Legal & privacy

Privacy Policy

This policy explains what information PallyMatch collects, why we use it, how it is protected, and the choices available to you.

1. Scope and operator

This Privacy Policy applies to the PallyMatch Android application, its supporting Firebase services, its public policy pages, and its support and moderation operations (collectively, the “Service”). “PallyMatch,” “we,” “us,” and “our” refer to the operator of the Service.

2. Information we collect

3. How we use information

• Authenticate accounts and maintain account security.
• Create profiles, apply matching preferences, establish chats, and show account status.
• Verify Google Play purchases, administer free trials and time-limited passes, and address refunds or revoked purchases.
• Enable blocking, receive reports, preserve relevant evidence, investigate abuse, apply moderation decisions, and handle appeals.
• Detect fraud, automated abuse, security threats, and violations of our Terms or Child Safety Standards.
• Diagnose crashes, maintain reliability, provide support, and improve the Service.
• Comply with legal obligations and protect users, the public, PallyMatch, and our service providers.

Depending on your location and the activity involved, our legal basis may include performing our agreement with you, your consent, compliance with law, and our legitimate interests in operating, securing, and improving the Service.

4. How information is shared

We do not sell your personal information. We may disclose or make information available:

• To other users: limited profile information, availability, and messages you send are shown to matched chat participants.
• To service providers: Google and Firebase provide authentication, database, serverless processing, app security, crash diagnostics, hosting, and Google Play billing services.
• For safety and legal reasons: when reasonably necessary to investigate abuse, protect a person from harm, enforce our rules, respond to valid legal process, or satisfy a legal reporting duty.
• During an organizational change: if the Service is reorganized, transferred, financed, or acquired, subject to applicable law and appropriate safeguards.

Google’s handling of information is also governed by its applicable terms and Privacy Policy.

5. Retention and deletion

• Account, profile, chat, and pass records are generally kept while your account is active or as needed to provide the Service.
• Deleting a chat removes it from your view. It may remain available to the other participant and on our systems until no participant retains it, the chat is otherwise cleaned up, or an account deletion removes it.
• When you use the in-app account-deletion control, our backend deletes your Firebase Authentication account, profile, public profile, chats in which you participated, purchases recorded against your PallyMatch account, and reports you submitted.
• Reports made about you, preserved report evidence, moderation decisions, appeal history, security records, and audit records may be retained when reasonably necessary for user safety, fraud and repeat-abuse prevention, dispute resolution, or legal compliance. We limit access to authorized personnel.
• Google Play may retain transaction records under Google’s own policies and legal obligations; deleting PallyMatch does not delete your Google account or Google Play history.
• Backup and logging systems may retain limited copies for a short period before routine deletion or overwrite.

See the Account & Data Deletion page for the exact deletion process.

6. Your choices and rights

Depending on the law where you live, you may have rights to access, correct, export, delete, restrict, or object to certain processing of your information, and to withdraw consent where processing relies on consent.

• Update profile details and matching preferences in the app.
• Use Export Data from the app menu to create a JSON export of available profile and chat metadata.
• Block or report another user from the chat experience.
• Delete your account from the app or submit a request using our deletion page.

We may need to verify your identity before fulfilling a request. Some rights are subject to legal limitations.

7. Security

We use encrypted network transport, Firebase Authentication, Firestore access rules, App Check and Play Integrity signals, server-side validation for sensitive actions, least-privilege moderator access, and moderation audit records. No system can guarantee absolute security, so you should also protect your device and credentials and avoid sharing sensitive personal information in chats.

8. International processing

Our providers may process information in countries other than where you live. Where required, we rely on contractual, technical, and organizational safeguards for international transfers.

9. Children

PallyMatch is not directed to children and does not knowingly permit anyone under 18 to use the Service. If we learn that an underage person is using PallyMatch, we may suspend the account, investigate, and delete associated information subject to safety and legal retention needs. See our Child Safety Standards.

10. Changes to this policy

We may update this policy as the Service, our practices, or legal requirements change. We will revise the date above and provide additional notice when a material change requires it. Changes apply prospectively unless law permits otherwise.

11. Contact us