Privacy Policy
Last updated: 3 November 2026
1. Who is responsible
The controller is Meetmarket GmbH, Kolonnenstraße 8, 10827 Berlin, Germany, registered at Amtsgericht Charlottenburg under HRB 292113 B. Managing director: Calum Simon Bowden.
Privacy contact: privacy@meetmarket.io
2. The short version
- Chats are end-to-end encrypted. We cannot read them unless someone reports a message.
- You choose how precise your location is, and who can see each part of your profile.
- We do not sell your data, and we do not show ads.
- You can delete your account in the app.
3. What we process and why
| Data | How we get it | Why | Legal basis | How long |
|---|---|---|---|---|
| Phone number | You enter it | Sign-in, stopping abuse | Contract, legitimate interest | We store a keyed hash until your account is erased |
| Email address, if you add one | You enter it | Verification, recovery | Contract | Until you remove it or your account is erased |
| Date of birth | You enter it | Confirm you are 18 or over, show your age | Contract, legitimate interest | Until your account is erased. If you are under 18, we store no date of birth and no profile. We keep only the keyed hashes of the phone number and network address you signed in with, for 1 year, to stop repeated attempts |
| Profile, photos, name, handle | You add them | Show your profile | Contract | Until you remove them or your account is erased |
| Sensitive profile details: sex life, sexual health, ethnicity, orientation | You choose to add them | Show them to the people you choose | Your explicit consent | Until you remove them or your account is erased |
| Location | Your device, if you allow it, or a city you pick | Show people nearby | Consent | We keep only your latest point. We delete it when you turn location off or delete your account |
| Encrypted messages and private albums | You send them | Deliver them | Contract | Until you delete them, the chat is closed, or your account is erased. An encrypted backup of your chat keys and history is kept on the same server for the same time |
| Push token | Your device, if you allow it | Tell you about new messages | Consent | Until you turn it off or your account is erased |
| Network address | Your connection | Security, rate limits, linking abusive accounts | Legitimate interest | Server access logs keep the address for 30 days. We keep a keyed hash for the life of your account plus 30 days |
| Reports, evidence, moderation decisions | Users and moderators | Safety, legal duties | Legal duty, legitimate interest | See section 6 |
| Usage events | Your use of the app | Understand and improve the service | Legitimate interest | Until your account is erased |
| Email address, if you subscribe to our newsletter | You enter it | Send the newsletter | Consent | Until you unsubscribe |
| Supporter details: name, email, tier, monthly amount | You give them when you pledge | Manage your pledge | Contract | Kept separately from your account, while your pledge runs and as long as tax law requires |
To use Meetmarket, you must give a phone number, a handle, and your date of birth. Without them, we cannot create your account. Everything else is optional.
Your handle, display name, bio, and approved public photos are public. Anyone can see them, also without an account.
4. Location
You can turn off location access in your phone's settings. Then we receive no location from your device.
When location is on, you choose how precise it is:
- City: randomised to about 5 km.
- Neighbourhood: randomised to about 1 km. This is the default.
- Precise: your exact location.
For City and Neighbourhood, the randomising happens before we store the point. For Precise, we store the exact point.
You can use Meetmarket without allowing location access.
5. Encrypted chats and reports
Messages are end-to-end encrypted. We cannot read them, and we do not scan them.
If you report a message, your device decrypts that message and nearby messages, and sends them to us. The report screen tells you this. If someone reports a chat you are in, your messages can be part of what they send.
6. Moderation and automated checks
We check public photos with image classifiers that run on our own servers. No photo goes to an outside AI service for this. Profile text is checked against word lists.
These checks can refuse a photo or a name automatically. You can ask a person to look again.
A person makes decisions to hide reported content or ban an account.
We keep:
- Case evidence: 90 days after the case closes.
- Copies of public profiles and photos in our moderation system: 90 days after the account is erased.
- Hidden items, and the notices we sent you: until the account is erased.
- Child-safety evidence: as long as the law requires.
We report suspected serious crime to the authorities where the law requires this, including the German Federal Criminal Police Office (BKA). Once our registration is complete, we also report child sexual abuse material to the US National Center for Missing & Exploited Children (NCMEC).
Improving our classifiers. When a moderator makes a decision about a public photo, we may keep a copy for up to 30 days to improve our classifiers. This includes photos we rejected. The copy stays on our own servers and is not shared. Each copy is deleted after 30 days, also if you delete the photo or your account. We never keep child-safety material for this purpose. Our legal basis is legitimate interest. You can object by writing to privacy@meetmarket.io.
7. Who receives data
We use these providers. They act on our instructions where they are processors.
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Hetzner | Hosting | All data on our servers | EU |
| Twilio | SMS codes | Phone number, sign-in code | US |
| Resend | Email address, sign-in code | Sent from the EU. Account data and message logs in the US | |
| Apple | Push notifications | Push token, and a general alert: type and badge count. Never the sender or message content | US |
| Stadia Maps | Map tiles | Network address, map area viewed | EU |
| Vercel | Website, and passing app requests to our server | Network address, app requests | US |
| Cloudflare | Hosting this website (trust.meetmarket.io) | Network address, pages viewed | US |
| Zoho | Email you send to us | Your email address and message | EU |
We run Coop (moderation), PostHog (analytics), and Listmonk (newsletter) ourselves. Analytics events use a pseudonym and show location no more precisely than a city.
We require each provider to protect your data to the same standard as this policy. We have a data processing agreement with each provider that acts as our processor.
Twilio, Resend, Apple, Vercel, and Cloudflare are US companies. For these transfers, we rely on the EU-US Data Privacy Framework where the company is certified, and otherwise on standard contractual clauses.
We do not share your data with third-party AI services.
8. Deleting your account
You can delete your account in the app.
- Your account disappears at once.
- You can cancel for 30 days.
- After 30 days, we erase your account from our systems and your data server. This includes linked abuse signals. Moderation records are the exception: we keep them for the periods in section 6.
We keep your data for those 30 days to stop people from escaping a report and signing up again. Our legal basis is legitimate interest.
We may keep evidence on open cases, and data the law requires us to keep. Messages you sent stay on the devices of the people who received them. Backups are kept at Hetzner in Germany and erased after 30 days.
Moderation records stay after erasure, for the periods in section 6.
9. Your rights
You can ask for access, correction, deletion, restriction, or a copy of your data. You can object to processing based on legitimate interest. Write to privacy@meetmarket.io.
You can withdraw consent at any time. To do this, remove the data or change the setting in the app, or turn off the permission on your device. This does not affect processing before you withdraw.
You can complain to a data protection authority. Ours is the Berlin Commissioner for Data Protection and Freedom of Information.
10. Data on your device
The app stores keys, session data, and cached photos on your device. These are needed for the app to work. We store this information only because it is strictly necessary to provide the service you asked for (section 25(2) no. 2 TDDDG). We do not use cookies or advertising IDs.
11. Age
Meetmarket is only for people 18 or over.
12. Changes
If this policy changes, we update it here and tell you in the app if the change is important.