Privacy Policy
Pitch or Ditch (“we”, “us”, the “app”) is a dating app where friends vouch for — “pitch” — single people they know. This policy explains what personal data we collect, why, who we share it with, how long we keep it, and the rights you have over it. We’ve built the app around data minimisation: we collect only what the service needs, and we go out of our way not to store more than necessary (for example, we store a one-way hash of your phone number rather than the number itself wherever we can, and we keep your location only as a coarse area, never precise coordinates).
1. Who is responsible for your data
The data controller for Pitch or Ditch is [LEGAL ENTITY / OPERATOR NAME, ADDRESS]. For any privacy question or request, contact us at privacy@pitchorditch.is.
2. The information we collect
Information you give us
- Phone number — to create and sign in to your account (we send a one-time code by SMS). We store your number as a secure one-way hash for matching and account look-ups; the raw number is used only to deliver your login code and is held on your account record.
- Your name and date of birth — your first name is shown on your profile; your date of birth is used to confirm you’re 18+ and to show your age. We show your age to others, never your exact birth date.
- Profile content — photos, a short bio, your answers to profile prompts, your gender (which you can choose to hide), and who you’re interested in.
- Pitches and videos — when you pitch a friend (or a friend pitches you), we store the pitch and any short video clip recorded for it, plus who pitched whom. To name the person being pitched, we use a one-way hash of their phone number.
- Messages — the content of messages you send to your matches.
- Discovery preferences — your age-range and distance settings, and your notification preferences.
- Safety reports and blocks — if you block or report someone, we record that to keep the community safe.
Information we collect automatically
- Approximate location — if you grant location permission, we use your device location to show you nearby people. We immediately reduce it to a coarse area before storing it; we never store or share your precise coordinates, and other users only ever see a rough distance band (e.g. “under 5 km”), never your location.
- Device push token — a token from Apple that lets us send you notifications about new matches and messages.
- Activity data — your swipes, matches, and a minimal, pseudonymous record of app events (e.g. “a match was created”) used to run and improve the service. These records contain internal identifiers and simple flags, not your messages, photos, or other content.
Safety and legal-compliance data
To detect and prevent illegal content (including child sexual abuse material) and serious abuse, and to comply with our legal obligations, we retain certain information: the IP address and device/browser identifier recorded when you create your account and each time you upload a photo or video, and your phone number (stored encrypted). We keep this upload and IP information for 12 months, after which it is deleted; your phone number is retained for the life of your account and deleted when you delete your account. Where required by law, or to report illegal content, we may disclose this information to law enforcement and other competent authorities.
3. How we use your data, and our legal bases
| Why | Legal basis (GDPR) |
|---|---|
| Create your account and sign you in (phone verification) | Performance of a contract |
| Show your profile to compatible people and show you theirs | Performance of a contract |
| Run pitches, matches, and messaging | Performance of a contract |
| Confirm you are 18 or older | Legal obligation / legitimate interests |
| Keep the community safe (blocking, reporting, moderating uploaded video for illegal content) | Legitimate interests / legal obligation |
| Send you push notifications about matches and messages | Consent (you can turn these off) |
| Maintain, secure, and improve the app | Legitimate interests |
4. Who we share your data with
We do not sell your personal data. We share it only with service providers (“processors”) that help us run the app, and only the data they need:
| Provider | What they help with | What they receive |
|---|---|---|
| Telnyx | Sending your login code by SMS | Your phone number and the one-time code |
| Cloudflare (R2 & Stream) | Storing and serving your photos and pitch videos | Your photo and video files |
| Apple (APNs) | Delivering push notifications | Your device token and a generic alert (we never put names or message text in a notification) |
We may also disclose data if required by law, or where necessary to investigate or prevent harm, fraud, abuse, or illegal activity (including reporting illegal content to the relevant authorities).
5. How we protect your data
- Your phone number is stored as a one-way cryptographic hash for matching and look-ups; we also keep an encrypted copy of the number for the safety and legal-compliance purpose described above.
- Your location is reduced to a coarse area before storage; precise coordinates are never stored.
- Push notifications carry only a generic message and an internal reference — never your name, a message body, or a photo.
- Messages are transmitted over encrypted connections.
- When you delete your account, we also destroy the encryption keys protecting any stored video, making it unrecoverable.
6. How long we keep your data
We keep your account data for as long as your account exists. Some data has a shorter life: login codes expire within minutes, and a pitch sent to someone who never signs up is automatically deleted after a short period. When you delete your account (see below), we remove your personal data as described there. We keep a minimal, pseudonymous event log to operate the service; once your account is deleted, the identifiers in that log no longer point to an identifiable person.
For safety and legal compliance, the IP and upload records described in section 2 are kept for 12 months and then deleted (sooner if your account is deleted).
7. Your rights
You can, at any time:
- Access and correct your information — most of it is editable directly in the app (Profile and Settings).
- Delete your account — in the app, go to Profile → Settings → Delete account. This permanently deletes your profile, photos, videos, messages, matches, swipes, device tokens, and the pitches you created, and destroys the keys protecting any stored video. (We retain only what we’re required to for safety or legal reasons, in a form that no longer identifies you.)
- Object to or restrict certain processing, and request a copy of your data.
- Withdraw consent for notifications at any time in Settings.
To exercise any right, email privacy@pitchorditch.is. If you’re in the EEA, you also have the right to lodge a complaint with your data protection authority — in Iceland this is the Data Protection Authority (Persónuvernd, personuvernd.is).
8. Age
Pitch or Ditch is strictly for people aged 18 and over. We confirm your age from the date of birth you provide and may use a third-party age-verification provider. If we learn that someone under 18 is using the app, we will remove their account.
9. International transfers
Some of our providers (such as Telnyx and Apple) operate internationally, which can mean your data is processed outside the EEA. Where that happens, we rely on appropriate safeguards (such as the European Commission’s Standard Contractual Clauses) to protect it.
10. Changes to this policy
We may update this policy from time to time. We’ll post the new version here and update the “last updated” date; significant changes will be communicated in the app.
11. Contact
Questions or requests: privacy@pitchorditch.is.