Privacy Policy

Schindler & Bachmann UG (haftungsbeschränkt)
Erlanger Strasse 17
91083 Baiersdorf
Germany
Email: info@schindler-bachmann.com
Website: flyrti.com

Data protection officer: Bastian Bachmann

This privacy policy explains how FLYRTI processes personal data. FLYRTI is a dating app for adults aged 18 and over: you create a profile, see singles near you and can chat with each other after a mutual like. We also offer paid subscriptions via the Apple App Store and in the browser, as well as one-time packs of Super Likes and Boosts.

We process personal data in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

3.1 Account data

• Email address
• Password (stored only as a password hash)
• Verification codes for confirming your email address and resetting your password
• Name or first name
• Date of birth

3.2 Profile data

For your profile, we process the information you provide yourself, in particular:

• Photos
• Gender and who you are interested in
• Profile text, interests, job, education and height
• Dating intentions and relationship type
• Information on children and family planning
• Lifestyle information such as smoking, alcohol or other substances
• Voluntary information on ethnicity, religion and political views
• Your search and filter settings, e.g. age and distance

Apart from the information required for the service (name, date of birth, gender, search preference, at least one photo), all profile information is voluntary.

3.3 Location data

To show you people near you, we process your approximate location. In the app this is done – after your consent in the system dialog – via your iPhone's location services, or alternatively via the postal code you enter.

Other users never see your exact location, only your city and a rounded distance. You can revoke location access at any time in your iPhone settings.

3.4 Usage and communication data

• Likes, super likes and skipped profiles
• Matches and their removal
• Chat messages and read receipts
• Reports you submit or that are submitted about you
• Time of your last activity
• Support requests and other communication with us

3.5 Subscription data

When you take out a subscription, we receive from Apple or our service provider RevenueCat only the information needed for management: selected plan, start, term, status, renewals and cancellations, and a transaction reference. We do not receive payment data such as credit card or bank details.

For purchases in the browser, we additionally process your name, your email address, a customer ID of the payment provider Stripe, purchased subscriptions and packs with amount, date and status, and invoices. Only Stripe receives full card or account details, not us. The legal basis is the performance of the contract (Art. 6(1)(b) GDPR); we keep invoice and accounting data for up to ten years due to commercial and tax law obligations (Art. 6(1)(c) GDPR).

3.6 Server log data

Each time you access the app or the website, the following may be processed in particular: IP address, date and time, pages and features accessed, browser or app version, operating system, device type and error messages. For logged-in sessions, we also store the IP address and user agent of the session.

• Providing and operating FLYRTI
• Creating and managing your account
• Displaying your profile and matching profiles near you
• Matches and chats between users
• Reviewing profile photos before publication
• Handling reports, moderation and abuse prevention
• Providing and managing subscriptions
• Sending verification codes and important notices by email
• Email notifications about new likes, matches and messages
• Ensuring security and stability
• Fulfilling legal obligations
• Enforcing or defending legal claims

To improve our service, we use cookieless analytics (see section 10). We do not use advertising trackers, and we do not sell data.

• Art. 6(1)(b) GDPR: performance of the user agreement, in particular account, profile, matching, chat and subscriptions.
• Art. 6(1)(a) GDPR: consent, in particular for location access via your device.
• Art. 9(2)(a) GDPR: explicit consent for special categories of personal data (see section 9).
• Art. 6(1)(c) GDPR: compliance with legal obligations, such as retention obligations.
• Art. 6(1)(f) GDPR: legitimate interests, in particular security, abuse and fraud prevention and moderation.

Your profile – first name, age, photos, profile information, city and rounded distance – is visible to other logged-in users who match your and their settings. Photos are only shown after we have reviewed them.

Your email address, exact date of birth and exact location are not visible to other users. Chat messages are only visible to the respective match.

We only share personal data if this is necessary for operation, if there is a legal obligation or if you have consented. Recipients are in particular:

7.1 Hosting and storage

Servers, database and photo storage are operated by our hosting provider. Provider and server location will be added.

7.2 Email delivery

We use an email service to send verification codes and system messages. Your email address and the content of the respective email are processed in the process.

