Wednesdate

Privacy Policy

Last updated 9 July 2026

The short version

1. Who we are

Wednesdate is operated by an individual, who is the data controller for the purposes of the UK and EU General Data Protection Regulation (GDPR). This section also serves as our statutory notice under § 5 of the German Digital Services Act (DDG).

Nikolai Altergott
Lange Äcker 1
71543 Wüstenrot
Deutschland

wednesdate@protonmail.com

We are not required to appoint a Data Protection Officer. Write to the address above with any privacy question and a real person will answer.

2. What we collect, and why

We collect only what the app needs to work. We do not buy data about you from anyone, and we do not enrich your profile from outside sources.

WhatWhere it comes fromWhy we need it
Email address, and your name the first time you sign in Sign in with Apple. If you chose “Hide My Email”, we only ever see Apple’s private relay address. To create and secure your account.
First and last name, date of birth, height, gender You, during onboarding. To build your profile and to show it to your match. Your date of birth confirms you are 18 or over.
Who you are seeking, and your preferred age and height range You, during onboarding. To find people you might actually want to meet. See section 3.
Up to four photos You, from your photo library. To show your match who you are, and as input to the AI that makes matches.
Your city You type it, or you confirm you are in Berlin. To match you with people nearby. We never read your device’s location.
Your weekly opt-ins, your matches, and the AI score and explanation for each match Generated by us. To run the weekly matching cycle.
Messages you send in chat You. To deliver them to your match.
Reports you file and people you block You. To keep people safe and to act against abuse.
Your device’s push notification token, and a record of which notifications we sent Your device, when you turn on notifications. To tell you when your match arrives. The record stops us sending the same notification twice.

What we deliberately do not collect

We think this list matters as much as the one above. Wednesdate has:

3. Sensitive data and your explicit consent

Your gender combined with who you are seeking reveals your sexual orientation. Under Article 9 GDPR that is a special category of personal data with extra protection. Your photos also show what you look like, and may suggest your ethnicity.

We process this data on the basis of your explicit consent (Article 9(2)(a) GDPR), which you give when you tap through the sign-up screen. A dating app cannot function without it: matching you to the people you want to meet is the entire product.

You can withdraw that consent at any time by deleting your account in the app, under Profile → Account Centre → Delete Account. Withdrawing does not affect anything we did lawfully beforehand.

We never use your photos for facial recognition or biometric identification. We do not measure your face, generate a faceprint, or attempt to identify you from a picture, and we do not permit our AI provider to do so.

4. How we use AI

Wednesdate matches you using artificial intelligence, and we would rather explain exactly how than hide it. There are two steps.

When you finish your profile, we send your photos and your basic details (first name, age, height, gender, and who you are seeking) to our AI provider. The model writes a short private description of you — roughly 150 words about your apparent style, interests, and the kind of person you might click with. We store that description and use it only to make your matches. It is never shown to other users. No human at Wednesdate reads it as a matter of routine.

Every Wednesday, our system first narrows the field with ordinary database rules: it keeps only people whose stated preferences and yours are mutually compatible, who are in your city, and whom you have not been matched with before. It then sends that small group — descriptions, basic details, and up to two photos each — to the AI, which scores how well each possible pair might get on. A conventional, non-AI algorithm then reads those scores and picks the pairings. If nobody scores highly enough for you that week, you get no match, and we tell you so.

Our AI provider is xAI (the Grok model family), which processes these requests on servers in the European Union. xAI acts as our processor: it may use your data only to answer our requests, not for its own purposes. We do not use your data to train any AI model of our own.

Automated decision-making

To be plain: choosing your match is automated, and no human reviews it. We do not believe this produces legal effects or similarly significant effects on you within the meaning of Article 22 GDPR — being introduced to someone, or not, is not comparable to a decision about your credit, your job, or your rights. We disclose it anyway because you deserve to know.

The app shows you the AI’s short explanation of why you were paired, so the reasoning is not hidden from you. If you are unhappy with how you were matched, or want a person rather than a machine to look at it, email us and we will.

5. Our legal bases

What we doLegal basis
Run your account, make matches, deliver chatPerformance of our contract with you — Article 6(1)(b)
Process your sexual orientation and photosYour explicit consent — Article 9(2)(a)
Send push notificationsYour consent, given in the iOS permission prompt — Article 6(1)(a)
Investigate reports, block abusers, keep the service safeOur legitimate interest in protecting users — Article 6(1)(f)
Meet legal and regulatory obligationsLegal obligation — Article 6(1)(c)

6. Who sees your data

Your match sees your first name, age, height, gender, and your photos, once you are paired. Nobody else using Wednesdate can see your profile. If either of you blocks the other, the match disappears for both of you.

Our service providers, who process data only on our instructions:

ProviderWhat they handleWhere
AppleSign in, and delivery of push notificationsIreland / United States
SupabaseOur database and photo storageEuropean Union
xAIThe AI that writes your description and scores matchesEuropean Union endpoint; the company is based in the United States

We do not sell your personal data. We do not share it with advertisers, data brokers, or anyone for marketing. We would disclose data to law enforcement only where the law compels us, or to protect someone from serious harm. If Wednesdate were ever sold or merged, your data would transfer with it, and we would tell you before that happened.

7. Sending data outside the EU

We keep your data in the European Union wherever we can, and we call xAI’s European endpoint so that AI processing happens in the EU. However, Apple and xAI are United States companies, and some processing or support may take place there or in other countries. Where that happens we rely on the European Commission’s Standard Contractual Clauses, and on the EU–US Data Privacy Framework where the provider is certified under it. You may request a copy of the safeguards by writing to us.

8. How long we keep it

We keep your profile, photos, matches, and messages for as long as your account exists. When you delete your account we erase your profile, photos, AI description, opt-in history, matches, messages, push tokens, and blocks. Deletion is immediate and permanent; we cannot undo it.

Two honest caveats. First, messages you have already sent remain visible in your match’s copy of the conversation, in the same way an email you have sent stays in the recipient’s inbox. Second, abuse reports are erased along with the account of either the person who filed them or the person they concern, so deleting your account also removes reports about you. Backups may retain data for up to 30 days before they are overwritten.

9. Your rights

Under GDPR you have the right to:

To exercise any of these, email wednesdate@protonmail.com. We answer within 30 days and it costs you nothing. We may ask you to confirm your identity first, so that nobody else can request your data.

If you think we have handled your data badly, please tell us — but you also have the right to complain to a supervisory authority. Ours is the Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg. You may also complain to the authority where you live.

10. How we protect your data

Everything travels over encrypted connections. Your photos live in a private store that is not readable from the public internet; they are shown to your match through short-lived links that expire. Every table in our database enforces row-level security, so the system itself prevents one user from reading another’s data rather than relying on us to remember. Sign-in is handled by Apple, so we never see or store a password.

No service can promise perfect security. If a breach ever affects your rights, we will notify you and the supervisory authority as the law requires.

11. Children

Wednesdate is strictly for adults aged 18 and over. We ask for your date of birth at sign-up and refuse accounts for anyone younger. We do not knowingly collect data from children. If you believe a minor is using Wednesdate, email us and we will remove the account promptly.

12. Changes to this policy

If we change how we handle your data we will update this page and change the date at the top. For anything significant — a new provider, a new purpose — we will notify you in the app before it takes effect, and ask for fresh consent where the law requires it.

13. Contact

Questions, requests, or complaints: wednesdate@protonmail.com. Postal address in section 1.