Flowting

Flowting Privacy Policy

Last updated: October 12, 2026
This policy explains what personal data Flowting collects, why, who can see it, how long we keep it, and what you can do about it. It applies to the Flowting apps and the website at getflowting.com.

In short

  • We collect what a dating app needs, and little more. We never ask for your phone number, your contacts or your camera roll. We never keep your exact location.
  • Your selfie images are deleted after the check, or within 30 days if a person must review it. We keep no face code of members. The only face codes we keep are of accounts banned for safety, for up to 24 months.
  • Who you are interested in is never shown on your profile. It is stored encrypted and is never sent to analytics or AI tools.
  • We do not sell your data, and we do not share it for advertising. There are no advertising tools in the app.
  • Our servers are in the United States. Photos and selfie images are stored in the European Union. Our company is in the United Arab Emirates. Section 11 explains what that means for you.
  • App statistics need your yes where the law asks for it. In some countries, including the EU and the UK, we ask before we count how the app is used. Everywhere, you can turn it off in Settings.
  • You can download or delete your data at any time in the app.

1. Who is responsible for your data

VeriTek L.L.C-FZ runs Flowting and decides how your data is used. In privacy law, we are the "controller".
  • Address: Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates
  • Email for privacy questions: [email protected]
Data protection officer. James Bechet, VeriTek's founder, is our data protection officer and the person in charge of personal information. He answers privacy requests and complaints. Write to [email protected], or by post to the address above.
Representatives. Some countries ask a company outside them to name a local representative before it serves people there. Flowting is not yet available in the European Union, the European Economic Area, the United Kingdom, Brazil, Turkey and some other countries for this reason (see section 18). We will name each representative here, with an address, before Flowting opens in that country:
  • EU representative (GDPR Article 27): not yet appointed. Flowting is not available in the EU or the EEA.
  • UK representative (UK GDPR Article 27): not yet appointed. Flowting is not available in the UK.

2. What we collect

2.1 What you give us

Email address
Why we need it
Sign-in codes, important messages about your account
Shown to other members?
No
First name
Why we need it
Your profile
Shown to other members?
Yes
Birthday
Why we need it
Check you are old enough; show your age
Shown to other members?
Your age only, not your birthday
Gender ("I'm a")
Why we need it
Matching
Shown to other members?
Only if you choose to show it
More about your gender, pronouns (optional)
Why we need it
Your profile
Shown to other members?
Yes, if you add them
Who you are interested in
Why we need it
Matching
Shown to other members?
Never
Age range you want to see
Why we need it
Matching
Shown to other members?
No
Photos (up to 6)
Why we need it
Your profile
Shown to other members?
Yes, after our checks
Answers to the profile questions
Why we need it
Your profile draft and date ideas
Shown to other members?
Only the parts you mark as shown
Profile details you add later (for example passions, languages, "family plans")
Why we need it
Your profile and, if you choose, your filters
Shown to other members?
Only the parts you mark as shown
Trips (city and dates)
Why we need it
Matching before and during a trip
Shown to other members?
See section 6
Why you are here (optional: dating, friends, both, not sure)
Why we need it
Planning events in your city. It never changes your matches
Shown to other members?
No
Yes, no and Super Yes choices
Why we need it
Matching
Shown to other members?
The other person sees a yes only as the app describes
Messages
Why we need it
Chat with your matches
Shown to other members?
Only to the person you chat with
Date plans (day and place)
Why we need it
Planning a date you both agree to
Shown to other members?
Only to that match
Reports, appeals and support emails
Why we need it
Safety and support
Shown to other members?
No. A reported person is not told who reported them
"Share my date" details
Why we need it
Sending your plan to a friend you choose
Shown to other members?
Only to that friend
Feedback after a date
Why we need it
Safety and making picks better
Shown to other members?
No

