Privacy Policy

Effective date: August 3, 2026
Last updated: July 28, 2026

This Privacy Policy explains how TruePair collects, uses, discloses, retains, and protects personal information when you use the TruePair mobile application, websites, and related dating, matchmaking, matrimonial-introduction, social-introduction, messaging, support, and safety services (collectively, the “Service”).

TruePair is a product operated by CYBEXO INC., a New York corporation. In this Policy, “TruePair,” “we,” “us,” and “our” refer to CYBEXO INC. as the operator responsible for the personal information processed through the Service, except where another notice identifies a different responsible party.

1. Scope and your acknowledgment

This Policy applies to information TruePair processes through the Service. For the release governed by this version, TruePair is offered only in the United States to adults aged 18 and older. It does not govern a third party’s independent service, website, or app, even when linked from TruePair.

During account creation, you are asked to agree to the TruePair Terms of Use and acknowledge this Privacy Policy. We record the policy version, content hash, action, surface, app version/build, locale, and server timestamp so we can demonstrate which notice you received. We do not store your password, one-time verification code, raw IP address, or device identifier in the legal-acceptance record.

2. Information we collect

Depending on the features you use, we collect the following categories.

Account and contact information

• name, display name, phone number, email address, date of birth, age or age range, gender, login and account state;
• verification, recovery, fraud-prevention, and customer-support information; and
• subscription entitlement and transaction status received from an app marketplace, not full payment-card details processed by that marketplace.

Profile, preference, and matchmaking information

• biography, photos, videos, voice notes, interests, languages, education, profession, lifestyle, location, and relationship goals;
• matching, dating, matrimonial, and introduction preferences; and
• information you choose to provide about faith, cultural background, family, community, or other potentially sensitive aspects of identity and preference.

You control many profile fields and visibility choices. Because TruePair is an adult relationship service, information you choose to share can reveal sensitive facts. Do not include information you do not want processed under this Policy.

Communications and User Content

• messages, attachments, captions, voice notes, and other content sent through the Service;
• delivery, thread, and interaction state needed to operate messaging; and
• public or member-visible profile content and edits.

Safety, moderation, and support information

• reports, reason categories, blocks, report status, case references, timestamps, and response records;
• bounded copies or references to reported profiles, messages, or media that you were authorized to view;
• automated moderation inputs, content hashes, category signals, decisions, retry state, and policy/provider version metadata;
• human-review access, decisions, appeals, enforcement, audit, and legal-hold records; and
• support or safety contact details, correspondence, delivery status, and attachments you choose to submit.

We do not expose reporter identity to the reported user through the report process.

Device, network, location, and usage information

• device and app type, operating system, app version/build, language/locale, crash and diagnostic information;
• IP address, security/session information, approximate network-derived location, and identifiers needed for security, authentication, notifications, abuse prevention, and service operation;
• feature use, interactions, performance, and reliability events; and
• approximate or precise location when you enable a feature that requires it and grant the applicable device permission.

Agency, family, or representative information

If you use an approved agency, marriage bureau, family, or representative feature, we process the role, relationship, consent, profile-management activity, introductions, and communications required for that feature. Visibility and action authority depend on the applicable role and consent controls.

3. How we obtain information

We obtain information:

• directly from you when you register, build a profile, communicate, subscribe, report, block, or contact us;
• automatically from your device and use of the Service;
• from other users when they communicate with, report, block, or refer to you;
• from an agency, family member, or authorized representative when you participate in those features;
• from app marketplaces, communications providers, identity-verification providers, and other vendors that support the Service; and
• from public or lawful sources when needed to investigate fraud, abuse, safety, or legal compliance.

4. Why we use information

We use personal information to:

• create, authenticate, recover, and administer accounts;
• display profiles according to visibility controls and enable discovery, matching, introductions, messaging, and subscriptions;
• personalize suggestions and operate ranking or compatibility tools;
• send verification codes, service messages, security notices, support responses, and notifications;
• verify identity or account integrity where a verification feature is used;
• detect, prevent, investigate, and act on fraud, scams, impersonation, harassment, prohibited content, security incidents, and violations of the Terms;
• receive reports, immediately apply personal blocks, create safety cases, preserve bounded evidence, notify the Trust & Safety workflow, respond to reporters, and enforce outcomes;
• moderate text and media before or after publication using automated safeguards and, where required, human review;
• provide customer support and respond to privacy requests;
• monitor availability, diagnose errors, measure privacy-safe operational performance, and improve Service reliability and usability;
• manage payments and entitlements using limited information from the applicable app marketplace;
• comply with law, court orders, lawful requests, and legal or regulatory obligations; and
• establish, exercise, or defend legal claims and protect the rights, safety, and integrity of TruePair, our users, and others.

Where the law requires a legal basis, we rely as appropriate on performance of our contract, your consent, compliance with legal obligations, protection of vital interests, and legitimate interests such as safety, security, fraud prevention, support, and Service improvement. You may contact us for the basis applicable to a specific use.

