Privacy Policy

1. Introduction

Your privacy matters to us, genuinely. DateFlo is a platform built around personal moments, and we take the responsibility of handling your information seriously. This Privacy Policy is here to be transparent about what we collect, why we collect it, and what control you have over it. It applies to the DateFlo website and the DateFlo app.

By using DateFlo, you're agreeing to the practices described here. If something doesn't sit right, we'd rather you reach out and ask than walk away confused. This policy works alongside our Terms of Service.

2. What We Collect

2.1 What You Tell Us

When you sign up and use DateFlo, you share certain things with us. Here's what that includes:

• Account basics: your name and email address.
• Your partner's details: your partner's first name, and any preferences you choose to share about them, so we can personalize your date plans. You're providing this on your partner's behalf.
• Details you enter before your partner joins: you may enter details about your partner, such as their name, birthday, food and drink preferences, allergies, diet and similar preferences, before your partner has joined DateFlo. When your partner joins your account, they see what you entered and can change any of it.
• Partner requests: when someone asks to join your account as your partner, we show you the name they gave us, the email address they signed in with and how they signed in (Apple, Google or an emailed code), so you can tell whether it is really your partner. The email address typed into a request is kept only as a one way hash, never in readable form, and a request never sends an email to an address that has no DateFlo account.
• Relationship details: things like your relationship status and anniversary, if you choose to share them.
• Location: your city and neighborhood preferences, entered by you, not tracked automatically. The app also uses your precise location while it is open, described in Sections 2.4 and 7.
• Food preferences: dietary restrictions, cuisine favorites, allergies, and anything else that helps us plan around what you love to eat.
• Activity preferences: the kind of vibes you're into, your budget range, and any special requests.
• Date history and feedback: your past plans, ratings, and comments.
• Photos: a profile picture, if you add one.
• Messages: anything you send us via email or through the platform.

2.2 Payment Info

Date plans are bought inside the iPhone app, through Apple's in-app purchase system. Apple processes the payment, and we never see or store your card number, CVV, billing address, or other payment details. All we receive from Apple is:

• Whether the purchase went through or not.
• What you bought and how many date plans it holds.
• The amount, date, and currency of the transaction.
• Whether Apple later refunded it.

2.3 What We Pick Up Automatically

When you use DateFlo, some technical info gets collected in the background, nothing unusual, just standard web and app data:

• Device info: your browser or device, operating system, device type, and screen size.
• Log data: your IP address, when you visited, which pages or screens you viewed, and where you came from.
• Usage patterns: which features you use, what plans you look at, and how long your sessions last.

2.4 The Sensitive Parts, Named Plainly

Some of what you tell us gets extra protection under privacy laws in California, Colorado, Connecticut, Washington and other states. We would rather name it than bury it:

• Precise location: used only while the app is open, never in the background, to show spots near you, how far each one is, and your own pin on the map. When you open Explore, the app sends your position with the request so we can show you the closest city we cover, and we do not keep it. Two things do reach us and are kept. First, on the day of a night you have locked in, the app sends your current position so we can work out when to tell you to leave. We keep a single row for you, replaced each time rather than added to, so it is where you are now and not a history of where you have been. Nothing reads it except the reminder that works out your departure time, it is never shown to your partner, and it is never returned to the app. Second, on that night, you can choose to let your partner see you on the night's map. It is off until you switch it on, it works only while the map is open, and we keep a single row for you, replaced each time. Your partner stops seeing it 15 minutes after your last update, and switching it off deletes it. You can turn location off in your phone's settings and the rest of the app keeps working.
• Allergies and dietary needs: you give these so we can plan a night that is safe for you to eat. Some laws treat this as health information. We use it for exactly one thing, checking every food recommendation against it, and we never share it with anyone except the venue when a reservation needs it.
• Accessibility needs: given so a night is actually reachable for you, used only for that.
• Date of birth: collected once, to confirm you are 18 or older and to know when your birthday is worth planning around.

We do not use any of this to build a profile of you beyond planning your dates, we do not sell it, and we do not share it for advertising. Where the law requires your consent before we collect sensitive information, giving it to us in the request form is that consent, and you can withdraw it by removing it from your preferences or by emailing us.

