Privacy policy

Dear user, we take your privacy seriously. This privacy policy explains who we are and how we collect and use the information we collect.

1. Privacy policy

This privacy policy (the “Policy”) describes how Tunder (“Tunder”, “we”, “our” or “us”) collects, protects and uses the information (the “Information”) that you (the “User”, “you” or “your”) may provide in the Tunder application (the “Application” or the “Services”).

2. Collection of personal information

Tunder collects certain information necessary for the operation of the application and the improvement of your experience, such as your email address. Other information may be requested from you directly through a questionnaire, a chat tool or for the generation of an official document.

3. Types of data collected

The data collected in the application relates to usage data for the features developed by Tunder. With a view to quality and continuous improvement of the application, Tunder collects usage data on the application. This is data collection aimed at understanding how the application is used.

Any use of Cookies – or other tracking tools – by this Application or by the owners of third-party services used by this Application serves to provide the Service requested by the User, in addition to any other purposes described in this document and in the Cookie Policy, if available.

4. Sharing data with third parties

As part of improving our services and our advertising communication, the Tunder application integrates third-party advertising measurement and attribution tools. These tools may collect and use the following data for advertising and analytics purposes: the device’s advertising identifier, user identifier, email address (in hashed form), purchase and subscription history, and interactions within the application. This data may be shared with our advertising partners, who use it in accordance with their own privacy policies. Tunder also uses technical subcontractors to manage subscriptions. These providers act on behalf of Tunder and do not constitute a sharing of data for advertising purposes. You can limit this tracking by disabling the advertising identifier in your device’s settings.

5. Data processing methods

Processing methods

The Owner takes appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of data.

Data processing is carried out using computers and/or IT tools, following procedures and organizational methods strictly related to the stated purposes.

Legal basis for processing

The Owner may process personal data relating to Users if one of the following conditions applies:

• Users have given their consent for one or more specific purposes;
• the provision of data is necessary for the performance of an agreement with the User and/or any pre-contractual obligations thereof;
• processing is necessary for compliance with a legal obligation to which the Owner is subject;
• processing is related to a task carried out in the public interest or in the exercise of official authority vested in the Owner;
• processing is necessary for the purposes of the legitimate interests pursued by the Owner or by a third party.

In any event, the Owner will gladly help to clarify the specific legal basis that applies to the processing, and in particular whether the provision of personal data is a legal or contractual requirement, or a requirement necessary to enter into a contract.

Location

Data is processed at the Owner’s offices and in any other place where the parties involved in the processing are located.

Depending on the User’s location, data transfers may involve transferring the User’s data to a country other than their own. Users are also entitled to find out about the legal basis for data transfers to a country outside the European Union or to any international organization governed by public international law or set up by two or more countries, such as the United Nations, and about the security measures taken by the Owner to safeguard their data.

If such a transfer takes place, Users can find out more by consulting the relevant sections of this document or by asking the Owner using the information provided in the contact section.

Retention period

Personal data is processed and kept for as long as required by the purpose for which it was collected.

Therefore:

• Personal data collected for purposes related to the performance of a contract between the Owner and the User is kept until that contract has been fully performed.
• Personal data collected for the purposes of the Owner’s legitimate interests is kept for as long as necessary to achieve those purposes. Users may find specific information regarding the legitimate interests pursued by the Owner in the relevant sections of this document or by contacting the Owner.

The Owner may be permitted to keep personal data for a longer period where the User has given consent to such processing, as long as that consent is not withdrawn. In addition, the Owner may be obliged to keep personal data for a longer period where this is necessary for the performance of a legal obligation or by order of an authority.

Once the retention period has expired, personal data is deleted. Therefore, the right of access, the right to erasure, the right to rectification and the right to data portability cannot be exercised after the retention period has expired.

6. Purpose of processing

Data concerning the User is collected to allow the Owner to provide its Services, as well as for the following purposes: Users can find more detailed information about these processing purposes and about the specific personal data used for each purpose in the respective sections of this document.

7. Device permissions for access to personal data

Depending on the User’s specific device, this application may request certain permissions that allow it to access the User’s device data as described below. Once a permission has been granted, the User may revoke it at any time. To revoke these permissions, Users may refer to the device settings or contact the Owner for assistance at the contact details provided in this document.

The exact procedure for controlling application permissions may depend on the User’s device and software, but revoking these permissions may affect the proper functioning of the application.

If the User grants any of the permissions listed below, the corresponding personal data may be processed (that is, accessed, modified or deleted) by this application.

Camera permission

Used to access the camera or to capture images and videos from the device.

Contacts permission

Used to access contacts and profiles on the User’s device, including modifying entries.

Device permission

Used to access a range of typical features associated with the device. This allows, for example, read-only access to the device status, that is, access to the device’s phone number, current network information or the status of any call in progress.

