Privacy Policy

Authentication data — When you sign in with Apple, we receive an email address from Apple (this may be your real email or a private relay address generated by Apple if you chose to hide your email). This is stored by our authentication provider and used only to identify your account. We do not use it to contact you or for marketing.

We use this information to:

• Create and secure your account
• Allow you to sign in
• Prevent abuse and unauthorised access

You may choose to provide the following information on your profile. All profile fields are optional unless stated otherwise:

• First name
• Age
• Gender
• Height
• Nationality
• Languages spoken
• Job title
• Education
• Bio
• Personality tags
• Interests
• First date description
• Drinking and smoking habits
• Dating intention
• Bangkok neighbourhood
• How long you are staying

We use this information to:

• Build and display your public profile to other users
• Improve match quality and discovery
• Personalise your experience inside the app

Some profile fields are visible to other users in the app.

You may upload up to 5 profile photos.

When you upload a photo, we automatically:

• Store the full-resolution image securely using Supabase Storage
• Create a 256×256 pixel thumbnail for use in push notifications
• Scan the image using Google Cloud Vision API for content moderation
• Use face detection within Google Cloud Vision to identify eye position for smart cropping — no facial recognition or biometric identification is performed

The thumbnail is derived from your own uploaded photo. No AI is used to generate, alter, or create any images.

When you send a message to a match, the message content is stored securely in our database and delivered to the recipient. We use message data to:

• Deliver your messages
• Display conversation history within the app
• Investigate reports of abuse or policy violations

Message content is never used for advertising, profiling, or shared with third parties except as described in the Push Notifications and Translation sections below.

MATCHA requests access to your device GPS to show your approximate distance from other users. Your location is updated each time you open the app (at most once every 10 minutes), but only while the app is in use — never in the background. Your coordinates are stored securely on our servers and used only to show distances in the discovery feed. Your exact GPS coordinates are never displayed to other users.

You may also manually set your Bangkok neighbourhood and stay duration on your profile. Denying location permission will not prevent you from using the app, but distance-based discovery will be less accurate.

While you are using the app, MATCHA records limited activity signals for the purpose of managing push notifications:

• Whether the app is currently in the foreground
• Which conversation, if any, you are currently viewing
• Your last active timestamp
• Your device locale

This information is used exclusively to suppress redundant notifications — for example, to avoid sending a push notification for a message you are already reading. It is not shared with any third party and is not used for advertising or profiling.

We may collect limited technical data including:

• Device type and model
• Operating system version
• App version
• Crash logs and diagnostic information

This information is used to:

• Maintain app stability and performance
• Diagnose and fix bugs
• Improve reliability and security

Supabase provides the infrastructure that powers MATCHA, including:

• User authentication
• Database storage for profiles, messages, matches, and activity
• File storage for photos and thumbnails

Data may be processed on servers in the EU and the US. supabase.com

Every photo uploaded to MATCHA is automatically scanned by Google Cloud Vision API before it is published on your profile. This scan performs two functions:

• Safe Search Detection — checks for nudity, graphic violence, and other inappropriate content to keep the platform safe
• Face Detection — identifies eye position in the photo to enable accurate smart cropping; this is not facial recognition and does not identify who you are

Images are temporarily transmitted to Google for processing. Google's privacy policy applies to this processing. policies.google.com/privacy

Reports of inappropriate profiles or content are reviewed manually by the MATCHA team. We do not use automated AI to scan profile text, bios, or messages for moderation purposes.

MATCHA offers an optional in-chat translation feature. Translation is always user-triggered — you must tap a button to translate a specific message. No messages are translated automatically.

When you request a translation, the selected message text (up to 2,000 characters) is sent to a trusted third-party AI provider for processing. This provider does not use submitted content to train its models, and does not retain the message text beyond the time needed to return the translation.

Translation requests are rate-limited to protect the service.

Push notifications are delivered through the Expo push notification service. When a notification is sent, Expo receives only the data required to display it:

• For message notifications: the first 120 characters of the message, the sender's display name, and the sender's notification thumbnail URL
• For match notifications: the other user's display name and thumbnail URL
• Your device push token, used solely for delivery

Expo does not use this data for advertising or any purpose beyond delivering the notification. expo.dev/privacy