Privacy Policy
This describes current TH!RST product behavior. It is not legal advice. Replace the contact emails below with your real support addresses before relying on this in production.
1. Who we are
TH!RST is an adult dating and social discovery app for people 18 and older. This policy covers the Android app and related backend services we operate.
Contact for privacy requests: privacy@thirst.app
2. Age
TH!RST is not directed at children. Google Play Restrict Minor Access is enabled so users Play treats as under 18 cannot install or purchase. The app also requires a date of birth showing you are 18+ before use. We do not knowingly collect personal data from anyone under 18. If we learn an account belongs to a minor, we delete it.
3. Data we collect
We collect data you provide and data created when you use the service. We do not collect advertising IDs and we do not currently include an ads or analytics SDK that sends events off your device.
- Account: email, password (handled by our auth provider), user ID.
- Profile: display name, bio, date of birth, gender, what you are looking for, dating intent, prompts, photos you upload.
- Preferences: age range and similar discovery filters. Optional sexual orientation / related dating preferences only after a separate, revocable consent screen.
- Messages: in-app chat after a match, including optional AI-assisted drafts you send.
- Activity: likes, passes, super likes, blocks, and safety reports.
- Purchases: product IDs, purchase tokens, order identifiers, coin balance and ledger, subscription entitlement. Card numbers are processed by Google Play, not stored by TH!RST.
- Safety: report reasons, evidence needed to review CSAE or other abuse, and moderation status of photos and messages.
Approximate or precise location is not collected in the current app (no location permission). If we later add city or GPS for discovery, we will update this policy and the Play Data safety form.
4. Why we use it
- Create and operate your account and profile
- Show you to other adults and enable matching and chat
- Verify purchases, grant coins or subscriptions, and handle refunds
- Moderate content, investigate reports, and keep minors off the service
- Comply with law and Google Play policies
We do not sell your data. Special-category preference data is not sent to advertising networks.
5. Who can see it / processors
- Other users: name, photos, bio, prompts, and similar profile fields you publish. Chat is between matched users.
- Supabase: authentication, database, file storage (photos), and Edge Functions — a service provider processing data on our instructions.
- Google Play Billing: purchase verification and subscription state. Google is a payment service provider, not an ad partner for this data.
We may disclose information to law enforcement or NCMEC (or a local equivalent) when required, especially for child sexual abuse material or exploitation.
6. Retention
Account and profile data are kept while your account is open. After deletion we remove or de-identify personal data unless we must keep it longer for safety investigations, dispute handling, tax/accounting, or legal holds. Safety reports and related evidence may be retained as needed for those purposes. Purchased coins do not expire; promotional coins may expire as stated at grant.
7. Your choices
- Edit profile information in the app.
- Revoke sexual-orientation / related preference consent in Settings → Privacy where that control is shown.
- Block and report other users in-app.
- Manage subscriptions in Google Play: Play Subscription Center.
- Request access or deletion via Delete your account, or email privacy@thirst.app from the address on the account. We may need to verify it is you.
If you are in the EEA/UK, you may also have rights to rectification, restriction, objection, and portability, and to complain to a supervisory authority. Legal basis includes contract (providing the app), legitimate interests (safety and fraud prevention), and explicit consent for special-category preference data.
8. Security
Traffic uses HTTPS. Access to production data is limited to service roles needed to run the app. No method of transmission is 100% secure.
9. International processing
Servers may be located outside your country (including where our hosting and auth providers operate). By using TH!RST you understand your information may be processed in those locations with appropriate safeguards our providers offer.
10. Changes
We will post updates on this page and change the “last updated” date. Material changes may also be noted in the app or Play listing.
11. Contact
Privacy: privacy@thirst.app
Safety: safety@thirst.app
Law enforcement: legal@thirst.app