Kismia: Dating App & Chat

"We collect data from your device. Examples of such data include: language settings, IP address, location, time zone, type and model of a device, device settings, operating system, Internet service provider, mobile carrier, hardware ID, and Facebook ID. When content contains faces, we process certain information about them, such as information that estimates the location of parts and areas of the faces ("Face Data")."

The app collects broad device-level data including hardware IDs and carrier info, plus processes biometric face data from user photos for moderation and fraud detection purposes, retaining it for up to one year.

"When you give the App permission to use your location, the App will be able to show your device's location to other users of the App. Your location data is generally not sufficient to identify you personally. We collect data from your device. Examples of such data include: language settings, IP address, location, time zone."

The app collects location data and exposes it to other users of the platform, and also collects IP-based location data automatically regardless of permission settings.

"We collect your Apple Identifier for Advertising ("IDFA"), Identifier for Vendor ("IDFV") or Google Advertising ID ("AAID") (depending on the operating system of your device) when you access our App or Website from a mobile device. We use Facebook pixel on the Service. Facebook pixel is a code placed on the Service collecting data that helps us track conversions from Facebook ads, build targeted audience and remarket to people who have taken some action on the Service."

The service collects advertising identifiers and deploys multiple cross-platform tracking technologies (Facebook Pixel, Conversions API, Appsflyer, Google Analytics, Clarity session replays) to link user activity across services and devices.

"We share personal data with third parties that we hire to provide services or perform business functions on our behalf. We may share your personal information with the following types of service providers: cloud storage providers (Servers.com), data analytics providers (Facebook, Firebase, Appsflyer, Google), marketing partners (Facebook, Google, Snapchat, TikTok, Taboola)."

User data is shared with a large number of third parties spanning analytics, marketing, communication, and payment services, many of which embed their own SDKs that collect data directly from users' devices.

"We may modify this Privacy Policy from time to time. If we decide to make material changes to this Privacy Policy, you will be notified by available means such as email and will have an opportunity to review the revised Privacy Policy. By continuing to access or use the Service after those changes become effective, you agree to be bound by the revised Privacy Policy."

The company can modify the privacy policy at any time and treats continued use of the service as acceptance of the new terms, giving users no real mechanism to reject changes other than leaving the service.

"We will store your personal data for as long as it is reasonably necessary for achieving the purposes set forth in this Privacy Policy (including providing you with the access to the Service). We will also retain and use your personal data as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements."

The retention policy is vague with no specific timelines for most data categories, using open-ended language like 'reasonably necessary' that effectively allows indefinite retention. Only biometric face data has a concrete one-year limit.

"You can request erasure of your personal data by sending us an email at [email protected] or by clicking on "Delete My Data" in the App settings. When you request deletion of your personal data, we will use reasonable efforts to honor your request. In some cases, we may be legally required to keep some of the data for a certain time; in such event, we will fulfill your request after we have complied with our obligations."

While a self-service deletion option exists, the company only commits to 'reasonable efforts' and reserves the right to retain data for unspecified periods citing legal obligations, with no concrete timeline for completing deletion.