Privacy Policy

How we collect, use, disclose, and protect your information

Effective: January 1, 2026Last Updated: December 28, 2025Version: v2025-12-28

1. Information We Collect

  • Account: name, phone, email, date of birth, gender.
  • Profile: photos, bio, interests, preferences, goals.
  • Voice Data: onboarding, feedback, Voice Bridge sessions.
  • Digital Twin Data: personality, style, values derived from onboarding.
  • Communications: messages, Twin transcripts, feedback, support inquiries.
  • Payment data processed by third-party providers.
  • Sensitive info (with consent): sexual orientation, gender identity, optional race/ethnicity or beliefs, precise geolocation.
  • Device/Usage: device type, OS, browser, pages visited, time spent, connection activity.
  • Location: city-level by default; precise only with explicit consent.

2. How We Use Information

  1. Provide, maintain, and improve services.
  2. Create and maintain your Digital Twin.
  3. Facilitate matches and Twin-to-Twin conversations.
  4. Process transactions and send related information.
  5. Send technical notices, updates, and support messages.
  6. Respond to comments, questions, and requests.
  7. Monitor trends and usage.
  8. Detect, investigate, and prevent fraud or abuse.
  9. Personalize and improve experience.
  10. Improve AI systems using anonymized/aggregated data.

3. How We Share Information

  • With matched users: profile data and Digital Twin interactions.
  • Service providers: hosting, analytics, payment, security.
  • Legal compliance and safety: when required by law or to protect rights/safety.
  • Business transfers: mergers, acquisitions, or asset sales.

4. Do Not Sell or Share

We do not sell personal information. You may opt out of any sharing (including analytics/marketing) via Do Not Sell or Share, Privacy Settings, or Global Privacy Control (GPC). GPC signals are honored automatically.

5. Data Storage & Security

  • Local-first: Twin data and transcripts stored encrypted on-device; servers process in real time but do not retain raw conversation data.
  • TLS 1.3 in transit; AES-256 at rest; security audits and pen tests.
  • Retention: personal data deleted within 30 days of account deletion except as required by law or fraud prevention.

6. Your Privacy Rights (California/CCPA/CPRA)

  • Know/access, delete, correct personal information.
  • Opt out of sale/sharing of personal information.
  • Limit use of sensitive personal information to necessary service delivery.
  • Non-discrimination for exercising rights.

Exercise rights via Privacy Settings, email privacy@matchwell.ai, or in-app Privacy Settings. We respond within 45 days.

7. Children

MatchWell is 18+ only. We do not knowingly collect data from individuals under 18.

8. Changes to this Policy

We notify users of material changes at least 30 days before they take effect.

9. Contact

Digital Twin (AI)Not human • 18+ only
Digital Twins are AI and not human. 18+ only.