Christ Match Privacy Policy
Last Updated: September 30, 2026
This Privacy Policy explains how Christ Match (“we”, “our”, or “us”) collects, uses, stores, shares, and protects your information when you use the Christ Match mobile application (the “App”) and related services. By creating an account, signing in, or continuing to use the App, you agree to the practices described in this policy.
1. Information We Collect
1.1 Account and Authentication Information
When you create an account, we collect:
– Email address
– Password (stored securely by our authentication provider, never by us in readable form)
– Your account user ID
– Email verification status
– Whether you signed in with email, Google, or Apple
1.2 Profile Information You Provide
– First name and date of birth
– Gender
– Country, city, and state
– Height and your preferred measurement unit
– Languages you speak
– Short bio
– Prayer request (optional)
– Profile photographs (you may upload multiple; the first is your primary photo)
– Denomination
– Church name, church involvement, church attendance, church relationships, which church you attend, and church unit
– Faith priorities, important values, and what you are looking for in a connection
– Your description of your relationship with Jesus (optional)
1.3 Identity Verification Data (Face Data)
This is described in full in Section 3 below, because it is sensitive information.
1.4 Location Information
If you enable location, we collect:
– Your precise latitude and longitude
– A geographic hash derived from your coordinates, used to find nearby users
– City and country derived from your coordinates
If you decline location permission, the App still works, but you will not see users near you.
1.5 Content and Interaction Data
– Likes you send and receive
– Super Likes and your Super Like balance
– Mutual likes and matches
– Messages you send and receive, including photos you share in chat
– Prayer requests you view
– Reports you file about other users and blocks you set
– Push notification delivery status
1.6 Device and Usage Information
– Device type, operating system, and device model
– App version and build number
– IP address
– Push notification device token
– Device integrity signals used to protect the App from bots and abuse
– Crash reports, error logs, and diagnostic stack traces, along with technical context such as your user ID, email address, sign-in method, platform, device model, operating system version, app version, and country code. This diagnostic information is used solely to keep the App stable and to investigate failures.
1.7 Purchase and Subscription Data
– Which subscription plan you have purchased (Weekly, Monthly, or 2 Months Premium)
– Whether you have purchased Super Likes
– Subscription status, renewal status, and transaction identifiers
– Your account’s App Store or Google Play receipt
Payment card details are never collected or stored by us. All payments are processed and completed by Apple or Google.
2. How We Use Your Information
We use your information to:
– Create, authenticate, and manage your account
– Verify your identity for community safety and fraud prevention
– Show you potential matches based on your preferences and location
– Deliver core features such as messaging, likes, and notifications
– Moderate content and enforce our Terms of Service
– Provide customer support and respond to your requests
– Monitor safety, prevent fraud, and detect abuse
– Diagnose crashes, improve reliability, and fix defects
– Process and manage your in-app purchases and subscriptions
– Comply with legal obligations and enforce our agreements
We do not use your information for targeted advertising. We do not sell your personal information.
3. Face Data — Collection, Use, Disclosure, Sharing, Retention, and Deletion
Face data is sensitive. This section explains it in detail.
3.1 Is identity verification required?
No. Identity verification is entirely voluntary and optional. You can skip it, use it later, or never use it. Skipping it does not limit your access to the App’s core features.
If you choose to verify your identity, the App explicitly asks you to capture a live selfie by looking at your phone’s front camera and blinking.
3.2 What is collected
If you choose to verify your identity:
– A single live selfie image (JPEG) that you capture yourself using the App’s own in-app camera. You must physically hold the phone; a photo of a photo will not pass verification.
– On-device liveness signals — specifically left and right eye openness values and head orientation angles — used only in your device’s memory to confirm that a real person blinked in front of the camera. These signals are never stored and never transmitted to us or to anyone else.
– Server-side analysis results (these are measurements, not biometric templates): image sharpness, brightness, whether the eyes were open, face orientation angles, and a face-similarity percentage score.
3.3 How it is used
Face data is used solely for identity verification, fraud prevention, and community safety. Specifically, we use it to confirm that the person in the live selfie is the same person shown in your profile photo.
Face data is not used for:
– Advertising or marketing
– Profiling or behavioural analysis
– Analytics
– Training any artificial intelligence or machine-learning model
– Any purpose other than verification
We do not create, store, or use a biometric template or “face print.”
3.4 Who it is shared with (third-party disclosure)
Face data is shared with exactly one service provider, acting strictly as a data processor on our behalf to perform the verification you requested:
– Amazon Web Services (AWS), specifically the AWS Rekognition facial analysis service, in the us-east-1 (United States) region.
Face data is never sold, never shared for advertising, never shared for marketing, and never shared with any other third party.
3.5 Where it is stored
The live selfie is processed entirely in memory inside a secure Google Cloud Function (512 MB memory limit, 60-second execution limit).
The selfie is never written to Firebase Storage, to a database, to a server disk, or to any backup. It exists only in memory during the brief verification request and is discarded immediately when that request completes.
Only the outcome is saved to our database: a yes/no verification status, a similarity percentage, and a verification timestamp.
3.6 How long it is retained
– Raw selfie images: zero retention. They are held in memory only and are immediately discarded after processing. We do not retain raw selfie images after verification is complete.
– Verification results: retained only as long as necessary to detect fraudulent accounts and protect the community. Results are automatically and permanently reset whenever you change your profile photo, and are deleted when you delete your account.
– Diagnostic records: device identifiers used for crash reporting are retained according to our crash-reporting provider’s standard retention policy, and are linked to your account only for as long as your account exists.
3.7 Deletion
– You may request deletion of your verification data at any time by contacting us (see Section 12). We will action such requests.
– Your verification status is automatically reset the moment you change your primary profile photo, because the previous verification no longer applies to the new photo.
