Updated on
Privacy policy
What drafft knows about you, why, who it’s shared with, how long it’s kept and how you stay in control. This policy covers the drafft app and the getdrafft.com website.
In short
- We collect what drafft needs to work: your account, your profile, an approximate area, your chats and your sessions.
- Your exact location never leaves your phone: drafft only receives an area rounded to about 1 km. Your date of birth, phone number and email address are never shown to other members.
- No ads, no selling of data, no advertising trackers. The app’s usage statistics are only collected with your consent. The website sets no cookies and counts its visits without identifying anyone.
- Your data is stored in the European Union. A few providers are based in the United States: they’re listed below, with the safeguards that cover these transfers.
- You can export your data or delete your account at any time from the app.
Contact
To exercise your rights or reach the data protection officer, write to support@getdrafft.com.
The data we collect
What you give us
- Account: email address, password (stored as a hash that can’t be read back) and mobile number, verified by SMS.
- Profile: first name, date of birth, gender, the genders you want to see, neighbourhood or city, bio, goal, sports and how many times a week, answers to profile prompts, icebreaker, photos, voice intro, app language, notification settings and search filters (distance, age, sports).
- Lifestyle, if you choose to fill it in: daily rhythm, diet, drinking, smoking. This step is optional.
- Interactions: likes and super likes, with their note if any, profiles you pass, matches, messages (text, photos, videos, voice messages, reactions), session invites (sport, title if any, times, reply).
- Safety: the reports and blocks you make, and a verification selfie, only if your account is put on hold for a check.
- Help: the messages you send to the help center, their topic, the email address to reply to and a few details that help us help you (app version, the screen you wrote from, your account status, the purchase concerned).
What’s collected when you use drafft
- Approximate area: with your permission, the app reads your location at reduced accuracy and rounds it on your phone to a grid of about 1 km before sending it. Your exact location never leaves your phone. To find the name of your city, this rounded area may be sent to your phone system’s maps service.
- Device and connection: model, system and app versions, language, time zone, install identifier, how many times you opened the app and when first and last, IP address and the country it indicates, a device integrity token provided by the phone’s system (Apple DeviceCheck on iPhone, Google Play Integrity on Android) and a notification token. The time zone is also used to send session reminders at the right time.
- Activity: when you were last active, purchases and credits (boosts, super likes, drafft tempo). We never receive your card details: payments go through your phone’s app store.
- Diagnostics: if the app crashes or hits an error, a technical report (device, versions, how the error happened, a pseudonymous account identifier) is sent so we can fix it. It contains neither your messages nor your photos.
- Usage statistics, only if you agree: the screens you open and the actions you take in the app (for example opening a profile or proposing a session), linked to a pseudonymous identifier. No message content, no photos and no screen recording.
What your phone’s permissions are used for
Location is needed to show you profiles near you. Camera, microphone and photo library let you add photos, videos, voice messages or your voice intro, and take a verification selfie if we ask for one. The calendar is only used when you add a session: drafft creates the event, updates it or removes it if the session changes, and doesn’t use your other events. You can withdraw each permission in your phone’s settings. drafft doesn’t ask for your contacts, your health data or permission to track you.
Sensitive data
Your gender and the genders you want to see can reveal your sexual orientation. Your lifestyle answers (drinking, smoking, diet) can reveal information about your health or beliefs. Using a dating app is itself personal information.
This data is processed on the basis of your explicit consent, which you give by ticking the box for it, at sign-up or when the app asks, so drafft can show you profiles and show yours. You can withdraw it at any time: edit or clear your lifestyle answers in your profile, or delete your account (You › Privacy & data › Sensitive data consent). Your gender and the genders you want to see are needed for drafft to work: to stop their processing, delete your account.
Why we use it
| To | Data | Legal basis |
|---|---|---|
| Create your account, log you in, verify your number | Account, device | Performance of the contract (the terms of use) |
| Show your profile and show you profiles near you | Profile, approximate area, activity | Performance of the contract, and your consent for sensitive data |
| Run likes, matches, chats and sessions | Interactions | Performance of the contract |
| Send you notifications (likes, matches, messages, sessions and reminders) and emails about your account (codes, moderation decisions, help center replies) | Account, device, notification token | Performance of the contract; push notifications also depend on your permission in your phone’s settings |
| Check photos automatically, handle reports, stop banned accounts from coming back, fight fraud and spam | Profile, interactions, safety, device and connection | Legitimate interest: the safety of members and of drafft |
| Manage drafft tempo, boosts and super likes | Purchases | Performance of the contract |
| Answer your help requests | Help, account | Performance of the contract and legitimate interest |
| Spot and fix crashes and errors | Diagnostics, device | Legitimate interest: an app that works |
| Understand how drafft is used, to improve it | Usage statistics | Your consent, which you can withdraw at any time |
| Meet our legal obligations (accounting, requests from authorities, duties of online platforms) | Purchases, reports, data an authority asks for | Legal obligation |
We don’t use your data for advertising, and we don’t sell or rent it.
