Draft: this text has not yet been reviewed by a lawyer and may change before launch.
Privacy Policy
The short version
- Date Thai Test is a dating app. We collect what we need to show you to people you might like, to keep everyone safe, and to follow Thai law. Nothing more.
- We never sell your data. The app can show ads: pictures we host ourselves, chosen only by the app's language, never by what we know about you, and without trackers. Before we use any outside ad network, we will update this policy and ask for any consent the law requires.
- Some information is sensitive (who you want to meet, your verified face). We use it only with your consent, and you can withdraw that consent in the app at any time.
- Your messages are stored encrypted. Staff can open a conversation only when someone reports it, and every look is recorded.
- Our servers are in the United States, outside Thailand. Our company is outside Thailand too, so we have a representative in Thailand you can contact.
- You can download a copy of your data and delete your account at any time, in the app or on our website. A deleted account can be restored for 90 days, then it is erased.
1. Who we are
Date Thai Test is operated by [company legal name: to be completed], [registered address: to be completed] ("we", "us"). We are the data controller for the personal data described here.
Because our company is established outside Thailand, we have appointed a representative in Thailand under the Personal Data Protection Act: [representative in Thailand: to be completed], [representative's address: to be completed], representative@example.com. You and the Personal Data Protection Committee can contact them, in Thai or English, about anything in this policy.
You can reach our data protection officer at dpo@datetest.top.
2. What we collect
Account: your email address, a protected (hashed) version of your password, your date of birth (to check that you are 18 or older), the versions of the terms and this policy you accepted, and recovery codes (stored protected). If you add a passkey, we keep only its public part.
Profile: your display name, age, photos, an optional profile video and voice introduction, bio, prompts and answers, interests, lifestyle answers, height, job, education, languages, what you are looking for, and an optional username. You can also add your weight: it is stored encrypted and stays hidden until you choose to show it. If you choose to show your star sign and Chinese zodiac, we work them out from your date of birth; your date of birth itself is never shown.
Sensitive profile information: your gender, the people you want to meet and, if you choose to show them, your pronouns. Under the Personal Data Protection Act these can reveal sensitive information, so we ask for your explicit consent first.
Face verification (biometric data): if you choose to get the verified badge, a short video of your face is checked and a mathematical template of your face is kept, encrypted, to confirm that your photos show you and to stop one person running many accounts. The video itself is deleted after the check. We ask for your explicit consent first, and you can withdraw it (this removes the template and the badge).
Photos and videos you upload: we make new copies without the hidden details your phone adds (such as where and when a photo was taken). Before that, the app reads whether the original file says how it was made (for example that it was created with AI), and we keep that statement with the photo.
Location: your approximate area, from your phone (approximate permission only) or a city you choose. Other people see a rounded distance and your nearest city, never where you are. Your exact point is stored encrypted and used only to calculate distances and to detect fake locations. If you use travel mode, we keep the city you chose until the trip ends; if you plan an arrival from abroad, we keep the city and the day until you arrive. When your phone's approximate location is inside Thailand, we note the first and the last day it was (not where), only for the optional "In Thailand" badge, which you choose whether to show; this is deleted after 45 days away. When you share your location in a chat, your phone sends a precise point once, only to that person, and it disappears from the chat after 24 hours (or earlier if you stop sharing).
Activity in the app: likes and passes, matches, favourites, profile visits (unless you browse privately), super-likes and streaks, daily picks, badges you earn, a weekly summary for you, and when you were last active (others see only "Online", "Active today" or "Offline", and you can hide this). We also count how many likes each of your photos gets, as totals only, so we can show you which photos work best.
Your stay (optional): whether you are local, living here, here for a few months or visiting, and a "Here until" month; "Free this week" (on for 48 hours, verified profiles only); up to three next stops by month, which only your matches see; that you have moved on (you leave Discover, your chats stay); and the hangouts you say you are going to (others see only how many people are going, never who).
Plans (optional): plans you post (what, when, the area everyone sees and the exact place only the people going see, with its pin on the map, how many people, languages, women only), the plans you ask to join with your note, whether the host accepted you, and the group chat of a plan you go to. Group messages are stored encrypted.
Messages: your chats, photos, voice notes, GIFs, mini-games, date spots and shared locations. They are stored encrypted.
Safety and moderation: reports you make or receive, blocks, the results of automatic checks (for example nudity, faces, text that appears in pictures, scam or AI-image detection, duplicate photos, and risk signals such as a faked location or a modified phone), moderation decisions and appeals. If you write a phone number, email address or social media handle in a message or on your profile, we keep only a scrambled code of it, for up to 180 days, so we can see that two accounts gave out the same details, never the details themselves.
