Privacy Policy

Last Updated: March 9, 2026

1. Data Controller

OneMatch is operated by ONEMATCH LTD (Company Number 17076883), a private limited company registered in England and Wales.

Registered Office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom

Data Controller: Cezar Bercea, Director of ONEMATCH LTD

For privacy inquiries, contact: Click to reveal

2. Information We Collect

2.1 Account Information

• Email address
• Password (encrypted)
• Account creation date

2.2 Profile Information

• Name, age, gender, location
• Preferences (age range, distance, gender preference)
• Basic personality questions (12 questions)
• Extended personality questionnaire (52 additional questions, optional)

2.3 Usage Information

• Matches generated and accepted
• Messages sent and received
• Subscription status (free or premium)
• Login activity and timestamps

2.4 Payment Information

Payment processing is handled by third-party payment processors. We do not store your full credit card details. We receive:

• Payment confirmation status
• Subscription start/end dates
• Customer ID (from payment processor)

3. How We Use Your Information

Purpose	Legal Basis (GDPR)
Create and manage your account	Contractual necessity
Generate compatible matches using our algorithm	Contractual necessity
Process subscription payments	Contractual necessity
Send service-related emails (match notifications, updates)	Contractual necessity
Improve our matching algorithm and Service	Legitimate interest
Prevent fraud and ensure security	Legitimate interest
Comply with legal obligations	Legal requirement

4. Our Matching Algorithm

OneMatch uses a proprietary 1,000-point compatibility scoring system based on psychological principles. Your questionnaire answers are processed to:

• Calculate compatibility scores with other users
• Generate one match at a time based on highest compatibility
• Display compatibility percentage to matched users

Important: Your individual answers are never shown to other users. Only the overall compatibility score is visible.

5. Data Sharing and Disclosure

5.1 We Share Your Data With:

• Other Users: Your name, age, location, and compatibility score are visible to users you're matched with
• Service Providers: Database hosting (Supabase), payment processing (third-party processors), email delivery (Resend)
• Legal Requirements: If required by law, court order, or to protect our rights

5.2 We Do NOT:

• Sell your personal information to third parties
• Share your data for advertising purposes
• Share your questionnaire answers with anyone (including matches)

6. Data Storage and Security

Your data is stored securely using industry-standard practices:

• Encryption: Passwords are hashed using bcrypt
• Database: Hosted on Supabase (PostgreSQL) with encryption at rest
• Access Control: Limited access to authorized personnel only
• Token Security: 15-minute access tokens with refresh token rotation

7. Your Rights Under GDPR

You have the following rights regarding your personal data:

7.1 Right to Access

Request a copy of all personal data we hold about you.

7.2 Right to Rectification

Correct any inaccurate or incomplete information (available via "Edit Profile" in the app).

7.3 Right to Erasure ("Right to be Forgotten")

Request deletion of your account and all associated data.

7.4 Right to Data Portability

Receive your data in a structured, machine-readable format (JSON export available upon request).

7.5 Right to Object

Object to processing of your data for marketing or research purposes.

7.6 Right to Withdraw Consent

Withdraw consent at any time (e.g., unsubscribe from emails, delete account).

8. Cookies and Tracking

OneMatch uses minimal cookies and local storage:

• Authentication Tokens: Stored in browser localStorage to keep you logged in
• Session Data: Temporary data for app functionality

We do not use third-party tracking cookies or analytics at this time.

9. International Data Transfers

Your data may be processed in:

• European Economic Area (EEA): Supabase database servers
• United Kingdom: Service targeting UK users

All data transfers comply with GDPR requirements for adequate protection.

10. Children's Privacy

OneMatch is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If we discover that a user is under 18, we will delete their account immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via email. Continued use of OneMatch after changes constitutes acceptance of the updated policy.

12. Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with:

• UK Information Commissioner's Office (ICO) - ico.org.uk

← Back to OneMatch