Privacy Policy

When you use Salted Caramel we collect what we need to run the app and keep it safe:

• Your phone number, for sign-in and account recovery.
• Profile information you provide: name, date of birth, photos, short bio.
• A verification selfie, checked against your profile photo.
• Approximate location (city / region), used to show relevant matches. We do not track continuous location.
• Messages, matches, and toffees sent — required to make the app work.
• Basic device information (device type, OS version, app version) to diagnose crashes.

Your information exists to make the product work. Specifically:

• Show your profile to potential matches and rank feeds.
• Deliver messages and match notifications to the right person.
• Detect and remove fake accounts, spam, and abuse.
• Comply with legal obligations if a court or regulator asks us.

We do not sell your data. We do not share it with advertisers. If we add analytics tools later, we'll update this page and only use aggregate, non-identifiable metrics.

A few third parties help us run the service. They see only what they strictly need to do their job.

• Supabase — our database and file storage host. Your profile data and photos live here, encrypted at rest.
• SMS provider — the company that sends your OTP by text (currently limited to our internal test list; will rotate as we scale).
• Google Play Services — required to deliver push notifications on Android.

• Edit or delete any photo or profile field from the Me tab.
• Block or report another user from their profile or chat header.
• Delete your entire account by writing to Email us. Deletion removes your profile, photos, messages you authored, and matches within 30 days.
• Turn off push notifications from your device's system settings.

Active accounts: as long as your account exists. Deleted accounts: profile and photos removed within 30 days. We keep minimal transaction records (report history, ban list) longer so we can enforce safety rules.

Salted Caramel is only for people 18 and older. We check date of birth during onboarding. If we discover a user under 18 we remove the account immediately.

If we make material changes we'll flag it inside the app and update the "Last updated" date above. Small edits for clarity happen without a notice.

Questions, requests, complaints: Email us.