Partnr Privacy Policy
Effective date: October 6, 2026 | Version: 2026-10-06
This Privacy Policy explains how Partnr ("Partnr," "we," "us") collects, uses, shares and protects personal information when you use the Partnr mobile app, the website at partnr.us, and related services (together, the "Service"). Partnr helps adults find friends who share their interests and join hobby Groups.
1. Information we collect
Information you give us
- Account and sign-in: email address (or Apple or Google sign-in identifiers), your display name, date of birth and gender identity. We do not use passwords.
- Profile: photos, optional voice intro or intro video, bio, interests, prompt answers, pronouns, and optional details such as job, education, height, neighborhood, zodiac sign, languages and orientation (see Section 2).
- Verification: if you choose to verify, a selfie that our team reviews by hand to award a verification badge. We do not run biometric face-matching on it.
- Content you create: messages, photos, videos and voice notes you send, Group posts, comments and likes, and reports you file.
- Preferences: distance, who you want to see, notification settings.
- Invitations: if you invite someone to a Group by email, we process that email address to send the invitation.
- Communications with us: emails and support requests.
Information collected automatically
- Location: with your permission, your device location (Section 5).
- Device and technical data: device type, operating system, app version, push notification token, device and subscription identifiers, IP address, and crash and diagnostic information.
- Usage data: actions such as likes, passes, connections, blocks, Group activity, feature use and product analytics events.
Information from others and from providers
- Apple or Google, if you use their sign-in (we receive an identifier and, where you allow, your email and name).
- Apple App Store, Google Play and our subscription provider, which tell us whether you have an active subscription. We do not receive your full payment card number.
- Other members, who may report or block you or send you content.
2. Sensitive information
Some information you choose to provide is considered "sensitive" under laws such as the California Consumer Privacy Act (as amended by the CPRA) and the GDPR: gender identity, sexual and romantic orientation, precise geolocation, the contents of your messages, and verification selfies. Providing orientation is optional. Where the GDPR applies, we process orientation and other special-category data only with your explicit consent. We use sensitive information only to operate and secure the Service as you would reasonably expect (for example, to apply your visibility preferences, show you relevant people, verify accounts and enforce our rules), and not to infer characteristics about you or for advertising. We encrypt orientation fields at rest. You can edit or remove optional details at any time in the app.
3. How we use information
- Provide the Service: create your account, show your profile to others, recommend people and Groups, deliver messages, calls and notifications.
- Verify accounts, prevent fraud and abuse, and enforce our Terms and community rules.
- Keep people safe: screen uploaded images and text, review reports, and respond to emergencies.
- Process subscriptions and restore purchases.
- Understand and improve the Service through product analytics and diagnostics.
- Communicate with you about your account, security, Group invitations, and service changes.
- Comply with legal obligations and defend legal claims.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not use your messages or photos to train AI models or for advertising.
4. How we share information
With other members. Your profile (name, age, photos, bio, interests, prompts, verification badge, approximate distance and city) is visible to other members according to your settings. Anything you post in a Group is visible to that Group's members. Messages are visible to the people in the conversation.
With service providers that process data on our behalf under contract:
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Database, authentication, file storage, realtime messaging | All account and content data |
| Railway | API hosting | Data in transit to and from our servers, including request logs (which may contain location parameters) |
| Vercel | Website hosting | Website request data (IP address is processed to serve pages, not stored by us for analytics) |
| Upstash | Rate limiting and caching | User ID, IP address |
| Amazon Web Services (Rekognition, Comprehend) | Safety screening of images and text | Uploaded images; message, post and comment text |
| RevenueCat; Apple; Google | Subscriptions and purchase restoration | User ID, purchase receipts |
| LiveKit | Voice and video calls | User ID and call audio/video relayed through its servers (not recorded by us) |
| PostHog | Product analytics | User ID, email, app usage events, IP address and IP-based location |
| Sentry | Crash and error monitoring | Diagnostic data, IP address, device information, request URLs (which may include location) |
| Resend | Transactional email (for example Group invitations) | Email address, message content |
| Expo (push notifications), Apple, Google | Delivering push notifications; sign-in | Push token, notification text; sign-in identifiers |
Other third parties. To turn your coordinates into a city name we use the public OpenStreetMap Nominatim service, which receives those coordinates and is governed by its own terms rather than a contract with us. If you sign in with Apple or Google, those companies handle your sign-in under their own privacy policies.
