Privacy Policy

1. Who we are & scope

Kollided is operated by Ensasys ("Kollided"). This policy applies to the Kollided mobile app (iOS and Android), the Kollided web app, and kollided.com. It does not apply to third-party sites or services we link to or integrate with, even though we describe some of those integrations below.

You must be at least 18 years old to use Kollided — see Section 8.

2. Information we collect

a. Information you give us directly

• Account information: username, email address, password (we never store your actual password — only a salted cryptographic hash of it), and date of birth (used solely to confirm you're 18+ and to power age-range matching; we do not display your exact birth date to other users).
• Profile information: display name, "about me" bio, interests, gender, who you're interested in matching with, your chosen in-app avatar/character color, and up to 5 profile photos.
• Messages & content: chat messages and images you send to other users through the app.
• Support & account requests: if you contact us — including through our no-login Account & Support Requests form — we collect whatever you choose to submit (e.g. topic, an optional username/email, and your description), plus the IP address the request came from, which we keep only to detect abuse of that form.
• Purchase information: if you subscribe, our payment processors (see 2c below) tell us your subscription tier, provider, and subscription/renewal dates. We do not receive or store your full payment card number.

b. Information collected automatically

• Location: with your device permission, we collect your precise geolocation to power the "radar" feature that shows you people nearby and lets you set a maximum search distance. We show other users your approximate distance from them, not your exact coordinates or address.
• Device & usage data: IP address, device/browser type, app version, and general usage/interaction data (e.g. which features you use), which we use for security, abuse prevention, and improving the Service.
• Push notification data: if you enable notifications, we store a push subscription token tied to your browser/device so we can deliver "come back!" engagement reminders and other app notifications. You can turn these off at any time in Profile settings.

c. Information from third parties

• Google Sign-In: if you register or log in with Google, Google shares your email address and name with us to create/authenticate your account.
• App stores & payment processors: if you subscribe through the Apple App Store, Google Play, or Stripe, those platforms — together with our subscription-management provider, RevenueCat — share subscription status, tier, and renewal/cancellation events with us so your account reflects what you've paid for.

3. How we use your information

• Operate core features: create and display your profile, power radar-based matching within your set distance and preferences, and enable chat between matched users.
• Verify you meet our minimum age requirement and enforce age-range matching preferences.
• Process subscription purchases, renewals, and cancellations, and unlock the features tied to your tier.
• Send account-related messages (email verification codes, password reset codes) and, if enabled, engagement/push notifications.
• Review reports, enforce our Terms and Community Guidelines, and take action on accounts that violate them (including suspension or deletion).
• Respond to support and account requests, including account-deletion and report submissions made without logging in.
• Detect, investigate, and prevent fraud, spam, automated abuse, and security incidents (for example, rate-limiting logins and form submissions, and flagging suspicious IP activity).
• Show ads, where enabled, through our ad partners (see Section 5), to support the free tier of the Service.
• Comply with legal obligations and enforce our agreements.

4. Legal bases for processing (EEA/UK users)

If you're in the European Economic Area or the UK, we rely on the following legal bases under the GDPR/UK GDPR:

• Contract: processing needed to create your account and provide the Service you've signed up for (profile, matching, chat, subscriptions).
• Consent: for optional features like precise location access, push notifications, and (where applicable) ad personalization — you can withdraw consent at any time through your device or app settings.
• Legitimate interests: for security, fraud prevention, abuse detection, and improving the Service — balanced against your rights and interests.
• Legal obligation: where we need to retain or disclose information to comply with the law.

5. How we share information

• Other users: your profile (display name, bio, interests, photos, gender/interest preference, approximate distance) is visible to other users within your matching radius, as intended by the Service. Chat messages are visible only to you and the other participant in that conversation.
• Service providers: companies that host our infrastructure and database, send verification/notification emails, deliver push notifications, and manage subscriptions (RevenueCat) and payments (Apple, Google, Stripe) on our behalf. These providers only receive what they need to perform their function for us.
• Advertising partners: where ads are enabled, we work with AppLovin MAX and Google AdMob (in our mobile apps) and Google AdSense (on the web). These partners may collect device/advertising identifiers and usage data to serve and measure ads, subject to their own privacy policies and any consent/opt-out choices your device offers (e.g. Apple's App Tracking Transparency, Android ad ID settings).
• Moderation & safety: if you're reported by another user, our moderators can only review the private chat history connected to that report if the reporting user has explicitly consented to sharing it with us — otherwise we act on the written report alone.
• Legal & safety reasons: where we believe in good faith that disclosure is required by law, or necessary to protect the rights, property, or safety of Kollided, our users, or the public.
• Business transfers: if Kollided is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction, subject to this policy (or a successor policy you'll be notified about).

