flammePrivacy Policy
Flamme is a dating app. To show you profiles, connect you with people and keep the community safe, we process personal data. Some of it is sensitive: your sexual orientation and love life can be inferred from it. This policy explains which data we process, why, for how long, who receives it, and how to exercise your rights.
It applies to the Flamme mobile app and its companion website. The French version prevails in case of discrepancy.
1. Who is responsible for your data?
The data controller is [TO COMPLETE: company name], a [legal form] with a share capital of €[amount], registered with the [city] Trade and Companies Register under number [SIREN], headquartered at [address] ("Flamme", "we").
For any question about your data: [TO COMPLETE: privacy@domain], or by post at the address above.
[TO COMPLETE: Data Protection Officer contact details, if one is appointed.]
2. What data do we process?
Data you give us
| Category | Examples | Visible to other members? |
|---|---|---|
| Identity and sign-in | email address, Apple or Google identifier, phone number (verified once by SMS) | No |
| Profile | first name, date of birth (only your age is shown), gender, photos, bio, job, company, school, city, languages, interests, prompt answers, lifestyle, relationship goal, Instagram handle | Yes |
| Orientation and preferences | sexual orientation, genders you want to see, age range, maximum distance | Orientation: only if you choose to show it. Preferences: no |
| Identity verification | a selfie copying a requested pose | No, only the moderation team sees it |
| Messages | texts, photos, GIFs, voice notes, reactions | Only the person you matched with |
| Reports | the reason and details you give when you report someone | No |
Data generated by your use of the app
- Location: your phone's position, if you allow it, to compute distances. We store it rounded to about 1 km. Other members only see a distance in kilometres, never your position. If you use Passport, the city you pick replaces your position for discovery.
- Activity: likes, nopes, Super Likes, matches, blocks, last active date, calls made and received (type, time, duration). The sound and image of calls are never recorded.
- Recommendation score: an indicator computed from the reactions your profile receives, used to order profiles (see section 5).
- Purchases: subscription and in-app purchases (product, date, status). Payment is handled by Apple or Google: we never see your payment details.
- Device: push notification token, platform (iOS or Android) and language. By default, notifications show no name and no message content ("You have a new message"). You can turn previews on in Settings > Notifications.
- Technical data: connection logs (IP address, date, request), kept by our host for security.
Sensitive data
Your sexual orientation, gender and the people you want to meet fall under Article 9 GDPR. We only process them because you explicitly consent when signing up. You can withdraw this consent at any time by deleting your account; this does not affect the lawfulness of processing carried out before. You also choose whether your orientation is shown on your profile.
3. Why, and on what legal basis?
| Purpose | Legal basis (GDPR) |
|---|---|
| Create and manage your account, sign you in | Performance of the contract (Terms), Art. 6(1)(b) |
| Verify your phone number to limit fake accounts | Legitimate interest (community safety), Art. 6(1)(f) |
| Show your profile, suggest profiles, handle likes, matches and messages | Performance of the contract, Art. 6(1)(b); explicit consent for orientation, Art. 9(2)(a) |
| Use your location for distances | Consent (phone permission), Art. 6(1)(a) |
| Audio and video calls | Performance of the contract; both people must turn calls on |
| Selfie verification ("verified" badge) | Consent, Art. 6(1)(a). Optional |
| Automatic photo moderation (profile and conversations; a conversation photo flagged as sensitive is blurred for the recipient) | Legitimate interest (safety, protection of minors, illegal content), Art. 6(1)(f) |
| Handling reports and sanctions (suspension, ban), and telling the person concerned why | Legitimate interest (safety) and legal obligations (EU Digital Services Act), Art. 6(1)(c) and (f) |
| Subscriptions and purchases | Performance of the contract; accounting obligations, Art. 6(1)(c) |
| Push notifications | Consent (phone permission) |
| Preventing fraud and abuse (rate limits, bot detection) | Legitimate interest, Art. 6(1)(f) |
| Preventing a banned member from signing up again (keyed fingerprint of their phone number) | Legitimate interest (community safety), Art. 6(1)(f) |
| Answering your requests and the authorities | Legal obligation, Art. 6(1)(c) |
We do not sell your data, run no targeted advertising, and use no advertising trackers in the app or on the website.
4. Who can see or receive your data?
Other members see your public profile: first name, age, photos, bio, the information you filled in, and an approximate distance. Only people you matched with can message or call you.
The Flamme team: only the people in charge of moderation and support have access, and only as far as their task requires (for example, reading a reported conversation or comparing a selfie with your photos). This access is logged.
