Privacy Policy
Welcome to Attest, a global dating and social networking app designed to foster trust and authenticity in online dating. We are committed to protecting your privacy and ensuring your personal information is handled in a safe and responsible manner. This Privacy Policy explains how we collect, use, share, and protect your information, as well as your privacy rights.
1. Information We Collect
We collect information to provide and improve our services. The categories of information we collect include:
Personal Identifiers
- Directly Provided: Name, email address, phone number, profile information (including photos, bio, age, and location).
- Automatically Collected: Unique device identifiers and IP address.
Commercial Information
- Directly Provided: Payment information for premium services, transaction history.
Internet Activity
- Automatically Collected: Interaction with our app, including usage data, response timing for Authenticity Checks.
Geolocation
- Automatically Collected: Location data derived from GPS and other technologies to provide location-based services.
Biometric Information
Attest does not collect, store, or process raw biometric data. When a user voluntarily initiates a Deep Verification session, they are connected to a third-party verification partner who operates under their own Privacy Policy and Data Processing Agreement. Attest receives only a structured result token (a pass/fail determination or trust score) from the partner. No raw biometric data — including voice recordings, facial analysis data, or behavioral analysis data — is transmitted to or stored on Attest's servers.
Professional Information
- Directly Provided: Professional or employment-related information, if included in your profile.
2. How We Use Your Information
We use your information for the following purposes:
- Service Delivery: To provide and manage our services, including the Authenticity Check feature.
- Personalization: To tailor your experience and show you relevant matches and suggestions.
- Analytics: To analyze usage patterns and improve our services.
- Marketing: To send promotional materials and updates, with your consent.
- Legal Compliance: To comply with applicable laws and regulations.
3. How We Share Your Information
We share your information with:
- Service Providers: To assist in delivering our services (e.g., third-party verification partners).
- Business Partners: For joint marketing and co-branded services, with your consent.
- Legal Requirements: To comply with legal obligations, court orders, or regulatory requests.
- Corporate Transactions: In connection with a merger, sale, or acquisition of our business.
We do not sell your personal information as defined under the California Consumer Privacy Act (CCPA).
Biometric Data and Third-Party Verification Partners
Before any Deep Verification session, users provide explicit, informed consent via a dedicated in-app consent screen that (1) identifies the third-party partner by name, (2) describes the data collected during the session, and (3) links to the partner's Privacy Policy. Consent is double opt-in and logged. Attest acts as a data controller only for profile data, match data, and Basic Authenticity Check session data (timed text responses). The third-party verification partner is the data controller for all biometric and behavioral analysis data collected during Deep Verification sessions. Attest's obligations under BIPA, GDPR, and CCPA are limited to profile data and the referral to the verification partner — not the biometric data itself.
4. Your Privacy Rights
Depending on your jurisdiction, you may have the following rights:
- Right to Know: Request details about the information we collect and how it is used.
- Right to Delete: Request deletion of your personal information.
- Right to Correct: Request corrections to your personal information.
- Right to Opt-Out: Opt-out of the sale or sharing of your personal information.
- Right to Non-Discrimination: Exercise your privacy rights without discrimination.
Jurisdiction-Specific Rights
- CCPA/CPRA (California): All of the above rights.
- Virginia CDPA, Colorado CPA, Connecticut CTDPA: Similar rights as CCPA.
- GDPR (EU): Rights to access, rectify, erase, restrict, and object to processing.
5. Data Retention
We retain your data only as long as necessary to fulfill the purposes outlined in this Privacy Policy. Retention periods are determined based on:
- Legal Requirements: Compliance with legal obligations.
- Business Needs: Operational and service delivery requirements.
6. Security Measures
We implement the following security measures to protect your information:
- Encryption: Data encryption in transit and at rest.
- Access Controls: Restricted access to personal information to authorized personnel only.
7. Children's Privacy
Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If we become aware of such data, we will take steps to delete it promptly. Parental consent is required for users under the age of 13.
8. International Data Transfers
For users in the EU, we comply with the GDPR by using Standard Contractual Clauses and data processing agreements with third-party partners to ensure adequate protection of personal data.
9. Do Not Track / Global Privacy Control
We honor Global Privacy Control (GPC) signals and browser Do Not Track settings where required by law.
10. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at: