xFind Privacy Policy
Last updated: July 2026
1. What data we collect
- Account: your email address (for one-time-code sign-in).
- Profile: display name or nickname, date of birth, gender, city, an “about you” text, and a photo (all optional).
- Location: your city and, if you set a meetup address, its coordinates. We do not track your location in the background.
- Communication: messages in meetup chats.
- Device: a push-notification token (if you enable notifications) and technical logs.
2. How we use your data
To run the Service: showing meetups near you, checking eligibility to join (age and gender against a meetup’s criteria), chat, notifications, moderation, and safety.
3. Who we share it with (processors)
- Google — geocoding a meetup address into coordinates.
- Firebase Cloud Messaging (Google) — delivering push notifications.
- OpenAI — automated message moderation.
- Amazon Web Services — photo storage (S3) and sending sign-in-code emails (SES).
- Cloudflare — site delivery and protection.
- Yandex.Metrica — traffic analytics and session recording (Webvisor): pages viewed, clicks, cursor movement, and technical browser/device data.
We do not sell your data.
4. Retention and deletion
We keep your data while your account is active. You can request deletion of your account and its associated data by contacting us.
5. Your rights
You may request access to your data, have it corrected or deleted, and restrict its processing (to the extent provided by applicable law, including the GDPR). Requests: hello@xfind.me.
6. Cookies and tokens
We use an httpOnly cookie to keep you signed in (the refresh token) — it cannot be read by third-party scripts. The access token is held only in the tab’s memory. Cloudflare may use technical cookies for protection.
Beyond the essential ones we use Yandex.Metrica analytics cookies. They measure traffic and record sessions (Webvisor). You can opt out in your browser settings, via the Yandex.Metrica opt-out, or with Do Not Track.
7. Security
Traffic is encrypted (TLS). Session tokens and sign-in codes are stored hashed. No system on the internet is perfectly secure — keep access to your email safe.
8. 18+ only
The Service is not intended for anyone under 18, and we do not knowingly collect their data.
9. Changes
We may update this Policy; we will give notice of material changes.