Our processors, who act on our instructions under an agreement compliant with Article 28 GDPR:
| Provider | Role | Data location |
|---|---|---|
| Supabase Inc. | Database hosting, authentication, storage of photos and media | European Union [TO COMPLETE: region, e.g. Frankfurt] |
| LiveKit | Routing of audio and video calls (no recording) | [TO COMPLETE: free LiveKit Cloud does not pin a region (nearest server, EU for members in Europe); an EU region is only guaranteed on paid plans or when self-hosting] |
| Sightengine | Automatic photo analysis (nudity, violence, minors) | European Union |
| Twilio | Sending the SMS phone verification code | United States |
| Expo (650 Industries) | Routing push notifications | United States |
| Apple, Google | Sign in with Apple or Google, push notifications, in-app purchase payments | United States |
| RevenueCat | Subscription and in-app purchase management | United States |
| Giphy | GIF search: your search terms and IP address are sent directly to Giphy when you use this feature | United States |
| Brevo (Sendinblue) | Sending emails (sign-in codes, moderation decisions) | European Union |
Transfers outside the EU: when data is processed in the United States, the transfer relies on the EU–US Data Privacy Framework where the provider is certified, and otherwise on the European Commission's Standard Contractual Clauses. Write to us to get a copy.
Authorities: we may disclose data when the law requires it (court order) or to protect someone's safety.
5. How are profiles suggested to you?
Profiles are first filtered by your criteria (genders, age, distance) and theirs: you only see people who want to see profiles like yours. Profiles you already saw, blocked, suspended or unfinished profiles are excluded.
They are then ranked by:
- the profile's recent activity;
- its recommendation score, which goes up when the profile receives likes;
- the number of photos and whether it has a bio;
- proximity;
- whether the person already liked you;
- the use of a Boost, which temporarily puts a profile at the top;
- a small random factor, to vary the profiles.
This ranking is automatic, but it has no legal effect on you: you are free to like anyone. Sanctions (suspension, ban) are always decided by a person. A photo may be rejected automatically by image analysis; you can challenge that by writing to us.
6. How long do we keep your data?
| Data | Retention |
|---|---|
| Account and profile | As long as your account exists. Deleted immediately when you delete your account |
| Inactive account | Deleted automatically after 2 years without sign-in |
| Photos rejected by moderation | 7 days, to allow a challenge |
| Verification selfie | Until the decision, then 30 days |
| Conversations | As long as the match exists. After an unmatch, 90 days (so a report can still be handled), then deleted |
| Unsent conversation media | 24 hours |
| Purchase history | 10 years (accounting obligations), no longer linked to your profile once your account is deleted |
| Fingerprint of a banned account's phone number | 3 years after the ban, even if the account is deleted. It is a fingerprint computed with a secret key, from which the number cannot be recovered. Deleted if the ban is lifted |
| Reports you made | Kept without your identity after your account is deleted, to follow up on sanctions |
| Technical logs | [TO COMPLETE: per the host's plan, at most 12 months] |
Deleting your account erases your profile, photos, selfies, likes, matches, the related conversations, and the media you sent.
7. Your rights
You have the rights of access, rectification, erasure, restriction, objection and portability, the right to withdraw your consent at any time, and the right to give instructions about your data after your death.
Directly in the app:
- edit your profile: Profile > Edit;
- download your data (portability): Settings > Download my data;
- delete your account: Settings > Delete my account;
- withdraw consent to location, notifications or camera: your phone's settings.
For any other right, write to [TO COMPLETE: privacy@domain]. We answer within one month and may ask you to prove your identity.
If you think your rights are not respected, you can lodge a complaint with the CNIL (www.cnil.fr), the French data protection authority, or with the authority of your country of residence.
8. Security
Data is encrypted in transit (TLS) and stored by a certified host. Database access is partitioned: each member can only read what concerns them. Photos and media are stored privately and served through temporary links. Moderation team access is limited and logged. Flamme's code is open source, so anyone can check what the app does.
No system is perfectly safe. Never share sensitive information (address, payment details, passwords) with someone you met on Flamme.
9. Minors
Flamme is for adults only (18 and over). Sign-up is refused if the date of birth shows an age under 18. If you think a minor is using Flamme, report the profile (reason "Underage"): it will be reviewed as a priority and deleted if needed.
10. Cookies
Neither the app nor the website uses advertising or analytics cookies. The app only stores on your phone what it needs to work (your sign-in session and your preferences); this does not require your consent.
11. Changes
We may change this policy. If the change is significant, we will notify you in the app before it takes effect. The date of the last update is at the top of this document.