Privacy Policy

• We collect the minimum needed to run a dating product: an email to sign in, the profile text you write, your derived Energy Profile, and your private messages.
• We never store your birth date, birth time, or birth place — not even your year of birth. They are used on your device to calculate your chart and deleted immediately; only the resulting placements are kept.
• There are no public photos anywhere in the app.
• We never sell, share, or rent your information. No trackers. No ads. No data brokers.

• Account email — used only to create your account and sign you in.
• The profile you write — your display name (a pseudonym is fine), your age as a plain number (never your birth date), your city, your gender, who you're looking for, and your bio.
• Your Energy Profile — the derived placements and compatibility scores calculated from your birth data (for example, a placement or a pull percentage). Never the birth data itself.
• Approximate location — the current city you type in, at city level only, for matching. Its coordinates are derived once and live on your private record (never on the profile other members can read); they are coarsened for everyone else, who see only a distance band on your card (for example "within 5 km" or "5–20 km" — or the mile equivalent, "within 3 mi" or "3–12 mi", if you use the app in English). Your birth place is never used for this.
• Private messages — text, encrypted on your device before it is stored, plus any photos you choose to send inside a private chat.
• Purchase records — what you bought, when, and the amount, so your benefits keep working across devices and for accounting. Never your card number: checkout and card handling happen entirely inside our payment processor.

Your year of birth, asked once at registration for the 18+ check, is held in the browser memory for that check only and is not saved to your account.

• Your birth date, birth time, or birth place. Birth data is sensitive — on its own it can help identify you — which is exactly why we never retain it. You enter these details on your device, your placements are calculated right there, and the raw details are discarded: they are never saved to our servers. The year of birth asked at sign-up is checked in your browser for the 18+ gate and is not stored either. (To calculate, the city name you type is briefly sent to a lookup service to find its coordinates and time zone. Nothing about you is attached to it, and nothing is kept.) If you choose "Do Not Use My Data for Automated Matching", your data is not used for matching at all.
• Public photos. Photos can only be shared inside private chats you control. Nothing you upload is ever shown on a public profile.
• Real names, home addresses, phone numbers, government IDs, or financial details.

We never sell, share, trade, or rent your personal information. We run no third-party advertising and no third-party tracking, and we don't build profiles of you for anyone else.

Your data is stored on our platform provider's managed database, tied to your account. Your profile is visible only to other members — and you control which parts of your Energy Profile they can see (Settings → Energy Profile visibility).

• Before a match: other members only see your discovery card — display name, age, city, distance band, MBTI type, Sun sign, and a short snippet of your bio.
• After a mutual match: that member can see your full Energy Profile breakdown, and only that member.
• Your coordinates: never shown to other members in any circumstance — only the coarse distance band on your card.

Message text is encrypted in your browser before it is sent to our storage. The key is derived between you and your chat partner for that conversation alone, so the stored text is unreadable without the two of you. Photos and voice notes live in private storage and are only served through links that expire within minutes.

Pairing on CoreVibe is automated: an algorithm — not a person — compares Energy Profiles and decides who appears in your feed and whose feed you appear in. We ask for your explicit consent to this before your profile goes live, and we offer a "Do Not Use My Data for Automated Matching" opt-out at that moment. You can withdraw consent at any time in Profile → Privacy; your feed pauses immediately and your profile stops being used for matching. Withdrawing consent never affects your right to use the rest of the app or to delete your data entirely.

• Profile & Energy Profile — until you delete your account. Any field can be edited anytime.
• Birth data — never collected, stored or logged. Your date, time and place of birth are used in your browser to calculate your chart and deleted the moment it exists. The year of birth you enter at sign-up for the 18+ check is held in memory for that check only.
• Private messages, photos, voice notes — until you delete them, the conversation, or your account. Shared media lives in private storage behind links that expire within minutes.
• Likes and conversations — until you delete your account.
• Blocks and reports — until you unblock or delete your account.
• Analytics events — linked to you only while your account exists. When you delete your account they are anonymized (the link to you is stripped). Independently of that, every analytics event is anonymized 12 months after it happens (identity and pair fields stripped) and deleted after 24 months.
• Security telemetry (feed-read counters used to detect scraping) — retained for 90 days, then deleted.
• Safety audit records (fraud/abuse bans and who was notified) — retained for 24 months for safety and legal defense.
• Dismissed safety notices — deleted 90 days after you dismiss them.
• Purchase & subscription records — kept until you delete your account, and thereafter without any link to you, as required for accounting. Card details are never ours to keep.

