Privacy policy

Diaspora Dating (the diasporadating.app website and web app) is operated by Limitless Prods, 3450 Saint Denis St, Unit #573, Montreal, QC H2X 3L3, Canada ("we"). We are responsible for the personal information the service handles.

Person in charge of the protection of personal information: the management of Limitless Prods, reachable at sales@limitlessprods.com, by phone at +1 438 700 4065, or by mail at the address above.

This policy applies to the waitlist, the website and the app, including during the invite-only private beta. The service opens in stages: some features described below (profiles, photos, messages, coach, payments) are arriving gradually. We only collect the information a feature needs once you use that feature.

The service is for people aged 18 or over. We delete any account we learn belongs to a minor.

Waitlist:

• your email address or phone number (at least one of the two);
• your country, the path you are interested in (single or couple), and your language.

Account:

• your phone number, used as your sign-in handle (we do not verify it by SMS);
• your email address, used to confirm your account and recover it;
• your password, stored only as a one-way hash (we cannot read it);
• your language, your space (single or couple), the invitation code you used, when you accepted the terms, and when the account was created and last active.

Security and operation:

• a session cookie that keeps you signed in;
• failed sign-in attempts (number and time), to temporarily block repeated guessing;
• confirmation and password-reset links sent by email, stored as a one-way hash;
• your IP address and technical browser signals, analysed by Cloudflare Turnstile to tell people from bots;
• our host's technical logs (IP address, browser, pages requested, errors).

When you use the matching features:

• your profile: first name, date of birth, city, country of residence, home region, languages, bio and photos;
• your verification selfie, reviewed by a person on our team, never shown on your profile and stored in a private space;
• what you exchange: messages, voice notes, check-ins, calendar, lists, games and the memory map (including the places you add);
• your reports, blocks and exchanges with our team;
• your conversations with the AI coach;
• your Premium purchases: amount, date and status. Payments are processed by Stripe or Chariow; we never see your card numbers or Mobile Money credentials.

Using a dating or couples service can reveal parts of your love life, and sometimes your sexual orientation. Your photos and selfie identify you. We treat this information as sensitive: we use it only to run the service, with your express consent, and our team's access is limited to what is necessary.

Your selfie is compared with your photos by a person. We do not create biometric templates and we do not use automated facial recognition. If that ever changes, we will tell you first and ask for your agreement.

• To create and manage your account, sign you in and restore access: this is necessary to provide the service.
• To tell you when we open, send you an invitation, or send account emails: at your request, or because the service needs it.
• To protect members: block bots, prevent fraud and romance scams, handle reports, and enforce our terms. This is our legitimate interest, and the members'.
• To run the dating, couple and coach features you choose to use: with your consent for sensitive information.
• To fix errors and improve the service, using technical and aggregated data.
• To meet our legal obligations and answer valid requests from authorities.

If you live in the European Union or the United Kingdom, the corresponding legal bases are performance of a contract, our legitimate interests, your consent, and our legal obligations. You can withdraw consent at any time; this does not affect what was done before.

We make no decision based solely on automated processing that has legal effects on you. The AI coach offers advice; it decides nothing about you.

We only use cookies the service needs to work:

• dd_session: keeps you signed in, for up to 30 days;
• NEXT_LOCALE: remembers the language you chose;
• Cloudflare Turnstile may use cookies or browser storage to check that you are not a bot.

We use no advertising cookies, no tracking tools, and no third-party audience measurement.

We do not sell or rent your personal information. We only disclose it:

• to service providers who run the service on our behalf, under contract, and only for what they need (see the list below);
• to other members, for what you choose to show (your profile, for example) or share in a common space with your partner or family;
• to authorities, when the law requires it or to protect someone's safety;
• to a buyer in a sale or merger, who would remain bound by this policy.

Our providers:

• Vercel Inc.: hosting for the website and app (United States and global network);
• Neon: database, hosted in Frankfurt, Germany;
• Resend: email delivery, from Ireland;
• Cloudflare: domain, bot protection (Turnstile) and, coming soon, storage for photos and voice notes (global network);
• coming soon: Anthropic, for the AI coach (United States), which receives only what you write to the coach; Stripe and Chariow, for Premium payments.

We are based in Quebec, and our providers are located in Canada, the United States and the European Union, among others. Your information may therefore be processed outside your country or province. Before entrusting it to a provider abroad, we assess the protection it offers and put it under contract, including the European Commission's standard contractual clauses where they apply.

• Account and content: while your account is open. After it is closed, we delete them within 30 days; backup copies are gone no more than 30 days after that.
• Waitlist: until the service opens and for at most 12 months after, or until you ask us to remove you.
• Failed sign-in attempts: 24 hours at most.
• Sessions: until they expire (30 days) or you sign out.
• Links sent by email: at most 7 days after they expire.
• Reports and moderation decisions: as long as needed to protect members and keep a banned account from returning.
• Payment and billing records: as long as tax and accounting laws require.

Encrypted connections (HTTPS), passwords and links stored as one-way hashes, limited team access, and selfies kept in a private space that is never served publicly. No system is foolproof: if a confidentiality incident poses a serious risk to you, we will notify you and the relevant authorities within the time the law requires.

Depending on where you live, you can:

• access your information and get a copy, including in a structured, commonly used format;
• have it corrected or completed;
• ask for it to be deleted, or for your account to be closed;
• withdraw your consent;
• object to some processing or ask for it to be restricted;
• ask for information about you to be de-indexed.

Write to us at sales@limitlessprods.com from your account's email address. We reply within 30 days. We may ask you to confirm your identity.

You can also complain to an authority: the Commission d'accès à l'information du Québec, the Office of the Privacy Commissioner of Canada, the Commission de protection des données personnelles (CDP) in Senegal, or the data protection authority of your country in the European Union (in France, the CNIL).

We will update this policy as the service evolves, in particular before opening a feature that collects new information. For a significant change, we will tell you by email or in the app before it takes effect. The date of the last update is at the top of this page.

Limitless Prods, 3450 Saint Denis St, Unit #573, Montreal, QC H2X 3L3, Canada. Email: sales@limitlessprods.com. Phone: +1 438 700 4065.