Legal · Austria / EU
Privacy Policy for Austria and the EU
This policy applies if you use DateNight from Austria or elsewhere in the European Union. It explains how we process your personal data under the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG). Deutsche Fassung.
Last updated:
The short version. We process what's needed to run a dating app: your profile, the dates you post and join, and your messages. Other members only see your profile, never your email or exact location. We don't sell your data or show ads. You can delete your account at any time, and you have the right to access, correct and export your data and to complain to the Austrian Data Protection Authority.
1. Controller
Robert Riopel, Toronto, Ontario, Canada. Email: rriopel.design@gmail.com. See also our Impressum.
2. Data we process, why, and on what legal basis
| Data | Purpose | Legal basis |
|---|---|---|
| Account data from Google: email, Google name and picture, Google account ID | Creating and securing your account; sending you service emails | Contract (Art. 6(1)(b) GDPR) |
| Profile: name, date of birth, gender, city, 3–6 photos, height; optional bio, education, interests, prompts, lifestyle details (drinking, smoking, kids) and social handles | Showing your profile to other members; age check | Contract (Art. 6(1)(b)) |
| Who you're interested in, and, if you choose to add them, ethnicity, religion, political views and drug use | Showing your profile and applying the matching and filters members choose. These are special categories of data (they can reveal sexual orientation, racial or ethnic origin, religious or political beliefs, or health). | Your explicit consent (Art. 9(2)(a) and Art. 6(1)(a)), given when you create your profile. You can withdraw it at any time by removing the information or deleting your account. |
| Approximate location: your city and coordinates rounded to about 1 km | Showing dates near you | Contract (Art. 6(1)(b)) |
| Activity: dates you post, requests, approvals, chat messages, filters, email settings, whether you've installed the app | Providing the service | Contract (Art. 6(1)(b)) |
| Reports, moderation decisions | Keeping members safe and enforcing our Terms | Legitimate interests (Art. 6(1)(f)): a safe community |
| Consent records (when you confirmed your age and accepted the Terms) | Showing that consent was given | Legal obligation (Art. 6(1)(c), Art. 7(1)) |
| Waitlist: email; optional name and location | Telling you when DateNight launches near you | Consent (Art. 6(1)(a)); withdraw any time via the unsubscribe link |
| Technical data: server logs (IP address, browser, time); anonymous, cookieless usage statistics | Security, troubleshooting, understanding overall usage | Legitimate interests (Art. 6(1)(f)) |
Providing profile data is necessary to use DateNight; without it we can't provide the service. Optional fields are genuinely optional. We don't use your data for advertising and don't make decisions with legal or similarly significant effects based solely on automated processing (Art. 22 GDPR). Matching only filters which dates you're shown.
3. Who can see your data
- Other signed-in members see the dates you post. Your profile is shown only to members your upcoming dates are shown to (you're each looking for someone like the other, and the date is within 100 km of them) and to people you've shared a date with; hosts and approved guests see who is attending; chat participants see messages. Your email, exact location, filters and settings are never shown to anyone.
- Processors acting on our instructions under data processing agreements (Art. 28 GDPR):
- Supabase Pte. Ltd. (Singapore): database, authentication and photo storage. Data is stored in Canada (Montréal).
- Vercel Inc.: hosting and anonymous analytics (USA, global edge network).
- Resend Inc.: sending emails (USA).
- Google: Sign in with Google and Google Maps Platform for city and venue search. When you search for a place or detect your location, the request and your IP address are sent to Google.
- Authorities, where we are legally required to disclose data.
4. International transfers
DateNight is operated from Canada, and your data is stored in Canada. The European Commission has decided that Canada provides an adequate level of protection for commercial organisations (Art. 45 GDPR). Our database provider, Supabase, contracts through Singapore under the European Commission's Standard Contractual Clauses (Art. 46 GDPR), while storing your data in Canada. Transfers to providers in the United States are based on the EU–U.S. Data Privacy Framework where the provider is certified, and otherwise on the Standard Contractual Clauses. You can ask us for details.
5. How long we keep data
- Account and profile: until you delete your account. Deletion removes your profile, photos, the dates you host (with their requests and chats), your requests and your messages from our live systems immediately; backup copies are overwritten within 30 days.
- Past dates: deleted 90 days after they take place, together with their requests and chat, unless they've been reported.
- Reports: while the accounts involved exist.
- Waitlist: until we've told you about a launch near you, or you unsubscribe.
- Server logs: a short period set by our hosting providers, typically 30 days or less.
6. Your rights
Under the GDPR you have the right to:
- access your data (Art. 15) and receive a copy in a portable format (Art. 20);
- have inaccurate data corrected (Art. 16);
- have your data erased (Art. 17): use Profile → Settings → Delete Account, or ask us;
- restrict processing (Art. 18);
- object to processing based on legitimate interests (Art. 21);
- withdraw consent at any time (Art. 7(3)), without affecting processing before the withdrawal.
Email rriopel.design@gmail.com. We'll respond within one month. You also have the right to lodge a complaint with a supervisory authority. In Austria that is the Datenschutzbehörde, Barichgasse 40–42, 1030 Wien, dsb.gv.at.
7. Cookies and device storage
We use only what's strictly necessary to keep you signed in and remember small preferences, and analytics that use no cookies and don't identify you. No consent banner is needed for this. Details are in our Cookie Policy.
8. Security
Data is encrypted in transit. Dates are only available to signed-in members, profiles and photos only to the members described in section 3; private details are only readable by you and our systems. If a data breach is likely to result in a risk to you, we'll notify the supervisory authority and, where required, you (Art. 33–34 GDPR).
9. Age
DateNight is only for adults 18 and over.
10. Changes
We'll tell you in the app or by email before significant changes take effect.