Privacy Policy

Effective date: April 6, 2026

ConnectAndDo ("we", "us", "our") operates the ConnectAndDo platform at connectanddo.com. We take your privacy seriously — especially because our app handles personal and sensitive information. This policy explains what we collect, why, and how we protect it.

1. What We Collect

When you use ConnectAndDo, we may collect:

• Account information — name, email address, password (hashed)
• Profile information — age, city/borough, bio, display name, photos you upload
• Gender and orientation — your gender identity and who you're interested in matching with
• Activity preferences — which activities you're interested in (boxing, salsa, pottery, etc.)
• Messages — content of conversations between you and your matches
• Location data — the city you select for matching (we do not track precise GPS location)
• Usage data — pages viewed, features used, and general interaction patterns
• Device information — browser type, screen size, and operating system (via standard analytics)

2. How We Use Your Data

We use your information to:

• Match you with compatible people based on your city, activity preferences, gender, and orientation
• Run the platform — manage your account, send verification emails, and enable messaging
• Improve the product — understand usage patterns and make ConnectAndDo better
• Communicate with you — send account-related emails (verification, password reset, important updates)
• Ensure safety — detect and prevent abuse, fake profiles, and policy violations

3. Sensitive Data: Extra Protection

4. How We Store and Protect Your Data

• All data is stored in an encrypted PostgreSQL database with SSL connections
• All traffic uses HTTPS (TLS encryption in transit)
• Passwords are hashed with bcrypt — we never store plain-text passwords
• Photos are stored securely via Cloudflare R2 with access controls
• Authentication uses JWT tokens that expire after 7 days

5. Third-Party Sharing

We do not sell your personal data. Period.

We may share limited data with:

• Infrastructure providers (hosting, database, file storage) — only as needed to operate the service
• Analytics tools — anonymized usage data to understand how the app is used
• Law enforcement — only if legally required by a valid court order or subpoena

We will never share your gender identity, sexual orientation, or message content with advertisers or data brokers.

6. Data Retention

• Active accounts — we keep your data for as long as your account is active
• Deleted accounts — when you delete your account, we remove your profile, photos, and messages within 30 days. Some anonymized usage data may be retained for analytics.
• Inactive accounts — accounts with no activity for 12 months may be flagged for deletion. We'll email you before taking any action.

7. Your Rights

You have the right to:

• Access your data — request a copy of everything we store about you
• Correct your data — update your profile information anytime in the app
• Delete your data — request full deletion of your account and associated data
• Export your data — request a machine-readable export of your data

To exercise any of these rights, email us at connectanddo@polsia.app. We'll respond within 30 days.

8. Cookies and Tracking

We use:

• Essential cookies — to keep you logged in (JWT stored in localStorage)
• Analytics — Meta Pixel for understanding how users find us (anonymized conversion tracking)

We do not use third-party ad tracking cookies.

9. Age Requirement

ConnectAndDo is for adults aged 18 and older. We do not knowingly collect data from anyone under 18. If we discover an account belongs to a minor, we'll delete it immediately.

10. Changes to This Policy

We may update this policy from time to time. When we do, we'll update the effective date at the top and notify active users via email for significant changes.

11. Contact Us

Questions about your privacy? Reach out:

• Email: connectanddo@polsia.app