Privacy Policy

Last updated: March 2, 2026

This Privacy Policy explains how Match Me If You Can, Lda. ("MMIYC", "we", "us", or "our") collects, uses, discloses, and protects personal information when you use Match Me If You Can (the "Service").

1. Who we are

Controller: Match Me If You Can, Lda.
Contact: privacy@mmiyc.club
Address: Rua da cruz de santa apolonia 70, 1110-118 Lisbon, Portugal

2. Information we collect

2.1 Account and authentication data

  • Email address and account identifiers (through Supabase authentication)
  • Login metadata such as account creation time and last login time
  • OAuth sign-in provider (e.g., Google) if you choose to sign in that way

2.2 Profile and matchmaking data you provide

The Service is designed for curated matchmaking in love, travel, and business contexts. Depending on what you submit, we may store:

  • Name, city, age, gender, and preferences (e.g., ideal age range, ideal gender partner)
  • Biography and free-text answers about your vibe and preferences
  • Values, green flags, non-negotiables, deal breakers, and similar preference data
  • Optional contact handles you choose to share (e.g., WhatsApp, Telegram, Instagram, LinkedIn)
  • A profile picture URL (if you upload/provide one)
  • Other optional fields such as languages, nationality, relationship preferences, and similar profile attributes

2.3 Applications data

If you apply to become a matchmaker, partner, or member, we collect application data such as your name, email, city/country, motivation, and optional fields (e.g., phone and social links).

2.4 Technical and usage data

  • Device and browser information (as typically provided in HTTP requests)
  • Session and authentication cookies required to keep you signed in

2.5 AI chat inputs

If you use our in-app coaching/chat features, we process the messages you send and receive. Message content is transmitted to an AI provider as described below.

3. How we use information

  • Provide the Service (accounts, profile creation, matchmaking rounds, match reveal)
  • Personalize your experience and improve matchmaking quality
  • Send essential service emails (e.g., match notifications, round updates)
  • Review applications and administer the platform
  • Prevent abuse, spam, fraud, and enforce our Terms
  • Maintain security, debugging, and reliability

4. Legal bases (EEA/UK)

Where applicable, we process personal information under one or more of the following legal bases:

  • Contract: to provide the Service you request
  • Legitimate interests: to secure and improve the Service and prevent abuse
  • Consent: where you choose to provide optional fields or marketing preferences (if offered)
  • Legal obligation: to comply with applicable laws

5. How we share information

We do not sell personal information. We share information with service providers that help us operate the Service:

  • Supabase (authentication, database, and hosting for backend services)
  • Resend (email delivery)
  • AI providers
    • OpenAI (used for AI-generated matchmaking in admin workflows)
    • Lovable AI Gateway (used for in-app coaching chat; routes requests to an AI model)
  • Google (OAuth sign-in, if you choose to sign in with Google)

6. Google OAuth / Google user data disclosure

If you sign in with Google, we receive information from Google necessary to authenticate you. We use Google OAuth data only to:

  • Authenticate you and create/maintain your account
  • Provide account access to the Service

We do not use Google OAuth data for advertising, do not sell it, and do not share it with third parties except as needed to provide the Service (e.g., authentication via Supabase).

7. Cookies and similar technologies

We use cookies primarily to support authentication and session management. You can control cookies through your browser settings; however, the Service may not function properly without required cookies.

8. Data retention

We retain personal information for as long as necessary to provide the Service and for legitimate business purposes such as security, dispute resolution, and compliance.

  • Account data: retained while your account is active
  • Profile data: retained while your account is active, unless you delete it or request deletion
  • Applications data: retained as needed for review and record-keeping

9. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is 100% secure.

10. International transfers

We may process and store information in countries other than your own, including where our service providers operate. Where required, we use appropriate safeguards for international transfers.

11. Your rights

Depending on your location, you may have rights such as:

  • Access, correction, or deletion of your personal information
  • Objection or restriction of certain processing
  • Data portability
  • Withdrawal of consent (where processing is based on consent)
  • Lodging a complaint with a data protection authority

To exercise rights, contact us at privacy@mmiyc.club.

12. Children

The Service is not intended for children. Do not use the Service if you are under the age required by applicable law to consent to online services.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the "Last updated" date.