2.2 What we collect when you use Flowting

Your city. The app reads your location only while it is open. We turn it into a city at once and delete the exact location. We keep the city and the date
Why
Show you people in your city; the "lives here" label; city waitlists; country rules
Country, from your IP address and your app store
Why
Country rules and fraud prevention
Selfie check result: passed or not, the date, and our reference number
Why
Letting you say yes to people and appear in picks, and the age check. See section 4
Device and app details: device type, operating system, app version, language, time zone, a device identifier
Why
Running the app, sign-in security, stopping banned people from coming back
Push notification token
Why
Sending notifications
IP address and security logs
Why
Security and fraud prevention
How you use the app (for example screens opened, buttons tapped)
Why
Finding bugs and improving Flowting. See section 8
Crash reports
Why
Fixing crashes
Purchase details from Apple or Google: product, dates, a purchase ID, status. Not your card details
Why
Turning Plus on and off
Age signal from your app store (in some US states)
Why
Checking you are an adult, as the law requires

2.3 What we create

  • Picks and scores. Our code scores how well two people might fit, from your answers, city, trips and choices. We do not use photos, race or ethnicity to rank people.
  • Safety signals. For example strikes, risk scores for scams, and trust levels.
  • Photo labels. For example "may be the first photo" or "hide in some countries".

2.4 What we do not collect

  • No phone number, no contacts, no password.
  • No scanning of your camera roll. You choose each photo.
  • No exact location history. We keep the city only.
  • No face code of members after a check. The only face codes we keep are of accounts banned for safety (section 4).
  • No voice recordings. Flowting has no voice input.
  • No advertising IDs and no advertising trackers.

3. Sensitive data

Some data on a dating app is sensitive. It can reveal your sexual orientation, your sex life, your gender identity or your face. We protect it more:
  • Who you are interested in reveals sexual orientation. We ask for your separate consent before we use it. It is never shown on your profile, never sent to analytics or crash tools, never sent to AI tools, and stored encrypted.
  • Gender identity details (non-binary, prefer not to say, more about my gender) are shown only if you choose. We do not guess anyone's gender from photos.
  • Face data from photo checks and the selfie check is used during the check and then deleted. See section 4.
  • Trips can show when you are away from home. Section 6 explains who sees what.
  • Your answers can contain things you choose to share. Our AI does not create sensitive fields from them, and our code never treats them as religion, health or orientation data.
You can withdraw a consent at any time in Settings. If you withdraw consent for "interested in", we cannot match you, so your profile stops appearing in picks. If you withdraw consent for face checks, your selfie check no longer counts, we remove its match scores, and you cannot add photos or say yes to people.

4. The selfie check and face data

We ask for your consent on its own screen before we look at any face. Everyone takes a short video selfie before they can say yes to anyone. Our Biometric Notice explains it in full. In short:
  • Our photo checks find and count the faces in every photo you upload. When a photo shows only one face, an automated system estimates how old it looks, to check that you look like an adult. It estimates age only: it never guesses sexual orientation, race, religion or any other trait. Other people's faces in group photos are only counted, never measured: a member of our team checks group photos, for example for children.
  • The selfie check confirms you are a real, live person and that your face matches your profile photos.
  • The selfie check runs on your phone, in the Flowting app or your phone's web browser. On a computer, you scan a QR code and finish the check on your phone.
  • To do this, our own servers measure features of your face for a few seconds. Google's Gemini AI service looks at one selfie image to check that a live person took it, and at that image and your solo photos to confirm the same person. Selfie images and photos are stored with Cloudflare (R2 storage). This counts as biometric data in many laws.
  • We delete the selfie images when the check ends. If a check needs a human review, we keep them until the review ends, and never later than 30 days after the selfie.
  • We keep no face measurements of members. We keep the check result: passed or not, the date, our reference number and which photos matched. We keep the match scores (numbers, not face data) until 30 days after the check is decided.
  • If you add or remove a photo that shows only you, you take the selfie check again.
  • In the European Economic Area and the United Kingdom, you can choose a person check instead of the face check. You take one selfie photo while you copy a pose, and a trained member of our team compares it with your photos by eye. No face code is made, nothing is measured, and it is not compared with the ban list. We delete the photo when our team decides, and never later than 30 days after you take it. Our Biometric Notice, section 10, explains it.
  • Ban list. Every selfie is compared with the face codes of accounts we banned for safety, except while you are in the City of Portland, Oregon, where local law does not allow this search, and except a person check, which has no face code. If we ban an account for safety, we may keep one face code, made only from a photo its own passed selfie check matched, and never of anyone who is or may be under 18. We destroy it 24 months after the ban, or at once if the ban is lifted. A match never bans anyone on its own: a person decides.
  • We never sell, rent or trade face data. We never use it to identify you by name, and we compare your face only with your own photos and with the ban list.

