Privacy Policy

Nina Purple is a Wyoming Statutory Close Corporation (Incorporation ID 2025-001581162), mailing address 30 N Gould St Ste R, Sheridan, WY 82801, USA, wholly owned by Blue Black Purple Corp., Montréal, Québec, Canada. Nina Purple is the data controller for the personal information described here. Our privacy officer (Quebec Law 25) can be reached at the contact address in section 15.

This policy applies to every member and visitor of ninapurple.love and the Nina Purple app. It is written to comply with:

• the Wyoming Consumer Protection Act and applicable US federal law (COPPA, CAN-SPAM);
• US state consumer privacy laws where they apply to you (for example California, Colorado, Virginia, Texas);
• the Personal Information Protection and Electronic Documents Act (PIPEDA) in Canada and Quebec's Law 25 (Act respecting the protection of personal information in the private sector);
• the EU and UK General Data Protection Regulation (GDPR) for members in the European Economic Area and the United Kingdom.

• Account and profile: email address, sign-in method (Microsoft, Google, Apple or email), first and family name, display name, date of birth (age is computed from it), city and country with approximate coordinates, phone number (optional, used for verification), pronouns, gender identity, sexual orientation, relationship status and who you would like to meet, dating archetype, bio, language and theme preferences.
• Matching data: your answers to the 21 compatibility questions and the compatibility percentages computed from them; matching preferences (age range, distance); passes, connections and blocks; family and partner links you declare (used only to keep relatives out of each other's matches).
• Photos: 3 to 6 photos stored privately; the reason you give when you ask to see someone's photos and the reason they give when they answer; an access log of every photo view and reveal decision.
• Communications and community: private messages, community posts, comments and replies, event discussion rooms, reports you file, notifications and your notification preferences (including a push subscription if you enable it on a device).
• Events and Online Meetups: bookings, check-ins and attendance; for Online Meetups, registration, pairing results, the conversation cards drawn, your private journal, your reflections and the Reflections letter you receive. Conversations are never recorded.
• Membership and payments: membership status, trial and renewal dates, Stripe customer and subscription references, transaction records, BBP Credits wallet and ledger, BBP Rewards points ledger and redemptions. Card numbers are handled by Stripe; we never see or store them.
• Trust and safety: verification status and requests, peer vouches given and received, moderation cases and their outcomes, staff audit logs of every privileged action.
• Technical data: IP address, device and browser information, access logs and error reports needed to run and secure the service.

• Consent: you give explicit consent at onboarding for your profile, your matching answers and the sensitive information listed in section 6; you can withdraw it at any time by deleting your account.
• Contract: data needed to deliver the service you signed up for (matching, messaging, events, payments, notifications).
• Legitimate interests: security, fraud and abuse prevention, moderation, service improvement based on aggregated statistics.
• Legal obligation: tax and accounting records, responses to lawful requests.

• to create and run your account and compute compatibility;
• to show your profile card to compatible members and, once approved by you, your photos;
• to process payments, trials, renewals, credits and rewards through Stripe;
• to send service emails and notifications (from contact@ninapurple.love or noreply@ninapurple.love) according to your preferences;
• to run events and Online Meetups, including pairing, reminders, reflections and letters;
• to keep the community safe: verification, vouching, reports, moderation and audit logs;
• for research and development: Blue Black Purple Corp. is a research and development company and Nina Purple came out of that work. We study aggregated, de-identified usage (which questions predict lasting connections, which event formats work) to improve matching, events and safety. We never use it to profile you for advertising;
• to draft your conversation brief after a connection and to assist our staff's matchmaking review, we use a language model provided through our platform (Base44); it never decides your matches and receives only what is needed for that text;
• to comply with the law.

We never sell personal information and we do not use it for behavioural advertising. We do not use artificial intelligence to decide your matches: compatibility is a plain calculation on the 21 questions.

