Privacy Policy

What we collect

• Account data: email address and password, or federated sign-in identifier when you sign in with Apple or Google (stored by AWS Cognito).
• Profile data you provide: name, birthdate, gender, height, denomination, city, optional bio, photos, and how you heard about Kingdom Singles.
• Event activity: registrations, check-ins, speed-dating round pairings, anonymous live activity responses, QR connections, and submitted connections.
• Messages you send to your connections.
• Reports, blocks, post-event host feedback, and optional marriage stories or account deletion feedback you submit.
• Payment metadata for self-sold ticket purchases, processed by Stripe, Inc. We store identifiers such as stripePaymentIntentId, stripeCheckoutSessionId, ticket amounts, and refund timestamps. Partner events, and platform events sold on Eventbrite, process payment on Eventbrite. We do not store card numbers, CVV codes, or bank account numbers.
• Device push tokens and your IANA timezone (if you enable notifications or Kingdom Tips). Push is delivered through Amazon SNS to Apple Push Notification service or Firebase Cloud Messaging. We store a hash of the token, not the raw device token as a public identifier.
• Camera and microphone, only while you are on a virtual video date. Video and audio are a live stream through Daily.co. We do not record or store the call. The camera is also used on your device to scan ticket and connection QR codes; those frames are not uploaded.
• City and venue text you type, sent to Mapbox to turn an address into coordinates. We do not collect GPS or precise device location.

How we use it

• To run the service: show events near you, issue tickets, pair rounds, and power chat.
• To keep the community safe: automated chat safety guardrails, moderation, report review, and enforcement.
• To communicate with you about your account, matches, Kingdom Tips you opt into, and events you joined.
• To collect self-sold ticket payments, handle refunds, and keep accounting records.

We do not sell your personal data. We do not show your birthdate to other members — only your age. Your email is never shared with other members.

What others see

Other members never see your last name, email, phone number, or birthdate. What they do see depends on the relationship:

• People at your event, including a date partner on a virtual night, see your first name, age, height, and photos.
• While submitted connections are open, other checked-in attendees from that same event see a match card: first name, age, height, and photos. The card expires 24 hours after the night ends.
• A connection sees your dating profile: first name, age, height, gender, denomination, city, bio, and photos.

Event hosts, assigned operators, and administrators see your stored display name and check-in status for their events. Messages are visible only to you and your connection (and to moderators if a conversation is reported or flagged by our automated safety guardrail).

Payments and Stripe

Stripe, Inc. is our payment processor for in-app ticket checkout. When you buy a community-host ticket in the app, Stripe handles the card details. We receive and store only the payment identifiers listed above — never the card number itself. Stripe processes that data under its own privacy policy at stripe.com/privacy. Eventbrite listings process payment under Eventbrite's privacy policy.

Where data lives

Data is stored on Amazon Web Services (Cognito, DynamoDB, S3) in the region shown in your app. Photos are stored privately and served through short-lived signed URLs. Payment processing runs on Stripe. Virtual video dates run on Daily.co and are not recorded. City and venue search runs on Mapbox. Push notifications are delivered by Amazon SNS to Apple or Google.

Your choices

• Edit or remove profile fields and photos at any time in Settings.
• Block members to stop all contact.
• Delete your account in Settings → Danger zone, or follow the steps on our account deletion page, which also explains how to ask us to delete it if you cannot sign in. Deletion is described in the next section.
• Request a copy of the personal data we hold about you by emailing support@kingdomsingles.app. There is no in-app export button. We aim to respond within 30 days.

What happens when you delete your account

Deletion removes your login and hides your profile from other members immediately. Steps, including how to request deletion if you cannot sign in, are on the account deletion page. A suspended account cannot delete itself; email support@kingdomsingles.app and we will handle it. There is no scheduled purge job that later wipes every leftover row.

Removed right away

• Your login: the Cognito account, including your email address and any Apple or Google sign-in link, is deleted.
• Profile fields other members can see: name, birthdate, gender, height, denomination, city, bio, and photo references. Your profile page returns nothing.
• Photos and other files under your private storage prefix are deleted from S3.
• Push-notification device records.
• Messages in your conversations, both sides of each connection, and the conversation record.

Kept on purpose

• A deactivated profile stub: your user id, deletion timestamp, and, if you gave one, the reason you left (deletionReason and an optional note). It does not include your email. This lets us match tickets and keeps the deleted account from being treated as a live member.
• Ticket records (including stripePaymentIntentId when you paid in-app) for 7 years, for accounting, tax, refund, and fraud obligations.
• Reports, blocks, and admin member notes for 2 years, for safety and abuse prevention. An automated safety report may include a short excerpt of a message (up to 280 characters).
• Marriage stories we have already posted on the website, with your name, email, and account link removed. Stories you submitted that we have not posted are deleted with your account. Email us to have a posted story taken down.
• Host reviews you left about an event host, for 2 years, so ratings stay attached to the host after a member leaves.

After those named periods we may remove the retained rows. Removal is a manual operator process — we do not run an automated daily purge. You cannot undo deletion.

Contact

Privacy questions, data-access requests, and deletion follow-ups: support@kingdomsingles.app.