SuperBond

Privacy Policy

Last updated 11 September 2026

SuperBond is a dating app operated by Malik Mathis, doing business as SuperBond (“we”, “us”). This policy explains what we collect, why, who we share it with, and what you can do about it. If you have questions, contact us at privacy@superbonddating.com.

Who this policy is for

SuperBond is for adults. You must be 18 or older to create an account, and we ask for your date of birth during sign-up to enforce that. We do not knowingly collect information from anyone under 18.

What we collect

Some of this is required to make the app work at all; some is optional and marked so.

What	Why	Required?
Email address	To sign you in and identify your account. It comes from Google or Apple sign-in, or is the address you enter to receive a one-time code	Yes
Date of birth	To confirm you are 18+ and show your age	Yes
First name and a separate Discussion handle	Your name appears on your profile; the handle is what the community board shows instead	Yes
Photos (3–5)	Your profile	Yes
Approximate location	To show people near you and to decide when SuperBond opens in your area	Yes
Gender, who you are open to dating, relationship type, and what kind of connection you want	Matching	Yes
Ethnicity	Your profile. Shown only if you switch it on	Yes
The ethnicities you are open to dating	Stored with your profile	No
Religion, and how important religion is to you in a partner	Your profile. Your religion is shown only if you switch it on	No — “Prefer not to say” is always an option
Sexual orientation	Shown on your profile only if you switch it on	No
Interests (5–8)	Your profile, and to suggest people you have things in common with	Yes
Profile details: tagline, get-to-know-me answers, height, education, work, kids, smoking, drinking and pets	Your profile	No
A selfie, if you ask to be verified	To confirm you are the person in your photos	No
Messages, discussion posts, likes, passes and votes	To deliver them and run matching	Yes, if you use those features
Safety reports and bug reports you send us, with any screenshot you attach	To review them and keep members safe	No
Device identifier and notification token	To send notifications and to enforce bans	Yes
Advertising ID, and app activity and diagnostics sent with ad requests	Ads for free-tier members, through Google AdMob	Yes, if ads are shown
How you use the app, and crash reports	To understand how the app is used, and to fix crashes	Yes, unless you switch off Product analytics
Purchase records	To give you what you paid for	Yes, if you subscribe

Location: what we actually store

We store the centre of your city, not your position. If you use “Use my current location”, your device works out where you are, the app picks the nearest city from a fixed list, and the precise reading is discarded and never sent to us. On Android the app only ever asks for approximate location; on iOS it asks for reduced accuracy. Distances shown to other members are rounded and never displayed below one mile.

Sexual orientation

This is optional, and answering it is separate from publishing it. It is hidden unless you turn on the visibility switch, and if you clear your answer the permission to show it is cleared too.

Ethnicity and religion

Your ethnicity and your religion are hidden from other members unless you switch them on, and clearing an answer clears the permission to show it. Religion can always be answered “Prefer not to say”.

Needs counsel — special category data. Sexual orientation, ethnicity and religion are special category data under UK/EU GDPR (Art. 9) and sensitive personal information under the CPRA. The lawful basis is most likely explicit consent, which affects how the switches must be worded and recorded. Ethnicity is currently a required question.

Verification selfies and face comparison

If you ask to be verified, we compare your selfie with your profile photos. That comparison is performed by Amazon Rekognition, an automated face-comparison service, and the result is reviewed by a member of our team. The automated check can confirm a match; it never rejects anyone on its own. Your selfie is deleted as soon as the review is finished and is never shown on your profile or to other members.

Needs counsel — biometric identifiers. Automated face comparison creates a scan of face geometry, which is regulated specifically by the Illinois Biometric Information Privacy Act, Texas CUBI and Washington's My Health My Data Act, among others. These typically require informed written consent before collection and a published retention and destruction schedule. Confirm: the consent wording, whether to offer verification at all in those states, and the retention statement. Note the automated check is currently in an advisory mode where a person still decides, but images are sent to AWS either way.

How we use it

To run the app: your profile, matching, messages and the discussion board.
To keep people safe: reviewing reports, enforcing our Community Guidelines, and blocking banned accounts and devices.
To decide when to open SuperBond in your area, by counting how many people nearby have finished a profile.
To show ads to members on the free tier, and to process subscriptions.
To understand how the app is used, and to fix crashes.

We do not sell your personal information for money. Showing personalised ads may count as “sharing” under California law — see Your choices.

Who we share it with

Service	What they receive	Why
Supabase	Your account, profile, photos and messages	Hosting, database and file storage
Amazon Web Services (Rekognition)	Your selfie and profile photos, only if you request verification	Automated face comparison
Google Firebase	A notification token for your device	Push notifications
Google AdMob	Ad request data	Ads for free-tier members
PostHog	Product analytics, linked to your account	Understanding how the app is used
Sentry	Crash reports, with your account identifier only	Diagnosing crashes
Apple and Google	Purchase and subscription records	Processing payments

Other members see your profile, your photos, and anything you post or send.

Needs counsel — international transfers and processor terms. Confirm where each processor stores data, whether transfer mechanisms (SCCs or equivalent) are needed, and that data processing agreements are in place. SuperBond is available only in the United States at launch.

Your choices

Product analytics can be switched off in Settings → Your Privacy Choices.
Do Not Sell or Share My Personal Info is in the same place. Turning it on also turns off product analytics and makes any ads you see non-personalised.
Notifications can be switched off in Settings, or in your device settings.
Location permission can be declined; you can type your city instead.
Sexual orientation can be left blank, or answered and kept hidden.
Your profile can be edited, deactivated or deleted at any time.

How long we keep it

Verification selfies are deleted as soon as a review is complete.

Your account. We keep your profile for as long as the account is open. You can edit, deactivate or delete it at any time.
Deleted accounts. Deletion takes effect after a 30-day grace period, during which you can change your mind by signing in. After that a nightly job erases your sign-in account, profile details, photos, interests and answers, leaving only a record that the account existed and was deleted. How to delete your account, and exactly what is kept.
Profile view counts. We keep the current week and the one before it. Older records are deleted daily.
Staff access records. When a moderator views an account we log it, and those entries are deleted after two years.
Messages. Kept for as long as the conversation exists. If you delete your account, messages you already sent stay in the other person's conversation, because they are part of their conversation too.

Needs counsel — retention. ⚠️ Two periods above are deliberately absent because nothing in the system decides them: how long moderation records (reports, bans, handle history) are kept, and whether device bans ever expire — today they do not. Both need a policy decision before this section is complete. Moderation records and device-ban records are deliberately kept after an account is gone, because they are what stops a banned person returning. That needs a stated basis and a period.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your information, to object to certain processing, and to withdraw consent. Contact privacy@superbonddating.com and we will respond within 45 days.

Needs counsel — jurisdiction-specific sections. GDPR requires a stated legal basis per purpose, controller identity and address, and a supervisory-authority complaint route. The CPRA requires categories of personal information collected, disclosed and shared, plus a “Notice at Collection”. Both stores' listing metadata must match whatever this page says.

Security

Profile photos and verification selfies are stored in private buckets that are not publicly readable; access is granted per request and expires. Verification selfies are readable only by our moderation team, and every time a moderator views one it is recorded.

Changes

If we change this policy we will update the date at the top, and tell you in the app if the change is significant.