Privacy Policy — NightOut (MVP)
Effective date: 16 September 2025 — Version: 1.1
Who we are
“NightOut” is operated by the Data Controller NightOut.
Contact: info@nightout.site
What data we collect
- Account data (required): email address, display name, profile photo (required).
- Usage data: pages/actions, timestamps, basic device/technical logs.
We do not perform facial recognition or biometric identification; the photo is used only to display your profile.
Why we collect it (legal bases)
- Provide the service (dating MVP requires a visible profile): GDPR Art. 6(1)(b) (performance of a contract) — the profile photo is necessary to create and show your profile to other users.
- Product testing & improvement: Art. 6(1)(f) (legitimate interests) or 6(1)(a) (consent), with data minimisation.
- Security & fraud prevention: Art. 6(1)(f).
How we use the data
- Create/manage your test account; show your profile to others in the test; store past sessions/conversations.
- Improve NightOut based on aggregated, non-identifying analytics.
- Support and keep the service secure.
Retention
Personal data is kept up to 90 days after the end of the test phase, then deleted or anonymised.
You can request earlier deletion (see “Your rights”).
Sharing / processors
Trusted providers under DPAs (e.g., Bubble.io hosting/DB, AWS S3 for files via Bubble, Zoho Mail for email). We do not sell personal data.
International transfers
If data is transferred outside CH/EU/EEA, we use safeguards (e.g., Standard Contractual Clauses).
Security
- HTTPS, access controls, least-privilege
- Private image storage with signed links
- EXIF removed on upload
- Routine backups
Your rights (GDPR & Swiss nFADP)
Access, correction, deletion, restriction, portability, and withdrawal of consent (where applicable).
Contact: info@nightout.site
Response within 30 days. You may contact your supervisory authority.
Children
NightOut is for 18+ users.
Changes
We may update this policy; new versions will show a new Effective date.