Privacy PolicyYour privacy,
our priority.

This Privacy Policy applies to MatchFlow.gg (“MatchFlow,” “we,” “us,” or “our”), including our website, mobile applications, Discord bot, profile and matching tools, direct and community chat, notifications, and related support services (the “Service”). MatchFlow is responsible for the personal data described here unless a separate notice says otherwise.

It does not govern independent websites, apps, or services linked from MatchFlow. Their own privacy notices apply. Questions and rights requests may be sent to [email protected].

You provide: email address; username and display name; account credentials; avatar or photos; birthdate or age; gender; continent; languages; interests; friendship and match preferences; lifestyle and profile details; biography, status, and optional social links; settings; support requests; reports; and other content you choose to submit.

Your activity provides: match requests and decisions, compatibility and profile completion signals, message threads, community posts, replies, reactions, media choices, blocks, reports, notification state, presence, account and moderation history, and feature interactions.

Your device or connected service provides: network, device, browser or app, session, login, notification delivery, and diagnostic information reasonably needed to operate and protect the Service. If you use a connected sign in provider, we receive the account and profile fields that provider makes available with your authorization. We may receive information from other users when they report an interaction.

We use personal data to create and authenticate accounts; build and display profiles; personalize and rank match suggestions; operate direct and community chat; deliver service and push notifications; remember settings; provide support; maintain availability; diagnose problems; prevent spam, fraud, abuse, and ban evasion; enforce our Terms; investigate reports; comply with law; and protect users, MatchFlow, and others.

Where laws require a legal basis, we rely on performance of our agreement to provide requested features; legitimate interests in operating, improving, securing, and protecting MatchFlow; consent for optional features such as push notifications where required; and legal obligations or protection of vital interests in appropriate cases. You may withdraw consent at any time without affecting earlier lawful processing.

Your display name, avatar, age or age range, continent, languages, interests, biography, status, and other profile fields may be shown to eligible MatchFlow users so the Service can help people connect. We do not display private login, account security, exact birthdate, or notification delivery information to other users.

MatchFlow uses profile details, preferences, shared interests, activity, age segmentation, and safety signals to recommend or rank profiles. Compatibility scores and suggestions are estimates, not identity checks or consequential decisions. You can edit profile information and matching preferences, block people, or delete your account. We may exclude profiles for safety, eligibility, or moderation reasons.

Direct messages are available to the conversation participants. Community posts, replies, reactions, and associated profile details are visible to people with access to that community area. Recipients may save or share what you send, so avoid posting information you do not want others to retain.

Authorized personnel and systems may access or analyze content when needed to deliver messages, investigate a report, detect abuse or security threats, enforce rules, respond to support, or meet legal duties. Reports and blocks are restricted to people and systems that need them. Messages are not used to sell advertising profiles.

MatchFlow uses necessary cookies and device storage to authenticate users, protect accounts, provide requested features, and remember settings. We do not publish sensitive security implementation details, but these technologies are limited to legitimate operational purposes described in this policy.

Our current Service does not use external advertising cookies or sell browser activity for targeted advertising. If we introduce optional analytics or advertising that requires consent, we will provide appropriate notice and controls first. Push notifications require notification delivery information and may be handled by your operating system or device provider; you can turn them off in MatchFlow or device settings.

For abuse prevention, we use a signed first party browser cookie to recognize the same browser across sign ins and network changes. We also receive hashed rendering and browser environment signals, which may suggest a returning browser after cookies are cleared. These signals stay within MatchFlow; raw canvas images and device attributes are not sent. Browser similarity can be inaccurate or altered, so it is evidence for human review and never sufficient on its own for an automatic ban.

We share profile and content data with other users as described above. We may provide limited data to vendors that support hosting, storage, authentication, messaging, notification delivery, security, support, and media features, as well as connected services you choose to use. They may process data only for the services they provide to us or under their own notice where you interact with them directly.

We may disclose data when reasonably necessary to comply with law or valid legal process, protect someone from harm, investigate fraud or abuse, enforce agreements, or complete a merger, financing, reorganization, or sale with appropriate protections. We may share data at your direction or in aggregated or anonymized form that is not reasonably linkable to you.

MatchFlow and its providers may process data outside your country. Where required, we use recognized safeguards such as adequacy decisions, contractual protections, transfer assessments, or consent, and provide information about applicable safeguards on request.

Mandatory Trust & Safety processing. To keep MatchFlow safe we automatically analyse content that members create: direct messages and message requests, community posts and replies, profile text (display name, username, bio, links and other free text) and images you upload. This analysis happens before other members can see the content and looks for harassment, hate, threats, sexual content, violence, self-harm, illegal activity, spam and scams, and above all any indication of the sexual exploitation of a minor.

We use our own systems and third-party safety processors for this. OpenAI is our safety processing provider, through its dedicated content-moderation service. We send only the content being checked, never your email address, date of birth, IP address, sign-in identity or unrelated history, and we do not send whole conversations. The provider returns a classification, which MatchFlow's own policy then acts on; the provider does not decide account enforcement.

