Privacy Policy

Last updated: 22 May 2026

This Privacy Policy explains what personal data MatchaName collects, why, and what your rights are. It applies to the MatchaName mobile application available on the iOS App Store.

1. Data controller

The data controller is:

Arilem Studio
SIRET: 105 182 919 00016
Registered office: 173 rue de Courcelles, 75017 Paris, France
Contact: support@matchaname.com

2. Data we collect

MatchaName only operates with the data strictly necessary for the service:

• Apple identifier via "Sign in with Apple": an identifier provided by Apple, and optionally your name and relayed email address.
• User profile: chosen display name, family name (optional, used to personalise certain pages), profile picture (if you upload one), preference filters (gender, origin, length, compound names).
• Usage history: names you have liked, dismissed, favourited, and matches identified within your duo.
• Duo links and Florilèges: if you form a duo with a partner, the link between your two accounts is recorded so that we can compute your matches; the Florilèges (curated lists of names) you send or receive are stored as long as the duo is active.
• Taste summary: a short text describing your preferences may be generated and stored so that it can be shown to you; its generation relies solely on aggregated statistics of your choices (no other personal data is shared with a third party for this computation).
• Push notifications: if you enable notifications, a device identifier provided by Apple (APNs token) is stored so that we can send you the app's notifications.
• In-app purchases: if you purchase a paid feature, we receive from Apple a transaction identifier and the status of your access right — never any payment card data.

We do not collect any analytics, advertising tracking, or location data. No third-party analytics SDK is integrated into the application.

3. Purposes and legal bases

• Providing the service (performance of a contract, art. 6(1)(b) GDPR): authentication, storage of your profile, computing matches with your partner, sending and receiving Florilèges, managing paid features.
• Retaining your preferences and taste summary (performance of a contract): to suggest relevant names, avoid showing names you have already judged, and personalise the content shown to you.
• Notifications (consent, art. 6(1)(a) GDPR): push notifications are only sent after your explicit consent given through iOS, which you can withdraw at any time from your device settings.
• Communication (legitimate interest, art. 6(1)(f) GDPR): if you contact us at support@matchaname.com, we process your message in order to reply.

4. Subprocessors

We use the following providers to run the service:

• Supabase (database hosting, photo storage, server functions) — European Union region. Supabase's policy.
• Apple (authentication via Sign in with Apple, App Store distribution, APNs push notifications, payment and management of in-app purchases). Apple's policy.

No other personal data is transferred to any third party.

5. Retention period

Your data is kept for as long as your account is active. When you request the deletion of your account from the application:

• Your account is flagged for deletion and enters a grace period of 30 days.
• During this period, you can cancel the deletion by signing back into the application.
• After the 30 days have elapsed, your profile, your photo, your preferences, your swipe history, your Florilèges, your taste summary, your notification token and your authentication identifier are permanently deleted, with no possibility of recovery.

If you were in a duo at the time of deletion, the duo is dissolved: your partner switches to solo mode, their own preferences are preserved, and the historical matches you had together remain in the database in anonymised form (linked only to the dissolved duo, with no personal information).

In-app purchase transaction identifiers may be retained beyond account deletion, for accounting purposes and to comply with legal obligations applicable to purchases.

6. Your rights

In accordance with the GDPR, you have the following rights:

• Access: obtain a copy of the data we hold about you.
• Rectification: correct inaccurate data (your display name, family name and photo can be edited directly within the application).
• Erasure: delete your account ("Delete my account" on the You → Account screen) or, on request, by email.
• Portability: receive your data in a readable format.
• Objection and restriction: restrict certain processing activities.
• Withdrawal of consent: withdraw at any time your consent to push notifications, from your iOS settings.

To exercise a right, email us at support@matchaname.com. We will reply within 30 days.

If you believe your rights are not being respected, you may lodge a complaint with the French data protection authority (CNIL) or with the supervisory authority of your country of residence (see the list of EEA authorities).

7. Security

Your data is encrypted in transit (HTTPS/TLS) and at rest (Supabase encryption). Authentication relies on Sign in with Apple, with no password stored on MatchaName's side.

8. Minors

MatchaName is intended for adults (16 and over in France, in line with article 8 of the GDPR). If we learn that an account has been created by a minor under 16 without parental authorisation, we will delete it.

9. Changes

We may update this policy. The date of the last update is shown at the top of this page. For substantial changes, we will notify you via the application or by email.

10. Contact

For any question, email us at support@matchaname.com.