Privacy Policy

1. Introduction

Find My Partner ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our relationship verification service. This policy complies with the Zimbabwe Data Protection Act, the Zimbabwe Cyber and Data Protection Act (2021), the General Data Protection Regulation (GDPR), and other applicable international data protection laws.

2. Information We Collect

2.1 Personal Information

We collect the following personal information:

• Email address and phone number for account creation and communication
• Username for identification within the platform
• Security question answers (stored in encrypted/hashed form) for account recovery
• Payment information processed through Paynow (we do not store payment card details)

2.2 Biometric Data and User-Uploaded Images

Our service processes facial images to generate mathematical representations (embeddings) for matching purposes. We collect:

• Photographs of partners uploaded by users
• Facial embeddings (512-dimensional numerical vectors derived from photos)
• Face validation metadata (confidence scores, image quality metrics)

Your Responsibility: By uploading photos, you acknowledge that:

• You are fully responsible for all images you upload to the platform
• You must ensure the relationship type you select accurately reflects your actual relationship
• Falsely claiming someone as your partner may result in legal action against you
• Find My Partner will not be liable for any claims arising from your uploads

How We Use Your Images: We use uploaded images solely to provide the matching service. We do NOT:

• Sell or license your images to third parties
• Use your images for advertising or marketing
• Train AI models with your images beyond the immediate matching service
• Retain images after account deletion (subject to standard backup deletion timelines)

2.3 Usage Data

• Activity logs (actions taken within the platform)
• Device information and IP addresses
• Browser type and operating system
• Transaction history and payment records

3. How We Use Your Information

We use collected information for:

• Providing the core matching and verification services
• Processing payments and maintaining transaction records
• Sending notifications about potential matches and account activity
• Account authentication and security
• Improving our services and user experience
• Complying with legal obligations
• Preventing fraud and abuse of the platform

4. Legal Basis for Processing

Under GDPR and Zimbabwe data protection laws, we process your data based on:

• Consent: You explicitly consent to biometric processing when uploading photos
• Contract: Processing necessary to provide our services
• Legal Obligation: Compliance with applicable laws
• Legitimate Interest: Fraud prevention and service improvement

5. Data Storage and Security

We implement robust security measures including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure password hashing using bcrypt algorithm
• Row-level security policies on all database tables
• Regular security audits and vulnerability assessments
• Access controls and authentication requirements

Data is stored on secure servers provided by Supabase with data centers compliant with international security standards including SOC 2 Type II and ISO 27001.

6. Data Retention

• Account data: Retained while your account is active and for 30 days after deletion request
• Partner images and facial embeddings: Retained until you remove the partner or delete your account
• Transaction records: Retained for 7 years for tax and legal compliance
• Activity logs: Retained for 12 months for security and service improvement

7. Your Rights

Under Zimbabwe and international data protection laws, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for biometric processing at any time

To exercise these rights, contact us at findmypartner.zim@gmail.com

8. Data Sharing and Disclosure

We may share your information with:

• Service Providers: Payment processors (Paynow), hosting providers (Vercel, Supabase)
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In connection with merger, acquisition, or sale of assets
• Other Users: Limited match information is shared with users who have purchased access

We do not sell your personal information to third parties.

9. International Data Transfers

Your data may be transferred to and processed in countries outside Zimbabwe. We ensure appropriate safeguards are in place, including Standard Contractual Clauses and adequacy decisions, to protect your data in accordance with applicable laws.

10. Children's Privacy

Our service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

11. Cookies and Tracking

We use essential cookies for authentication and session management. We may use analytics cookies to understand how users interact with our service. You can control cookie settings through your browser preferences.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the platform. Your continued use of the service after such notification constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related inquiries or to exercise your data rights, contact us at:

14. Regulatory Authority

If you are not satisfied with our response to a privacy concern, you have the right to lodge a complaint with the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ) or the relevant data protection authority in your jurisdiction.