Privacy Policy

This Privacy Policy describes how V-Casst Inc. ("V-Casst", "we", "our", or "us") collects, uses, discloses, and protects personal information when you use the Dating V-Casst mobile application (the "App"), the website at dating.v-casst.com (the "Site"), and any related services (together, the "Services").

We follow the Apple App Store Review Guidelines, the EU General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act as amended by the CPRA ("CCPA/CPRA").

Our Services are intended for adults aged 18 and over. If you do not agree with this Policy, please do not use the Services.

The data controller is V-Casst Inc., registered at V-Casst Studio, Los Angeles, California, United States.

• General enquiries: vcast.contact@gmail.com
• Privacy / data-subject requests: vcast.contact@gmail.com
• EU / UK representative: vcast.contact@gmail.com
• Data Protection Officer: vcast.contact@gmail.com

We only collect what we need to run a curated dating service. Categories:

a) Account & identity data

• Name, display name, date of birth (to verify you are 18+)
• Email address, phone number (optional)
• Authentication identifiers issued by Sign-in-with-Apple, Google Sign-In or Firebase Authentication

b) Profile & matching data

• Gender, sexual orientation, relationship intent
• Answers to our matching questionnaire (up to 92 questions across values, lifestyle, sex life, family, work, religion)
• Photos you upload to your profile
• Approximate location (city, GPS latitude/longitude with an accuracy of ~100 m) used to match you with people within 20 km of you

c) Sensitive / special-category data (GDPR Art. 9)

Some questions ask about information considered "special category" under the GDPR: sexual orientation and sex life; health-adjacent topics (recreational drug use, therapy); religious or philosophical beliefs; political opinions. You may skip any of these questions. Where you choose to answer, you provide your explicit consent for us to process this data solely to compute compatibility. It is stored encrypted at rest inside a private Firestore sub-collection.

d) Event footage

When you attend a Dating V-Casst dinner, our production crew films conversations at your table with several fixed cameras. This footage is uploaded to your app so that you can watch your own dates back and decide who to see again. You sign an on-site release before recording begins; footage is never published or shared with anyone outside the six people at your table without your written consent.

e) Payments

Event fees are processed by Stripe, Inc.. We do not store your card number or CVC. Stripe returns to us only a payment identifier, the last four digits of the card, and the outcome of the charge.

f) Device & diagnostics

• Device model, OS version, app version, coarse language / locale
• Crash reports and non-personal performance metrics (Firebase Crashlytics, Firebase Analytics)
• IP address (for security & anti-abuse only; not persisted with your profile)

• Create and secure your account.
• Compute compatibility scores and put you into groups of 6.
• Deliver invitations, venues, time slots and payment reminders.
• Provide the post-event video-review experience.
• Send transactional notifications (RSVP status, payment receipts, safety alerts).
• Detect fraud, abuse, harassment; comply with legal obligations.
• Improve the matching algorithm through aggregated, non-identifiable analytics.

We do not sell your personal information, use it for targeted third-party advertising, or share your questionnaire answers with other users unless mutual matching unlocks a connection.

• Consent — for sensitive-category answers and for event video recording.
• Performance of a contract — to deliver the matching, invitation and payment services you request.
• Legitimate interests — to keep the service safe, prevent fraud, and improve product performance in ways that do not override your privacy interests.
• Legal obligation — to comply with tax, anti-money-laundering and lawful requests from regulators.

We share personal information only with the following categories of recipients, each bound by data-processing terms and confidentiality:

• Google LLC / Firebase — Authentication, Firestore, Cloud Functions, Storage, Analytics, Crashlytics.
• Apple Inc. — Sign-in-with-Apple, push notifications, TestFlight, App Store.
• Stripe, Inc. — payment processing.
• Vercel Inc. — hosting of this website.
• Other members of your assigned group of 6, but only after mutual selection unlocks a connection.
• Law enforcement or regulators, when compelled by a valid legal request.

A full list of sub-processors and their locations is available on request from vcast.contact@gmail.com.

V-Casst is based in the United States; Firebase and our other main sub-processors also operate in the US. When personal data leaves the European Economic Area or the United Kingdom, we rely on Standard Contractual Clauses (2021/914/EU) plus supplementary technical measures such as encryption in transit (TLS 1.2+) and at rest (AES-256).

• Active accounts — as long as you keep an account, plus 30 days after deletion for backup rotation.
• Event video footage — 90 days after the event, then deleted from all systems unless you download it or extend the period from within the app.
• Payment records — 7 years, as required by US tax law.
• Support tickets — 24 months after the ticket is closed.
• Aggregated analytics — retained indefinitely in a form that cannot identify you.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you (Art. 15 GDPR, CCPA §1798.100).
• Correct inaccurate data (Art. 16 GDPR).
• Delete your data / "right to be forgotten" (Art. 17 GDPR, CCPA §1798.105).
• Restrict or object to processing (Art. 18 & 21 GDPR).
• Receive a portable copy of your data (Art. 20 GDPR, CCPA §1798.110).
• Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
• Opt out of the sale or sharing of personal information (CCPA/CPRA) — we do not sell or share for cross-context behavioural advertising.
• Lodge a complaint with your local supervisory authority.

You can exercise most of these rights directly from the app (Settings → Privacy → Manage my data). For anything else, email vcast.contact@gmail.com. We respond within 30 days.

Open the app → Profile → Settings → Delete account. Your account, photos, questionnaire answers, and matches will be removed within 30 days. Event footage you appear in will be redacted or deleted; you may also request expedited deletion via email.

• All network traffic is transmitted over TLS 1.2 or higher.
• Firestore private sub-collections holding sensitive answers are encrypted at rest with AES-256, keyed by Google-managed keys.
• Access to production systems is restricted to named engineers, protected by 2-factor authentication.
• We run automated dependency, static-analysis and secret scanning on every commit.
• We conduct annual third-party penetration tests. Reports available under NDA.

Dating V-Casst is strictly for adults aged 18 or older. We do not knowingly collect data from anyone under 18. If we discover an account belongs to a minor, we delete it immediately. Guardians who believe a minor may have created an account should email vcast.contact@gmail.com.

The public marketing website uses only strictly-necessary cookies. We do not run advertising trackers, third-party analytics beacons or fingerprinting scripts on the marketing pages. The app itself does not use cookies; it uses Firebase SDK secure storage for authentication tokens.

To comply with Apple's App Privacy nutrition labels, we summarise the categories of data linked to your identity:

• Contact info — name, email, phone (optional).
• Location — coarse location (city / 20 km precision).
• Sensitive info — sexual orientation, health-adjacent answers (optional).
• User content — profile photos, event video footage.
• Identifiers — user ID.
• Diagnostics — crash data, performance metrics.

None of the above is used for tracking across other companies' apps or websites.

If we make a material change we will notify you inside the app at least 30 days before it takes effect. Non-material changes (typos, added sub-processors from the same jurisdiction) become effective upon posting.

Questions or complaints: vcast.contact@gmail.com. Mail: V-Casst Inc., Attn: Privacy, V-Casst Studio, Los Angeles, CA, USA.