Privacy Policy
Effective August 1, 2026
This policy explains what MedMatchX LLC ("we," "us"), operating the RealOneDating app and website, collects about you, why, who we share it with, how long we keep it, and how you can control or delete it.
The short version. We collect what you give us to build a profile and find matches, plus limited technical data to keep the app working and safe. We do not sell your personal information. We do not share your data with advertisers for cross-context behavioral advertising. You can delete your account and data at any time from Settings or at realonedating.com/delete-account.
1. Who is responsible for your data
MedMatchX LLC, a Wyoming limited liability company, 7 Fay Street, Taunton, MA 02780, United States, is the controller of your personal information. Contact us at privacy@realonedating.com.
2. What we collect
Information you give us
| Data | Examples | Required? |
|---|---|---|
| Account data | Email address or phone number, password (stored hashed), or your Apple/Google sign-in identifier | Required |
| Profile data | First name, date of birth, gender, photos, bio, height, education, occupation, interests, relationship goals | Required to match |
| Preference data | Age range, distance, gender you're interested in | Required to match |
| Sensitive data | Sexual orientation, and — if you choose to add them — religion, ethnicity, or health/lifestyle details in your profile | Optional, with your explicit consent |
| Verification data | A selfie or short video used to confirm you are a real person and match your photos | Optional (required for the Verified badge) |
| Content | Messages, voice notes, photos you send, and anything you write in the app | You choose |
| Reports and support | What you tell us when you report a user or contact support, including any evidence you attach | You choose |
| Payment records | Transaction identifiers and subscription status from Apple or Google. We never receive or store your card number. | If you subscribe |
Information collected automatically
| Data | Purpose |
|---|---|
| Device identifiers, OS version, app version, device model | Compatibility, crash diagnostics, fraud and ban evasion detection |
| IP address and coarse location derived from it | Security, fraud detection, regional compliance |
| Precise location (only if you grant the permission) | Showing you nearby matches and your distance from them |
| Usage data — screens viewed, features used, swipes, session length | Improving matching and the product |
| Crash logs and performance data | Fixing bugs |
| Cookies and similar technologies on our website | See our Cookie Policy |
Photo metadata
We strip EXIF metadata — including GPS coordinates — from photos you upload before they are shown to other users.
3. Why we use it, and our legal basis
| Purpose | Legal basis (GDPR/UK GDPR) |
|---|---|
| Creating your account and providing matching | Performance of a contract |
| Processing your sexual orientation and any other special-category data in your profile | Explicit consent (Art. 9(2)(a)) — you can withdraw it by removing the data or deleting your account |
| Showing you nearby people | Consent (device location permission) |
| Preventing fraud, spam, harassment, and child sexual exploitation; enforcing our rules | Legitimate interests, and legal obligation |
| Processing subscriptions | Performance of a contract |
| Product analytics and improvement | Legitimate interests (or consent where required) |
| Sending service emails (security alerts, policy changes) | Contract / legal obligation |
| Sending marketing emails or push notifications | Consent — opt out any time |
| Responding to lawful legal process | Legal obligation |
We do not use your personal information or your content to train third-party generative AI models. Where we use automated systems to screen content for safety violations, this is described in Section 8.
4. Who we share it with
With other users: your profile — name, age, photos, bio, and the details you chose to add — plus your approximate distance. Your exact coordinates, email address, phone number, and payment data are never shown to other users.
With service providers, under contract and only to do work for us:
- Hosting and storage — Amazon Web Services (us-east-1)
- Payments and subscriptions — Apple App Store, Google Play Billing
- Analytics and crash reporting — Firebase Analytics and Sentry
- Content moderation and CSAM detection tooling
- Email and push delivery
- Customer support tooling
With authorities: where required by valid legal process, or where we believe in good faith it is necessary to prevent imminent harm. We report apparent child sexual abuse material to the National Center for Missing & Exploited Children (NCMEC) as U.S. law requires — see our Child Safety Standards and Law Enforcement Guidelines.