If you are in Washington State, please also read our Consumer Health Data Privacy Policy, which covers this in the specific terms that state requires.

2.5 Your Calendar, If You Connect It

Connecting a calendar is optional. If you connect Google Calendar or your iPhone calendar, we read your upcoming events, including their titles and times, to do two things: warn you when a date you are planning collides with something already on your schedule, and warn your partner that a time is taken without ever telling them what it is. That is all we use it for. Calendar data is processed automatically. No person at DateFlo reads your calendar, and your partner never sees your event titles or details, only that a time is busy. We keep a rolling window of roughly one week of upcoming events and delete entries on a schedule once they pass. For Google we hold an encrypted access token and the address of the connected account, and our access is read only, so we can never add, change, or delete anything on your Google Calendar. On iPhone, when you choose to add a date to your calendar, we write only to a calendar DateFlo creates, and we never change or delete events you created. Disconnecting in Settings deletes your calendar data and our access.

3. How We Use It

We use your information to personalize your plans and your experience, to run and improve the service, and to keep it safe. We don't sell your information, and we never will. Here's the detail:

3.1 Making Your Dates Better

• To make planning easier around your schedule: if you connect a calendar, we use your upcoming events to flag conflicts while you plan and to suggest places to eat or go when an event on your calendar ends near a mealtime you have told us about.
• Building personalized date plans around your preferences, location, and relationship.
• Learning from your feedback and history to make future recommendations even sharper.
• Keeping your dashboard filled with your plans, favorites, and memories.
• Using your names to make the experience feel personal, because it is.

3.2 Running the Service

• Processing purchases and keeping track of the date plans you have.
• Booking reservations on your behalf when your plan includes them. When we book a table for you, we call and book the first time you lock a night in. If you unlock that night, we remove what we put in your calendar and, where a table was already confirmed, we call the venue and cancel it. Booking that date again is then yours to do.
• Sending you plan deliveries, confirmations, and important account updates.
• Responding when you reach out to us with questions or needs.
• Verifying your identity and keeping your account secure.

You can manage your notification preferences in your account settings. We'll always send the essentials, like plan deliveries and key account updates, but the optional messages are yours to turn on or off.

3.3 Improving DateFlo

• Understanding how people use the platform so we can make it better.
• Seeing which date plans and venues resonate most.
• Finding and fixing bugs or performance issues.
• Building new features that actually matter to our users.

3.4 Legal and Safety

• Complying with laws and regulations when required.
• Enforcing our Terms and protecting against fraud or abuse.
• Keeping DateFlo safe for everyone.

4. How Your Plans Are Made (Automated Processing and AI)

We want to be clear about how a plan comes together.

When you tell us about a night you want, we take all of it to heart: your preferences, where you are, what you can and cannot eat, and what the occasion means to you. To hold all of that in mind at once and build a night around it, rather than hand you something off a shelf, we use large language models. They are the same kind of technology behind the AI assistants you may already use, and they are a large part of why a plan can feel like it was made for you, because it was.

That information goes to an AI provider working on our behalf, under confidentiality, for one purpose only, which is building your plan. It is never used to train anyone else's products, and it is never sold. Not now, and not later.

Your nights should get better the longer you are with us, and they do, because we pay attention. Every plan you rate, every stop you save, every preference you change, we read again the next time we build for you. That is where the improvement comes from, your own history shaping your own plans, and never your information being fed into a model.

Every plan then passes automated quality and safety checks and is reviewed by our team before it is sent to you. Plans typically arrive within 24 hours.

If you would prefer not to have your information processed this way, that's your choice, but we'd not be able to build your plan, since generating it is the core of what DateFlo does. You can contact us at any time with questions about this processing at admin@dateflo.com.

4.1 About the Images You See

Some of the photographs shown on our Explore events and venue cards are AI generated. They are made from reference photographs taken at those real places, so they show you the room, the light and the feel of somewhere we actually send people, but they are illustrations rather than documentary photographs of a particular evening. Details can differ from what you find on the night. Menus, prices, hours and anything else we state in words are verified separately and are not taken from an image.

