Privacy Policy

BeyondSwipe ("we", "us", or "our") is operated by 15748666 Canada Inc., a company incorporated in Canada. Our registered address is on file with Corporations Canada. For privacy inquiries, contact us at privacy@beyondswipe.app.

We are subject to Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Act respecting the protection of personal information in the private sector (Law 25 / Bill 64).

2.1 Information you provide directly

• Account information: email address, first name, date of birth, gender, and sexual orientation.
• Profile information: photos, video introduction, biography, height, job title, education level, and pronouns (all optional except photos).
• Interest selections: the interests you choose during onboarding (used for compatibility matching).
• Messages: the content of messages you send to other users.
• Location: your city, chosen by you during onboarding. We do not collect precise GPS coordinates.
• Referral data: your unique referral code and the identity of users you refer or who refer you, used to track referral program eligibility and rewards.

2.2 Identity verification and biometric information

We require all users to verify their real identity through Stripe Identity. During this process, Stripe captures your government-issued photo ID and a live selfie, and processes biometric information (facial geometry) derived from both for the sole purpose of confirming that you are the person shown on the document.

Your identification document and selfie are transmitted directly to Stripe. They are never received by, transmitted through, or stored on BeyondSwipe's systems. Stripe is capable of returning to us the personal details it reads from your document, such as your legal name, date of birth, document number and address, but our systems do not request any of it. What we receive is a session reference and a pass or fail result.

Redaction. Immediately following a successful verification, our system instructs Stripe to redact the verification session. Redaction permanently removes the document images, the selfie, and the extracted personal data from Stripe's records, including from the Stripe dashboard. The practical effect is that no BeyondSwipe personnel is able to retrieve or view your identity document after verification completes.

Biometric data. The biometric identifiers used to match your selfie to your document are never disclosed to us; we receive only the outcome of the match. Stripe retains biometric identifiers for no longer than one year, and you may withdraw consent to that retention by contacting Stripe directly at privacy@stripe.com.

Consent. We give you written notice of this biometric processing, its specific purpose, and its retention period before any capture takes place, and we proceed only with your consent. You may decline, in which case you will not be able to complete verification. We do not sell, lease, trade, or otherwise profit from biometric information, and we do not disclose it to third parties.

What we retain. The complete record we hold in relation to your verification is: a Stripe session reference, the verification outcome, and the date it completed. Stripe's own privacy practices are governed by the Stripe Privacy Policy. See also our How Verification Works page.

2.3 Payment information

We do not store credit card numbers or payment details. All payment processing is handled by Stripe. We retain only transaction references, amount, and date for billing and fraud prevention purposes.

2.4 Technical data collected automatically

• Log data: IP address, browser type and version, pages visited, timestamps, and referring URLs.
• Device information: operating system, screen resolution, and device type.
• Cookies and similar technologies: session cookies for authentication and analytics cookies (see Section 6).

2.5 Content moderation data

Photos you upload are automatically screened by AWS Rekognition for NSFW content and by Microsoft PhotoDNA for child sexual abuse material (CSAM) before they are published. These scans produce a classification result; the raw image is not stored by these services beyond the duration of the scan.

We use your personal information for the following purposes, each grounded in a lawful basis:

• Providing the service (contract): Creating your account, showing your profile to potential matches, enabling messaging, and processing verification and payments.
• Safety and fraud prevention (legitimate interest / legal obligation): Verifying real identity, detecting spam and fake accounts, screening content for abuse, and responding to reports of misconduct.
• Improving the platform (legitimate interest): Analysing aggregate usage patterns to improve features and user experience. We use PostHog for privacy-friendly analytics.
• Legal compliance (legal obligation): Retaining records as required by Canadian law, responding to lawful government requests, and cooperating with law enforcement investigations involving CSAM or other serious harm.
• Communications (consent / contract): Sending transactional emails (account confirmations, match notifications) via Resend. We do not send marketing emails without your explicit opt-in.