For legal and safety reasons. We disclose information when we believe it is required by law, subpoena or court order; to report apparent child sexual abuse material and related offenses to the National Center for Missing & Exploited Children (NCMEC) as 18 U.S.C. § 2258A requires; to protect the rights, safety and property of members, the public or Partnr; and to investigate fraud or violations of our Terms.
Business transfers. If Partnr is involved in a merger, acquisition, financing or sale of assets, information may be transferred, subject to this Policy.
With your consent or at your direction, for example when you invite someone to a Group.
Aggregated or de-identified information that cannot reasonably identify you may be used and shared for any purpose.
5. Location
If you grant permission, the app uses your device location to show you people and Groups nearby and to calculate distance. The location saved to your profile is reduced to roughly a one-kilometer grid, and other members see a rounded distance and your city, not your coordinates or address. The full-precision coordinates your device sends to our servers to find nearby people may briefly appear in server request logs and error reports. You can turn location off in your device settings; the app will then show less relevant results. If you use Passport (a paid feature), we also store the city you choose to browse. We send coordinates to OpenStreetMap Nominatim to look up the city name.
6. Safety, moderation and legal reporting
Messages and content are encrypted in transit and stored with our hosting providers, but they are not end-to-end encrypted. To keep Partnr safe we use automated tools to screen uploaded images and text for illegal or harmful content, and trained staff review reports, flagged content and verification selfies. Content you report, and related account and conversation context, may be reviewed by our team.
We have zero tolerance for child sexual abuse material (CSAM). Where required by law (18 U.S.C. § 2258A) we report apparent CSAM and related offenses to NCMEC, and we preserve the related content and account records for the period the law requires. Accounts involved are suspended.
Automated decisions. Some automated screening results (for example an image flagged as potentially prohibited) can temporarily restrict or suspend an account pending human review. If you believe an account action was a mistake, email support@partnr.us and a member of our team will review it; we aim to respond within 45 days.
7. Retention and deletion
You can delete your account at any time in Settings, or at partnr.us/delete-account. After you request deletion your account is hidden and scheduled for permanent deletion after a 30-day grace period; signing back in during that time cancels the deletion. After 30 days we delete your profile, photos, voice notes, verification selfies and chat media, and your authentication record. Backups are overwritten on a rolling schedule and deleted data ages out of backups, generally within 90 days.
What we may keep after deletion: (a) Group posts you made, which remain with your name removed (your comments, likes and chats are deleted with your account); (b) safety and legal records such as reports, moderation actions, audit logs, privacy-request records and any NCMEC report materials, for as long as needed to protect members, prevent repeat abuse, resolve disputes and meet legal obligations (generally up to seven years, or longer where the law requires, for example NCMEC report records); (c) aggregated or de-identified data.
Otherwise we keep information for as long as your account is active, and as long as needed for the purposes in this Policy, to comply with law, and to resolve disputes.
8. Your privacy rights
Depending on where you live you may have the right to: know what personal information we collect, use, disclose and retain; access a copy (including a portable copy) of your information; correct inaccurate information; delete your information; limit the use of sensitive personal information; opt out of sale, sharing and targeted advertising (we do none of these); object to or restrict certain processing; withdraw consent; and not be discriminated against for exercising your rights.
How to exercise them: edit your profile or delete your account in the app Settings, or email privacy@partnr.us to request a copy of your data, a correction or deletion. We may need to verify your identity, typically by confirming control of the email address on your account, before acting. We respond within 45 days (extendable once by 45 days where permitted), and within one month for EEA, UK and Swiss requests (extendable where the law allows). You may use an authorized agent; we may require proof of authorization. If we deny a request you may appeal by replying to our decision, and we will respond to the appeal within 45 days; if you are still unsatisfied you may contact your state attorney general or data protection authority.