In a business transfer: if we are acquired or merge, your data may transfer to the successor, who will remain bound by this policy or give you notice of any change.
What we do not do
- We do not sell your personal information.
- We do not share your personal information for cross-context behavioral advertising.
- We do not disclose your sexual orientation, health data, or message content to advertisers, data brokers, or anyone else outside the purposes listed above.
5. How long we keep it
| Data | Retention |
|---|---|
| Active account data | Until you delete your account |
| After you request deletion | A 14-day grace period during which you can restore, then permanent deletion within 30 days |
| Backups | Purged on a rolling basis within 90 days |
| Messages you sent | Deleted from your account; the recipient's copy of the conversation may persist for their account |
| Transaction records | Up to 7 years, where tax and accounting law requires |
| Safety records for banned users | A limited hashed record (such as device identifier and email hash) retained indefinitely to prevent banned users from returning |
| CSAM reports and associated evidence | Preserved as required by 18 U.S.C. § 2258A and provided to NCMEC and law enforcement |
6. Your choices and rights
Everyone can:
- View and edit profile data in the app
- Turn location permission on or off in device settings
- Opt out of marketing email and push notifications
- Download a copy of your data — request at privacy@realonedating.com
- Delete your account and data — Settings → Account → Delete Account, or realonedating.com/delete-account
If you are in the EEA, UK, or Switzerland, you also have the right to access, correct, delete, restrict, or object to processing, to data portability, to withdraw consent at any time, and to lodge a complaint with your local supervisory authority. We respond within one month.
If you are in California, you have the right to know, delete, correct, and to limit the use of sensitive personal information, and the right to non-discrimination for exercising these rights. We do not sell or share personal information as those terms are defined by the CCPA/CPRA, so no "Do Not Sell or Share" opt-out is required — but you can still exercise every other right at privacy@realonedating.com. You may use an authorized agent.
If you are in Virginia, Colorado, Connecticut, Texas, Oregon, Montana, or another U.S. state with a comprehensive privacy law, you have comparable rights, including the right to appeal a denied request — appeal to privacy@realonedating.com with "Privacy Appeal" in the subject line.
We verify requests by confirming control of the account email or phone number before acting.
7. International transfers
We are based in the United States and process data there. If you are outside the U.S., your data will be transferred to and stored in the U.S. Where required, we rely on the European Commission's Standard Contractual Clauses and the UK Addendum for these transfers. Contact privacy@realonedating.com for a copy of the safeguards.
8. Safety, moderation, and automated processing
To keep the platform safe we use automated tools alongside human review to:
- Detect nudity, sexual content, and violence in uploaded images
- Detect known child sexual abuse material using industry hash-matching
- Detect spam, scam, and grooming patterns in messages
- Detect ban evasion and fake accounts
Automated systems may restrict or remove content and, in serious cases, suspend an account. You can appeal any enforcement decision by writing to safety@realonedating.com; a human will review it. Enforcement that results in permanent termination is reviewed by a person before it becomes final, except in cases involving child sexual exploitation, where we act immediately.
9. Security
We protect your data with encryption in transit (TLS) and at rest, hashed passwords, access controls limiting staff access to what their role requires, logging of internal access, and regular review. No system is perfectly secure. If a breach affects your personal information, we will notify you and the relevant regulators as required by law.
10. Children
RealOneDating is strictly for adults 18 and over. We do not knowingly collect personal information from anyone under 18. If we learn that a user is under 18, we terminate the account and delete the data immediately. If you believe a minor is using the Service, report it in the app or write to childsafety@realonedating.com right away. See our Child Safety Standards.
11. Changes
We will post any update here with a new effective date, and will notify you in the app or by email before material changes take effect.
12. Contact
MedMatchX LLC — Privacy 7 Fay Street, Taunton, MA 02780, United States privacy@realonedating.com