Your phone and connections: the app version, phone model and operating system, a random installation identifier, push notification tokens and, as Thai law requires, connection records (see section 8).
People you know (optional): if you turn on "Hide me from people I know", your phone reads its contacts and sends us only scrambled codes of their email addresses and phone numbers, never names, numbers or addresses. We scramble each code again with a secret key and keep only that. We use it for one thing: you and the people in your contacts never see each other in the app. We never contact them or use it for anything else. Turning it off deletes the codes.
Comments with likes: a comment you add to a like is shown to that person with your like and becomes your first message if you match. It is deleted if they pass or you take the like back.
Translation (when offered): if you tap Translate under a message, that message's text is sent to our translation service to translate it, and the translation is kept for 24 hours. Nothing is sent unless you tap.
Invites: if you enter a friend's invite code, we record that, and your friend earns a super-like once you are verified. To stop misuse we check whether the two accounts use the same phone, without showing this to anyone.
Things you send us: feedback, help requests and their screenshots, and the contacts you add to the date safety kit (their name and email, after they agree).
If you do not use Date Thai Test: we may hold a little information about you when someone who uses it involves you.
- Date safety kit contacts: your name and email, after you agree to be someone's contact. You get an email only if they miss a check-in or ask for help.
- Ask a friend: if someone shares a private link to their profile with you, you can leave a vote and a short comment without an account. We keep it only for them, delete it 30 days after the link ends, and use your network address only to stop misuse, without storing it.
- Contacts: if someone turns on "Hide me from people I know", only scrambled codes of your email address or phone number, as described above.
- Reports from our website: if you report content without an account, your name and email if you give them, to confirm that we received your report and tell you the outcome. They are deleted one year after the decision.
3. Why we use it, and on what basis
- To provide the service (contract): your account, profile, discovery, matches, chat, notifications you asked for, messages from our team about the service (such as maintenance, safety or rule changes, in the app or as a notification), and moving your data to our servers and staff (section 5). We choose who gets a team message from your city or area, age, gender group, languages, phone and when you joined or last used the app, never from sensitive information, and we keep who received one for 30 days after it ends.
- With your consent: sensitive profile information, face verification, precise location when you share it in a chat, push notifications, and News and offers (new features, events and offers from us; off until you turn it on in Settings). You can withdraw consent at any time in Settings; this does not affect what was done before.
- For safety and to prevent fraud (our legitimate interest in a safe service, and yours): automatic checks on photos and messages, duplicate-account detection, risk scoring, rate limits, moderation, and handling reports.
- To improve Date Thai Test (our legitimate interest): counts and totals, and trying a change with some users before everyone gets it.
- To follow the law (legal obligation): keeping connection records, answering lawful requests from authorities, and protecting children.
Providing your email, date of birth and at least one photo is needed to use Date Thai Test. Everything else is optional.
4. Who can see your data
- Other people using Date Thai Test see your public profile: photos, name, age, city, rounded distance, and what you choose to show. Your matches can also read the messages you send them. Friends you share an Ask a friend link with see only the parts you chose. If you post or join a plan, people in your city who may see it see its title, area and time, the host's profile card and how many are going, and on the map only a circle about 1.6 km across around its pin; only the people going see the exact place and pin, each other and the group chat, and only the host sees who asked to join and their note.
- Our staff (moderators, support, safety specialists) see only what their role needs. Sensitive details are hidden until a staff member gives a reason, and every look is recorded in an audit log.
- Our representative in Thailand receives requests and questions about your data that are sent to them, and passes them to us.
- Our hosting provider stores the data for us on servers in the United States, under a contract that protects it.
- Apple and Google deliver push notifications and confirm that the app is genuine. Notifications never contain the text of your messages.
- Authorities, when the law requires it and only for what the request covers.
We do not sell personal data, and we do not share it with data brokers. The app can show an ad on the Me screen: a picture stored on our own servers and marked "Ad". We choose it only by the language of your app, never by your profile, activity or location; we count only how many times each ad was shown and tapped in total, never who saw or tapped it; and we use no advertising ID, cookie or tracker. Your phone keeps the picture for up to 30 days. Tapping the ad opens the advertiser's website, which has its own privacy policy. If we ever use an outside ad provider or an outside translation service, this policy will first name it, say what it receives and explain how to say no.
5. Where your data is stored, and access from abroad
Our servers are in the United States, outside Thailand. Our company is established outside Thailand and our staff work in [countries where staff work: to be completed]. What you put into Date Thai Test is sent to and stored on those servers, and staff reach it there remotely, only as much as their role needs, to run and protect Date Thai Test. Under Thai law this counts as sending personal data out of Thailand. We do it because it is necessary to provide the service you signed up for, and we protect it in the same way wherever it is: a hosting contract that binds the provider to protect it, encrypted connections, sign-in only with a security key or passkey, sensitive details hidden until a reason is given, a record of every access, and written confidentiality and data protection duties for everyone who works for us.