4.2 Google Workspace Data and AI

DateFlo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Calendar information we receive from Google is never sent to any artificial intelligence or machine learning service, and is never used to develop, train, or improve any generalized model, whether ours or anyone else's. It is read by our own software, on our own servers, for the purposes described in section 2.5, and for nothing else.

5. Who We Share With

5.1 We Don't Sell Your Data. Period.

We don't sell, rent, or trade your personal data to anyone, not for marketing, not for ads, not for any reason. We never have, and we never will.

5.2 The Service Providers That Help Us Run DateFlo

We work with a small number of trusted service providers that help us deliver the platform. They only get the data they need to do their job, they are bound by contract to keep it confidential, and they must protect it to the same standard described in this policy. The categories are:

• An AI processing provider, which processes your request details to help generate your plan, as described in Section 4.
• A cloud hosting and database provider, which stores your account, preferences, and date history on secure infrastructure and handles sign-in.
• An email delivery provider, which sends your plan deliveries and account notifications. It receives your email address and the content of the messages we send you.
• Apple, which processes every purchase made in the app under Apple's own terms and privacy policy. Your card details go to Apple, and we never see them.
• A mapping and directions provider, which powers the location features in your plans. Your city and venue details may be shared with it when we pull up maps or directions.
• Apple's push notification service, which delivers notifications to your iPhone. It receives your device token and the text of the notification itself.
• A hosting provider, which runs dateflo.com and our API. Standard request logs, including your IP address, are created as a by-product of serving you.

5.3 Restaurants and Venues

When your plan includes a reservation, we share what a venue needs to hold your table, typically the name on the reservation, the party size, and the date and time. We share only what is needed to make the booking, nothing about your preferences, history, or payment details.

5.4 Venue Recommendations Are Third Parties

DateFlo recommends restaurants, venues, events, and public places that we do not own, operate, inspect, or control. We verify details like hours, menus, and addresses at the time a plan is built, but businesses change their hours, close, relocate, sell out, or change their conditions without notice, and public places carry their own ordinary risks. DateFlo does not guarantee that any recommended venue or event will be open, available, safe, accessible, or as described at the time of your visit, and we are not responsible for the acts, omissions, conditions, food, service, or premises of any third party venue or event, or for any loss, injury, cost, or disappointment arising from visiting one. Confirm anything that is essential to your night directly with the venue, and use your own judgment about the places you visit. To the fullest extent permitted by law, DateFlo, its owner, and its operators disclaim liability for third party venues, events, and locations included in any plan or recommendation.

5.5 When the Law Requires It

We may share your information if legally required to, for example by court order or subpoena, or if we genuinely believe it is necessary to comply with the law, protect DateFlo's rights or property, prevent fraud or illegal activity, or keep our users and the public safe.

5.6 If DateFlo Changes Hands

If DateFlo is ever acquired, merges with another company, or sells part of its assets, your data may be part of that transition. If that happens, we'll let you know by email and give you a clear picture of what it means for your information.

6. How Long We Keep Your Data

6.1 While You Are With Us

• Active accounts: we keep your data for as long as your account is active.
• Payment records: transaction records are kept as long as tax and financial regulations require, usually around 7 years.
• Usage data: kept in anonymized, aggregate form for analytics, so it cannot be tied back to you.
• Support conversations: we may keep these for up to 3 years after the issue is resolved, for quality purposes.
• Date plans: plans you created remain stored in our systems for as long as your account exists, including plans you choose to remove from your own app view and plans made with a former partner. Removing a plan from your app hides it from your view; it does not erase the underlying record. Both people a plan was made with keep access to it in their own accounts, and each of them can independently remove it from their own view.
• Partner changes: if a partner leaves the couple or is removed, or one of you switches the account to Single, the plans you made together remain available to both of you as described above. Each of you keeps your own preferences; the preferences you entered for each other stay with the person they describe. Shared preference data from a former pairing is archived and no longer used for planning once a new partner joins.

