MapMap is a dating app built on a live map, so we take location data seriously. This policy explains, in plain language, what we collect, why, who we share it with, and the control you have over it.
This summary is for orientation only — the full policy below is what legally applies.
Draft notice. This document is a working draft prepared from MapMap's actual technical and product documentation. It must be reviewed and finalised by a qualified data protection lawyer in your jurisdiction before publication. All [BRACKETED] items must be completed.
MapMap ("MapMap", "we", "us") is a location-based dating and social discovery application for iOS and Android. This Privacy Policy explains how we handle personal data when you use the app or visit our website.
| Data controller | [LEGAL ENTITY NAME], [REGISTERED ADDRESS], company number [REG. NUMBER] |
| Privacy contact | privacy@mapmap.app |
| Data Protection Officer | [DPO NAME / "not appointed — see contact above"] |
| EU / UK representative | [REQUIRED IF ESTABLISHED OUTSIDE THE EU/UK — GDPR Art. 27] |
| Supervisory authority | [LEAD AUTHORITY, e.g. the data protection authority of your main establishment] |
MapMap is strictly for adults aged 18 or over. See section 14.
MapMap is a map. Location is the core of the service, so we want to be precise about what happens with it.
Precise location is processed on our servers to compute distances, but it is not exposed to other users. Approximation, Privacy Zones, and FlyGPS are applied before anything is shown to anyone else.
Under the GDPR, some of the information you provide on a dating app is "special category" data (Article 9) — in particular, data concerning your sex life or sexual orientation. Your gender, the gender(s) you are interested in, and the fact that you use a dating service can reveal this.
We process this data only on the basis of your explicit consent, which you give when you complete onboarding and choose to publish this information on your profile. Any photos you choose to upload may also reveal such information.
You can withdraw your consent at any time by deleting your account (see section 12). Withdrawal does not affect processing that took place before it. Because these attributes are essential to matching people, MapMap cannot function without them — withdrawing consent means ending your use of the service.
Every photo you upload is placed in a private quarantine area and automatically screened by Amazon Rekognition before it becomes visible to anyone. Photos shared in chat are also screened.
MapMap uses artificial intelligence in two places, and you should know where:
We do not use AI to make decisions that produce legal or similarly significant effects about you.
Video calls are provided through the Amazon Chime SDK. The audio and video stream is encrypted in transit. We do not record, store, or listen to your calls. We do store call metadata — participants, start and end time, duration, seconds deducted from the caller's balance — because it is needed for billing and abuse prevention.
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Creating and running your account | Account, profile | Performance of a contract (Art. 6(1)(b)) |
| Showing you people nearby and you to them | Location, profile, photos | Performance of a contract (Art. 6(1)(b)) |
| Publishing gender / interest data on your profile | Special category data | Explicit consent (Art. 9(2)(a)) |
| Messaging, requests, events, calls | Messages, interactions, call metadata | Performance of a contract (Art. 6(1)(b)) |
| Photo moderation and keeping users safe | Photos, reports, blocks, usage | Legitimate interests — protecting our users and the platform (Art. 6(1)(f)); legal obligation where applicable (Art. 6(1)(c)) |
| Enforcing our 18+ rule | Date of birth | Legal obligation and legitimate interests (Art. 6(1)(c), (f)) |
| Push notifications about activity | Device token, interactions | Performance of a contract (Art. 6(1)(b)); consent where required by your device |
| Processing purchases and call credits | Purchase confirmations, balance | Performance of a contract (Art. 6(1)(b)) |
| Security, fraud and abuse prevention | Device data, IP, usage | Legitimate interests (Art. 6(1)(f)) |
| Responding to legal requests | As required | Legal obligation (Art. 6(1)(c)) |
Where we rely on legitimate interests, we have assessed that our interest in operating a safe service does not override your rights. You may object — see section 12.
We do not sell your personal data, and we do not share it with advertisers for profiling.
