Privacy Policy

• Account information — your email address, password (stored only as a hash), display name, public handle, city, and account type.
• Phone number — collected to verify that a real person holds the account, to let you sign in with a one-time code, and — only for the alert types you switch on yourself — to send activity and payout alerts. We never send marketing or promotional text messages, your number is never sold or shared for anyone else's marketing, and replying STOP ends every alert. Full detail in the SMS Terms.
• Profile content — photos you upload, your Baddie type, style and vibe selections, and any text you write on your profile.
• Activity — who you follow, shifts you post or RSVP to, gifts sent and received, ratings and reviews you write, points earned, and your roster picks.
• Location at check-in — when you check in, your device's approximate coordinates at that moment, used once to confirm you are near the public venue you say you are at. We check in at public, licensed venues only — never at private residences or any non-public address — and we do not track your location in the background or between check-ins.
• Payment information — handled by Stripe. We receive only payment metadata such as amount, status, last four digits, and a customer reference. We never see or store your full card number.
• Device and usage data — IP address, browser and device type, pages viewed, and error reports, used for security, abuse prevention, and fixing bugs.

• To create and secure your account, sign you in, and verify that you are a real adult person.
• To confirm check-ins at public venues so posted shifts, lineups, and points mean something.
• To rank Baddies, build lineups, and generate recommendations that match your stated taste.
• To process purchases, credit Baddie Bucks, run memberships, and calculate referral commissions and payouts.
• To detect and prevent fraud, fake accounts, harassment, spam, and abuse of the points and referral systems.
• To respond to your support and safety reports, and to comply with legal obligations.

We do not sell your personal information, and we do not share it with advertisers or data brokers.

Some things are public by design, because discovery is the point of the platform:

• Your handle, display name, and profile photos.
• Your Baddie type, style and vibe tags, and city.
• Shifts you post at public venues, including the venue name, date, and time.
• That you checked in for a shift, your ratings and reviews, follower counts, points, and leaderboard position.

These are never shown publicly:

• Your email address and phone number.
• Your password.
• The exact coordinates recorded at a check-in. We show only that a check-in at a public venue was confirmed, never a map pin, an address, or a distance that could locate you.
• Your wallet balance, ledger, purchase history, and earnings.
• The detailed attribute preferences you set when building your Baddie.

Venue addresses shown on BaddieMatch are the public business addresses of licensed commercial venues. We do not list, store, or display private residences.

We use a small number of service providers, each for a specific purpose:

• Supabase — database, file storage, and authentication hosting.
• Stripe — payment processing for Baddie Bucks and memberships.
• Twilio — delivery of one-time verification codes and, where you opted in, alert text messages.
• Google Maps Platform — venue lookup, addresses, and distance calculations for check-in verification.

Each provider receives only what it needs to perform its function and is not permitted to use your information for its own purposes. We may also disclose information when legally required, or to protect someone's safety.

Account and profile information is kept while your account is open. Financial records, including purchases, ledger entries, and payouts, are kept for at least seven years because tax and accounting rules require it. Check-in coordinates are kept only as long as needed to verify the check-in and detect abuse, and are then reduced to the verified/not-verified result. Device and usage logs are kept for a short retention window for security purposes.

You can, at any time:

• See and edit your profile information from your account settings.
• Remove photos and delete shifts you posted.
• Ask for a copy of the personal information we hold about you.
• Ask us to correct information that is wrong.
• Delete your account and your personal information.

To request access or deletion, email privacy@baddiematch.com from your account email address. We will respond within 30 days. When you delete your account we remove your profile, photos, and personal information, and anonymize the activity records we must keep — such as financial ledger entries and safety reports.

Data is encrypted in transit and at rest. Passwords are hashed and never stored in readable form, and payment card details never touch our servers. Access to production data is limited to the people who need it to operate the service. No system is perfectly secure, so use a strong, unique password and keep your verified phone number current.

BaddieMatch is for adults 18 and over. We do not knowingly collect information from anyone under 18. If we learn that an account belongs to a minor, we delete it and its data immediately. If you believe a minor is using the platform, email safety@baddiematch.com.

When we change what we collect or how we use it, we update the date at the top of this page and, for material changes, notify you in the app.

Privacy questions and requests: privacy@baddiematch.com. Safety concerns: safety@baddiematch.com.