Storage permission

Used to access shared external storage, including reading and adding any item.

8. Detailed information on the processing of personal data

Personal data is collected for the following purposes and using the following services:

• Access to third-party accounts: This type of service allows this application to access your account data on a third-party service and to perform actions with it.

  These services are not activated automatically, but require the User’s explicit authorization.

• Personal data collected: Camera permission, Contacts permission, Device permission, Social media accounts permission and Storage permission.

• Registration and authentication. By registering or authenticating, Users allow this Application to identify them and give them access to dedicated services.

  Depending on what is described below, third parties may provide registration and authentication services. In that case, this Application may access certain Data, stored by these third-party services, for registration or identification purposes.

• Crisp: Crisp is a user database management service provided by Crisp. Crisp may also be used as a means of communication, either by email or by messages within this application: Cookies, email address, usage data and various types of data as specified in the service’s privacy policy: France – Privacy Policy.

9. Sign in with Google

The Tunder app lets you create an account and sign in with your Google account, using Google Sign-In and Firebase Authentication (provided by Google). This option is not mandatory: you can also create an account with an email address.

When you choose “Sign in with Google”, Tunder requests access to the following information only: your email address (“email” scope); your Google name and profile picture (“profile” scope); your unique Google account identifier (“openid” scope). Tunder does not access any other data from your Google account (contacts, emails, files, calendar, etc.).

This information is used solely to: create your Tunder account and authenticate you when you sign in; display your name and picture in your Tunder profile; contact you about your account (support, security, subscription, invoices).

Data obtained through Google Sign-In is never sold, rented or used for advertising purposes, and is not shared with the advertising partners mentioned in section 4. It is hosted by our technical providers (Google Firebase) solely to operate the service. Tunder’s use of this data adheres to the Google API Services User Data Policy.

This data is kept as long as your Tunder account is active. It is deleted within 30 days of your account being deleted, unless we are legally required to keep it.

You can at any time delete your Tunder account using our data deletion form: https://tunder.co/suppression-des-donnees, and revoke Tunder’s access to your Google account at https://myaccount.google.com/permissions.

10. Sign in with Apple

The Tunder app also lets you create an account and sign in with your Apple account. In this case, Apple provides Tunder with your name (if shared on first sign-in), your email address and a unique identifier specific to Tunder. If you choose “Hide My Email”, Tunder receives a relay address provided by Apple, which forwards messages to your real address.

This information is used solely to create your Tunder account, authenticate you and contact you about your account. It is kept and deleted under the same conditions as described in section 9. You can revoke Tunder’s access to your Apple account from your Apple account settings, under “Sign in with Apple”.

11. Additional information on personal data

Push notifications: This application may send push notifications to the User.

Access to the address book: This application may request access to your address book.

Unique device identification: This application may track Users by recording a unique identifier of their device, for analytics purposes, to record User preferences and for advertising purposes.

12. User rights

Users may exercise certain rights regarding their data processed by the Owner, in particular the following rights:

• Withdraw their consent at any time. Users have the right to withdraw their consent where they have previously given their consent to the processing of their personal data.
• Object to the processing of their data. Users have the right to object to the processing of their data if the processing is carried out on a legal basis other than consent. Further information is provided in the dedicated section below.
• Access their data. Users have the right to know whether the Data is being processed by the Owner, to obtain information on certain aspects of the processing and to obtain a copy of the Data being processed.
• Verify their data and ask for it to be rectified. Users have the right to verify the accuracy of their data and to ask for it to be updated or rectified.
• Restrict the processing of their data. Users have the right, in certain circumstances, to restrict the processing of their data. In this case, the Owner will not process their Data for any purpose other than storing it.
• Have their Personal Data deleted or otherwise removed. Users have the right, in certain circumstances, to obtain the erasure of their Data from the Owner. To request the erasure of data, use our data deletion form https://tunder.co/suppression-des-donnees.
• Receive their data and have it transferred to another controller. Users have the right to receive their data in a structured, commonly used and machine-readable format and, where technically feasible, to have it transmitted to another controller without hindrance. This provision applies provided that the data is processed by automated means and that the processing is based on the User’s consent, on a contract to which the User is a party or on pre-contractual obligations arising from it.

Details on the right to object to processing

Where personal data is processed in the public interest, in the exercise of official authority vested in the Owner or for the purposes of the legitimate interests pursued by the Owner, Users may object to such processing by providing a reason related to their particular situation to justify the objection.

Users should be aware, however, that if their personal data is processed for direct marketing purposes, they can object to that processing at any time without having to provide any justification. To find out whether the Owner processes personal data for direct marketing purposes, Users can refer to the relevant sections of this document.

How to exercise these rights

Any request to exercise User rights may be addressed to the Owner at the contact details given in this document. These requests can be made free of charge and will be handled by the Owner as soon as possible and always within one month.