– When you delete your account, all associated verification data is permanently deleted, together with your profile photographs.
3.8 Your consent
By capturing a live selfie, you are giving us your explicit consent to collect and process your face data for the purposes described in this section. You may withdraw this consent at any time by deleting your account or by contacting us, and we will stop processing and delete the related data.
4. Content Moderation
To protect you and our community, we automatically review content before it is made visible to other users:
– Chat messages are checked using an automated content moderation service to identify harassment, abuse, sexual content, hate speech, and other objectionable material.
– Photographs you upload, including profile photos and chat images, are automatically checked to identify adult content, violence, graphic medical content, and manipulated or spoofed images. Images that are clearly unacceptable are rejected automatically; borderline images are held for review by our moderation team.
Moderated content and any resulting warnings, suspensions, or bans are recorded so that we can enforce our Terms of Service and prevent repeat abuse.
5. How We Share Information
We do not sell your personal information. We never share it for advertising or marketing.
We share information only with the following service providers, solely to operate the App and provide its features to you:
Provider Purpose
Google Firebase (Authentication, Firestore, Storage, Cloud Functions, Cloud Messaging, Crash Reporting, App Check) Hosting, database, authentication, file storage, notifications, crash diagnostics, and abuse prevention
Google Sign-In Optional social sign-in
Apple Sign-In Optional social sign-in
RevenueCat Subscription management and entitlement tracking
OpenAI Automated chat content moderation
Google Cloud Vision Automated image safety checks
Amazon Web Services (Rekognition) Identity verification only
We may also disclose information:
– To law enforcement or regulators, where required by law or necessary to protect the safety of the App, our users, or the public
– In connection with a merger, acquisition, or sale of assets, in which case we will notify you before your information becomes subject to a different privacy policy
– With other users, according to your profile visibility settings — for example, other users can see the profile information you choose to display on your profile
6. Device Identifiers and Tracking
We generate and use limited device and installation identifiers for the sole purpose of app functionality — that is, crash diagnostics, fraud and abuse prevention, security, and subscription management. For example, our crash-reporting service uses an installation identifier, and our subscription service uses an identifier tied to your account.
We do not track you.
Specifically, Christ Match:
– Does not access the advertising identifier (IDFA)
– Does not use the App Tracking Transparency framework
– Does not display third-party advertising
– Does not share your data with any advertising network or data broker
– Does not use your information to target advertising or advertising measurement
Your device identifiers are linked to your account only for the app functionality described above, and are not used to follow your activity across other companies’ apps or websites.
7. Data Storage and Security
We use industry-standard safeguards to protect your personal information, including encryption in transit and encryption at rest, access controls that limit which staff and systems can reach your data, and integrity verification of our servers.
However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.
Your profile data is stored on Google Firebase infrastructure in the United States. Face verification processing occurs on Google Cloud infrastructure (us-central1) and, for facial comparison, on Amazon Web Services infrastructure in the United States (us-east-1).
8. Data Retention
We retain your personal information only for as long as necessary to provide the App, comply with legal obligations, resolve disputes, and enforce our agreements.
– Profile and account data: for as long as your account is active.
– Photos: for as long as your account is active, unless you delete them yourself.
– Messages: for as long as your account is active, for safety, moderation, and support purposes.
– Live selfie images: not retained after verification (see Section 3.6).
– Verification results: until you change your profile photo or delete your account.
– Crash and diagnostic data: according to our crash-reporting provider’s standard retention policy.
9. Your Rights and Choices
Depending on where you live, you may have the right to:
– Access and obtain a copy of your personal data
– Correct inaccurate personal data
– Delete your personal data
– Restrict or object to processing of your personal data
– Request portability of your data
– Withdraw consent, where processing is based on consent
– Opt out of non-essential communications
To exercise any of these rights, contact us using the details in Section 12. We may ask you to verify your identity first.
You can also:
– Update your profile at any time from your profile settings.
– Delete your account at any time, directly within the App, from Settings → Account Deletion. This permanently removes your profile, photographs, messages, and verification data.
– Opt out of certain communications using your device notification settings.
10. Children’s Privacy
Christ Match is intended only for adults aged 18 and over. We do not knowingly collect, use, or disclose personal information from anyone under the age of 18. If you are under 18, please do not use the App.
If you discover that a child under 18 has provided us with personal information, please contact us immediately and we will delete it.
11. International Transfers
Some of our service providers, including Google and Amazon Web Services, process information in the United States and other countries. When information is transferred out of your country of residence, we use appropriate safeguards such as standard contractual clauses approved by the European Commission.
12. Contact Us
If you have questions about this Privacy Policy, your personal data, our data practices, or you would like to request access to or deletion of your data, please contact us:
Christ Match Support
Email: support@christmatchapp.com
You can also reach us through the Help & Support section of the App.
We aim to respond to all requests within 30 days.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, our service providers, or legal requirements.
When we make material changes, we will:
– Post the updated policy on this page and update the “Last Updated” date
– Where appropriate, notify you within the App before the change takes effect
Your continued use of the App after changes take effect means you accept the updated policy. If you do not agree, please delete your account.
14. Third-Party Services
The App may contain links to, or integrate with, third-party services. These services are governed by their own privacy policies, and we encourage you to review them:
– Apple Sign In
– Google Sign In
– Firebase (Google)
– RevenueCat
– AWS Rekognition (Amazon Web Services)
– OpenAI
– Google Cloud Vision
15. Definitions
– “Face data” means the live selfie image you capture for identity verification, the on-device liveness measurements used to confirm a real person is present, and the resulting verification outcome and similarity score.
– “Device ID” means an identifier associated with your device or app installation, such as an installation identifier used for crash diagnostics.
– “Sensitive personal information” includes face data and precise location.
