Privacy Policy

1. Controller

The controller under the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG) is:

[TODO: Name or company of the operator and media owner], [TODO: Address incl. country]
E-mail: hallo@uncrsh.com

You can reach us at this e-mail address for any privacy question and to exercise your rights.

2. In short

• The app is for people aged 18 and over. We ask for your date of birth when you sign up.
• We use no tracking or advertising services on the website or in the app and do not pass data on for advertising. There are no analytics scripts and no third-party embeds such as font servers or social networks.
• Information about sexual orientation, gender identity and health (HIV and PrEP status) is specially protected data (Art. 9 GDPR). We only process it with your explicit consent, which you can withdraw in the app at any time.
• We never store your exact location. For distances we only use a rough area.
• You can export your data in the app and delete your account yourself.
• The app protects against screen capture as far as the operating system allows (see section 11).

3. Website uncrsh.com

Server log files

When you open the website, the web server processes technically necessary connection data, in particular your IP address, date and time, the requested page, the browser type and the amount of data transferred. This is done to deliver the page and to keep operations secure and stable (Art. 6(1)(f) GDPR, legitimate interest in secure operation). The data is processed by our hosting provider (see section 13). The retention period of these server logs is set by the hosting provider.

No cookies, no tracking

The website sets no cookies and stores no data in your browser. No analytics, advertising or social media services are loaded; we deliver fonts and images ourselves. Because only technically necessary connection data arises and nothing is stored on or read from your device, we do not need a cookie banner or a consent prompt under § 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021).

Launch list

If you join the launch list on the website, we process your e-mail address and the selected language to confirm your entry and to write to you once when the app launches. The legal basis is your consent (Art. 6(1)(a) GDPR), which you give actively in the form and can withdraw at any time, most easily with the unsubscribe link in the e-mail or by e-mailing us. The address is stored encrypted, together with a hash used to find it again. We delete the entry when you unsubscribe, when we remove it manually, or after 18 months at the latest. When you submit the form, your IP address is briefly used to protect against abuse (request limiting); only hashes are stored for this, never the IP address in plain text.

Enquiries by e-mail

If you write to us, we process your message and contact details to answer it (Art. 6(1)(b) or (f) GDPR). We delete the correspondence once it is no longer needed and no statutory retention duty applies.

4. Account and sign-in in the app

For your account we process your e-mail address, password, date of birth and language setting. We confirm the e-mail address with a code we send you by e-mail. The e-mail address and date of birth are stored encrypted, the password only as an Argon2id hash. We use the date of birth to check that you are at least 18 and show your age on your profile.

When you sign in, we create a session for your device: session and refresh tokens (stored only as hashes), a device label (encrypted) and timestamps. You can see and end your sessions in the app. Refresh tokens expire after a configured period (currently 60 days by default) and are deleted afterwards.

Purpose: providing the account and protecting against abuse. Legal basis: contract or pre-contractual steps (Art. 6(1)(b) GDPR) and legitimate interest in security (Art. 6(1)(f) GDPR).

You can change your e-mail address or password in the settings. A new e-mail address only takes effect after you confirm it with a code.

5. Profile, photos and the daily selection

You decide what goes into your profile: name, pronouns, short text, questions and answers, interests, languages, job, height, details on smoking, drinking and children, what you are looking for, your relationship style, who you want to see and, if you choose “dating”, whether you want something casual or something serious. You can also pick, through a place search, the city where you want to date (see section 13). Other people see this information if your profile appears in their daily selection or if you have a match with them. Your profile is only visible while it is set to “visible”.

After upload, photos are re-encoded (metadata such as the place of capture is removed), stored under random file names outside the public web directory and checked by our team before they are shown for the first time. At least one photo is required.

We compile the daily selection automatically: it considers profiles that fit your details (who you want to see and who wants to see you), with a higher weight for shared interests, shared goals and, if you agreed, shorter distance. If you chose a dating city, you only see people with the same city. If you look for dating and chose “casual” or “serious”, you only see those of the people who also look for dating who made the same choice. The result is a small, fixed number of suggestions per day. The selection has no legal effect for you and is not an automated decision within the meaning of Art. 22 GDPR.

Legal basis: contract (Art. 6(1)(b) GDPR). All data is deleted when you delete your account.