13. Additional information on data collection and processing

Legal action

The User’s personal data may be used for legal purposes by the Owner in court or in the stages leading to possible legal action arising from improper use of this application or the related services.

The User declares that they are aware that the Owner may be required to reveal personal data at the request of public authorities.

Additional information on the User’s personal data

In addition to the information contained in this privacy policy, this application may provide the User, upon request, with additional and contextual information concerning particular services or the collection and processing of personal data.

System logs and maintenance

For operation and maintenance purposes, this application and any third-party services may collect files that record interaction with this application (system logs) and use other personal data (such as the IP address) for this purpose.

Information not contained in this policy

Further details concerning the collection or processing of personal data may be requested from the Owner at any time. Please see the contact details at the beginning of this document.

How are “Do Not Track” requests handled?

This application does not support “Do Not Track” requests.

To determine whether any third-party services it uses honor “Do Not Track” requests, please read their privacy policies.

Changes to this privacy policy

The Owner reserves the right to make changes to this privacy policy at any time by notifying its Users on this page and possibly within this Application and/or – as far as technically and legally feasible – by sending a notice to Users via any contact information available to the Owner. Users are strongly advised to check this page often, referring to the date of the last modification indicated at the bottom.

If the changes affect processing activities carried out on the basis of the User’s consent, the Owner will collect new consent from the User, where required.

Definitions and legal references

Personal Data (or Data): Any information that, directly, indirectly or in connection with other information – including a personal identification number – allows a natural person to be identified or identifiable.

Usage Data: Information collected automatically through this application (or third-party services used in this application), which may include: the IP addresses or domain names of the computers used by users of this application, the URI (Uniform Resource Identifier) addresses, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server’s response (successful outcome, error, etc.), the country of origin, the features of the browser and operating system used by the user, the various time details per visit (for example, the working time, the duration of the visit, etc., the time spent on each page of the application) and the details of the path followed within the application, with particular reference to the sequence of pages visited, and other parameters concerning the device’s operating system and/or the user’s IT environment.

User: The person who uses this application and who, unless otherwise specified, coincides with the data subject.

Data subject: The natural person to whom the personal data refers.

Data Processor (or data supervisor): The natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller, as described in this privacy policy.

Data Controller (or Owner): The natural or legal person, public authority, agency or other body that, alone or jointly with others, determines the purposes and means of the processing of personal data, including the security measures concerning the operation and use of this application. The Data Controller, unless otherwise specified, is the Owner of this Application.

This application: The means by which the User’s personal data is collected and processed.

Service: The service provided by this application as described in the relevant terms (if available) and on this site/application.

European Union (or EU): Unless otherwise specified, all references made in this document to the European Union include all current member states of the European Union and the European Economic Area.

Legal information: This privacy statement has been prepared on the basis of the provisions of several pieces of legislation, including art. This privacy policy relates only to this application, unless otherwise specified in this document.

14. Collection of non-personal data

When you open the app, our servers automatically record the information that your device sends. This data may include information such as your device’s IP address and location, device name and version, operating system type and version, language preferences, the information you search for in our application, access times and dates, and other statistics.

15. Use and processing of the information collected

Any information we collect from you may be used to personalize your experience, improve our application, improve customer service and respond to questions and emails from our customers, process transactions, send notification emails such as password reminders, updates, etc. The non-personal information collected is only used to identify potential cases of abuse and to establish statistical information regarding the traffic and use of the application. We may process personal information about you if any of the following conditions applies: (i) you have given your consent for one or more specific purposes. Note that some laws allow us to process information until you object (by opting out), without having to rely on consent or on any of the following legal bases. This, however, does not apply where the processing of personal information is subject to European data protection law; (ii) the provision of information is necessary for the performance of an agreement with you and/or any pre-contractual obligations thereof; (iii) processing is necessary for compliance with a legal obligation to which you are subject; (iv) processing is related to a task carried out in the public interest or in the exercise of official authority vested in us; (v) processing is necessary for the purposes of the legitimate interests pursued by us or by a third party. In any event, we will be happy to clarify the specific legal basis that applies to the processing, and in particular whether the provision of personal data is a legal or contractual requirement, or a requirement necessary to enter into a contract.

16. Information transfer and storage

Depending on your location, data transfers may involve the transfer and storage of your information in a country other than your own. You have the right to find out about the legal basis for transfers of information to a country outside the European Union or to any international organization governed by public international law or set up by two or more countries, such as the United Nations, and about the security measures we take to protect your information. If such a transfer takes place, you can find out more by consulting the relevant sections of this document or by asking us using the information provided in the contact section.