Apple and Google may process notification tokens outside Thailand; they do so under their own safeguards.
Maps: the map in Date Thai Test comes from OpenFreeMap (Hyperknot Software Kft., Hungary), a free map service built on OpenStreetMap. To draw it, your phone or browser fetches the map pictures directly from OpenFreeMap, which therefore sees your IP address and which part of the map you look at, as any website you visit would (for example around you, if you tap "My position"). OpenFreeMap says it keeps no IP addresses in its normal logs, keeps them for up to 7 days in error logs and for up to 30 days while investigating abuse. We send it nothing else about you. "My position" uses your phone's approximate location on your phone only; it is not sent to us.
6. Automated decisions, and how we choose who you see
Some checks are automatic: whether a photo shows a face or nudity, whether an account looks like a duplicate or a scam, and whether someone sends too much too fast. A photo in which no face is found, or, once you have verified your face, a photo that clearly shows someone else, is refused at once; you see why and can ask a person to check it. Automatic results can hide content or send it to a person for review, but decisions that seriously affect you (such as a ban) are made or confirmed by a person. A risk score helps moderators decide which accounts to look at first; it never acts on its own. You receive the reasons for decisions, and you can appeal in the app.
Who you see in Discover is chosen first by your filters and theirs (age, distance, who each of you wants to meet), then ordered automatically by: the interests, languages and wishes you share, whether you are both free this week, distance, how recently people were active, how complete a profile is, and how likely a like is to be mutual. Your gender and who you want to meet are used only to show you to people who want to meet someone like you, and the other way round. You can change your filters at any time.
7. Children
Date Thai Test is only for people aged 18 or older. If we find that an account belongs to someone younger, we close it. Reports about the safety of children go to specially trained staff. Our Community Guidelines explain what we do about child sexual abuse and exploitation.
8. How long we keep it
- Your account and profile: while your account exists.
- After you delete your account: it closes at once and nobody can see it. You can restore it by signing in within 90 days; after that your data is erased.
- Backups: encrypted, used only to restore the service after a failure, and replaced over time, so erased data disappears from them within about a year.
- Connection records (Thai Computer Crime Act): 90 days, and the minimum identity data 90 days after your account ends, kept separately and encrypted.
- Face verification video: one day after the check (a week if a person has to look at it).
- Feedback and help requests: 60 days.
- Shared locations in chats: shown for 24 hours. Translations: 24 hours.
- Daily picks: 7 days. Your weekly summary: 4 weeks. Profile visits: 30 days. Location history: 30 days.
- Risk signals and contact-detail codes: 180 days. Username searches: 90 days.
- Free this week: 48 hours. Next stops: until their month has passed. "I'm going" to a hangout: 30 days after it. Days in Thailand for the badge: deleted after 45 days away.
- Plans: a plan, who asked to join and who went, and its group chat are deleted 30 days after it ends (messages that were reported stay with the report as evidence).
- Reports and moderation evidence: as long as needed for the case, normally up to one year. Chat photos and voice notes that were reported are kept for one year as evidence.
- Ask a friend answers: 30 days after the link ends. Reports sent through our website: one year after the decision.
- Your data download: the link works for 7 days, then the file is deleted.
9. Your rights
You can, at any time:
- see and download your data (in the app: My data & privacy, Download my data; or on our website),
- correct it (edit your profile),
- delete your account (in the app or on our website),
- withdraw consent for sensitive information, face verification and notifications (Settings),
- object to or ask us to restrict some uses of your data, and move your data elsewhere (the download is in a standard format),
- ask a person to review an automatic decision about you (appeal in the app).
Write to dpo@datetest.top or to our representative in Thailand (representative@example.com) for anything else. We answer within 30 days. You can also complain to the Personal Data Protection Committee of Thailand.
10. Security
We use encryption in transit and at rest for messages, sensitive fields and biometric templates, strict staff access with security keys or passkeys and an audit log of every access, and we test our systems regularly. If a breach puts your rights at risk, we will tell you and the authority as the law requires.
11. Changes
When we change this policy we will tell you in the app before the change takes effect, and ask for your consent again where the law requires it.
12. Contact
Data protection officer: dpo@datetest.top · Representative in Thailand: [representative in Thailand: to be completed], [representative's address: to be completed], representative@example.com · [company legal name: to be completed], [registered address: to be completed]