6. Specially protected data (Art. 9 GDPR)

We only use details about your gender identity, your sexual orientation, who you want to see and whether you want something casual or serious from dating if you agreed in the app to the processing of sensitive data. We only store HIV and PrEP status with a separate consent for health information, encrypted, and it is only visible if you release it. The legal basis is your explicit consent (Art. 9(2)(a) GDPR in conjunction with Art. 6(1)(a) GDPR).

You can withdraw each of these consents at any time in the app under Settings. If you withdraw, we delete the details the consent covered immediately; the lawfulness of the processing up to then is not affected. Without these consents you cannot provide the corresponding profile details.

Please note: even using an app with a queer focus can allow conclusions about sexual orientation. We therefore treat all data in the app with particular care (see section 14).

7. Location

If you agree to location in the app and the operating system allows access (iOS: while using the app, Android: approximate location), we determine your approximate position. We do not store your exact coordinates, only a rough area (a grid cell) plus an encrypted per-user offset. Others only see a rough distance in steps (for example “under 5 km”). The legal basis is your consent (Art. 6(1)(a) GDPR). If you withdraw it, we delete the location data immediately.

8. Matches, messages and reactions

When you like a profile or move on, we store that reaction to form matches and to avoid showing you the same profile over and over. When two people like each other, a match is created in which you can write messages. Messages are stored encrypted in the database. This is not end-to-end encryption: the application on our server can process messages for delivery. Our team does not read messages routinely; it only sees a message if it was sent to us in connection with a report (section 9).

Messages are deleted when either of the two accounts is permanently deleted. Legal basis: contract (Art. 6(1)(b) GDPR).

9. Reports, blocking and security

You can report people and individual messages or block people. A report contains the reason, optional details (stored encrypted) and, if you add it, the reported message. Our team (moderation) reviews reports, new photos and possible breaches of the community rules and can remove content or restrict or suspend accounts. Every action by the team is logged with the ID of the person who took it.

To protect against abuse we keep a log of security-relevant events (audit log). It contains no plain-text names or e-mail addresses, but IDs, a daily-rotating check value of the IP address made with a secret key, and a fixed list of permitted extra details. Entries are deleted after 365 days. Counters for request limiting store only check values and are deleted after one day. Application error logs are scrubbed of IP addresses and other personal details.

Legal basis: legitimate interest in a safe community and in pursuing legal violations (Art. 6(1)(f) GDPR) and contract (Art. 6(1)(b) GDPR). Reports are deleted when the account of the reporting or the reported person is deleted.

9a. Dates and “More dates?”

Within a match you can note for yourself that you had a first, second or further date, optionally with the day it happened. Only you can see this date journal; the other person does not see it and is not notified.

After your first date you can answer the question “More dates?” (“gladly for longer”, “a few more dates, keeping it light”, “open” or “not for me”). Your answer stays private until the other person has answered too. If both are open to more dates, each sees the other’s answer. If at least one person says “not for me”, both only see that there will be no more dates for now; the other person does not learn who answered that way. You can change your answer at any time or take back the last date, which also removes the answer.

Legal basis: contract (Art. 6(1)(b) GDPR). The details are deleted when the match or one of the accounts is deleted. We do not read the date journal routinely; it is not part of the content we see in reports.

10. E-mails

We send you e-mails that belong to operating the account: confirmation code, welcome e-mail, password reset code, notices when your password or e-mail address changes, a notice about a requested account deletion, and notices about new matches and messages. The notices about matches and messages contain no names and no message text. You can switch them off separately in the settings. Legal basis: contract (Art. 6(1)(b) GDPR). We do not send advertising newsletters.

E-mails are held briefly in a queue for delivery; finished entries are deleted after 7 days. E-mails are sent via [TODO: E-mail delivery provider] (see section 13).

11. Storage on your device

The app stores on your device what it needs to work: session tokens, language setting, display and security settings (for example app lock) in the protected storage of the operating system (Keychain or Keystore). This data is technically necessary so that you stay signed in and the app works as you set it up; under § 165(3) TKG 2021 no consent is needed for this. The app lock with PIN or biometrics is checked locally by the device. Biometric data never reaches us.

Permissions: the app uses camera and photos only when you take or choose a photo. It uses location only as described in section 7. You can revoke permissions at any time in the system settings.