Automated processing
- Profiles shown in Discover: only profiles active in the last 30 days, with at least one approved photo, that match your filters (distance, age, sports) and whose preferred genders match both ways appear. People who sent you a super like come first, then boosted profiles near you, then everyone else, ranked by distance, recent activity, shared sports and whether someone has already liked you. This ranking has no legal effect and doesn’t deny you any service.
- Photo checks: every profile photo is analysed automatically to detect nudity, violence or other prohibited content. It can be rejected automatically; unclear cases wait for a person to review them. If you think a rejection is a mistake, you can ask for a second look: a person does it. Photos and videos sent in a chat are analysed after they’re sent; anything unclear is flagged to moderation, with no automatic decision. Voice messages and the voice intro aren’t analysed.
- Banned accounts coming back: encrypted fingerprints of the email, phone number and login identifiers, and a device integrity marker, help spot a banned account that returns. The marker is a flag that Apple (DeviceCheck) or Google (Play Integrity, Device recall) keeps for your phone, not for your account. It only says that an account was closed or put on hold on this phone, and it survives reinstalling the app. It is removed when the ban or hold ends. A banned identity can’t create a new account. A match can automatically put the account on hold while it’s reviewed or a verification selfie is checked. A ban is always decided by a person.
- Phone number: we check the type of number; numbers that aren’t mobile numbers are refused.
What other members see
Other members see your profile: first name, age, neighbourhood or city, bio, goal, the lifestyle answers you gave, sports and how many times a week, prompt answers, icebreaker, approved photos and voice intro. In Discover, they also see the distance between you, rounded to the kilometre (1 km minimum). The people you match with also see when you’re online, your messages and your session invites. drafft tempo members see who liked them, with the note if any; others only see a blurred preview.
Never shown: your date of birth, email address, phone number and the genders you want to see. When you pause your profile, it no longer appears in Discover or in likes; your matches, chats and sessions stay.
Access by the drafft team
Only the team members who need it can access data, with rights limited to their role (help, moderation, administration). To handle a report, a help request, a risk to members’ safety or a request from an authority, moderation can read a match’s chat, delete a message that breaks the rules and view a verification selfie. Every access and every action is logged.
Providers
drafft uses these providers, which process data on its behalf and under its instructions:
| Provider | Role | Where |
|---|---|---|
| Supabase | Database, accounts, server functions, verification selfies | Ireland (EU) |
| Cloudflare | Storing and delivering photos, videos and voice messages (profiles and chats), website hosting, bot protection on the help form (which receives your IP address), secure team access | Stored in the EU; delivered through a global network |
| Stream | Chat text messages and message notifications | EU |
| Amazon Web Services (Rekognition) | Automatic checks of profile photos and of photos and videos sent in chats | Ireland (EU) |
| Twilio | Sending verification texts; checking the type of number | Ireland (EU) for texts; United States for the number check |
| Resend | Sending emails (codes, moderation decisions, help center replies) | United States |
| RevenueCat | Tracking subscriptions and purchases | United States |
| Sentry (Functional Software, Inc.) | Crash and error reports | Germany (EU) |
| PostHog | Usage statistics of the app, only with your consent; visit statistics of the website, without cookies | Germany (EU) |
| Apple or Google, depending on your phone | Payments through their app store, push notifications, device integrity checks (Apple DeviceCheck, Google Play Integrity), the name of your city from your rounded area | United States |
Your data may also be disclosed to a judicial or administrative authority when the law requires it, or to protect someone in danger.
Transfers outside the European Union
When a provider processes data outside the European Union, the transfer is covered by the EU–US Data Privacy Framework if the provider is certified under it, and otherwise by the European Commission’s standard contractual clauses. You can get a copy of these safeguards by writing to support@getdrafft.com.