5. How we use your data

We use your data to:
  • Run Flowting: your account, picks, matches, chat, trips, date ideas and notifications.
  • Keep people safe: check photos, check messages for scams and abuse, act on reports, stop banned people from coming back, stop images we removed from being uploaded again, and respond to emergencies. For this last point we make a short fingerprint of every photo (a number made from its shapes and shades, not face data). If an image is removed because it was shared without consent or shows child abuse, its fingerprint goes on a block list, and a new photo with a near-identical fingerprint is refused.
  • Apply country rules: for example the minimum age and LGBTQ+ hidden mode (see our Terms, section 6).
  • Handle Plus: turn it on and off, and answer billing questions.
  • Talk to you: sign-in codes, account and safety messages, and replies to support. We only send marketing emails if you said yes, and every one has an unsubscribe link.
  • Fix and improve Flowting: find bugs and see which features work. We use data without names or sensitive fields for this.
  • Follow the law: for example age checks, reports of child sexual abuse material, tax records, and answers to valid legal requests.
We do not use your data to target ads, and we do not let others do so.

6. Who can see what

Other members in your picks can see your profile: first name, age, the photos that passed our checks, the parts of your profile you marked as shown, the languages you speak, and a "lives here" label if it applies.
Other members never see: your email, birthday, who you are interested in, your exact location, the distance between you, or your private answers.
Trips:
  • Before a match, people in that city only see that you will be there, and roughly how long you overlap ("short overlap"). They never see your dates.
  • After a match, your match sees the week ("here until Thursday").
  • Your exact dates are shared only inside a date plan that you both agree to.
  • You can hide a trip, hide from visitors, or pause your profile at any time, for free.
No counts. We never show how many people are in a city or an area before a match. While you wait for picks, the app shows how close your area is as a percent, never a number of people, so nobody can be singled out.
Notifications. Message notifications show the sender's first name and a preview of the text, unless you turn on "Discreet mode". Discreet mode is on by default in countries where LGBTQ+ hidden mode applies. Your phone's own settings also control what shows on the lock screen. Notifications never show photos. Notification text passes through Apple's or Google's push service (see section 9). We send it to them directly, with no other push provider in between.

7. AI and automated decisions

Where we use AI. Only in two places:
  • Your profile draft. An AI asks up to three questions and writes a draft profile. It says it is an AI. You can edit or delete everything. We send only your answers and first name, never who you are interested in, your gender identity, your photos or your trips. Provider: Anthropic.
  • Safety. AI tools check photos for nudity, children, weapons, AI-made faces and similar problems. If our rules flag a chat as a possible scam or threat, or someone reports it, an AI model may read the last messages of that chat to help decide what to do. Normal chats are not read by AI. Providers: see section 9.
AI providers may not use your data to train their models, as far as our contracts allow. We choose zero-retention settings where the provider offers them.
Automated decisions. Our software makes some decisions on its own, for example:
  • rejecting a photo that breaks our rules
  • hiding someone from picks after more than one report
  • closing an account after clear signs of a scam
Every time, we tell the person what happened, why, and that it was automated. Serious cases (for example threats or a suspected minor) go to a person. You can always ask for a person to review a decision about you: reply to our message, or email [email protected].
Ranking. Our own code ranks your daily picks. It does not use AI, photos, race or ethnicity, and payment never buys a higher place.

8. Analytics and crash reports

We use PostHog to understand how the app is used and Sentry to find crashes. We set them up so that:
  • they never receive your gender, who you are interested in, your birthday, your trips, your messages, your reports or your photos
  • automatic screen recording ("session replay") is off
  • your account is identified by an internal number, not your name or email
Your choice about app statistics (PostHog).
  • In the European Union, the European Economic Area, the United Kingdom, Gibraltar and the Crown Dependencies, and whenever we cannot tell where you are, PostHog stays off until you tap Allow. "No thanks" is just as easy, and nothing else in the app depends on your answer.
  • In other countries, PostHog runs unless you turn it off. On our website, a Global Privacy Control signal from your browser counts as "off".
  • You can change your answer at any time in Settings → Privacy → Share app usage stats. When you turn it off, the app stops sending events and replaces the random number on your device.
Crash reports (Sentry) are part of keeping the app working and safe. They carry no name, email or sensitive data.
On our website, see the Cookie Notice.