6.2 If You Want Out

You can request account deletion at any time, from within the DateFlo app, through your dashboard settings, or by emailing admin@dateflo.com. Here's what happens when you do:

• We'll delete or anonymize your personal data within 30 days.
• Your name, email, partner details, preferences, photos, and date history will be permanently removed.
• Anonymized data that cannot identify you may remain for improving the service.
• Payment records stay on file as required by law, but they will no longer be linked to you.
• We'll email you to confirm once everything has been deleted.

7. Using the DateFlo App

The DateFlo app has a few features that use data in ways the website does not. Here's what to know:

• Precise location: the app asks for your location only while it is open, and never reads it in the background. It uses it to show spots near you, how far each one is, and your own pin on the map, and, on the day of a night you have locked in, for the departure reminder and the partner map described in Section 2.4. You can turn it off in your device settings, and the rest of the app keeps working.
• Notifications: with your permission, the app sends push notifications for things like a plan being ready or a change to your night. Ideas and reminders, such as an anniversary coming up or a spot you saved, are sent only if you say yes when the app asks. You can manage all of these in your device settings and in the app.
• Sign in with Apple: if you sign in with Apple, we receive the name and email you choose to share, including Apple's private relay email if you use it.
• In-app purchases: date plans bought inside the app are processed by Apple under Apple's terms and privacy policy. We receive confirmation of the purchase, not your payment card details.
• Refund requests: if you ask Apple for a refund of a purchase made in the app, we tell Apple how many of the date plans in that purchase you have already used, so Apple can refund the ones you have not.

8. Cookies

8.1 What We Use

Less than the heading suggests. This site sets no cookies at all. What we do use is your browser's own local storage, on your device:

• Your sign in token: kept in local storage so you stay signed in between visits. Without it you would sign in on every page.
• A first party counter: a random identifier, tied to no name or address, used only to count how many people reach each step of the sign up. It is never shared with anyone and never leaves our own systems.
• Small conveniences: things like which tab you had open, so a page opens where you left it.

8.2 What We Do Not Use

• No advertising or marketing cookies.
• No third-party tracking pixels or retargeting.
• No cross-site tracking.
• No targeted or behavioral ads. None.

8.3 Your Control

Clearing your browser's site data for dateflo.com removes all of it, including your sign in token, which signs you out. Your browser's cookie controls will not show anything for this site, because there is nothing there to show.

8.4 Global Privacy Control

If your browser or an extension sends a Global Privacy Control signal, we honor it as a valid opt-out request under the laws of every state that recognizes it. In practice there is nothing for it to switch off, because we do not sell personal information or share it for targeted advertising, but we treat the signal as an instruction rather than ignoring it.

9. Children's Privacy

DateFlo is for adults 18 and older. We don't knowingly collect data from anyone under 18, and if we find out we have, we'll delete it and close the account immediately.

If you believe a minor has created an account on DateFlo, please let us know right away at admin@dateflo.com.

10. Your Privacy Rights

California's CCPA and CPRA spell these out, and we extend the same rights to everyone, wherever you live. Here is what you can do:

10.1 Right to Know

You can ask us to tell you exactly what personal information we've collected about you over the past 12 months, including what categories, where it came from, why we have it, and who we've shared it with.

10.2 Right to Delete

You can ask us to delete your personal information. There are a few legal exceptions (like data we need to finish a transaction), but we'll honor your request wherever we can.

10.3 Right to Correct

If something we have on file is wrong, you can ask us to fix it.

10.4 Right to Opt-Out of Sale

We don't sell your data or share it for targeted advertising, so there's nothing to opt out of. But feel free to contact us to confirm anytime.

10.5 No Discrimination

Exercising your privacy rights will never affect the quality or availability of our service. We won't treat you any differently for it.

10.6 How to Make a Request

Email us at admin@dateflo.com with the subject line "California Privacy Request." We'll verify your identity and respond within 45 days.

10.7 What We Collect (CCPA Categories)

For full transparency, here are the CCPA-defined categories of personal information we collect:

• Identifiers: name, email address, IP address.
• Personal info (Cal. Civ. Code 1798.80(e)): name, city.
• Protected classifications: relationship status (voluntarily provided).
• Commercial info: purchase and transaction history.
• Internet activity: how you use the dashboard and which features you interact with.
• Inferences: date preferences and recommendations based on the above.
• Sensitive personal information: precise geolocation, used as described in Section 2.4, and the health-adjacent details described there.

