This policy explains what personal data JosMeet collects when you use the JosMeet mobile app and the josmeet.com website, why we collect it, who we share it with, and the rights you have. JosMeet is a dating app for adults aged 18 and over.
1. Who we are
JosMeet is operated by its individual creator, @catiakyen, Jos, Nigeria ("JosMeet", "we", "us"). JosMeet is an individual's project, not a company. Its creator is the data controller for the personal data described in this policy, under the Nigeria Data Protection Act 2023 (NDPA) and, for users in the European Economic Area, the GDPR.
Privacy questions and requests: [email protected]. [PLACEHOLDER: name a privacy contact or data protection officer if one is required]
2. Adults only (18+)
JosMeet is only for people aged 18 or over. We ask for your date of birth when you sign up and we do not let anyone under 18 create an account. If we learn that an account belongs to someone under 18, we close it and delete its data. If you believe a minor is using JosMeet, please report the profile in the app or contact us.
3. The data we collect
Data you give us
- Account data: you sign in to JosMeet with Apple or Google. We receive your name and email address from them (if you use Sign in with Apple, this may be a private relay email address that Apple creates for you) and an account identifier. We do not collect your phone number, and we never see your Apple or Google password.
- Date of birth: to check that you are 18 or over and to show your age on your profile. Other users see your age, not your full date of birth.
- Profile data: your name or nickname, photos, and other details you choose to add, such as [PLACEHOLDER: final list of profile fields, e.g. gender, who you want to meet, bio, interests].
- Photos: the pictures you upload to your profile. Your profile needs at least 2 photos showing your face. Photos are checked for nudity on your device (see "Automated checks" below).
- Verification selfie (optional): if you ask for a "verified" badge, you take a selfie copying a random pose we show you. JosMeet staff look at it, next to your profile photos, to decide whether to grant the badge. We use it only for verification. It is not shown to other users. We keep it for [PLACEHOLDER: retention period for verification selfies].
- Messages: the messages you send to your matches.
- Safety reports and blocks: the reports you file (reason and any note) and the people you block.
- Support requests: what you send us when you contact support.
Data created when you use JosMeet
- Activity: your Vibe and Not for me choices, matches, and your swipe balance.
- Purchase records: when you buy a swipe pack, we receive the product you bought, the date, the store (Apple or Google), a transaction ID and the purchase status (for example, refunded). We do not receive your card or bank details; Apple and Google handle payment.
- Device and technical data: a push notification token (so we can tell you about new matches and messages), device model, operating system and app version, IP address, and technical logs needed to run and secure the service. [PLACEHOLDER: add crash reporting / analytics data if Firebase Crashlytics or Analytics are used]
- Location: [PLACEHOLDER: describe here only if location is used for discovery, including precision and whether distance is shown]
Automated checks
Before a photo is added to your profile, the app uses Google ML Kit to check it for nudity. This check runs on your device: the photo is not sent to Google for this check. To keep the service safe, we also limit what new accounts can do (for example, fewer swipes on the first day) and flag suspicious behaviour, such as copied or repeated messages or a very high number of rapid passes. [PLACEHOLDER: what happens when a photo or behaviour is flagged (blocked automatically, or reviewed by JosMeet staff)]
Sensitive information
Using a dating app can reveal information about your sex life or sexual orientation, for example through the gender you say you want to meet. Data protection law (the NDPA in Nigeria, the GDPR in the EEA) treats this as special (sensitive) data. We only process it to provide the matching service you ask for, with your explicit consent, which you give when you add it to your profile. You can change or remove it at any time, or delete your account.
4. How we use your data, and our legal bases
Under the Nigeria Data Protection Act 2023 (NDPA), and the GDPR for users in the EEA, we need a lawful basis for each use of your data. The table shows which one applies.
| Purpose | Data used | Legal basis |
|---|---|---|
| Create and run your account; show your profile; swiping, matching and chat | Account, date of birth, profile, photos, activity, messages | Contract (to provide the service you signed up for); explicit consent for sensitive data |
| Check you are 18 or over | Date of birth | Legal obligation and legitimate interests (protecting minors) |
| Sell swipe packs, credit your balance, handle refunds | Purchase records, account ID | Contract; legal obligation (accounting and tax records) |
| Send push notifications about matches and messages | Push token | Consent (given in your phone's notification permission; you can turn it off at any time) |
| Verify your profile (optional badge) | Verification selfie, profile photos | Consent (you choose to request the badge) |
| Keep people safe: review reports, enforce our Terms, prevent fraud, spam and abuse | Profile, photos, messages that are reported, reports, blocks, account identifier, activity flags, technical data | Legitimate interests (a safe service for everyone); legal obligation where applicable |
| Answer support requests | Support requests, account data | Contract; legitimate interests |
| Keep the service working and secure | Technical data | Legitimate interests |
We do not sell your personal data. We do not show ads in the app [PLACEHOLDER: confirm, ads decision OQ-28], and we do not use your data for decisions that have legal or similarly significant effects on you based solely on automated processing.
5. Who can see your data
Other JosMeet users
Signed-in users can see your profile (name or nickname, age, photos and the details you add). Only you and your match can read your conversation. People you block can no longer see your profile or message you.
Service providers (processors)
We use these companies to run JosMeet. They process data on our behalf and under contract:
- Google Firebase (Google LLC / Google Cloud): sign-in (Firebase Authentication), database (Cloud Firestore), photo storage (Cloud Storage), server functions (Cloud Functions) and push notifications (Firebase Cloud Messaging). [PLACEHOLDER: add Analytics / Crashlytics if used]
- RevenueCat, Inc.: manages in-app purchases and receipts so we can credit your swipes.
- Apple (App Store and Apple Push Notification service) and Google (Google Play and Google Play Billing): distribute the app, take payment for swipe packs, and deliver notifications. Apple and Google also process your data under their own privacy policies as independent controllers when you use their stores.
- Cloudflare, Inc.: hosts the josmeet.com website and protects it against attacks.
- [PLACEHOLDER: email / support tool provider, if any]
Others
We may share data if the law requires it, to respond to valid requests from authorities, to protect someone's safety, or as part of a sale or restructuring of the business (in which case this policy continues to apply).
6. Where your data is stored
JosMeet's database is hosted by Google Cloud in the United States (multi-region "nam5"). Our other providers may also process data in the United States or other countries. This means your data leaves Nigeria and the European Economic Area.
When we transfer data from the EEA, we rely on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework where the provider is certified, or on the Commission's Standard Contractual Clauses. For transfers from Nigeria, we rely on the safeguards allowed by the Nigeria Data Protection Act 2023, such as contractual clauses. [PLACEHOLDER: legal review to confirm transfer mechanisms per provider]
7. How long we keep your data
- While your account is open: we keep your account, profile, photos, matches and messages so the service works.
- When you delete your account: we delete your account, profile, photos, matches, swipes and swipe balance from our live systems within [PLACEHOLDER: e.g. 30 days]. Copies in backups are overwritten within [PLACEHOLDER: backup period].
- Messages: [PLACEHOLDER: what happens to messages you sent that are also in your match's conversation (OQ-14)]
- Safety records: reports are kept for [PLACEHOLDER: period] after the account closes.
- Banned users: if we ban an account, we keep its Apple or Google account identifier so the person cannot simply sign up again. We keep it for [PLACEHOLDER: retention period for banned account identifiers].
- Purchase records: kept for as long as accounting and tax law requires, [PLACEHOLDER: e.g. up to 10 years in France / 6 years in Nigeria; confirm].
- Support requests: kept for [PLACEHOLDER: period] after the request is closed.
See Delete your account for how to delete your account with or without the app.
8. Your rights
Under the Nigeria Data Protection Act 2023 (NDPA), and the GDPR if you are in the EEA, you have rights over your personal data. We honour the following for all users:
- Access: get a copy of your data.
- Correction: fix inaccurate data. You can edit most of your profile in the app.
- Deletion: delete your account and data (in the app, or by email).
- Portability: receive the data you gave us in a common, machine-readable format.
- Objection and restriction: object to processing based on legitimate interests, or ask us to limit it.
- Withdraw consent: for example, turn off notifications or remove sensitive profile details, at any time.
If you are in the European Economic Area (including France)
These rights come from the EU General Data Protection Regulation (GDPR). You can complain to your local data protection authority. In France this is the CNIL (Commission Nationale de l'Informatique et des Libertés, cnil.fr).
If you are in Nigeria
These rights come from the Nigeria Data Protection Act 2023 (NDPA). You can complain to the Nigeria Data Protection Commission (NDPC, ndpc.gov.ng).
How to exercise your rights
Email [email protected] from the email address on your account. We may ask you to confirm your identity. We reply within one month, and tell you if we need more time (up to two more months for complex requests, as the law allows).
9. Security
Data is encrypted in transit between the app and our servers. Access to data is restricted by security rules, for example only the two people in a conversation can read it. No system is perfectly secure, so please keep your Apple or Google account secure and tell us if you notice anything suspicious.
10. The josmeet.com website
The website does not use cookies, advertising, or analytics trackers. Our host, Cloudflare, processes your IP address and basic request data to deliver the pages and protect the site from attacks. The fonts are served from our own site, so no data is sent to Google Fonts. [PLACEHOLDER: update this section if analytics or a "notify me" sign-up form are added (W-2)]
11. Changes to this policy
We will update this policy as JosMeet changes. If a change is significant, we will tell you in the app before it takes effect. The date at the top shows the latest version.
12. Contact
JosMeet is operated by its individual creator, @catiakyen, Jos, Nigeria. Email: [email protected].