Cozy Coffee — Privacy Policy

1. Information We Collect

1.1 Information you provide directly

• Account and profile data: name, date of birth, gender, sexual orientation/preferences, photos, bio, interests, location (city/area), and any other information you choose to add to your profile.
• Verification data: phone number, email address, and (if applicable) government ID or selfie verification used to confirm authenticity.
• Payment data: subscription tier, transaction history, and billing details. Full card details are processed by our third-party payment processor(s) (e.g., app store billing, Stripe) and are not stored directly by Cozy Coffee.
• Communications: messages sent to other users through the App, and communications you send to our support team.

1.2 Information collected automatically

• Device and usage data: IP address, device type, operating system, app version, browser type, and usage patterns (e.g., swipes, matches, time spent in-app).
• Location data: approximate or precise geolocation, if you grant permission, used to show nearby matches and improve match relevance.
• Cookies and similar technologies: used for authentication, analytics, and personalization.

1.3 Information from third parties

If you register or log in via a third-party service (e.g., Google, Apple, Facebook), we may receive your name, email, and profile photo from that provider, in accordance with your privacy settings on that platform.

2. Sensitive Personal Data

As a matchmaking service, we may process categories of data considered sensitive under UAE PDPL and other applicable laws, including data revealing sexual orientation, religion, or health-related preferences you choose to disclose. We only process such data with your explicit consent (given when you complete your profile) and solely to provide matchmaking functionality. You may decline to provide non-mandatory sensitive fields.

3. How We Use Your Information

We use your information to:

• Create and manage your account;
• Generate matches and recommendations based on your preferences and activity;
• Process payments and manage subscriptions;
• Verify user identity and detect fake or fraudulent accounts;
• Enable messaging and communication between matched users;
• Send service-related notifications (matches, messages, billing) and, with your consent, marketing communications;
• Monitor, investigate, and prevent fraud, abuse, harassment, and violations of our Terms;
• Improve and personalize the App through analytics;
• Comply with legal obligations, including responding to lawful requests from UAE authorities.

4. Legal Basis for Processing

We process your personal data based on:

• Your consent (e.g., for sensitive profile data, marketing communications, precise location);
• Performance of a contract (providing the matchmaking and subscription services you signed up for);
• Legitimate interests (e.g., fraud prevention, service improvement), balanced against your rights; and
• Legal obligation (e.g., responding to UAE regulatory or law enforcement requests).

5. How We Share Your Information

We do not sell your personal data. We may share information with:

• Other users: your profile information (name, bio, age, approximate distance) is visible to other users as part of the core Service. Never shared: your exact address, financial information, or private account credentials.
• Service providers: payment processors, cloud hosting providers, analytics providers, and customer support tools, under contractual confidentiality obligations.
• Legal and safety authorities: where required to comply with UAE law, respond to legal process, protect the rights and safety of users, or investigate fraud or misconduct.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to continued protection of your data under this Policy.

6. Data Retention

We retain your personal data for as long as your account is active, and for a reasonable period thereafter to comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated data at any time (see Section 8).

7. Data Security

We implement technical and organizational measures, including encryption in transit, access controls, and secure hosting, to protect your data against unauthorized access, loss, or misuse. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you;
• Correct inaccurate or incomplete data;
• Delete your account and personal data ("right to erasure"), subject to legal retention requirements;
• Withdraw consent for optional processing (e.g., marketing, precise location) at any time;
• Object to or restrict certain processing activities;
• Data portability, where technically feasible.

To exercise these rights, contact us at contact@cozycoffeematch.com. We will respond within the timeframe required by UAE PDPL.

9. Children's Privacy

Cozy Coffee is not intended for individuals under 18. We do not knowingly collect personal data from minors. If we become aware that a user is under 18, we will terminate the account and delete associated data.

10. International Data Transfers

Your data may be processed on servers located outside the UAE (e.g., cloud infrastructure providers). Where this occurs, we take steps to ensure an adequate level of protection consistent with UAE PDPL requirements, including contractual safeguards with service providers.

11. Cookies and Tracking

We use cookies and similar technologies for authentication, analytics, and personalization. You can manage cookie preferences through your device or browser settings; disabling certain cookies may affect App functionality.

12. Third-Party Links and Integrations

The App may contain links to third-party services (e.g., social login providers). This Policy does not apply to those third parties, and we encourage you to review their privacy policies separately.

13. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via the App or email, and the "Last updated" date will be revised accordingly. Continued use of the Service after changes take effect constitutes acceptance.