The short version
- We collect your name, date of birth, height, gender, who you want to meet, and your photos. That is nearly everything.
- We use AI to pair you with one person each week. Your photos and profile details are sent to our AI provider, xAI, to do this.
- Telling us who you want to date reveals your sexual orientation. That is sensitive data, and we process it only because you explicitly consent when you sign up.
- No tracking, no advertising, no analytics, no data sales. Wednesdate contains no ad networks, no tracking SDKs, and no location tracking.
- Delete your account in the app and your data is erased.
1. Who we are
Wednesdate is operated by an individual, who is the data controller for the purposes of the UK and EU General Data Protection Regulation (GDPR). This section also serves as our statutory notice under § 5 of the German Digital Services Act (DDG).
Nikolai AltergottLange Äcker 1
71543 Wüstenrot
Deutschland
wednesdate@protonmail.com
We are not required to appoint a Data Protection Officer. Write to the address above with any privacy question and a real person will answer.
2. What we collect, and why
We collect only what the app needs to work. We do not buy data about you from anyone, and we do not enrich your profile from outside sources.
| What | Where it comes from | Why we need it |
|---|---|---|
| Email address, and your name the first time you sign in | Sign in with Apple. If you chose “Hide My Email”, we only ever see Apple’s private relay address. | To create and secure your account. |
| First and last name, date of birth, height, gender | You, during onboarding. | To build your profile and to show it to your match. Your date of birth confirms you are 18 or over. |
| Who you are seeking, and your preferred age and height range | You, during onboarding. | To find people you might actually want to meet. See section 3. |
| Up to four photos | You, from your photo library. | To show your match who you are, and as input to the AI that makes matches. |
| Your city | You type it, or you confirm you are in Berlin. | To match you with people nearby. We never read your device’s location. |
| Your weekly opt-ins, your matches, and the AI score and explanation for each match | Generated by us. | To run the weekly matching cycle. |
| Messages you send in chat | You. | To deliver them to your match. |
| Reports you file and people you block | You. | To keep people safe and to act against abuse. |
| Your device’s push notification token, and a record of which notifications we sent | Your device, when you turn on notifications. | To tell you when your match arrives. The record stops us sending the same notification twice. |
What we deliberately do not collect
We think this list matters as much as the one above. Wednesdate has:
- No location tracking. The app never requests GPS or location permission. Your city is a word you type.
- No analytics, advertising, attribution, or crash-reporting services. There is no Google, Meta, Firebase, or similar code in the app.
- No tracking across other apps or websites, and no advertising identifier (IDFA).
- No access to your photo library or camera. Photos are chosen through Apple’s picker, which hands us only the pictures you select.
- No access to your contacts, microphone, health, or motion data.
- No passwords — signing in is handled entirely by Apple.
3. Sensitive data and your explicit consent
Your gender combined with who you are seeking reveals your sexual orientation. Under Article 9 GDPR that is a special category of personal data with extra protection. Your photos also show what you look like, and may suggest your ethnicity.
We process this data on the basis of your explicit consent (Article 9(2)(a) GDPR), which you give when you tap through the sign-up screen. A dating app cannot function without it: matching you to the people you want to meet is the entire product.
You can withdraw that consent at any time by deleting your account in the app, under Profile → Account Centre → Delete Account. Withdrawing does not affect anything we did lawfully beforehand.
We never use your photos for facial recognition or biometric identification. We do not measure your face, generate a faceprint, or attempt to identify you from a picture, and we do not permit our AI provider to do so.
4. How we use AI
Wednesdate matches you using artificial intelligence, and we would rather explain exactly how than hide it. There are two steps.
When you finish your profile, we send your photos and your basic details (first name, age, height, gender, and who you are seeking) to our AI provider. The model writes a short private description of you — roughly 150 words about your apparent style, interests, and the kind of person you might click with. We store that description and use it only to make your matches. It is never shown to other users. No human at Wednesdate reads it as a matter of routine.
Every Wednesday, our system first narrows the field with ordinary database rules: it keeps only people whose stated preferences and yours are mutually compatible, who are in your city, and whom you have not been matched with before. It then sends that small group — descriptions, basic details, and up to two photos each — to the AI, which scores how well each possible pair might get on. A conventional, non-AI algorithm then reads those scores and picks the pairings. If nobody scores highly enough for you that week, you get no match, and we tell you so.
Our AI provider is xAI (the Grok model family), which processes these requests on servers in the European Union. xAI acts as our processor: it may use your data only to answer our requests, not for its own purposes. We do not use your data to train any AI model of our own.