5. What other people can see

Other users may see profile information and media you make visible to them, as well as messages and content you send to them. Visibility can depend on profile settings, relationship or match state, blocks, subscription features, and agency or representative roles.

Approved agencies, marriage bureaus, family members, or representatives may access and manage information only within their authorized role and consent. TruePair does not make private profile fields public merely because they are used for matching.

Blocking restricts the blocked person’s visibility or interaction for you. Reporting also sends a safety allegation and bounded supporting context to authorized TruePair personnel and systems for review.

6. How we disclose information

We disclose information only as reasonably needed for the purposes in this Policy, including to:

• other users and authorized agencies, family members, or representatives according to the feature and visibility controls;
• cloud hosting, database, storage, content-delivery, communications, email, notification, customer-support, analytics, crash-reporting, security, and fraud-prevention providers;
• identity-verification providers when you use a verification feature;
• app marketplaces and payment partners for purchase, entitlement, cancellation, refund, fraud, and accounting functions;
• automated content-moderation providers for the minimum text, caption, or image input needed to evaluate content;
• professional advisers, insurers, auditors, and regulators where reasonably necessary and subject to appropriate duties;
• law enforcement, courts, emergency responders, or other parties when required by law or reasonably necessary to prevent serious harm, investigate unlawful conduct, or protect rights and safety; and
• a successor or transaction participant in a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate confidentiality and legal safeguards.

Service providers may process information only for contracted purposes and under their own applicable security, confidentiality, and legal obligations. Their independent products or services may be governed by separate terms.

7. Automated moderation and human review

TruePair uses automated and human safeguards to identify objectionable or unsafe text, captions, profile media, and chat media. TruePair uses OpenAI’s API as a service provider and processor for automated content moderation. CYBEXO INC. has accepted OpenAI’s Data Processing Addendum for this processing.

When automated moderation is enabled:

• only the content needed for the moderation request is sent to the provider;
• identifiers such as your TruePair user ID, tenant ID, object-storage key, authentication token, or public profile URL are not intentionally included in the provider request;
• image metadata is removed from the moderation derivative where supported by the media pipeline;
• provider request bodies and full responses are not copied into general logs, metrics, or operator queues;
• a rejected, failed, or uncertain check does not silently publish the content; and
• authorized reviewers may access restricted content only when review is necessary, with the access reason and outcome recorded.

Under the default OpenAI API data controls selected for this release, OpenAI may retain moderation inputs, outputs, and related abuse-monitoring metadata for up to 30 days to identify abuse. OpenAI does not use API inputs or outputs to train its models unless the customer affirmatively opts in; CYBEXO INC. has not opted in. OpenAI may retain information for longer when required by law or reasonably necessary to protect its services or a third party from harm. TruePair will reassess and update this Policy before changing the provider, endpoint, account data controls, or intended use.

Automated results may allow content, reject high-confidence prohibited content, or hold content for review. Human review is required for moderation states and media workflows defined by the active safety policy. You may be able to retry, request review, or appeal through the app or Support. Moderation is used for Service safety and enforcement, not to make employment, credit, housing, education, insurance, or other similarly significant decisions.

8. Safety reports and response handling

When you select “Report and block,” TruePair records the report, applies an immediate interaction restriction, creates or queues Trust & Safety case custody, and provides a public reference when the report is durably accepted. We use structured reason, severity, surface, bounded evidence, deadlines, actions, and response state to investigate and respond.

Our operational target is to act on objectionable-content reports within 24 hours, with shorter targets for critical concerns. Possible outcomes include no violation, content restriction or removal, feature limits, suspension, account removal, referral, or a request for more information. We may keep investigation details confidential to protect reporters, other users, reviewers, security methods, and legal obligations.

“Block only” does not create a safety allegation. Unblocking does not cancel a report or enforcement action.

9. Sale, advertising, tracking, and model training

TruePair safety and moderation data is used for Service functionality, safety and security, support, legal compliance, and privacy-safe reliability measurement. TruePair does not sell personal information, use personal information for targeted advertising or cross-app tracking, or use personal information to train a TruePair general-purpose model. TruePair does not use your email address for developer advertising or marketing in this release.

If TruePair later introduces an advertising, marketing, sale, sharing, or model-training use that materially changes these statements, we will update this Policy and applicable store disclosures and provide notice or choice where required before that use begins.

10. Retention

We retain information only for as long as reasonably needed for the purposes described above, subject to the following operational schedule for this release:

• account, profile, message, and media data: while the account and feature are active, then deleted or de-identified through the account-deletion lifecycle, except for narrowly retained records below;
• legal-policy acceptance evidence: up to seven years from acceptance or final supersession, with the account link pseudonymized after deletion when identity is no longer required;
• safety report, case, action, response, and service-level metadata without raw content: while the case is active and up to two years after final closure;
• bounded safety evidence: while the case is active and ordinarily up to 90 days after final closure; substantiated critical evidence may be kept up to one year when a recorded necessity exists;
• rejected or quarantined raw moderation content: deleted within 30 days after the final decision, unless a directly linked appeal, active safety case, or lawful hold temporarily pauses deletion;
• moderation decisions, content digests, policy/provider versions, and safe decision metadata: up to 395 days after the final decision, then deleted or pseudonymized as applicable;
• sanitized provider and operational diagnostics: ordinarily 30 days;
• moderation inputs, outputs, and related abuse-monitoring metadata processed by OpenAI under its default API data controls: up to 30 days, unless a longer period is required by law or reasonably necessary to protect OpenAI’s services or a third party from harm;
• public support or safety contact case metadata and correspondence state: while active and up to one year after closure; private contact attachments ordinarily up to 30 days after closure or until transferred into a governed safety case, whichever occurs first;
• sensitive access and compliance audit records: up to two years; and
• private data-export files: no more than seven days, with related job metadata ordinarily retained for up to 90 days after expiry or deletion.

A read, retry, assignment, dashboard view, or export does not by itself restart a retention period. A scoped legal, safety, fraud, litigation, regulatory, or appeal hold may preserve only the directly affected information for longer. We release or review holds when their purpose ends and delete or de-identify information when it is no longer required.

Backups and distributed caches may take additional time to cycle out, but retained copies remain protected and are not restored to active use except for disaster recovery, security, or legal needs.

11. Account deletion

You can request account deletion through TruePair settings or contact support@truepair.com for help. When deletion is requested, your profile is hidden and permanent deletion is scheduled after the displayed reversible grace period, currently seven days. Signing in during that period may allow you to restore the account before the deadline.

After the deadline, TruePair deletes or de-identifies the account and associated profile, chat, media, and User Content according to the deployed deletion workflow. Limited legal acceptance, safety, fraud, security, transaction, dispute, audit, or legal-hold records may remain for the periods above. A hold does not preserve login access or public discoverability, and we pseudonymize direct identifiers when continued identity is not necessary.

Deleting a TruePair account does not cancel a subscription billed by Apple or another app marketplace. Cancel it separately through that marketplace.

12. Your privacy choices and rights

Depending on the state where you live, you may have rights to request access, correction, deletion, or portability; obtain information about categories, sources, purposes, and disclosures; opt out of certain sale, sharing, targeted-advertising, or profiling uses; limit certain uses of sensitive personal information; withdraw consent; or appeal our response. TruePair does not sell personal information or use it for targeted advertising or cross-app tracking in this release, so there is no such use to opt out of at this time. You may also complain to your state attorney general or another competent privacy regulator.

You can update many profile fields and visibility choices in the app. To make a privacy request or appeal, email privacy@truepair.com with enough information to locate your account and describe the request. Authorized agents may submit requests where applicable law permits, subject to reasonable proof of authority. We may verify your identity and authority before responding. We will not ask for your password or one-time verification code to process a privacy request.

We may deny or limit a request where permitted by law, including when we cannot verify identity, the request would disclose another person’s information, or retention is required for safety, fraud prevention, legal compliance, or claims. We will explain the applicable reason unless law or safety prevents us from doing so.

13. Device permissions and communications

TruePair may request camera, photo-library, location, microphone, or notification access when you use a feature that needs it. The operating system presents the authoritative permission choice. You can deny, skip, or change optional permissions in device settings. Denying an optional permission may limit that feature but does not by itself prevent general use of TruePair.

We may send account, verification, security, safety, support, transaction, and Service messages. You can manage push notifications through device settings. Some non-promotional communications are necessary to operate or secure your account.

14. Security

We use administrative, technical, and organizational safeguards designed to protect information, including access controls, tenant and role boundaries, private object storage, encryption provided by our platforms, audit records for sensitive actions, data minimization, and fail-closed moderation controls. No system is perfectly secure. Protect your credentials, do not share verification codes, and notify Support if you suspect unauthorized access.

15. International processing

TruePair is offered only in the United States for this release. CYBEXO INC. and its service providers may nevertheless process information in the United States and other countries where they operate. Privacy laws may differ in those locations. Where required, we use contractual, organizational, or legal safeguards appropriate to the processing, including provider data-processing terms.

16. Adults only

TruePair is intended only for adults aged 18 and older. We do not knowingly permit children to create accounts. If you believe a person under 18 is using TruePair or that content creates a minor-safety concern, report it immediately in the app or contact safety@truepair.com. We may restrict the account and preserve only the information needed to investigate and take appropriate action.

17. Changes to this Policy

We may update this Policy to reflect changes in the Service, providers, safety practices, law, or data handling. We will identify the effective date and provide notice when required. For a material update, TruePair may require you to review and acknowledge the new version before account creation or continued access. Acceptance and acknowledgment evidence is versioned and retained under this Policy.

18. Contact

Privacy requests and appeals: privacy@truepair.com
General support: support@truepair.com
Safety reports: safety@truepair.com
Support: https://truepair.com/support/
Safety Center: https://legal.truepair.com/safety-and-reporting
Terms of Use: https://legal.truepair.com/terms-of-use

Postal privacy and legal notices may be sent to:

CYBEXO INC.
Attn: TruePair Privacy
10 Times Sq, Fl 5 Ste 6143
New York, NY 10018
United States