DarkMatch Privacy Policy

Effective Date: July 29, 2026

This Privacy Policy explains how onEins LLC, 3833 Powerline Rd, Suite 101-K, Fort Lauderdale, Florida 33309, United States (“onEins,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects information when you use the DarkMatch iOS application, DarkMatch+ subscriptions, consumable Gem purchases, the DarkMatch website, and related services (together, the “Service”).

1. Summary

DarkMatch is an adults-only interactive fiction service. You use an anonymous device-based account by default. The profile information, messages, photos, relationship progress, purchases, and voice-call transcripts needed to provide your experience are processed through our backend.

Some important examples:

Chat and story features send your profile context, recent conversation, story state, and messages to our backend and AI service providers so fictional characters can respond and remember the story.
Photos you choose to upload are safety-classified by an AI provider before they are stored or used in conversation.
Voice calls stream audio to Cartesia. Call transcripts and limited call metadata are returned to our backend and used to preserve conversation memory.
Apple StoreKit transaction information is sent to our backend to verify subscriptions and Gem purchases.
DarkMatch is designed to use Mixpanel for limited onboarding analytics and AppsFlyer for advertising attribution when those services are enabled in a distributed app version. Their planned data practices are described below.

We do not sell your chat content, profile photos, or voice-call content. We do not use your content to train models owned by onEins. DarkMatch characters are fictional AI personas; you are not communicating with real dating partners.

2. Scope

This Policy applies to DarkMatch and its related backend and website. It does not replace the privacy policies of third-party services, including Apple, Cloudflare, CometAPI, the underlying model providers used through CometAPI, Cartesia, Mixpanel, or AppsFlyer.

3. Information We Collect

Account and profile information

An internal user ID, stable anonymous device key, authentication token, and account creation time.
Name, birth date, gender, who you are interested in, biography, and profile photo.
Your device-reported time zone, used for local daily limits and story timing.
Subscription status, Gem balance, and account-level feature eligibility.

Content and activity

Swipes, likes, super likes, matches, and the fictional characters you interact with.
Chat messages, message timestamps, read state, conversation history, and generated character replies.
Relationship stage, story state, chapter progress, story-event progress, and summaries or memories derived from conversations.
Photos you submit for your profile or in chat, AI safety classifications, and bounded descriptions created so a character can respond safely.
Character-image offers, generated character images, and related Gem transactions.
Voice-call audio streamed to the voice provider, call transcripts, call summaries, duration, timestamps, status, and error information.
Reports or support communications you send to us, including the content and contact information included in your request.

Purchases and subscription information

Product ID, transaction ID, original transaction ID, signed StoreKit transaction data, purchase environment, and transaction time.
Subscription status, expiration, renewal or revocation information, and App Store Server Notification metadata.
Gem grants, Gem spending, purchase references, and entitlement history.

Apple processes your payment. We do not receive your payment card number or full Apple Account billing details.

Technical and operational information

App version, operating-system information, request timestamps, request paths, and error or security logs.
IP address, network information, and similar request metadata processed by Cloudflare and our infrastructure to deliver and protect the Service.
Push token and notification interaction information if push notifications are enabled in a future app version.

4. Information Stored on Your Device

DarkMatch may store the following information locally:

The anonymous device key and authentication token in the iOS Keychain.
Onboarding state, locally hidden or blocked match identifiers, app preferences, and relationship-transition state.
Cached character and conversation images for performance.
StoreKit product and entitlement state supplied by Apple.

Local information remains until it is cleared by the app, removed through account deletion where applicable, deleted with the app or device, or removed through iOS storage and backup controls. Apple-managed device backups may retain app data according to your Apple settings.

5. Chat, Story Memory, and AI Processing

DarkMatch sends information needed for a response to our backend and then to CometAPI, which provides access to underlying AI models. Depending on the active configuration, the underlying provider may include Google or OpenAI. The information may include:

Your newest message and relevant recent conversation history.
Your chosen name, biography, gender, interest preference, and relevant profile context.
The fictional character’s persona, authored story instructions, relationship state, and conversation memory.
A bounded, non-explicit description of a photo you submitted when needed for the character’s response.

AI outputs can be inaccurate, unexpected, or inappropriate. Do not enter information you are not comfortable having processed for interactive fiction. onEins does not train its own AI models using your conversations. Third-party providers handle information under their own terms, our provider agreements, and the configuration available to us.

6. Photos and Generated Images

When you submit a profile or chat photo, DarkMatch sends it to an AI provider for safety classification. Profile photos must be non-suggestive. Chat photos may be accepted only within DarkMatch’s adult safety boundaries; explicit, exploitative, age-ambiguous sexual, graphic, and other critical content is rejected.

Accepted photos are stored in Cloudflare R2 and associated with your anonymous account. When you accept a character-image offer, DarkMatch may send a character reference image and a generated visual brief through CometAPI to an underlying image model, which may be operated by OpenAI. The resulting image is stored in Cloudflare R2 and delivered in your conversation.

7. Voice Calls and Cartesia

When you start a voice call, microphone audio is streamed to Cartesia so the fictional character can respond in real time. Cartesia processes the audio, voice-agent context, provider call identifier, transcript, timing information, and call status. DarkMatch later retrieves a bounded transcript and optional provider summary.

We store the transcript, call duration, status, and limited metadata in our backend. The transcript may be summarized through our AI provider and used as conversation memory. We do not intentionally use call audio or transcripts for advertising. Cartesia may retain provider-side records according to its agreement, configuration, and privacy policy.

8. Purchases and Apple

DarkMatch+ subscriptions and Gem packs are purchased through Apple’s in-app purchase system. The app sends signed StoreKit transaction data and an anonymous account identifier to our backend. We verify the transaction and store the minimum entitlement and purchase information needed to grant subscriptions or Gems, prevent duplicate grants, handle refunds or revocations, and prevent fraud.

Apple may also send App Store Server Notifications to update subscription and transaction state. Apple’s terms and privacy policy apply to Apple-billed purchases.

9. Mixpanel Onboarding Analytics

DarkMatch is designed to use Mixpanel to understand whether the onboarding flow works and where people stop. When Mixpanel is enabled in a distributed app version, we intend to send only a pseudonymous installation or user identifier, stable onboarding screen identifiers, screen order, onboarding version, paywall reach, completion events, and limited app/device technical information.

We do not intend to send your name, birth date, gender, interest preference, biography, profile photo, chat content, uploaded photos, voice-call content, or advertising identifier to Mixpanel. Mixpanel will act as our product-analytics service provider. If the current version does not contain or activate Mixpanel, it does not send Mixpanel analytics.

10. AppsFlyer Attribution and Advertising Measurement

DarkMatch is designed to use AppsFlyer as a mobile measurement partner for advertising attribution, campaign measurement, fraud prevention, and purchase measurement. When enabled, AppsFlyer may process an AppsFlyer ID, IDFV, installation and launch events, app and OS version, device/network information, campaign or referrer data, attribution results, fraud signals, and limited purchase-event information such as product ID, currency, and revenue.

If DarkMatch requests permission through Apple’s App Tracking Transparency framework, the IDFA will be accessed for tracking only if you grant permission. If you deny permission, DarkMatch will not intentionally access the IDFA, though limited attribution that does not use the IDFA may still occur where permitted. We do not intend to send profile fields, chat content, photos, or voice-call content to AppsFlyer. If the current version does not contain or activate AppsFlyer, it does not send AppsFlyer attribution data.

11. How We Use Information

We use information to:

Provide anonymous account access, profiles, matching, chat, voice calls, images, story progression, and relationship memory.
Personalize fictional character responses and maintain continuity.
Classify user photos and enforce age, safety, abuse, and content boundaries.
Process and verify subscriptions and Gem purchases.
Operate support, account deletion, and privacy-request workflows.
Secure the Service, prevent fraud, enforce limits, debug errors, and monitor reliability.
Measure onboarding performance and advertising effectiveness when the relevant service is enabled.
Comply with law, platform obligations, and our Terms of Use.

12. How We Disclose Information

We may disclose information to:

Apple, for App Store distribution, StoreKit purchases, subscriptions, refunds, server notifications, permissions, and device services.
Cloudflare, for website and backend delivery, Workers, D1 database, R2 object storage, queues, security, and operational logs.
CometAPI and underlying model providers, including Google or OpenAI depending on active configuration, for chat, memory, photo safety, canon verification, and character-image generation.
Cartesia, for real-time voice calls, speech processing, transcripts, and call status.
Mixpanel, when enabled, for pseudonymous onboarding product analytics.
AppsFlyer, when enabled, for attribution, advertising measurement, fraud prevention, and purchase measurement.
Contractors, professional advisers, and service providers supporting our operations under appropriate confidentiality or data-protection obligations.
Authorities or other parties when required by law or necessary to protect rights, safety, security, or the integrity of the Service.
A successor entity in a merger, financing, reorganization, acquisition, sale of assets, or similar transaction, subject to applicable law.