Screenshots: The app protects your privacy and that of others as far as the operating system allows. On Android the system blocks screenshots and screen recordings. On iOS there is no way to prevent screenshots; the app does cover its content with the logo while the screen is recorded or mirrored. Complete protection is technically not possible, for example not against photographing the screen.

The team administration portal (for staff only) uses a technically necessary session cookie. It is not set for users of the website or the app.

12. Retention

Data	Period
Account, profile, photos, messages, reactions	Until your account is deleted (permanently after a 14-day grace period, see section 15). Messages of a chat are also deleted when the other person’s account is deleted.
Consent-based data (sensitive details, health, location)	Until the respective consent is withdrawn, at the latest with the account
Sessions and devices	Until sign-out or expiry (currently 60 days by default), at the latest with the account
Confirmation and reset codes	Until they expire, then deleted by the daily clean-up
Reports	Until the account of the reporting or the reported person is deleted
Cached city search results (not personal)	Up to 90 days
Date journal and “More dates?” answers	Until the match or either account is deleted
Daily selection	14 days
Counters against abuse	1 day
Security log (audit log)	365 days
E-mail queue (finished entries)	7 days
Launch list	Until you unsubscribe or it is removed, 18 months at the latest
Website server logs at the hosting provider	As set by the hosting provider

If statutory retention duties or the enforcement of legal claims require longer storage, we keep the data concerned only for as long as needed for that.

13. Recipients, processors and third countries

We do not sell data and do not pass it on for advertising. Personal data only goes to these recipients:

• Hosting: Hostinger, [TODO: Contracting entity of the hosting provider]. The website, the programming interface (API), the database and the stored photos run there. Server location: [TODO: Server location]. A data processing relationship under Art. 28 GDPR exists with the provider.
• City search: When you look for the city to date in, our server sends the letters you type to the geocoding service of Open-Meteo (Open-Meteo.com, Switzerland; place data from GeoNames). Only the typed letters and the language are sent, not your ID, account or profile; Open-Meteo does not see your IP address because the request comes from our server. We store the chosen city in your profile and cache search results for up to 90 days.
• E-mail delivery: [TODO: E-mail delivery provider].
• Authorities and courts if we are legally obliged to or if it is necessary to enforce or defend legal claims.

We use no payment providers, no analytics or advertising networks and no sign-in via third parties (such as social networks). We do not deliberately transfer data to countries outside the EU or the EEA. If a service provider processes data in a third country, this only happens on the basis of Art. 44 et seq. GDPR (for example an adequacy decision or standard contractual clauses).

14. Protective measures

We protect data according to the state of the art and the risk (Art. 25 and 32 GDPR): encrypted transmission (TLS), encrypted storage of especially sensitive fields (e-mail address, date of birth, health details, messages, report details), password hashing with Argon2id, data minimisation (no exact location, metadata removed from photos), team access only by role and with logging, and limited requests against abuse. No system is perfectly secure; in the event of a personal data breach we inform those affected and the supervisory authority as far as the law requires.

15. Your rights

Under the GDPR you have the right to:

• Access (Art. 15) and data portability (Art. 20): in the app under Settings, Privacy and account, you can export all your data as a file.
• Rectification (Art. 16): you can change your details in the app at any time.
• Erasure (Art. 17): you can delete your account in the app. After a 14-day grace period the data is removed permanently.
• Restriction of processing (Art. 18) and objection (Art. 21) where we rely on legitimate interests: write to us at hallo@uncrsh.com. You can also set your profile to “hidden” at any time.
• Withdrawal of consent (Art. 7(3)): in the app under Settings or by e-mail. Processing up to the withdrawal remains lawful.

We answer requests within one month. For your security we may ask you to confirm your identity.

Complaints: you have the right to lodge a complaint with a supervisory authority. In Austria this is the Datenschutzbehörde (Data Protection Authority), Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at, e-mail: dsb@dsb.gv.at.

16. Providing data

E-mail address, password and date of birth are required for an account; without them we cannot provide the service. All other profile details and all consents named in sections 6 and 7 are voluntary. Joining the launch list is voluntary.

17. Changes

We update this policy when the app or the law changes. The current version is always available here. For material changes we inform you in the app.

Last updated: 17 October 2026