Privacy Policy

You give us:

• Account: email address, password (stored only as a secure hash), and phone number if you verify it.
• Profile: name, date of birth, gender, who you’re looking for, role, city and country, photos and videos, headline, bio, height and the optional details you choose to add (for example body type, education, languages, interests, ethnicity, net worth, travel plans and countries visited).
• What you share: posts, stories, comments, likes, favorites, messages, photos and voice messages in chats, trip invites and support requests (including screenshots you attach).
• ID verification: if you get verified, a selfie and a photo of your ID document. We use them only to check it’s you and delete both once checked.
• Settings: privacy choices, notification choices and the people you block or report.

We collect automatically:

• The country you last logged in from (from your IP address), shown on your profile as “Last active in…” unless you hide it with Premium or Black.
• Device and login information: IP address, browser, a device identifier cookie and login times, used to keep accounts secure and enforce bans.
• When you were last active, and which stories you viewed (story authors can see their viewers).

From others: Stripe tells us whether a payment went through (never your full card number). Other members may report you, which we record.

Because Sugarmeetings is a dating service, some of what you share can say something about your sex life or sexual orientation, and you may choose to add details such as ethnicity. This is special-category data under the GDPR. We only process it because you choose to share it on your profile to meet people, which is your explicit consent. You can remove optional details at any time in Edit profile, or delete your account.

• To run Sugarmeetings (your account, profile, matches, chats, memberships): to perform our contract with you.
• Showing your profile to others and matching you: contract, and your consent for sensitive details you choose to share.
• Safety: checking photos for nudity, finding stolen photos, looking at reported messages, warning about likely scams, verifying age and identity, blocking banned people and devices: our legitimate interest in keeping members safe, and our legal obligations.
• Payments, invoices and tax: contract and legal obligation (accounting records).
• Support: to answer you in Support: contract and legitimate interest.
• Notifications and pop-ups: contract. You can turn kinds of notifications off in Settings.

We don’t sell your data, we don’t use it for advertising, and we don’t make decisions about you based only on automated processing that have legal or similarly significant effects. Our automatic nudity and scam checks only flag things for a person on our team to review.

• Signed-in members can see your profile, photos and posts, except people you’ve blocked. Black members can make their profile visible on request only, or fully private.
• Stories, Telegram and WhatsApp are only shown to your matches.
• Messages are only visible to you and the person you’re talking to. Our safety team can read a conversation only when it’s reported or flagged as a likely scam.
• Comments on posts are private threads between you and the person who posted.
• Our team can see your account to give support and keep Sugarmeetings safe. Every action they take is logged.

We use trusted service providers who process data for us under data-processing agreements:

• Supabase: database, file storage and login.
• Vercel: hosting the website.
• Stripe: payments.
• Sightengine: automatic nudity checks on uploaded images.
• SMS provider: sending phone verification codes.

Some providers may process data outside the European Economic Area. When they do, we rely on the EU Standard Contractual Clauses or an adequacy decision. We also share data with the police or authorities when the law requires it, or to protect someone’s life or safety.

• Your account and profile: until you delete your account. We then delete it within 30 days.
• Stories: 24 hours after posting.
• ID verification photos: deleted as soon as the check is done.
• Payment and invoice records: as long as accounting law requires (usually 7 years).
• Records of bans and serious safety reports: up to 2 years after the account is closed, to stop banned people coming back.
• Support conversations: up to 2 years after they are solved.

You have the right to access, correct and delete your data, to restrict or object to how we use it, to get a copy in a portable format, and to withdraw consent at any time (this doesn’t affect what we did before).

• Download your data: Settings → Account & security → Your data.
• Delete your account: Settings → Account & security → Delete account.
• Anything else: write to privacy@[your-domain] or ask in Support. We reply within one month.

You can also complain to a data-protection authority, for example the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee), or the authority where you live.

Your data is encrypted in transit, photos and chat files are private and only shown through short-lived links, passwords are hashed, and you can turn on two-step verification. Only team members who need it can access member data, and their actions are logged.

We only use cookies that Sugarmeetings needs to work: keeping you logged in, remembering your device for security, your light/dark choice and your last Discover search. No advertising or tracking cookies. See the Cookie Policy.

Sugarmeetings is only for adults. We don’t knowingly collect data about anyone under 18 and delete it as soon as we find it.

If we change this policy in an important way we tell you in the app or by email before it applies.