Automated decision-making
To be plain: choosing your match is automated, and no human reviews it. We do not believe this produces legal effects or similarly significant effects on you within the meaning of Article 22 GDPR — being introduced to someone, or not, is not comparable to a decision about your credit, your job, or your rights. We disclose it anyway because you deserve to know.
The app shows you the AI’s short explanation of why you were paired, so the reasoning is not hidden from you. If you are unhappy with how you were matched, or want a person rather than a machine to look at it, email us and we will.
5. Our legal bases
| What we do | Legal basis |
|---|---|
| Run your account, make matches, deliver chat | Performance of our contract with you — Article 6(1)(b) |
| Process your sexual orientation and photos | Your explicit consent — Article 9(2)(a) |
| Send push notifications | Your consent, given in the iOS permission prompt — Article 6(1)(a) |
| Investigate reports, block abusers, keep the service safe | Our legitimate interest in protecting users — Article 6(1)(f) |
| Meet legal and regulatory obligations | Legal obligation — Article 6(1)(c) |
6. Who sees your data
Your match sees your first name, age, height, gender, and your photos, once you are paired. Nobody else using Wednesdate can see your profile. If either of you blocks the other, the match disappears for both of you.
Our service providers, who process data only on our instructions:
| Provider | What they handle | Where |
|---|---|---|
| Apple | Sign in, and delivery of push notifications | Ireland / United States |
| Supabase | Our database and photo storage | European Union |
| xAI | The AI that writes your description and scores matches | European Union endpoint; the company is based in the United States |
We do not sell your personal data. We do not share it with advertisers, data brokers, or anyone for marketing. We would disclose data to law enforcement only where the law compels us, or to protect someone from serious harm. If Wednesdate were ever sold or merged, your data would transfer with it, and we would tell you before that happened.
7. Sending data outside the EU
We keep your data in the European Union wherever we can, and we call xAI’s European endpoint so that AI processing happens in the EU. However, Apple and xAI are United States companies, and some processing or support may take place there or in other countries. Where that happens we rely on the European Commission’s Standard Contractual Clauses, and on the EU–US Data Privacy Framework where the provider is certified under it. You may request a copy of the safeguards by writing to us.
8. How long we keep it
We keep your profile, photos, matches, and messages for as long as your account exists. When you delete your account we erase your profile, photos, AI description, opt-in history, matches, messages, push tokens, and blocks. Deletion is immediate and permanent; we cannot undo it.
Two honest caveats. First, messages you have already sent remain visible in your match’s copy of the conversation, in the same way an email you have sent stays in the recipient’s inbox. Second, abuse reports are erased along with the account of either the person who filed them or the person they concern, so deleting your account also removes reports about you. Backups may retain data for up to 30 days before they are overwritten.
9. Your rights
Under GDPR you have the right to:
- Access the personal data we hold about you, including the private description our AI wrote about you, and receive a copy.
- Correct anything inaccurate — most of it you can edit in the app directly.
- Erase your data, which you can do yourself at any time by deleting your account.
- Restrict or object to our processing.
- Port your data to another service in a machine-readable format.
- Withdraw consent at any time, as described in section 3.
To exercise any of these, email wednesdate@protonmail.com. We answer within 30 days and it costs you nothing. We may ask you to confirm your identity first, so that nobody else can request your data.
If you think we have handled your data badly, please tell us — but you also have the right to complain to a supervisory authority. Ours is the Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg. You may also complain to the authority where you live.
10. How we protect your data
Everything travels over encrypted connections. Your photos live in a private store that is not readable from the public internet; they are shown to your match through short-lived links that expire. Every table in our database enforces row-level security, so the system itself prevents one user from reading another’s data rather than relying on us to remember. Sign-in is handled by Apple, so we never see or store a password.
No service can promise perfect security. If a breach ever affects your rights, we will notify you and the supervisory authority as the law requires.
11. Children
Wednesdate is strictly for adults aged 18 and over. We ask for your date of birth at sign-up and refuse accounts for anyone younger. We do not knowingly collect data from children. If you believe a minor is using Wednesdate, email us and we will remove the account promptly.
12. Changes to this policy
If we change how we handle your data we will update this page and change the date at the top. For anything significant — a new provider, a new purpose — we will notify you in the app before it takes effect, and ask for fresh consent where the law requires it.
13. Contact
Questions, requests, or complaints: wednesdate@protonmail.com. Postal address in section 1.