Privacy Policy

Nina Purple is a Wyoming Statutory Close Corporation (Incorporation ID: 2025-001581162), with a mailing address at 30 N Gould St Ste R, Sheridan, WY 82801, USA.

Contact: contact@NinaPurple.love

This Privacy Policy applies to all users of Nina Purple globally. It is designed to comply with:

• Wyoming Statutory Close Corporation Act (W.S. § 17-17-101 et seq.) and Wyoming Consumer Protection Act (W.S. § 40-12-101 et seq.)
• COPPA (Children's Online Privacy Protection Act, USA — our platform is strictly 18+)
• CAN-SPAM Act (USA), governing commercial email communications
• GDPR (EU General Data Protection Regulation 2016/679), for users located in the European Economic Area or United Kingdom
• PIPEDA (Personal Information Protection and Electronic Documents Act, Canada), for users located in Canada outside Quebec
• Quebec Law 25 (Act Respecting the Protection of Personal Information in the Private Sector), for users located in Quebec
• Applicable US state privacy laws, including comprehensive state privacy statutes and state-specific biometric privacy laws such as the Illinois Biometric Information Privacy Act (BIPA), the Texas Capture or Use of Biometric Identifier Act (CUBI), and Washington's biometric privacy law, for users located in those states

We collect the following categories of personal information:

• Identity & Profile: display name, date of birth, gender pronouns, sexual orientation, relationship status, city/country, photos, bio, dating archetype
• Matching Data: answers to our 21 compatibility questions (values, lifestyle, relationship goals)
• Biometric Data: facial geometry data derived from a government-issued ID photo and a live selfie/video, collected solely to verify your identity during onboarding, processed through a third-party identity-verification vendor
• Verification Data: your identity-verification status (e.g., Call-Verified, Fully Verified), the outcome of any peer-verification call or in-person meetup attestation submitted about you, and limited profile information shared with a verifying member solely for the purpose of conducting that verification
• Communications: messages exchanged between users on the platform
• Transactional Data: subscription tier, credit balance, purchase history (processed via Stripe; we do not store full card details)
• Technical Data: IP address, device type, browser, access logs, language preference
• Sensitive Data: sexual orientation, relationship information, and biometric data. This data is collected solely for matching and identity-verification purposes and is never sold or shared with third parties for advertising.

• Consent: You provide explicit consent during onboarding for profile data, matching answers, and biometric data collection
• Contract performance: Data necessary to deliver our services (messaging, matching, payments, identity verification)
• Legitimate interests: Platform security, fraud prevention, service improvement
• Legal obligation: Compliance with applicable laws

You may withdraw consent at any time by deleting your account. This will not affect the lawfulness of processing based on consent before withdrawal.

• To create and manage your account
• To calculate compatibility scores and facilitate connections
• To verify your identity and maintain the integrity of the verification program described in Section 7a
• To process payments and manage credits via Stripe
• To send transactional emails and service notifications
• To enforce our community guidelines and prevent misuse
• To improve platform features and user experience
• To comply with legal obligations

We never sell your personal data to third parties. We do not use your data for behavioral advertising.

Nina Purple collects sensitive data including sexual orientation, relationship preferences, and biometric data. Under GDPR Article 9 and Quebec Law 25, such data requires explicit consent. By completing onboarding, you provide explicit, informed consent for this data to be used exclusively for compatibility matching and identity verification. You may request deletion at any time, subject to Section 8's retention terms for biometric data specifically.

As part of identity verification, Nina Purple collects and processes facial geometry data through an automated, third-party identity-verification vendor.

For users located in Illinois, this collection is subject to the Illinois Biometric Information Privacy Act (BIPA). In compliance with BIPA, Nina Purple:

• obtains your written consent before collecting any biometric identifier or biometric information;
• maintains a publicly available written policy establishing a retention schedule and guidelines for permanently destroying biometric data;
• does not sell, lease, trade, or otherwise profit from your biometric data; and
• applies the same reasonable standard of care to biometric data as it applies to other confidential and sensitive information.

For users located in Texas and Washington, similar consent, use-limitation, and security protections apply under those states' respective biometric privacy laws.

Biometric data is retained only for as long as necessary to complete identity verification and is permanently deleted in accordance with our retention schedule (see Section 8), and in no case later than three years after your last interaction with Nina Purple, whichever occurs first.

We do not sell your personal data. We share it only when strictly necessary to operate the platform, with trusted payment processors, hosting providers, mapping services, and the identity-verification vendor described in Section 6a. We may also disclose data when required by law or to protect the safety of our users.

All third-party service providers are contractually bound to protect your data and may only use it for the purposes we specify.