10.8 Right to Limit Use of Sensitive Information

California lets you tell us to limit how we use sensitive personal information. We already limit it as far as the service allows: precise location is used only as described in Section 2.4, and what we keep is a single position per person, replaced rather than added to, never a history, and allergy and accessibility details are used only to plan a night that works for you. We never use either to infer anything about you or to advertise. Email us if you want any of it removed from your file.

10.9 If You Are Not in California

Nineteen other states now have comprehensive privacy laws, and Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island and Florida residents have their own versions of the rights above. Rather than treat them differently, we give everyone the same rights wherever they live:

• Know what we hold about you, and get a copy of it in a portable format. You can do this yourself, right now, from Settings in the app under "Download my data."
• Correct anything that is wrong.
• Delete your account and your data, from inside the app, without asking us.
• Opt out of sale, targeted advertising, and profiling that has legal or similarly significant effects. We do none of these.
• Appeal, if we ever refuse a request. Reply to our refusal and a person will review it. If we still say no, your state attorney general can hear the complaint.

We answer within 45 days, and we will not charge you or degrade your service for asking.

11. International Users

11.1 Where Your Data Lives

DateFlo operates from the United States. If you're using us from another country, your data may be transferred to and stored in the US or wherever our service providers operate. Data protection laws in those places may be different from where you live.

11.2 For Users in the EEA and UK

If you're in the European Economic Area or the UK, here's the legal basis for how we handle your data:

• Contract performance: we need to process your data to deliver the service you signed up for.
• Legitimate interests: things like improving the platform, running analytics, and preventing fraud, where our needs don't override your rights.
• Consent: for any processing where we've specifically asked for your permission.
• Legal obligation: when the law requires us to process certain data.

You also have additional rights under GDPR, including data portability, the right to restrict processing, and the right to file a complaint with your local supervisory authority. Reach out to admin@dateflo.com to exercise any of these.

11.3 For Users in Canada

Your data is handled in line with PIPEDA. You can access, correct, or withdraw consent for your personal information at any time.

12. How We Protect Your Data

We take security seriously. Here's what we have put in place:

• Encryption in transit: everything between your device and our servers is encrypted with TLS or SSL.
• Encryption at rest: your data is encrypted in our database, even when it's just sitting there.
• Secure authentication: accounts are protected with secure password hashing and session management.
• Access controls: only authorized team members can access personal data, and only when they need to.
• Payments: every purchase is processed by Apple, so your card details never reach us.
• Ongoing reviews: we regularly check and update our security practices.

No system is completely bulletproof, that's just the reality of the internet. But we're committed to staying vigilant and acting fast if something ever goes wrong. If a data breach affects your information, we'll notify you and the relevant authorities as required by law.

13. Do Not Track

Some browsers send "Do Not Track" signals. There's no industry standard for how to respond to them, so we don't formally act on them. That said, we don't do cross-site tracking or targeted advertising anyway, so the result is the same either way.

14. Links to Other Sites

Your date plans may include links to restaurants, venues, maps, and other third-party websites. Those sites have their own privacy policies, and we're not responsible for how they handle your data. We'd encourage you to give their policies a quick look when you visit.

15. Updates to This Policy

We may update this Privacy Policy as things evolve. When we make meaningful changes:

• We'll update the date at the top of this page.
• We tell you about meaningful changes by email or an in-app notice, and the date at the top of this page shows the version you are reading.
• For big changes, we may also put a notice in the app itself.

If the updated policy doesn't work for you, you're free to stop using DateFlo and request account deletion.

16. Questions? Talk to Us.

If you have any questions about this policy or your data, we're here for you.

• Email: admin@dateflo.com
• Website: https://dateflo.com

For privacy-related questions, put "Privacy Inquiry" in the subject line. We'll get back to you within 2 business days, and any data request is answered within 45 days, the same deadline given in sections 10 and 11. Once we accept a deletion request, the data itself is gone within 30 days.