This processing is required to use MatchFlow's messaging, community and profile features. Before you can create or send content you acknowledge the Safety & Content Processing notice. If you do not agree you can still read this policy and our safety pages, sign out, and delete your account, but you cannot post, message or edit your profile. There is no setting that turns safety processing off.

Content that is blocked is not delivered. For the most serious categories we keep a limited, access-restricted record (a hash, the decision and, for high-severity text, a short excerpt) for a bounded period so that appeals, repeat-abuse detection and lawful safety investigations are possible; images are never copied. We never automatically report anyone to authorities on the strength of an automated result alone; a person reviews child-safety cases, and we escalate where the law requires or a child appears to be at risk. See our Child Safety Standards.

You can report any member, message or post from the app, and block members. Blocking is independent of automated moderation and takes effect immediately.

Layla is MatchFlow's AI community host. She welcomes new members and replies in the community rooms. Her replies are generated by a third-party large-language-model provider; OpenAI is the provider.

Participation is optional and separate from safety processing. When you turn Layla on in Settings → Privacy & Safety → AI features, a small window of recent community messages, including yours, may be sent to the provider as context for her reply, along with display names. When Layla is off for you, your messages are never used as context for her replies, she will not address you, and your welcome message uses fixed copy. You can withdraw at any time from the same setting; withdrawal does not affect earlier lawful processing.

Declining Layla never disables the mandatory safety processing described in section 8, and accepting safety processing never opts you into Layla. AI features are currently offered only to members aged 18 and over. Layla's own replies go through the same safety moderation as member content and can be reported from the app.

We keep personal data only as long as reasonably needed for the purposes in this policy. Account, profile, message, matching, and notification data generally remain while your account is active or as needed to provide the feature. Retention can vary based on the type of data, user expectations, safety risk, legal duties, disputes, backup cycles, and whether data can be anonymized.

You can permanently delete your account through available account controls or request deletion from us. We delete or anonymize account data associated with the active Service, although content may be anonymized where necessary to preserve conversation context. We may retain restricted safety, moderation, fraud prevention, legal, dispute, or backup records when necessary to protect users, enforce bans, resolve claims, or comply with law. We delete or anonymize these when their purpose expires.

We use technical and organizational safeguards designed for the nature of the data and risks involved, including protections for credentials, communications, access, service integrity, vendors, and incident response. Access is limited to people and providers with a legitimate need. We do not disclose configurations, detection logic, infrastructure details, or other information that could weaken those safeguards.

No online service can guarantee absolute security. Use a unique password, protect connected accounts and devices, and tell us promptly if you suspect unauthorized access. Where law requires, we will notify affected users and regulators of a qualifying personal data breach.

Depending on where you live, you may have rights to know or access personal data; correct inaccurate data; delete data; receive a portable copy; restrict or object to processing; withdraw consent; opt out of certain sharing or targeted advertising; limit use of sensitive data; obtain information about automated processing; request human review; and complain to a privacy or data protection authority. We will not discriminate against you for exercising a privacy right.

EEA, UK, and Swiss users may also object to legitimate interest processing and complain to their local supervisory authority. California residents may request the categories, sources, purposes, recipients, and specific pieces of personal information involved and use an authorized agent where law allows. MatchFlow does not currently sell personal information or share it for behavioral advertising across different contexts. Brazilian users may exercise LGPD rights including confirmation, access, correction, anonymization, blocking, deletion, portability, information about sharing, consent withdrawal, and review of certain automated decisions.

Use profile and account controls in the app or email [email protected]. Describe the request and the account involved. We may verify identity, authority, and jurisdiction, and may deny or limit a request where law permits. For example, we may do so to protect another person, preserve security or legal claims, or comply with a retention duty. We will respond within the period required by applicable law.

MatchFlow is intended only for people aged 13 or older. We use birthday or age information to determine eligibility, separate minors from adults, and keep adult connection preferences unavailable to minors. Where applicable law requires permission from a parent or legal guardian for a minor’s data processing, that permission must be provided before the affected processing occurs. If you believe an ineligible person provided personal data, contact us so we can investigate and remove it where appropriate.

Birthdate, gender, profile preferences, and conversations may reveal information treated as sensitive in some places. Provide only what you are comfortable sharing. We use these details for eligibility, matching, safety, and requested profile features, not to infer characteristics for advertising. Exact birthdates are not shown to other users. Precise location, government identity documents, and payment card information are not required by the current core Service.

We may update this policy as MatchFlow, our providers, or privacy laws change. We will post the revised version and update the date above. If a change materially affects how we use personal data, we will provide additional notice through MatchFlow, email, or another appropriate channel and obtain consent when law requires it.

Email [email protected] with “Privacy Request” in the subject line. Include enough information to identify your account and request, but never send your password or unnecessary sensitive information. You may also use MatchFlow’s account, block, report, and deletion controls in the app.

If we cannot resolve a concern, you may contact the privacy, data protection, or consumer authority available where you live. This policy does not limit any rights that applicable law does not allow you to waive.