9. California notice (CCPA/CPRA)
In the past 12 months we have collected the following categories of personal information, for the purposes in Section 3, and disclosed them to the service providers in Section 4 for business purposes:
| Category (Cal. Civ. Code § 1798.140) | Examples | Retention |
|---|---|---|
| Identifiers | Name, email, user ID, IP address, device and push identifiers | Life of account plus up to 30 days; some records longer as in Section 7 |
| Personal information in Cal. Civ. Code § 1798.80(e) | Name, photos, contact details | Same |
| Characteristics of protected classifications | Age or date of birth, gender identity, orientation (optional) | Same |
| Commercial information | Subscription status and purchase history | As required for tax and accounting |
| Internet or network activity | App usage, likes, passes, Group activity | Same as account; analytics per provider settings |
| Geolocation data | Device location, approximate stored location, city | Life of account |
| Audio, visual and similar information | Photos, voice notes, intro video, verification selfie, call media in transit | Life of account; selfies removed at deletion |
| Professional or education information | Job title, education (optional) | Life of account |
| Inferences | Interest-based recommendations | Life of account |
| Sensitive personal information | Orientation (optional), precise geolocation, message contents, account log-in | Life of account |
We do not sell personal information and do not share it for cross-context behavioral advertising, including that of consumers under 16. Because we do not engage in either, there is no opt-out link to click. We use sensitive personal information only for the purposes permitted by Cal. Code Regs. tit. 11, § 7027(m). We treat a browser opt-out preference signal (such as Global Privacy Control) as a valid request to opt out where applicable.
"Shine the Light": California residents may ask once a year which categories of personal information we shared with third parties for their direct marketing; we do not share it for that purpose.
Other U.S. states: residents of states with comprehensive privacy laws (including Colorado, Connecticut, Virginia, Utah, Texas, Oregon and others) have similar rights described in Section 8 and may use the same process. Nevada residents may opt out of the sale of covered information; we do not sell it.
10. EEA, UK and Swiss users
Partnr is operated from the United States. Where the GDPR or UK GDPR applies, we rely on these legal bases: performance of our contract with you (providing the Service); our legitimate interests (safety, fraud prevention, security, product improvement), which are not overridden by your rights; compliance with legal obligations; and your consent (for example for location and optional sensitive details, which you may withdraw at any time without affecting prior processing). You also have the right to lodge a complaint with your local supervisory authority.
11. Children
Partnr is for adults aged 18 and over. We do not knowingly collect information from anyone under 18. If we learn that someone under 18 has an account we will delete it. If you believe a minor is using Partnr, please email safety@partnr.us.
12. Security
We use safeguards such as encryption in transit, access controls, encryption of orientation data at rest, private storage for sensitive media, rate limiting and monitoring. No system is perfectly secure. If a breach affects your information we will notify you and regulators as the law requires. Please keep your device and email account secure.
13. International transfers
We and our providers process information in the United States and other countries that may not have the same data protection laws as yours. Where required, we use safeguards such as Standard Contractual Clauses.
14. Website analytics and cookies
Our website uses privacy-friendly, first-party measurement without cookies. We count page views and unique visitors per day using a one-way hash that changes daily and cannot identify you, and we record approximate city-level location, the referring site, device type and pages viewed. We do not store IP addresses or browser details from website visits. We do not respond to browser Do Not Track signals; we do honor the Global Privacy Control signal as described in Section 9. The mobile app does not use advertising identifiers or third-party advertising trackers.
15. Changes
We may update this Policy. If changes are material we will notify you in the app or by email before they take effect, and update the effective date above.
16. Contact us
Privacy requests: privacy@partnr.us
General support: support@partnr.us
Legal notices: legal@partnr.us