When you are not active on FLYRTI, we send you notifications about new likes, matches and messages. They never include the content of messages. The legal basis is the performance of the user agreement (Art. 6(1)(b) GDPR) and our legitimate interest in informing you about activity in your account (Art. 6(1)(f) GDPR). You can turn off each type of notification in the app under "Notifications" or unsubscribe with one click via the link in every email.

7.3 Apple and RevenueCat

Subscriptions are sold and billed via the Apple App Store. Apple is itself responsible for payment processing; Apple's privacy policy applies. We use RevenueCat, Inc. (USA) to manage subscriptions. A pseudonymous user ID and purchase and subscription data are processed in the process.

7.4 Stripe

Payments in the browser are processed by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. Stripe receives your name, your email address, the payment details you enter at checkout, the amount and item purchased, and technical data for fraud prevention. Stripe is partly responsible for payment processing itself; Stripe's privacy policy at stripe.com/privacy also applies.

7.5 Authorities

Authorities and other bodies, where we are legally obliged to do so or where this is necessary to enforce or defend legal claims.

Your data is not passed on to third parties for their advertising purposes.

When using Apple, RevenueCat and Stripe, data may be processed in the USA. Such transfers are based on appropriate safeguards under Chapter V GDPR, in particular the EU-US Data Privacy Framework or standard contractual clauses.

Some information in a dating app may allow conclusions about your sexual orientation (such as who you are interested in) or constitutes special categories within the meaning of Art. 9 GDPR (such as ethnicity, religion or political views).

You provide this information voluntarily in order to show it in your profile and to find matching profiles. We process it on the basis of your explicit consent, which you can withdraw at any time by removing the information from your profile or deleting your account.

We take appropriate technical and organisational measures to give this data special protection.

We only use technically necessary cookies and similar technologies, in particular for:

• Login and session management
• Security and abuse protection
• Display preferences such as light/dark mode

We do not use tracking, analytics or advertising cookies. Consent is not required for technically necessary cookies under § 25(2) TDDDG. We store your choice in the cookie banner locally in your browser.

Web analytics with OpenPanel

On flyrti.com we use OpenPanel, a web analytics software. It works without cookies and evaluates which pages are accessed and which features are used, such as page views, clicks on external links, device used, browser, operating system, approximate region and the referring website. The IP address is not stored permanently.

The analytics script and the analytics data are processed exclusively on servers operated by us. No data is transmitted to third parties.

Analytics only runs if you consent to statistics in the cookie banner. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can withdraw it at any time via “Manage cookies” in the website footer.

• Location (while using the app): to show you people near you and calculate distances.
• Photos: so you can choose pictures for your profile. We only receive the photos you select.
• Camera: so you can take profile photos directly.

All permissions are voluntary and can be changed at any time in your iPhone settings.

• Right of access pursuant to Art. 15 GDPR
• Right to rectification pursuant to Art. 16 GDPR
• Right to erasure pursuant to Art. 17 GDPR
• Right to restriction of processing pursuant to Art. 18 GDPR
• Right to data portability pursuant to Art. 20 GDPR
• Right to object pursuant to Art. 21 GDPR
• Right to withdraw consent with effect for the future
• Right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR

If you withdraw your consent, the lawfulness of processing carried out up to that point remains unaffected. For all requests, an email to info@schindler-bachmann.com is sufficient.

13.1 Deleting your account

You can delete your account at any time in the settings of the app or in the browser. Your profile, photos, likes, matches and messages are deleted unless legal obligations or other legally permissible reasons prevent this.

13.2 Statutory retention obligations

Certain data, for example relating to subscriptions, may be retained beyond account deletion due to commercial and tax law obligations.

13.3 Backups

Deleted data may remain in backup copies for a limited period. These are overwritten as part of regular backup cycles and are not used for ongoing operation.

We take appropriate technical and organisational measures to protect your data against loss, manipulation and unauthorised access, in particular:

• encrypted transmission (TLS)
• secure password storage as a hash
• limiting login and code attempts
• access restrictions on servers, database and photo storage
• regular updates of the software used
• backup and recovery procedures

We adapt this privacy policy when our services, the services we use or legal requirements change. The current version is always available at flyrti.com/legal/privacy.