An automated daily cleanup job enforces this schedule — records are anonymized and deleted on their dates without anyone having to ask. You can delete individual messages, whole conversations, and matches at any time — and Settings → Delete account permanently erases everything above.

We run on a managed platform and use as few processors as possible:

• Application hosting — our platform provider (Base44) hosts the app, its database, and private file storage.
• Email delivery — account emails (verification codes, password resets, invitations) are sent by the platform's email service. We send no marketing email.
• Sign-in provider — if you use Google sign-in, Google processes that sign-in; we receive only your email and name.
• Payment processing — checkout, card verification and charges are handled by our payment processor (Base44 Payments, powered by Wix). We never see or store your card details; we receive only the purchase record (product, date, amount) needed to make your benefits work.
• On-demand translation — when you press translate on a message, the text of that single message is sent to our AI provider for translation. Nothing is translated automatically.
• City lookup — when you calculate a chart, the birth city you type is briefly sent to a lookup service for coordinates and time zone; when you save your profile, your current city is looked up the same way for the distance band. A city name only. Nothing about you is attached, and the birth city is not kept.

We use no advertising networks and no data brokers. If that ever changes, this policy changes with it.

California law asks us to tell you, at or before collection, what we gather and why. Over the last 12 months we collected the following categories of personal information:

• Identifiers — your email address and display name.
• Characteristics — your age (as a number), your gender, and the gender you're looking for.
• Geolocation — approximate, city-level only, always coarsened to a distance band before anyone else sees it.
• Content you create — your bio and your private messages.
• Inferences — your Energy Profile (MBTI type, astrological placements, Human Design estimate) and the compatibility scores derived from it.
• Sensitive personal information — birth details are processed transiently on your device and never stored; personality inferences and private messages are treated as sensitive and protected accordingly (device-side encryption, coarsened location, owner-only records).
• Financial — purchase records only (product, date, amount). Card details are handled by our payment processor and never reach us.

We do not sell or share personal information as those terms are defined by the CCPA, and we do not use it for targeted advertising.

• Do Not Sell or Share My Personal Information — we never have. There is no sale or sharing to opt out of; if that ever changes, a real opt-out link will appear here.
• Limit use of sensitive personal information — sensitive data is only ever used to provide the app's core functions, never for inference beyond the matching you consented to.
• Opt out of automated matching — choose "Do Not Use My Data for Automated Matching" during onboarding, or flip it anytime in Profile → Privacy.
• Correct or delete — edit any field from your Profile, or erase everything via Settings → Delete account.

California residents may also exercise these rights by contacting us with the details below; we will respond as the CCPA requires.

• See and edit your data anytime from your Profile page.
• Control what others see (Settings → Energy Profile visibility).
• Block or report anyone, anytime.
• Full deletion — Settings → Delete account.

To exercise any of these rights or ask a question about your data, contact us using the details below.

We use reasonable administrative and technical safeguards to protect the little data we hold. If a breach of security affects personal information, we will:

• Notify affected individuals without unreasonable delay, and no later than 30 days after determining a breach occurred.
• Notify the Florida Attorney General if 500 or more Florida residents are affected, and notify consumer reporting agencies if 1,000 or more individuals are notified.
• Keep written documentation of our breach determination for at least five years.

This plan is consistent with the Florida Information Protection Act (Fla. Stat. § 501.171).

CoreVibe is strictly for adults 18 and older. How we verify age — three gates:

• At sign-up. You must tick an explicit "I am 18 or older" confirmation, and you must enter your year of birth. An account cannot be created if that year implies you are under 18 — registration is refused and no account exists.
• When a chart is calculated. The birth date you enter is checked against the same 18+ threshold on your device before any placements are saved. An under-18 birth date is refused with an age-ineligibility message and nothing is written to your records. Your date of birth is used for this check only and, like all birth data, is never stored.
• Before a profile goes live. Onboarding refuses to create a profile whose stated age is under 18, whatever happened earlier.

The app is also published with an adult (18+) age rating in the app stores as a platform-level assurance layer. CoreVibe is not directed to children, and we do not knowingly collect information from anyone under 18. If we learn that we have, we will delete the data and terminate the account.

The 18+ rule is also stated in our Terms of Service.

If we change this policy, we'll update this page with a new "Last updated" date.

Questions or requests about your privacy: [your contact email].