What we hold, and why.

What you give us. Your email address, a password (stored only as a cryptographic hash — we cannot read it), your date of birth, display name, gender, who you would like to meet, city, region, country, optionally your job and a short about-you, up to five interests, and your photos.

What you create by using it. Your likes and passes, your matches, your messages, anyone you have blocked, and any reports you file.

Technical information. Standard server logs — IP address, browser type, timestamps — kept for security and for diagnosing faults.

We do not ask for your phone number, we do not use trackers or advertising cookies, and we do not run analytics that follow you around the internet.

• To run your account and show your profile to the people you have chosen to be visible to.
• To find people near you and match you with them.
• To deliver messages between matched members.
• To review photos before they go live, and to act on reports.
• To keep the service secure and to stop spam and abuse.
• To confirm you are 18 or over, which we are required to do.

We do not sell your information to anybody, and we do not share it for advertising.

Other members can see your display name, your age, your city and region, your job if you added one, your about-you, your interests, and your approved photos. Your profile is only visible once you have finished setting it up.

Nobody can see your email address, your password, your exact date of birth, who you have liked, who has liked you, who you have blocked, or anything you have reported.

Your messagesare readable only by you and the person you matched with. Access is enforced by database-level rules, not by hiding them in the interface — someone holding a conversation’s internal ID still cannot read it.

Moderators can see profiles, photos awaiting review, and reports, in order to do the moderation.

Photos are stored with unguessable filenames and served through a content delivery network so pages load quickly. Anyone holding the exact URL of a photo can open it, which is how essentially every image on the web works — but the URLs are not listed anywhere, only approved photos are ever surfaced, and no profile page is indexed by search engines.

Your information is held in a Postgres database and file storage operated by Supabase, hosted in Canada. The website itself is served by Cloudflare. Confirmation and password-reset emails are sent through Resend.

Those three providers process data on our behalf and are not permitted to use it for anything else.

Your profile and messages are kept while your account exists. Delete your account and your profile, photos, likes, matches and messages are deleted with it.

Reports are kept after the reporting account is deleted, with the reporter’s identity detached. Without that, someone could file a report and then erase the record of it by closing their account.

Whether you are in Canada (under PIPEDA) or the United States — including California, under the CCPA and CPRA — you can:

• Ask for a copy of everything we hold about you.
• Correct anything that is wrong. Most of it you can edit yourself on your profile.
• Delete your account and everything in it.
• Ask us to explain anything in this policy in more detail.

We do not sell or share personal information as those terms are defined under California law, so there is nothing to opt out of. To exercise any of the above, contact us.

Apoile is strictly 18 and over. We do not knowingly hold information about anyone younger, and any account found to belong to a minor is removed along with its data.

If this policy changes in a way that meaningfully affects you, we will say so on the site before the change takes effect rather than quietly editing this page.