Nina Purple operates a multi-step identity verification program consisting of:

1. Automated verification: an ID document and liveness check performed by a third-party vendor (see Section 6a).
2. Peer verification: a live call between you and another verified Nina Purple member in your area, who confirms basic identity details on our behalf. Before this call occurs, the verifying member must agree to a Confidentiality Agreement prohibiting them from storing, forwarding, or disclosing any information shared during the call beyond a simple pass/fail outcome recorded in our system. Verifying members never receive your government ID, your sensitive matching data (including sexual orientation or relationship preferences), or any information beyond what is strictly necessary to conduct the verification.
3. In-person meetup attestation: if you update your relationship status with another member to "We've met," either of you may be prompted to submit a short attestation confirming that the meeting occurred and that the other person's profile appeared consistent with who they met.

Submitting an attestation about another member is voluntary. If you decline to submit one, this has no effect on your own account or your own access to the platform.

However, reaching "Fully Verified" status requires that three separate members submit a valid attestation about you. Whether and when you reach that status therefore depends in part on other members' voluntary participation, not solely on your own actions. Baseline access to Nina Purple's core features does not require Fully Verified status. Certain visibility features, trust badges, or event access may be limited to Fully Verified members; where this applies, it will be clearly indicated in the relevant feature.

Verification status (e.g., "Call-Verified," "Fully Verified") may be visible to other members as a trust indicator. The underlying verification details — call transcripts, attestation notes, and verifier identity — are not shared with the member being verified or with other members, and are accessible only to our Trust & Safety team.

We retain your personal data for as long as your account is active. Upon account deletion:

• Profile and matching data: deleted within 30 days
• Messages: deleted within 30 days
• Biometric data: deleted immediately upon completion of identity verification, or no later than 3 years after your last platform interaction, whichever is earlier
• Verification call records and attestation notes: deleted within 30 days of account deletion, except where retained longer as evidence in an active Trust & Safety investigation
• Transaction records: retained for 7 years to comply with financial and tax regulations (Wyoming and Canada)
• Anonymized analytics: may be retained indefinitely

Depending on your jurisdiction, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure ("Right to be Forgotten"): Request deletion of your data
• Portability: Receive your data in a structured, machine-readable format
• Objection / Restriction: Object to or restrict certain processing
• Withdraw Consent: At any time, without affecting prior lawful processing
• Biometric-specific rights (Illinois, Texas, Washington residents): Request confirmation of what biometric data we hold about you and request its deletion in accordance with our published retention schedule
• Lodge a Complaint: With your applicable supervisory authority (e.g., Commission d'accès à l'information du Québec, an EU Data Protection Authority, or the Office of the Privacy Commissioner of Canada)

To exercise any right, email: contact@NinaPurple.love. We will respond within 30 days (PIPEDA/Law 25) or 1 month (GDPR).

Nina Purple is strictly for users 18 years of age and older. We do not knowingly collect personal information from minors. Age verification is required during onboarding, including as part of the identity verification program described in Section 7a. If we become aware that a minor has created an account, we will immediately delete all associated data, including any biometric data collected.

We use essential cookies and local storage for authentication, language preferences, and theme settings. We do not use third-party advertising or tracking cookies. You may clear cookies via your browser settings at any time without affecting core functionality.

This Privacy Policy, and any dispute arising from its interpretation or enforcement as a matter of contract, is governed by the laws of the State of Wyoming, USA, and applicable federal U.S. law, without regard to conflict-of-law principles. This choice of law governs our contractual relationship with you and the resolution of contract-based disputes; it does not limit or replace the data protection rights described below that apply to you based on where you live.

By using Nina Purple, you acknowledge that your data may be processed in the United States. Depending on where you are located, you are entitled to the following additional protections:

• If you are located in the European Economic Area or United Kingdom: the rights and protections described under GDPR apply to our processing of your personal data, including the legal bases described in Section 4 and the rights described in Section 9.
• If you are located in Canada outside Quebec: PIPEDA governs our handling of your personal information, including your right to access and correct your data and to lodge a complaint with the Office of the Privacy Commissioner of Canada.
• If you are located in Quebec: Quebec Law 25 governs our handling of your personal information, including the consent standards described in Section 6 and your right to lodge a complaint with the Commission d'accès à l'information du Québec.
• If you are located in Illinois, Texas, or Washington: the biometric-specific protections described in Section 6a apply to our collection and use of your biometric data.
• If you are located in a US state with a comprehensive consumer privacy law: the rights afforded to you under that state's law apply in addition to the rights described in Section 9.

We implement industry-standard security measures including TLS encryption for data in transit, encrypted storage, access controls, and regular security assessments. No system is 100% secure; in the event of a data breach, we will notify affected users and relevant authorities as required by applicable law, including within 72 hours under GDPR, per Quebec Law 25 requirements, and per applicable US state breach-notification laws (including biometric-specific notification requirements where applicable).

We may update this Privacy Policy periodically. Material changes will be communicated via email or an in-app notice at least 30 days prior to taking effect. Continued use of the platform after that date constitutes acceptance of the updated policy.

Nina Purple
30 N Gould St Ste R, Sheridan, WY 82801, USA
Email: contact@NinaPurple.love

We use essential cookies for authentication, language, and theme. No advertising or third-party tracking.