9. Who we share data with

We do not sell your data. We share it only with the people and companies below, and only as much as they need.
Other members, as described in section 6.
Service providers that work for us under contract (in privacy law, "processors"):
Hetzner Online GmbH (servers run by its subsidiary Hetzner US LLC)
What they do
Hosts our servers and database, including our own photo-check and face-match servers
Data they get
All data we hold
Where
United States (Ashburn, Virginia)
Microsoft (PhotoDNA)
What they do
Checks photos against known child sexual abuse images, once Microsoft approves our access
Data they get
Each photo you upload. Microsoft turns it into a digital fingerprint at once and does not keep the photo
Where
Microsoft's cloud (Microsoft does not name the region)
Google (Gemini on Google Cloud Vertex AI)
What they do
Second opinion on unclear photos; the live-person check and the same-person comparison in the selfie check
Data they get
Photos you upload; one selfie image during the check
Where
Any Google region (Google may process it in any of its regions)
TypeSafe (Jev) and Anthropic
What they do
Checking flagged messages and profile text for abuse and scams
Data they get
The flagged text, without your name
Where
United States
Anthropic
What they do
Writing your profile draft
Data they get
Your answers and first name
Where
United States
Amazon Web Services (SES)
What they do
Sending emails and sign-in codes
Data they get
Email address, email content
Where
European Union (Ireland)
Apple Push Notification service, Firebase Cloud Messaging (Google)
What they do
Delivering notifications, sent directly from our servers
Data they get
Push token, notification text
Where
US
Apple and Google
What they do
App stores and payments. We check each purchase directly with Apple or Google; no billing company sits in between. They are responsible for your payment data under their own privacy policies. They also confirm that the app is genuine (App Attest, Play Integrity)
Data they get
Purchase details, an internal account reference, device check results
Where
Worldwide
PostHog
What they do
App analytics
Data they get
Internal user number, app events without sensitive fields
Where
European Union (Germany)
Sentry
What they do
Crash reports
Data they get
Internal user number, device details, error data
Where
European Union (Germany)
Cloudflare
What they do
Website security (bot check) and delivery; R2 storage for photos and selfie images
Data they get
IP address, browser details; photos; selfie images until the check ends (at most 30 days)
Where
Worldwide. R2 storage: EU
PagerDuty and Pushover
What they do
Alerting our team to serious safety cases
Data they get
Case number and type, internal user number
Where
United States
Telegram Messenger
What they do
Alerting our team to new support tickets and reports
Data they get
Ticket number, category and priority; no personal content
Where
Worldwide (Telegram)
Our contracted safety backup person
What they do
Reviews urgent safety cases when we cannot
Data they get
Only the data of that case
Where
Philippines or Taiwan, named here once contracted (never the UAE)
Others, only when needed:
  • Your friend, if you use "Share my date". The friend gets the plan: place, time, and your match's first name and photo.
  • Authorities, when the law requires it, or when someone's life or safety is in danger. See section 10 and our Law Enforcement Guide.
  • People who report content, only to tell them what we decided about their report. We never tell them more about the other person's account.
  • The National Center for Missing & Exploited Children (US) and other bodies, if we find child sexual abuse material, as the law requires.
  • Advisers such as accountants, under a duty of confidentiality.
  • A buyer, if Flowting or VeriTek is sold or merged. The buyer must respect this policy. We will tell you before your data moves.

10. Requests from authorities

We give data to the police or other authorities only:
  • when the law where we must comply requires it, through a valid legal request, or
  • in an emergency, when we believe someone's life or safety is in danger, or
  • when we must report child sexual abuse material, or
  • when we suspect a crime that threatens someone's life or safety, as the law of the country concerned requires (for example Article 18 of the EU Digital Services Act).
We check every request. We give only the data the request needs. Where we are allowed to, we tell the person before we hand over their data. We will refuse requests that seek to punish consensual relationships between adults, or a person's sexual orientation or gender identity, as far as the law allows us.
Read more in our Law Enforcement Guide.