Your profile — name, age, gender, bio, interests, public photos, approximate location and distance, and online status — is visible to other MapMap users in your discovery area. Your email address, exact location, and date of birth are never shown to other users.
| Provider | Purpose | Location |
|---|---|---|
| Amazon Web Services | Hosting, database, storage, authentication (Cognito), photo moderation (Rekognition), video calls (Chime), AI text generation (Bedrock) | Primarily EU (Frankfurt); some call control-plane services in the USA |
| Google (Firebase Cloud Messaging) and Apple (APNs) | Delivering push notifications | EU / USA |
| Apple App Store and Google Play | Processing purchases and subscriptions | Per their own privacy policies |
| [ANALYTICS / CRASH REPORTING PROVIDER, IF USED] | [PURPOSE] | [LOCATION] |
Processors act on our instructions under written data processing agreements.
We may disclose data where legally required, to respond to a valid request from law enforcement or a court, to enforce our Terms, or where we believe in good faith that disclosure is necessary to prevent serious harm to any person.
If MapMap is involved in a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before your data becomes subject to a materially different privacy policy.
Our primary infrastructure is in the European Union (AWS Frankfurt, eu-central-1). Some services — including part of the video calling infrastructure and push notification delivery — process data in the United States. Where we transfer personal data outside the EEA, we rely on the European Commission's Standard Contractual Clauses, and on adequacy decisions such as the EU–US Data Privacy Framework where the recipient is certified. You can request a copy of the relevant safeguards at privacy@mapmap.app.
| Data | Retention |
|---|---|
| Account and profile data | While your account is active |
| After you delete your account | Deleted or irreversibly anonymised within [e.g. 30 days], except where a longer period is required below |
| Messages you or the other person deleted | Hidden from both users immediately; purged from our systems within [e.g. 90 days] |
| Chat requests that expire unaccepted | Expire after 15 minutes; purged within [e.g. 30 days] |
| Reports, blocks, and moderation records | [e.g. up to 2 years] — needed to enforce bans and prevent repeat abuse, including after account deletion |
| Purchase and billing records | As required by tax and accounting law, typically [e.g. 7 years] |
| Data subject to a legal hold | Until the matter is resolved |
A note on deletion. When you delete a chat or a message, it is immediately hidden from both sides and can no longer be recovered by you. For a short period it may persist in backups and in flagged records within our database before being permanently purged on the schedule above.
Subject to your jurisdiction, you have the right to:
You can delete your account directly in the app, or contact us at privacy@mapmap.app. We respond within one month, extendable by two further months for complex requests, in which case we will tell you. We may need to verify your identity — usually by asking you to write from your registered email address.
[ADD JURISDICTION-SPECIFIC RIGHTS AS APPLICABLE — e.g. Israeli Privacy Protection Law, California CCPA/CPRA, UK GDPR]
No system is perfectly secure. If a breach occurs that is likely to result in a high risk to your rights, we will notify you and the competent supervisory authority as required by law.
MapMap is for adults aged 18 and over. We check date of birth at registration and reject anyone under 18. "Underage" is a dedicated report category, and we remove any account we reasonably believe belongs to a minor. If you believe a minor is using MapMap, contact support@mapmap.app immediately. We do not knowingly collect data from children.
Our website is an informational landing page. It loads web fonts from Google Fonts and media from our content delivery network, which means those providers receive your IP address as a technical necessity of delivering the files. [IF YOU ADD ANALYTICS OR MARKETING COOKIES, A CONSENT BANNER AND A COOKIE TABLE ARE LEGALLY REQUIRED — ADD THEM HERE]
We may update this policy. If changes are material we will notify you in the app or by email before they take effect. The "Effective" date at the top always shows the current version, and we keep prior versions available on request.
Privacy questions: privacy@mapmap.app
Security issues: security@mapmap.app
General support: support@mapmap.app
Postal: [REGISTERED ADDRESS]
You also have the right to lodge a complaint with your local data protection authority.