13. International Transfers

onEins is based in the United States. Our providers may process information in the United States and other countries. Where required, we rely on appropriate safeguards such as provider data-processing terms, standard contractual clauses, or other lawful transfer mechanisms.

14. Retention and Deletion

We retain information only as long as reasonably necessary for the purposes described in this Policy, including providing the Service, maintaining story continuity, verifying purchases, securing the platform, handling disputes, and complying with legal obligations.

Profile information, matches, messages, accepted photos, generated character images, relationship state, and voice-call transcripts are generally retained while your DarkMatch account remains active.
Authentication records and anonymous device identifiers are retained while needed to access and secure the account.
Purchase and subscription records are retained as needed to grant entitlements, prevent duplicate grants and fraud, reconcile Apple notifications, handle support, and meet legal requirements.
Operational and security logs are retained for the shortest period reasonably necessary for reliability, security, abuse prevention, and legal compliance.
Provider-side records are retained under the relevant provider’s policies, our configuration, and contractual terms. Backup copies may persist for a limited period before rotating out.

The in-app Delete Account control permanently removes the account and associated profile, devices, matches, conversations, stored photos and generated images, voice-call records held in our active database, purchase records held by our backend, and remaining Gems. A deletion request does not cancel an Apple-billed subscription, erase Apple’s purchase records, or instantly remove records held in provider backups or independently controlled provider systems. Contact us if you need help requesting deletion from a provider.

15. Your Choices and Rights

You can:

Edit profile fields in DarkMatch.
Delete your DarkMatch account from Settings.
Manage or cancel DarkMatch+ in your Apple Account subscription settings.
Restore purchases through Apple.
Decline photo or microphone access and select only the photos you choose through Apple’s picker.
Disable notifications or change tracking permission in iOS Settings if those features are enabled.
Contact us to request access, correction, deletion, portability, restriction, objection, withdrawal of consent, or an appeal where applicable.

Depending on where you live, you may also have the right to complain to a data protection authority. We may need information such as your anonymous account identifier or Apple transaction details to locate records without revealing another person’s data.

16. California and U.S. State Privacy Notice

The categories described above may include identifiers, customer-record information, commercial information, internet or app activity, approximate network information, audio information, visual information, sensitive information such as birth date or information that may reveal sexual orientation, and inferences used to personalize the fictional experience.

We do not sell personal information for money. If AppsFlyer is enabled, some advertising identifiers or event data may be considered “sharing” for cross-context behavioral advertising under certain state laws. You can opt out by denying or disabling Apple’s tracking permission and by contacting us. We do not use sensitive personal information to infer characteristics for unrelated advertising purposes.

17. EEA, UK, and Similar Privacy Rights

Where applicable, our legal bases include:

Contract: to provide the account, matching, chat, stories, voice calls, purchases, and features you request.
Consent: for permissions and processing where consent is required, including microphone access, notifications, and advertising tracking.
Legitimate interests: to secure, debug, improve, and operate the Service, prevent fraud, and measure limited product performance where those interests are not overridden by your rights.
Legal obligation: to meet tax, accounting, consumer-protection, privacy, platform, and legal requirements.

You may withdraw consent at any time without affecting processing already completed lawfully. You may have rights to access, correct, delete, restrict, object, or port your information.

18. Adults Only

DarkMatch is intended only for adults age 18 or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has used DarkMatch, contact us so we can investigate and delete information we control.

19. Security

We use administrative, technical, and organizational safeguards designed to protect information, including HTTPS, authentication tokens, access controls, signed media URLs, provider security features, content safety checks, and transaction verification. No transmission or storage system is completely secure.

20. Third-Party Privacy Resources

21. Changes to This Policy

We may update this Policy as DarkMatch changes. If changes are material, we will provide notice through the app, App Store listing, website, or another reasonable method. The revised Policy is effective on the date stated above.

22. Contact

onEins LLC
3833 Powerline Rd, Suite 101-K
Fort Lauderdale, Florida 33309
United States

Email: [email protected]
Phone: +1 754-222-4516
Website: https://www.oneins.studio