Privacy Policy

Last updated: 12 October 2026

1. Who we are

OroDate (the "app") is operated by the OroDate team, Milan, Italy ("we", "us"). We are the data controller for the personal data described here. Contact: oroxsupport@gmail.com.

2. Who can use OroDate

OroDate is only for adults aged 18 or older. We do not knowingly collect data from anyone under 18. If we learn that a user is under 18, we delete the account.

3. What we collect

• Account data: your email address and password. The password is handled by Google Firebase Authentication and is never visible to us. If you sign in with Google or Apple instead, we receive only the email address of that account (Apple may give us a private relay address that forwards to you); we never receive your Google or Apple password. To confirm your email we send you a one-time 6-digit code; only a protected (hashed) copy of the code is stored, and it is deleted once used or after 15 minutes. • Profile data: first name, date of birth (to show your age), gender identity, who you want to see, country, city, interests and your photos. • Optional data: sexual orientation, only if you choose to add it. You decide whether it is shown on your profile. Also only if you choose to add them: your height, answers to profile questions and lifestyle details (drinking, smoking, exercise, pets, communication style, how you receive love, education level and star sign). • Phone number: kept private. It is never shown to other users. • Approximate location: only if you allow it, rounded to about 1 km, used to show distance. • Activity: likes, passes, Super Likes, matches, chat messages (text and voice messages), blocks and reports, and the number of likes your profile receives. • Invites: your invite code, who invited you, and which people joined with your code and on which days they used the app, only to give invite rewards. • Notifications: if you allow them, a notification token for your phone, so we can tell you about new likes, matches and messages. Message texts are never shown in notifications. • Purchases: if you buy Premium or OroExtra, Google Play (Android) or the Apple App Store (iPhone) processes the payment. We receive the purchase status and a purchase token, never your card details. • Ads: free and Premium accounts see an ad card between profiles on Discover, and you may choose to watch rewarded ads. For these ads Google AdMob may process your device's advertising ID, IP address and ad interactions, according to the consent choices you make in the app. OroExtra members do not see ad cards. • Technical data: basic logs (such as time of requests and error reports) created by our service providers to keep the service working and secure.

4. Why we use your data (legal bases)

• To provide the service: create your account, show your profile to other users, find matches, deliver messages, apply like limits, show TOP profiles and provide Premium and OroExtra (performance of our contract with you). • Sexual orientation and gender identity are special categories of data under the GDPR. We process them only with your explicit consent, which you give by adding them. You can remove them at any time in Edit profile. • Approximate location: with your consent (device permission), which you can withdraw in your device settings. • Safety: checking reports, blocking abusive accounts, preventing fraud, spam and misuse (our legitimate interest in keeping users safe). • Ads: personalised ads only with your consent; otherwise non-personalised ads (consent / legitimate interest). • Legal obligations: keeping purchase records, answering lawful requests from authorities.

5. Who can see your data

• Other users see your profile: first name, age, gender identity, city and country, distance (if you shared location), interests, photos, the optional details you added (height, answers to profile questions, lifestyle details), and your sexual orientation only if you chose to show it. They never see your email, phone number, exact date of birth or exact location. • People you match with can exchange messages with you. • Service providers that process data for us: Google Firebase (database, login, file storage, server functions, hosting), Google AdMob (ads), Agora (video calls), Google Play and Apple (payments), Google and Apple (sign-in, if you choose it), and Gmail (our support email, which also sends email confirmation codes and receives notices about new reports). Data is stored in the European Union where possible; some providers may process data outside the EEA under the European Commission's Standard Contractual Clauses. • Authorities, when the law requires it, or to protect someone's life or safety. We do not sell your personal data.

6. Messages

Video calls are sent live through Agora's servers and are never recorded or stored; we only keep who called whom, when, and whether the call was answered. Chat messages, including voice messages, are stored so they can be delivered and shown to both people. The microphone is used only while you hold the mic button to record a voice message or during a video call; the camera only during a video call or a verification selfie. We do not read or listen to messages, except when a user reports a conversation or when required by law. Your voice recordings are deleted when you delete your account.

7. How long we keep data

• Your account data is kept while your account exists. • When you delete your account, your profile, photos, likes, matches and messages are deleted immediately from the live service, and from backups within 30 days. • Reports about other users may be kept for up to 12 months to protect users' safety. • Purchase records are kept as long as tax law requires.

8. Your rights

Under the GDPR you can: access your data, correct it, delete it, restrict or object to its use, receive it in a portable format, and withdraw consent at any time (this does not affect earlier processing). To use these rights, write to oroxsupport@gmail.com from the email address of your account. You can also complain to the Italian data protection authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or the authority in your country.

9. Deleting your account

In the app: Profile → Settings → Delete account. Everything is deleted at once. If you can no longer use the app, see https://orodate.web.app/delete-account.html.

10. Security

Data is sent over encrypted connections. Access is limited by strict database rules: each person can change only their own profile, and likes, matches, limits and subscriptions are handled only by our servers. No system is 100% secure; please use a strong password.

11. Ad choices

In the European Economic Area and the UK, the app asks for your consent to ads using Google's consent form. You can change your choice at any time in Settings → Ad privacy choices.

12. Changes

If we change this policy, we will update the date above and, for important changes, tell you in the app.

13. Contact

OroDate, Milan, Italy. Email: oroxsupport@gmail.com.