MeetCute Privacy Policy

Last updated: September 16, 2026

Before you tap the registration button, a few points deserve to be stated plainly: what information MeetCute comes into contact with, where each kind of information is put to use, and whose hands it passes through. The application is published under the developer name SD Light and operated by the legal entity CALVIN SIMPSON. The nine parts below address those questions one by one, and you are welcome to return to this document at any time to check them.

One further point belongs up front: this application serves adults only, and users below the age of 18 fall outside our service scope.

1. What this Policy covers, and what it does not

Every processing activity carried out on personal information by the MeetCute mobile client and its supporting web services (together, the "Application", "we", "us" or "our") is governed by this Policy. Five limits are observed throughout that processing — lawfulness, fairness, necessity, transparency and security — and we touch only the portion of information that bears directly on a specific function.

Services run independently by third parties fall outside this Policy. Where the Application leads you to an outside page, or invokes a function supplied by a third party, that party handles the information under its own privacy policy, and reading that document first is advisable.

Continued use of the Application means this Policy has been read and understood. Should any part of it prove unacceptable to you, please refrain from registering or using the Application.

2. The information we gather from you

Gathering is confined to the minimum set required for the corresponding function, and nothing beyond that set is ever requested. Four categories are involved.

(a) Account information

The email address, nickname, avatar, gender, date of birth and region you submit during registration or profile completion are received by us, together with any further material you add or edit later. Without this information an account cannot come into existence, and other users have no way of recognising you.

(b) Device and technical information

To fit different handset models, trace malfunctions and single out anomalous devices, we record operating environment data such as screen orientation and refresh rate, input-method language and locale, SIM card country code, and whether the device is running inside an emulator environment.

(c) Usage behaviour information

Activity inside the Application leaves traces, and the items we record include: how long your first avatar upload takes, the order in which interest tags are selected, the average interval between your replies, the duration distribution of voice messages, and the hour at which the Application is first opened each day. Such records help us reconstruct a problem scene and also serve to keep platform order.

(d) Payment and transaction information

When membership benefits are purchased, charging and settlement are completed entirely through the official Google Play Billing channel. What reaches us is the bare receipt and nothing more — order number, transaction status and the item bought. We have no access to bank card numbers, payment passwords or payment verification codes, and none of them can be stored on our side.

3. Where this information is put to use

Information that has been gathered serves the five purposes below and no others; uses not stated in this Policy are not made of it.

• Function operation: registration, sign-in, profile display, match recommendations and instant chat depend on this purpose to keep running normally.
• Service optimisation: performance bottlenecks are located from usage behaviour and malfunction data, and product experience along with recommendation quality improves accordingly.
• Security protection: fraud, spam, bulk registration and account takeover are identified under this purpose, which also preserves account security and community order.
• Customer support: your enquiries, complaints and appeals receive their answer here, and fault reports together with reporting tickets are handled alongside them.
• Legal compliance: obligations imposed by applicable laws, regulations and regulatory requirements are discharged through this purpose, and lawfully conducted investigations are cooperated with.

Should information ever need to be used for a new scenario beyond those five purposes, your consent will be sought separately.

4. Third-party SDKs / services and the limits of sharing

Selling, renting out or otherwise trading your personal information forms no part of our practice. To support application functions, we integrate third-party SDKs / services, among them Singular (install attribution), Leanplum (lifecycle messaging orchestration), Iterable (cross-channel outreach) and Vungle (rewarded video advertising); analytics tools and push notification services also fall within the scope of integration. Each of these third-party SDKs / services processes information only as far as its own function requires and remains bound by its own privacy policy.

Outside the circumstances listed below, your personal information is not provided by us to anyone else:

1. your separate consent or explicit authorisation has been obtained;
2. entrusted partners require information within the minimum necessary scope so that payment, push notification, statistical analysis and other essential functions can be delivered, and equivalent confidentiality obligations are imposed on them;
3. applicable laws, judicial authorities or regulatory bodies compel disclosure;
4. protection of users' personal safety, platform security or significant public interest genuinely requires it;
5. a merger, acquisition, reorganisation or asset transfer occurs, information moves with the relevant business, and the recipient must continue to observe protection standards no lower than those set by this Policy.

5. Where information is stored, how it is guarded, and how long it is kept

Industry-standard security measures are employed by us to guard your personal information, applied across four stages:

• In transit: TLS/SSL encryption runs across the entire link, keeping the chance of interception or alteration in transit to a minimum;
• At rest: sensitive fields are encrypted to disk with the AES-256 algorithm, and keys are managed separately from business data;
• Access: role-based access control (RBAC) is in force, and the data reach of internal personnel is drawn along least-privilege lines;
• Audit: data access logs are recorded in full and reviewed at intervals, and anomalous access raises an immediate alert.

On top of that foundation, we hold at least one security assessment and penetration test every year, provide personal information protection training to all staff, and maintain a data security incident response procedure so that any anomaly can be located, contained and reported without delay.

Your personal information is kept only for the reasonable period needed to fulfil service purposes. Once that period expires, or once continued storage is no longer required by law, the relevant data is deleted, anonymised or de-identified. Where you apply to close your account, the scope of deletion and the exceptions to retention are set out on the MeetCute Account Deletion page

6. The five controls you hold over your personal information

Full control over your personal information remains reserved for you. Through the in-app settings entry or the support email, the rights below may be exercised in accordance with law:

1. Access — the account profile and related records held by us are open to your review and confirmation at any time;
2. Rectification — inaccurate personal information can be corrected, completed or brought up to date;
3. Erasure — you may ask us to delete your personal information, or file an account closure request through the in-app entry or the account deletion portal;
4. Withdrawal of authorisation — consent given earlier for a specific processing matter may be withdrawn at any time, and processing already completed beforehand is unaffected;
5. Obtaining a copy — a structured copy of your personal information will be supplied at your request.

Beyond those five rights, questions, objections and complaints about the processing itself are equally welcome. Once your identity has been verified, we reply within a reasonable period.

7. Adults only: the age 18 threshold

Adults who have reached the age of 18 form the only audience this Application is offered to. Minors receive no service from us, and we do not actively gather personal information belonging to children. Where our possession of such information results from a mistaken age entry, a registration carried out fraudulently, or another circumstance we did not anticipate, we delete that information once the situation is confirmed and bar the account involved from continuing to use the Application. The complete child safety arrangement appears in the MeetCute Child Safety Standards .

8. Revision of this Policy and how notice is given

When product functions, service models, laws and regulations or regulatory requirements change, this Policy is revised in step, the updated version is published in the Application or on the official website, and the date at the top is refreshed. Where a change touches your material rights, pop-up prompts, in-app notifications or another prominent means are used to give advance notice, and your consent may be sought afresh where necessary.

9. How to reach us

Questions, comments or complaints about this Policy, the way personal information is processed, or the exercise of rights may be raised through the channels below: