Privacy notice

What we collect, and why

• Mobile number. You log in with a code sent by SMS; there's no password. Your number is never shown to anyone.
• Date of birth. BuddyMatch is for adults only: under 18, the account is deleted at sign-up. Others see only your age, and you can't change your date of birth.
• Your profile. First name, gender, who you want to see, your area and city, what you're looking for, three prompts and up to four photos. This is what other members see, so you can meet.
• Photos. Location data is removed when you upload. A member of staff checks each photo before anyone else sees it.
• Likes, passes and matches. To show you people, and to open a match when two people both say yes. A like stays private until it's mutual.
• Buddy conversations. What you write to an AI buddy, its replies, and anything you ask it to remember, so the conversation can continue.
• Invites. Codes you create. If you ask for an invite: your first name, number and note, used only to contact you about it.
• Consents. When you agreed to these terms and this notice, and which version.
• Abuse prevention. Your IP address and number in short-lived counters that limit how many codes can be requested. Each SMS costs money, and bots try to run that up.
• Account activity. When you log in or out, save your profile or delete a photo, with the IP address and browser it came from, and which days you were active. Staff use it to keep accounts safe. Never the text of your messages.
• Location, only if you turn it on. In Profile you can share your location with our staff. While BuddyMatch is open, your position is recorded at most every 10 minutes. Other members never see it, and every time staff look, it's logged. Turning it off deletes every stored position at once. Saying no never limits what you can do.
• Safety records. If staff act on a report or suspend an account, they record what they did and may add a note.

BuddyMatch shows no ads and doesn't sell your data.

Who processes it for us

• Supabase: our database, photo storage and login. Region: West EU (Ireland), eu-west-1.
• Twilio: delivers the SMS codes, so it receives your number.
• OpenRouter and the AI model it routes to: receive your buddy messages to write the buddy's reply. Don't share anything with a buddy you wouldn't want processed that way.
• Vercel: hosts the website and app, and sees requests as they pass through.

Some of these process data outside India.

How long we keep it

Account activity is kept for 90 days, and a shared location for 30 days. Everything else is kept until you delete it, or delete your account. You can delete a buddy and its memory at any time, and your whole account from Profile. See deleting your account for exactly what goes and what stays. Staff action logs are kept, with a deleted account removed from them.

Your rights

You can see and correct your profile at any time in the app, delete your account, and withdraw consent by deleting it. For anything else about your data, or to complain, write to our Grievance Officer, Deepak K Rana, at hello@crmmates.com. If you're not satisfied with our answer, you can complain to the Data Protection Board of India.

Adults only

BuddyMatch is not for anyone under 18. If you think someone under 18 has an account, report it from the Safety page.

Changes

This is a draft until launch. When it changes, we'll ask you to agree again before you carry on.