We do not sell your personal information. We share data only in these circumstances:

• Other users: Your profile (name, photos, bio, interests, city) is visible to other verified BeyondSwipe users. Your email address and date of birth are never shown publicly.
• Service providers (processors): We share data with trusted vendors who process it on our behalf under contractual data processing agreements: Supabase (database and authentication), Cloudflare R2 (media storage), Stripe (payments and identity), AWS (content moderation), Microsoft (CSAM detection), Resend (email delivery), PostHog (analytics). Each provider processes only the data necessary for their function.
• Legal requirements: We may disclose information when required by law, court order, or to protect the safety of users or the public.
• Business transfers: If BeyondSwipe is acquired or merged, your data may be transferred to the successor entity. We will notify you 30 days before any such transfer takes effect.

We retain your personal information for as long as your account is active. If you delete your account:

• Your profile, photos, and messages are permanently deleted within 30 days.
• Identity verification tokens are deleted immediately.
• Payment records are retained for 7 years as required by Canadian tax law.
• Content moderation logs are retained for 2 years to comply with our legal obligations.

Backups containing your data are purged on a rolling 90-day cycle.

We use the following types of cookies:

• Strictly necessary cookies: Authentication session cookies that keep you logged in. These cannot be disabled.
• Analytics cookies: PostHog analytics to understand how users interact with BeyondSwipe. PostHog is configured in cookieless mode by default, using a first-party script and anonymising IP addresses before storage.

We do not use third-party advertising cookies or cross-site tracking.

Under PIPEDA and Quebec Law 25, you have the right to:

• Access: Request a copy of the personal information we hold about you.
• Rectification: Correct inaccurate or incomplete information.
• Deletion: Request deletion of your account and personal data, subject to legal retention obligations.
• Portability (Quebec Law 25): Receive a copy of your data in a structured, commonly used, machine-readable format.
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Object to automated decisions: Our matching algorithm uses your interests to suggest potential matches. You may request human review of any significant automated decision.

To exercise any of these rights, email privacy@beyondswipe.app. We will respond within 30 days. Quebec residents may also file a complaint with the Commission d'accès à l'information (CAI) at cai.gouv.qc.ca. Federal complaints may be directed to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

International users: If you are located in the European Economic Area or the United Kingdom, you have equivalent rights under the General Data Protection Regulation (GDPR / UK GDPR), including the rights of access, rectification, erasure, restriction of processing, data portability, and objection, and the right to lodge a complaint with your local supervisory authority. If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA/CPRA), including the right to know, delete, and correct your personal information, and the right to opt out of the sale or sharing of personal information. BeyondSwipe does not sell your personal information. To exercise any of these rights, contact privacy@beyondswipe.app.

In accordance with Quebec Law 25's privacy by default requirements:

• We conduct Privacy Impact Assessments (PIAs) before deploying new features that process personal data.
• We apply data minimisation principles and collect only what is necessary for a specific, stated purpose.
• We designate a Privacy Officer responsible for ensuring compliance. Contact: privacy@beyondswipe.app.
• Any third-party technology that presents a material privacy risk is evaluated through a PIA before adoption.

Your data is stored on servers located in North America (Supabase, Cloudflare R2, AWS). When data is processed by service providers outside Canada, we ensure appropriate contractual safeguards are in place, including standard contractual clauses or equivalent protections as required by PIPEDA and Quebec Law 25.

BeyondSwipe is strictly for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18. Identity verification is mandatory and is performed by Stripe Identity, which independently confirms age from government-issued documents. If we discover that a user is under 18, we will immediately terminate their account and delete all associated data.

We implement technical and organisational measures to protect your data, including:

• Encryption in transit (TLS 1.3) and at rest (AES-256).
• Row-level security on all database tables.
• Access controls limiting data access to staff with a need to know.
• Regular security reviews and dependency audits.

No method of transmission over the internet is 100% secure. In the event of a data breach that creates a real risk of significant harm, we will notify affected users and the applicable privacy regulator within 72 hours of becoming aware of the breach.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email and display a prominent notice in the app at least 30 days before the changes take effect. Your continued use of BeyondSwipe after that date constitutes acceptance of the updated policy. The date at the top of this page always reflects when the policy was last revised.

For privacy questions, requests, or complaints:

Privacy Officer
BeyondSwipe / 15748666 Canada Inc.
Email: privacy@beyondswipe.app