11. Where your data is stored, and transfers

Storage. Our servers and database are in the United States, with Hetzner in Ashburn, Virginia. Photos, selfie images and backups are stored in the European Union with Cloudflare R2 (section 9). We do not store Flowting data on servers in the United Arab Emirates.
Access from other countries. Our company, VeriTek, is in the United Arab Emirates. Our team may access data from outside the United States. Some providers in section 9 are in the European Union or work worldwide.
What this means.
  • The UAE, the US and the EU have different privacy laws from yours. The European Commission has not found that the UAE protects data to the EU level.
  • As a UAE company, VeriTek must follow UAE law. UAE authorities could ask us for data. Section 10 explains how we handle requests.
  • To limit this risk, we keep sensitive data to a minimum, encrypt who you are interested in, and never keep LGBTQ+ data of members on staff devices or on servers in the UAE.
Safeguards.
  • When you use Flowting, you send your data to us directly. We then use the providers in section 9. Each provider works only on our instructions, under a contract that requires protection at the level of this policy.
  • Where a provider is outside your country, we rely on what your law allows: an adequacy decision or the EU-US Data Privacy Framework where one applies (Google and Cloudflare are certified), standard contractual clauses (with the UK addendum or the UK international data transfer agreement), or, where the law allows it, the transfer being needed to provide Flowting to you.
  • UAE law (Federal Decree-Law No. 45 of 2021, Article 23) allows these transfers because they are needed to perform our contract with you, and our provider contracts bind each provider to the same protection.
  • Canada: your data is processed in the United States and the European Union. Authorities there may be able to access it under their laws.
  • You can ask us for a copy of the safeguards at [email protected].

12. How long we keep data

We keep data only as long as we need it. When you delete your account, we delete your data within 30 days, except for the items marked "after deletion" below.
Sign-in codes
How long
10 minutes
Exact location
How long
Not kept. Deleted as soon as we know your city
City checks (city and date)
How long
60 days
Selfie images
How long
Deleted when the check ends. If a person must review the check: until the review ends, never later than 30 days after the selfie
Person check photo (EEA and UK, if you choose it)
How long
Deleted when our team decides, never later than 30 days after the photo
Face measurements (from the selfie or your photos)
How long
Not kept. Used for seconds during the check
Selfie match scores (numbers, not face data)
How long
30 days after the check is decided. Removed at once if you withdraw consent
Face code of an account banned for safety
How long
24 months after the ban, or deleted at once if the ban is lifted. After deletion: yes
Selfie check result (yes or no, date, reference number)
How long
While your account exists
Profile, photos, answers, settings
How long
While your account exists
Photos rejected by our checks
How long
Deleted at once. If a photo was rejected for explicit content, hate symbols or similar serious reasons, we keep it in locked storage for up to 90 days as evidence
Suspected child sexual abuse material
How long
Kept in locked, encrypted storage for 1 year after we report it, as US law requires, or longer if an authority requires it
Trips
How long
Until 90 days after the trip ends
Picks and yes or no choices
How long
12 months
Blocks, unmatches and reports between two people
How long
While either account exists, so the two people are never shown to each other again
Messages
How long
While the match exists. After an unmatch, a block or an account deletion, we keep a locked copy for 90 days so either person can still report. Only our safety team can open it, and only for a report. After deletion: 90 days
Reports, safety decisions, statements of reasons, appeals
How long
3 years after the decision. After deletion: yes
Data needed to stop banned people from returning: scrambled forms of the email address, the device identifier, the store purchase ID and the IP network used
How long
3 years after the ban. After deletion: yes
Photo fingerprints of a banned account's photos (not face data)
How long
24 months after the ban. After deletion: yes
Fingerprints of images removed as intimate images shared without consent or as child sexual abuse material (not face data, never the image)
How long
Until our safety team takes them off the block list. After deletion: yes
Your Download my data file
How long
7 days after we make it
Data under a legal hold (an open serious safety case, or a request from an authority to preserve data)
How long
Until the case ends, plus 180 days, unless the law requires longer. After deletion: yes
Purchase records
How long
7 years, as UAE tax law requires. After deletion: yes
Records of your consents (including the exact words you agreed to)
How long
While your account exists, plus 5 years after it is deleted. After deletion: yes
Security logs with IP addresses
How long
30 days
Analytics events
How long
12 months
Crash reports
How long
90 days
Support emails
How long
2 years after the last message. After deletion: yes
Website waitlist email
How long
Until you unsubscribe, or 24 months after our last contact
Backups
How long
Encrypted, and overwritten within 30 days. If we ever restore a backup, we delete again the accounts deleted since
Inactive accounts
How long
If you do not open the app for 24 months, we email you. If you do not sign in within 30 days, we delete the account

