permission, the app uses your device location to show activities and potential partners near you. Your approximate location is stored with your profile so others nearby can discover you. You can revoke location access in your device settings; discovery features will be limited without it.
Messages and interactions. Messages you send, matches, likes, blocks, and reports are stored so the Service can function and so we can act on safety reports.
Usage and diagnostics. We collect analytics events (screens viewed, features used) and crash reports to improve the app.
Purchases. If you buy a subscription, the purchase is processed by Apple. We receive subscription status (not your payment details) via our subscription-management provider.
2. How we use your data
- To operate the Service: matching, discovery on the map, chat;
- To keep the community safe: automated screening of uploaded photos and of text in bios and messages for objectionable content, and processing of user reports and blocks;
- To improve the app through aggregated analytics and crash diagnostics;
- To communicate with you about your account.
We do not sell your personal data, and we do not use it for third-party advertising.
3. Service providers
We use a small number of processors to run the Service. They process data on our behalf and under our instructions:
- Supabase — authentication and database hosting;
- Cloudflare — photo storage and content delivery;
- Replicate — automated image-safety screening of uploaded photos;
- PostHog — product analytics;
- Sentry — crash reporting;
- RevenueCat — subscription management;
- Google Maps — map display;
- Apple / Google — sign-in and payments.
4. Data retention and deletion
We keep your data for as long as your account exists. You can delete your account at any time in the app (Profile → Settings → Delete Account). Deletion removes your authentication record, profile, matches, messages, and photos from our systems. Some records (e.g. safety reports) may be retained where required to comply with legal obligations or to enforce bans.
5. Your rights
If you are in the European Economic Area, the GDPR gives you the right to access, correct, delete, restrict, or export your personal data, and to object to certain processing. Most of these you can exercise directly in the app (edit profile, delete account); for anything else, email [email protected]. You also have the right to lodge a complaint with your local supervisory authority (in Portugal, the CNPD).
6. Legal bases
We process your data to perform our contract with you (operating the Service), to pursue our legitimate interests (safety screening, analytics, crash diagnostics), to comply with legal obligations, and — for location — with your consent, which you may withdraw at any time.
7. Children
Sweaty is for adults. We do not knowingly collect data from anyone under 18; accounts found to belong to minors are deleted.
8. Security
Data is encrypted in transit, access to production systems is restricted, and photos and personal data are stored with reputable cloud providers. No system is perfectly secure; if a breach affecting your data occurs, we will notify you as required by law.
9. Changes
We may update this policy. If changes are material we will notify you in the app. The "Last updated" date above always reflects the current version.