Privacy Policy
SonCrush places the utmost importance on protecting your privacy. This policy describes what data we process, on which legal bases, who it is shared with, how long it is kept, and the rights you have. It applies worldwide; where the General Data Protection Regulation (GDPR) applies, we comply with its requirements.
1. Data controller
The data controller is SonCrush — France.
For any question about your data or to contact our data protection officer: privacy@soncrush.com.
2. Data we collect
- Account: email, phone, password (stored encrypted/hashed).
- Profile: first name, age, gender, orientation, photos, bio, interests, prompts, audio/video clips and any lifestyle details you add.
- Location: approximate (rounded) position to suggest nearby profiles.
- Usage: likes, matches, messages, sign-in devices, and technical security logs (including IP address).
- Payment: subscribed plan and transaction references (card numbers are handled directly by our payment providers, never stored by us).
- Verification: certification selfie, where applicable (never shown publicly, deleted after verification).
Some of this information (orientation, preferences) may constitute sensitive data; you provide it voluntarily and consent to its processing to operate a dating service.
3. Purposes and legal bases
We only process your data for specified purposes, each resting on a legal basis:
| Purpose | Legal basis (GDPR art. 6) |
|---|---|
| Provide the service (account, profiles, matches, messaging) | Performance of the contract |
| Approximate geolocation and notifications | Your consent |
| Security, fraud prevention and moderation | Legitimate interest |
| Audience measurement (if enabled) | Your consent |
| Accounting retention of payments | Legal obligation |
Your private messages are never used for advertising.
4. What other members see
Your profile (photos, first name, age, the information you provide) is visible to other members according to your preferences. Your email, phone and exact location are never shared.
5. Recipients and processors
We do not sell your data. It may be processed by providers strictly necessary to run the service, contractually bound to confidentiality and security:
| Provider | Purpose | Location |
|---|---|---|
| LWS | Website and database hosting | European Union |
| Stripe | Card payment processing | EU / United States (standard contractual clauses) |
| PayDunya | Mobile money / card payments (Africa) | Senegal / West Africa |
| PayTech | Mobile money payments (Africa) | Senegal / West Africa |
6. International transfers
SonCrush is a worldwide service. Your data may be processed in countries outside your region of residence. Where a transfer outside the European Union takes place, it is governed by appropriate safeguards (notably the European Commission's standard contractual clauses).
7. Retention
- Account and profile: While the account is active; erased or anonymized upon account deletion.
- Messages and matches: Kept while the relationship exists; deleted/anonymized upon account deletion (except an ongoing report).
- Security logs (sign-ins, IP): Up to 12 months, then anonymized.
- Payment data (invoices): Up to 10 years, under accounting and tax obligations.
- Verification selfies: Deleted after verification; never shown publicly.
8. Your rights
You have the right to access, rectify, erase, port, restrict and object, as well as the right to withdraw your consent at any time. You can exercise most of these rights directly from your account area:
- Export my data (JSON file).
- Delete my account (erasure / anonymization).
You may also lodge a complaint with the competent data-protection authority (in France: CNIL (Commission nationale de l'informatique et des libertés)).
9. Cookies and trackers
We use a session cookie strictly necessary to operate the service (authentication). Any audience measurement is performed with a privacy-friendly tool and is only enabled with your consent where the law requires it.
10. Minors
The service is exclusively reserved for people aged 18 or older. Any account identified as belonging to a minor is immediately deleted and its data erased.
11. Security
Hashed passwords, secure connections (HTTPS), security headers, anti-CSRF tokens, device management and remote sign-out: we implement technical and organizational measures to protect your data against unauthorized access, disclosure or loss.
12. Changes
This policy may change. In the event of a significant change, we will inform you by an appropriate means. The last-updated date appears at the top of this document.
13. Contact
To exercise your rights or for any question about your personal data: privacy@soncrush.com.