13. How we protect your data

  • Encryption in transit, and encryption of the most sensitive fields, such as who you are interested in.
  • Photos in private storage, shown only through short-lived links. We remove location data (EXIF) from photos when you upload them.
  • Staff and contractor access only when needed, with logs.
  • No sensitive fields in logs, analytics or crash reports. Automated tests check this.
  • Backups off the main server, and regular restore tests.
No system is perfect. If a breach puts your rights at risk, we will tell you and the authorities as the law requires. We will contact the people most at risk first, for example LGBTQ+ members with trips to countries where LGBTQ+ hidden mode applies.

14. Your choices and rights

In the app, at any time:
  • See and change your profile, photos and settings.
  • Download your data (Settings, then Privacy, then Download my data). You get a file with your data within 30 days, usually within minutes, and we email you when it is ready. To download it, you enter a code we send to your email, and we delete the file 7 days after we make it. You can ask for a new file once a month.
  • Delete your account (Settings, then Delete account), or at getflowting.com/delete without the app. Cancel Plus in the store first.
  • Withdraw a consent (Settings, then Privacy).
  • Hide a trip, hide from visitors, or pause your profile.
  • Turn off marketing emails and notifications.
By email: write to [email protected]. We may need to confirm it is you, usually by a code sent to your account email. We answer within 30 days. If a request is complex, we may need longer, and we will tell you why. Requests are free.
You have these rights under most privacy laws. Sections 15 to 18 add details for some places. We will not treat you worse for using your rights.

15. If you are in the EU, the EEA, the UK or Switzerland

The GDPR (and the UK GDPR and Swiss law) gives you these rights: access, correction, deletion, restriction, portability, objection to processing based on legitimate interests, and withdrawal of consent at any time. You also have the right not to be subject to a decision based only on automated processing that has serious effects on you, and to ask for a person to review it.
Our legal bases:
Account, profile, picks, matches, chat, trips, Plus
Legal basis
Contract: we need it to provide Flowting to you
Who you are interested in; gender identity details
Legal basis
Your explicit consent (GDPR Art. 9(2)(a))
Selfie check and face comparison
Legal basis
Your explicit consent (GDPR Art. 9(2)(a))
Person check instead of the face comparison (your choice)
Legal basis
Contract: we need to confirm members are real and their photos are them. A photo a person looks at, with no face code, is not biometric data (GDPR Recital 51)
AI profile draft
Legal basis
Your consent
Photo checks, message checks, reports, bans, fraud prevention
Legal basis
Our legitimate interest, and yours, in a safe service. For legal duties, legal obligation
Answering legal requests, age checks, tax records
Legal basis
Legal obligation
Emergencies
Legal basis
Vital interests of the person at risk
App statistics (PostHog)
Legal basis
Your consent, asked before PostHog starts (EU ePrivacy rules, UK PECR). You can withdraw it in Settings
Crash reports
Legal basis
Our legitimate interest in a working, safe app
Marketing emails
Legal basis
Your consent
Complaints. You can complain to the data protection authority where you live or work. We would like to hear from you first.