17. Additional user rights

You may exercise certain rights with respect to the information we process. In particular, you have the right to do the following: (i) you have the right to withdraw your consent where you have previously given your consent to the processing of your information; (ii) you have the right to object to the processing of your information if the processing is carried out on a legal basis other than consent; (iii) you have the right to know whether information is being processed by us, to obtain disclosure of certain aspects of the processing and to obtain a copy of the information being processed; (iv) you have the right to verify the accuracy of your information and to ask for it to be updated or corrected; (v) you have the right, in certain circumstances, to restrict the processing of your information, in which case we will not process your information for any purpose other than storing it; (vi) you have the right, in certain circumstances, to obtain from us the erasure of your personal information; (vii) you have the right to receive your information in a structured, commonly used and machine-readable format and, where technically feasible, to have it transmitted without hindrance to another controller. This provision applies provided that your information is processed by automated means and that the processing is based on your consent, on a contract to which you are a party or on pre-contractual obligations thereof.

18. The right to object to processing

Where personal information is processed in the public interest, in the exercise of official authority vested in us or for the purposes of the legitimate interests we pursue, you may object to this processing by providing a reason related to your particular situation to justify the objection. You should be aware, however, that if your personal data is processed for direct marketing purposes, you can object to that processing at any time without having to provide any justification. To find out whether we process personal information for direct marketing purposes, you can refer to the relevant sections of this document.

How to exercise these rights

Any request to exercise User rights may be addressed to the Owner at the contact details given in this document. These requests can be made free of charge and will be handled by the Owner as soon as possible and always within one month.

19. Billing and payments

In the case of services that require payment, we ask for credit card or other payment account information, which will be used only for payment processing. Data relating to your purchase transaction is only kept for as long as necessary to complete your purchase transaction. Once the transaction is complete, your purchase transaction information is deleted. All direct payment gateways adhere to the latest security standards managed by the PCI Security Standards Council, which is a joint effort of brands such as Visa, MasterCard, American Express and Discover. The exchange of sensitive and private data takes place through a secure SSL communication channel and is encrypted and protected by digital signatures.

20. Children’s privacy

If you are under 13, please do not submit personal information through our application or service. We encourage parents and legal guardians to monitor their children’s use of the Internet and to help enforce this policy by instructing their children never to provide personal information through our application or service without their permission. If you have reason to believe that a child under the age of 13 has provided us with personal information through our application or service, please contact us.

21. Newsletters

We offer electronic newsletters that you may subscribe to voluntarily at any time. You can choose to stop receiving our newsletter or marketing emails by following the unsubscribe instructions included in these emails or by contacting us. However, you will continue to receive essential transactional emails.

22. Links to other applications

Our application contains links to other applications that are not owned or controlled by us. Please note that we are not responsible for the privacy practices of these other applications or of third parties. We encourage you to be vigilant when you leave our application and to read the privacy statements of each application that may collect personal information.

23. Information security

We secure the information you provide on computer servers in a controlled and secure environment, protected from unauthorized access, use or disclosure. We maintain reasonable administrative, technical and physical safeguards in an effort to protect against unauthorized access, use, modification and disclosure of personal information in our control and custody. However, no data transmission over the Internet or over a wireless network can be guaranteed. Therefore, while we strive to protect your Personal Information, you acknowledge that (i) there are security and privacy limitations on the Internet that are beyond our control; (ii) the security, integrity and confidentiality of all information and data exchanged between you and our Application cannot be guaranteed; and (iii) such information and data may be accessed or altered in transit by a third party, despite all efforts made.

24. Data breach

In the event that we become aware that the security of the application has been compromised or that users’ personal information has been disclosed to unrelated third parties as a result of external activity, including, but not limited to, security attacks or fraud, we reserve the right to take reasonably appropriate measures, including, but not limited to, investigation and reporting, as well as notification to and cooperation with law enforcement authorities. In the event of a data breach, we will make reasonable efforts to notify affected individuals if we believe there is a reasonable risk of harm to the user as a result of the breach or if notification is otherwise required by law. In that case, we will post a notice in the application and send you an email.

25. Legal disclosure

We will disclose any information we collect, use or receive if required or permitted by law, such as to comply with a subpoena or similar legal process, and when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud or respond to a government request. In the event of a business transition, such as a merger or acquisition by another company, or the sale of all or part of its assets, your user account and personal data will likely be among the assets transferred.

26. Changes and amendments

We reserve the right to modify this policy relating to the application or services at any time, with effect upon the publication of an updated version of this policy in the application. In that case, we will send you an email to let you know. Continued use of the Application after such changes constitutes your consent to those changes.

27. Acceptance of this policy

You acknowledge that you have read this policy and agree to all of its terms. By using the application or its services, you agree to be bound by this policy. If you do not agree to abide by the terms of this policy, you are not authorized to use or access the application and its services.

28. Contact us

If you have any questions about this policy or your data, contact us through our form: https://tunder.co/contact, or by mail: TUNDER SAS, 9 rue des Colonnes, 75002 Paris, France. This document was updated on September 22, 2026.