How long we keep it
| Data | How long |
|---|---|
| Account, profile, interactions | As long as your account exists. When you delete it, they’re erased immediately, except as listed below. |
| Profile photos added but not saved | Erased when you leave without saving, 7 days at most. |
| Backups | Up to 30 days, then erased. |
| IP addresses | 180 days after you last connected from that address. |
| Device integrity marker (kept by Apple or Google) | Removed when the ban or hold ends. It stays after the account is deleted. Google also erases it 3 years after it was last used. |
| Device information | 1 year after it was last used. |
| Log of texts sent (number, IP address) | 30 days. |
| Technical sending queues (notifications, emails) | 30 days at most. An erasure request that fails stays queued until it goes through. |
| Account that was on hold, banned or under an open report when deleted | Kept for members’ safety, then erased 1 year after the case is closed. |
| Chat after a match ends, with its photos, videos and voice messages | No longer visible to members, kept 1 year to handle a possible report, then erased. |
| Chat with a member who is on hold or banned | 1 year after the chat ends. |
| Verification selfie | Erased as soon as the check is over; if the account is banned, kept 6 months so the decision can be appealed. |
| Identity fingerprints of a deleted account (email, number, login identifiers) | 1 year, 3 years if the account was banned, to stop a return under another identity. |
| Reports | 1 year after they’re handled, without the reporter’s name if they deleted their account. |
| Moderation and team access log | 1 year, 3 years for anything about a banned account. |
| Purchases | 10 years, as accounting law requires, no longer linked to your account once it’s deleted. |
| Help requests | 3 years after the last exchange. |
| Crash and error reports | 90 days. |
| Usage statistics | 13 months at most, and erased if you withdraw your consent or delete your account. |
| Website visit statistics | 13 months at most. |
| Website technical logs | 7 days at most. |
Your rights
You have the right to access your data, correct it, erase it, restrict its processing, object to processing based on legitimate interest, receive it in a reusable format (portability) and withdraw your consent at any time. You can also set instructions for what happens to your data after your death.
- Export your data: You › Privacy & data › Export my data. You get one or more download links by email, usually within 24 hours, valid for 7 days.
- Delete your account: You › Delete account. Deletion is immediate. Without the app: delete your account.
- Edit your profile: at any time from the You tab. Your date of birth and gender can’t be changed after sign-up: write to us if there’s a mistake.
- Accept or refuse usage statistics: the app asks you, and you can change your mind at any time in You › Privacy & data. Refusing doesn’t change anything you can do in drafft.
- Anything else: write to support@getdrafft.com. We reply within one month at most. We may ask you to confirm your identity.
If you think your rights aren’t being respected, you can complain to the CNIL (Commission nationale de l’informatique et des libertés, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, cnil.fr) or to the data protection authority in your country.
Security
Traffic between you and the app or website is encrypted (HTTPS). Data is encrypted at rest by our hosting providers. Each member can only access what concerns them. Photos, videos and voice messages are private and served through temporary links, valid for about an hour. Photos you send are stripped of their location metadata. Team access is limited and logged. No measure is foolproof: if a data breach puts you at risk, we’ll tell you as the law requires.
Under 18
drafft is only for people aged 18 or over. Age is checked at sign-up and the date of birth can’t be changed afterwards. If you think someone under 18 is using drafft, report their profile: the team reviews the report and closes the account if the person is under 18.
Cookies and trackers
The getdrafft.com website sets no cookies and stores nothing in your browser. It counts its visits with PostHog, without identifying anyone: the page viewed, the site you came from, the campaign parameters of the link you followed, and your type of browser and device. To count visitors, PostHog uses a code made from your IP address and your browser, changed every day and never stored: nobody is followed from one day to the next, and your IP address isn’t kept. Your browser contacts no other site: the measurement passes through getdrafft.com, and its fonts are hosted on the site. It stays off if your browser sends Do Not Track or Global Privacy Control. Our host, Cloudflare, processes visitors’ IP addresses to deliver the pages and protect the site from attacks, and keeps them for 7 days at most in its technical logs.
The app uses no advertising trackers. Usage statistics (PostHog) are only switched on with your consent, and crash reports (Sentry) are only used to fix errors. The app keeps on your phone what it needs to work: your login, your profile, your matches, your sessions, the latest messages of each chat, a copy of photos already shown and, during sign-up, your answers so far.
Changes
This policy may change as drafft evolves. The date of the last update is at the top of the page. If there’s an important change, we’ll let you know in the app before it applies.