Your sexual orientation, gender identity, relationship information, matching answers and Online Meetup reflections are sensitive. They are used only for compatibility, event pairing and your own insight, are visible to other members only as far as your profile card shows them, and are never shared with third parties for any other purpose. Explicit consent is collected at onboarding (GDPR article 9, Quebec Law 25).

Nina Purple does not collect biometric data, government identification documents or facial geometry. Verification is a human review of the information you give us.

We share personal information only with providers that help us run the service, under contracts that restrict their use of it:

• Base44 (United States): application hosting, authentication, database, private file storage and language-model features.
• Stripe (United States): membership billing, wallet top-ups, event tickets, tax calculation, customer portal.
• Resend (United States): delivery of our emails.
• Daily.co (United States): private audio and video rooms for Online Meetups; rooms are temporary and not recorded.
• Userback (United States): the in-app feedback widget. When you send feedback, Userback receives your message, your name and email, the page address, your browser and device information and, if you choose to attach one, a screenshot of the page.
• Microsoft, Google and Apple: sign-in, when you choose those providers.
• OpenStreetMap services (Nominatim, Photon): city coordinates requested by our staff when a city is added; no personal information is sent.

We may also disclose information when the law requires it or to protect the safety of our members. Other members see only what your profile card, your approved photo reveals, your messages and your community activity show them; your email, phone number, date of birth and the identity of anyone who reports a member are never shown to other members.

We keep your personal information while your account is active. When you delete your account:

• profile, matching answers, messages, posts, comments, photos and reveal requests, notifications, vouches, blocks, event bookings, Online Meetup journals and reflections are deleted by the deletion routine, immediately and at the latest within 30 days (photo files are purged by our hosting provider on request);
• transaction records, credit and points ledgers and membership benefit records are kept for 7 years for accounting and tax obligations (Wyoming and Canada), with your email replaced by a neutral marker;
• moderation cases and audit logs are kept for up to 3 years to protect other members and to demonstrate compliance;
• anonymised statistics may be kept indefinitely.

Depending on where you live, you may:

• access the personal information we hold about you and receive a copy in a portable format;
• correct it (most fields directly in your profile; name, date of birth, phone and email through a change request reviewed by our team);
• delete it (delete your account from your profile, or write to us);
• withdraw consent, object to or restrict certain processing;
• lodge a complaint with your supervisory authority: the Commission d'accès à l'information du Québec, the Office of the Privacy Commissioner of Canada, your EU/UK data protection authority, or your state attorney general.

Write to the contact address in section 15; we answer within 30 days and may ask you to confirm your identity first.

Nina Purple is strictly for adults 18 and over. Your date of birth is checked when you create your profile. If we learn that a minor has created an account, we delete it and all associated data.

We use only essential storage on your device: your sign-in session, your language and your theme. We do not use advertising or third-party tracking cookies. Clearing your browser storage signs you out and resets your preferences, nothing else.

This policy, as a contract, is governed by the laws of the State of Wyoming and applicable US federal law. That choice does not limit the data protection rights that apply to you where you live.

Your information is stored and processed in the United States by the providers listed in section 7 (Base44, Stripe, Resend, Daily.co and Userback, whose servers are in the United States) and accessed by our team in Canada. For members in the EEA, the UK, Canada and Quebec, transfers rely on contractual safeguards with those providers (standard contractual clauses or equivalent) and on your informed consent at sign-up.

Data travels over TLS and is stored on access-controlled infrastructure. Photos are private files served through short-lived signed links only after the owner's approval. Every privileged staff action is logged. Staff identities are separate from member identities and staff accounts never enter matching. If a breach affects you, we notify you and the competent authorities as the law requires (within 72 hours under GDPR, and per Quebec Law 25 and US state breach laws).

We may update this policy. Material changes are announced by email or in-app notice at least 30 days before they take effect.

Nina Purple
30 N Gould St Ste R, Sheridan, WY 82801, USA
Email: contact@ninapurple.love
Privacy officer: the founder, same address.