We do not sell your personal information for money. See Section 16 for what this means specifically under California law, given how advertising partnerships are sometimes categorized there.

6. Data retention

When you delete your account, we remove your profile and associated content from active systems; some information may be retained for a limited period where we're legally required to, or where necessary to resolve disputes, enforce our agreements, or prevent fraud.

7. Your rights & choices

Available to everyone, in the app

• View and update your profile information at any time.
• Delete individual chat messages or images you've sent.
• Block or report another user.
• Turn off push notification reminders in Profile settings.
• Delete your account, or — if you can't log in — submit a deletion request through our Account & Support Requests page.

Depending on where you live, you may also have additional legal rights described in Section 16.

8. Children's privacy

Kollided is strictly for users 18 years of age and older. We do not knowingly collect personal information from anyone under 18. If we learn that someone under 18 has created an account, we will delete that account and the associated data as soon as reasonably possible. If you believe a minor is using Kollided, please tell us through our Account & Support Requests page (choose "Report Account").

9. Data security

We use technical and organizational measures designed to protect your information, including:

• Passwords are never stored in plain text — only salted cryptographic hashes.
• Data in transit is encrypted (HTTPS/TLS).
• Rate limiting on login, registration, and public form submissions to slow down automated abuse.
• Role-based access control for our administrative dashboard, with tiered permissions so staff only have the access their role requires.
• Timing-safe comparisons and authenticated webhooks for server-to-server integrations like payment processing.

No method of transmission or storage is 100% secure, and we can't guarantee absolute security — but we work to keep your information appropriately protected and to improve these measures over time.

10. International data transfers

We and our service providers may process your information in countries other than the one you live in, which may have different data protection laws. Where required, we use appropriate safeguards (such as standard contractual clauses) for these transfers.

11. Cookies & similar technologies

Our web app uses local browser storage (not third-party tracking cookies of our own) to remember things like your selected language and session state. If ads are enabled on the web version, our ad partner (Google AdSense) may set its own cookies or similar technologies to serve and measure ads — see their privacy policy for details, and use their opt-out tools or your browser's cookie controls to manage this.

12. Automated matching, not automated decisions

Kollided's "radar" shows you other users based on straightforward filters you control — distance, age range, and who you're interested in. This is filtering, not a scoring or profiling system, and it doesn't make any decision that produces a legal or similarly significant effect about you. We don't use fully automated decision-making in that sense.

13. "Do Not Track" signals

Some browsers offer a "Do Not Track" (DNT) signal. There's no common industry standard for how to respond to it, so — like most services — we don't currently change our data collection in response to a DNT signal. You can still use the controls described in Section 7.

14. If something goes wrong

If a security incident occurs that affects your personal information in a way that requires notice under applicable law, we'll notify you and/or the relevant regulator as required by that law.

15. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we'll update the "Last updated" date above and, where required by law, provide additional notice (such as an in-app notification). Your continued use of Kollided after a change takes effect means you accept the updated policy.

16. Region-specific rights

European Economic Area & United Kingdom (GDPR / UK GDPR)

You have the right to access, correct, delete, or port your personal information; to restrict or object to certain processing; and to withdraw consent at any time where we rely on consent. To exercise these rights, contact us using the details in Section 17. You also have the right to lodge a complaint with your local data protection supervisory authority.

California (CCPA/CPRA)

If you're a California resident, you have the right to know what personal information we've collected about you, to request deletion or correction of it, and to opt out of the "sale" or "sharing" of your personal information. We don't sell personal information for money. Because some advertising partnerships can count as "sharing" under California law even without a sale, you can opt out of that sharing by disabling ad personalization in your device settings, using our ad partners' own opt-out tools, or honoring a Global Privacy Control (GPC) signal from your browser where technically supported. We won't discriminate against you for exercising these rights.

Other U.S. states

If you live in a state with its own comprehensive privacy law (for example, Virginia, Colorado, Connecticut, Utah, or others as they take effect), you may have similar rights to access, correct, delete, and port your information, and to opt out of targeted advertising. Contact us using the details below to exercise these rights.

Canada (PIPEDA)

If you're in Canada, you have the right to access and request correction of your personal information, and to withdraw consent for its collection, use, or disclosure, subject to legal or contractual restrictions.

17. Contact us

Questions, requests, or concerns about this Privacy Policy or your information can be sent to:

Email: [email protected]
Or use our Account & Support Requests page — no login required.