16. If you are in the United States

Sensitive data. Several US state laws treat sexual orientation, sex life, biometric data and precise location as sensitive. We ask for your opt-in consent before we use who you are interested in and before the selfie check. We use precise location only for a moment, to find your city.
We do not sell or share your personal data, as "sell" and "share" are defined in US state laws. We do not use it for targeted advertising. We honor Global Privacy Control signals on our website. We use sensitive data only to provide Flowting, to keep people safe and to follow the law, so a "limit the use of my sensitive data" request is already met by how we work. You can still send one.
Categories we collected in the last 12 months:
Identifiers
Examples
Email, internal user number, device identifier, IP address
Sold or shared for ads?
No
Customer records
Examples
Name, email
Sold or shared for ads?
No
Protected characteristics
Examples
Age, gender
Sold or shared for ads?
No
Commercial information
Examples
Plus subscription history
Sold or shared for ads?
No
Biometric information
Examples
Face measurements during photo checks and the selfie check (not kept); a face code of an account banned for safety (up to 24 months)
Sold or shared for ads?
No
Internet or app activity
Examples
How you use the app
Sold or shared for ads?
No
Geolocation
Examples
City; precise location for a moment only
Sold or shared for ads?
No
Audio and visual information
Examples
Photos
Sold or shared for ads?
No
Sensitive personal information
Examples
Who you are interested in, gender identity, face data
Sold or shared for ads?
No
Inferences
Examples
Match scores, safety risk scores
Sold or shared for ads?
No
Your rights (depending on your state): to know and access, to correct, to delete, to get a copy, to opt out of sale, sharing, targeted ads and some profiling, and to appeal our answer. You can use an authorized agent. If we say no to a request, you can appeal by replying to our answer. If you still disagree, you can contact your state attorney general.
Biometric data (Illinois, Texas, Washington, Colorado and others). See our Biometric Notice. It is our public policy for keeping and destroying biometric data.
Consumer health data (Washington and Nevada). These states treat face images and biometric data as "consumer health data". We collect it only with your consent, only for the selfie check and photo checks. We share it only with the providers listed for those checks, and never sell it. You can ask to access or delete it, and withdraw consent, as described in section 14. Our Consumer Health Data Privacy Policy gives the details.

17. If you are in the United Arab Emirates, or our UAE law applies to you

VeriTek is a UAE company, so the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) applies to how we handle data, wherever you live. Under it, you can:
  • get information about how we process your data, and a copy of it
  • ask us to correct or delete it
  • ask us to restrict or stop processing it
  • ask us to move it to another service
  • object to decisions made only by automated processing that have legal or similar effects on you
  • withdraw your consent
We treat sexual life, biometric and similar data as sensitive under this law and use it only with your explicit consent. You can complain to the UAE Data Office. We follow the standard of the EU GDPR, which is stricter, for everyone.
If you are located in the UAE: LGBTQ+ hidden mode and discreet notifications apply (see our Terms, section 6), and the minimum age is 21.

18. Other countries

Where your local law gives you more rights than this policy, you have those rights. Some countries add details:
Where Flowting is not available yet. Some countries require a local representative, a registration or a licence before a company may serve people there. Flowting stays closed in those countries until that step is done. Today this includes the countries of the EU and the EEA, the UK, Brazil, Turkey, Egypt, Nigeria, Ghana, Senegal, Côte d'Ivoire, Rwanda, Botswana, Peru, Thailand, Indonesia, Nepal, Jamaica, Serbia, Bosnia and Herzegovina, Albania, North Macedonia, Moldova and the Canadian province of Quebec. Japan and South Korea stay closed for their own registration and identity-check rules. If you open the app there, you can leave your email to hear when Flowting opens.
Canada. We ask for your express consent before we use sensitive data (who you are interested in, face checks, your location). Your data is processed outside Canada (section 11). You can complain to the Office of the Privacy Commissioner of Canada.
Mexico. We ask for your express consent, by a separate screen in the app, before we use sensitive data (who you are interested in, face data). You have the rights of access, correction, cancellation and objection ("ARCO") and can withdraw consent. Write to [email protected].
India. You can contact our grievance officer (see the Terms, section 20). You can withdraw consent at any time, as easily as you gave it.
Singapore. Our data protection officer is named in section 1.
Australia. You can complain to us first, and then to the Office of the Australian Information Commissioner or the eSafety Commissioner.
Chile, Colombia, Argentina and other Latin American countries. We ask for your express consent before we use sensitive data. You have the rights of access, correction, deletion and objection under your local law.
Israel. We treat who you are interested in, face data and location as especially sensitive information.

19. Children

Flowting is only for adults (18 or older, or higher where the law requires). We do not knowingly collect data from anyone younger. If we learn that a minor has an account, we close it and delete the data, except what we must keep to report abuse. If you think a minor is on Flowting, report the profile or email [email protected].

20. Changes to this policy

We may update this policy. If a change is important, we tell you in the app or by email before it applies. If a change needs your consent, we ask for it.

21. Contact

VeriTek L.L.C-FZ Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, UAE [email protected]