Privacy Policy

1. Who we are

This policy explains what personal data we collect when you use Clubr, how we use it, and your choices.

Our Data Protection Officer can be reached at [[email protected]] for any question or request about your personal data.

2. What we collect and why

We collect only what Clubr needs to work.

DataWhere it comes fromWhy we use it
Email address and password (stored encrypted, never in plain text)You, when you sign upTo create and secure your account, and for password resets
Google account email and IDGoogle, if you sign in with GoogleTo sign you in. We don’t use your Google name or photo
Confirmation that you’re 18 or older, and your ageYouTo keep Clubr adults-only and for age matching
Nickname, gender, bio, photosYouTo build the profile other members see
Who you’d like to meet (straight / bisexual)YouOnly to decide who appears in your Swipe and who sees you. Never shown on your profile
Purposes and places to meetYouTo show you compatible people
Age range preference, settings, “out tonight” statusYouTo filter and rank who you see
Likes, passes, matches, blocks, reportsYour use of the appTo create matches, keep you safe and enforce our Terms
MessagesYou and the people you match withTo deliver your conversations, and for reviews described in section 4
Last-active timeYour use of the appTo show active people first
Notification subscription for your deviceYour browser, if you turn notifications onTo send you match, message and like alerts
IP address and basic device informationYour deviceSecurity, preventing abuse (for example, limiting repeated login attempts)

We remove location data (GPS) from photos when you upload them. We don’t track your location.

3. Who can see what

  • Other members can see your nickname, age, gender, bio, photos, purposes, places to meet and whether you’re out tonight — unless you pause your profile or hide yourself from Swipe.
  • People you’ve liked see you on their Likes tab, with your main photo blurred, until they like you back.
  • Your matches can see the messages you send them, and whether you’ve read theirs.
  • Nobody else sees your email, password, orientation, age range, likes and passes you’ve made, or who you’ve blocked or reported. Blocked members can’t see or contact you, and aren’t told they’re blocked.

4. Review of messages by our team

Authorised Clubr administrators may read members’ messages, including private conversations, when it is reasonably needed to:

  • investigate a report or a safety concern;
  • carry out audits of how the service is used and moderated;
  • respond to a legal request or a request from law enforcement;
  • handle a request from you.

Every time messages are opened, we record who opened them, whose messages, the reason and the time in an internal audit log. The audit log does not contain message content. Only a small number of authorised staff can review messages.

5. Who we share data with

We don’t sell your personal data or share it for advertising. We use a few service providers to run Clubr:

ProviderWhat they handleWhy
[Hosting provider], [server location]All Clubr data and photosTo run the service
GoogleYour sign-in token (if you use Google sign-in); notification delivery to Android/ChromeSign-in and phone notifications
Apple, Mozilla, MicrosoftNotification delivery to your devicePhone notifications, depending on your browser
[Email / SMTP provider]Your email address and reset linksPassword-reset emails

Notifications are encrypted so the notification services cannot read them, and they never include the text of your messages.

We may also disclose data where the law requires or permits it — for example to the police, a court, or to protect someone’s safety. If data is transferred outside Singapore, we take steps to ensure it is protected to a standard comparable to the PDPA.

6. How long we keep data

  • While your account exists, we keep your profile, photos, likes, matches and messages.
  • When you unmatch or block someone, the conversation disappears for both of you but stays stored until either of you deletes your account, so reports can still be investigated.
  • When you delete your account, we permanently delete your account, profile, photos, likes and passes, matches, every message in your conversations (for both people), blocks, notifications and Google sign-in link. Backups are overwritten within [30] days.
  • We keep: reports you filed (with your identity removed), and audit-log entries (a member number, reason and time, never message content), for [duration], for safety and legal reasons.
  • Out tonight status switches off automatically at 6 am Singapore time.

7. Your choices and rights

Under the PDPA you can:

  • Access and download your data: Profile → Download my data, or ask our Data Protection Officer.
  • Correct your data: Profile → Edit profile and Photos, or ask us.
  • Withdraw consent and delete: Profile → Delete account. Without the data above we can’t provide Clubr, so withdrawing consent means closing your account.
  • Control visibility: pause your profile, hide yourself from Swipe, or block people at any time.
  • Turn off notifications: Profile → Phone notifications, or in your browser settings.

We’ll respond to requests within 30 days. If you’re not satisfied, you can contact the Personal Data Protection Commission (PDPC) of Singapore.

8. Security, cookies, age and changes

  • Security: Clubr runs over HTTPS. Passwords are stored hashed, access to data is restricted, and suspicious activity such as repeated login attempts is limited. No system is completely secure; tell us at [[email protected]] if you suspect a problem.
  • Cookies and storage: we use WordPress login cookies to keep you signed in, and your browser stores the Clubr app files so it loads quickly and can be installed. We don’t use advertising or tracking cookies. [Update this if you add analytics.]
  • Adults only: Clubr is for people aged 18 and over. We delete accounts we believe belong to someone under 18.
  • Changes: we’ll update the “Last updated” date when this policy changes, and tell you in the app about important changes.
  • Contact: Data Protection Officer, [Company name], [[email protected]], [registered address].