Privacy Policy

Hablame (“we”, “us”) respects your privacy. This page explains what data we collect when you use the Hablame app, why, and the rights you have over it. We’ve tried to write it in plain language — if anything is unclear, email us at privacy@hablame.me.

1. Who we are

Hablame is operated by Fortunso Labs, based inSpain. For data-protection questions, the controller is reachable atprivacy@hablame.me.

2. What we collect

• Account data: email address, username, and password (we never store passwords in plain text).
• Profile data: birth date, gender, pronouns, orientation, height, bio, interests, and lifestyle / relationship preferences.
• Photos: up to nine photos that you upload.
• Location: your live geographic position while you have the app open and the “I’m here” toggle on. We keep it for at most one hour and never write a history of where you have been.
• Match and chat data: who you have liked or matched with, and the contents of messages you exchange after a mutual match.
• Payment data: if you subscribe on the web, Stripe handles your payment information directly. If you subscribe in the iOS or Android app, Apple or Google handles it and RevenueCat tells us the outcome. Either way we never see or store your card number; we only store your subscription status (active / canceled / past due) and the related identifiers.

3. Why we collect it (legal basis under GDPR)

• Account, profile, and matching data — to provide the service you signed up for (Article 6(1)(b), contract).
• Location — to surface nearby users (Article 6(1)(b), contract). You can disable location at any time; without it, the matching surfaces will not work.
• Profile fields relating to sexual orientation are special-category data under Article 9 GDPR. We process them on the basis of yourexplicit consent (Article 9(2)(a)), which you give when you choose to enter the data.
• Payment data — to perform the subscription contract.
• Security and abuse prevention — legitimate interest (Article 6(1)(f)).

4. How long we keep it

• While your account is active: for as long as you keep it.
• After you delete your account: we delete your profile, photos, matches, and chat history within 30 days. We retain a hashed record of your email for six months to honor “do not re-contact” requests if you re-register, and payment records for the period required by tax law (typically seven years).
• Location data: at most one hour, then it is discarded.
• If we suspend an account for breaking the rules:we keep it rather than delete it. We need it to enforce the suspension — otherwise the same person simply signs up again — to answer an appeal, and as evidence if the behaviour is reported to the police. We rely on Article 17(3)(e) GDPR (data kept to establish or defend legal claims), and we keep no more than that requires.

5. Who we share it with (sub-processors)

We use a small number of third parties to operate the service. They process your data on our behalf, under contract:

• Cloudflare — website and app hosting, and object storage for user photos (Cloudflare R2). SeeCloudflare’s privacy policy.
• Stripe — payment processing for premium subscriptions bought on the web. SeeStripe’s privacy policy.
• RevenueCat — handles premium subscriptions bought inside the iOS and Android apps, where Apple and Google require us to use their billing. It receives your account identifier and what you bought, never your card details. SeeRevenueCat’s privacy policy.
• Google — draws the map. When you open the map, your position is sent to Google Maps Platform to render it. SeeGoogle’s privacy policy.

Other Hablame users see your profile, photos, and approximate position when you appear on their discovery surface or after a mutual match.

We do not sell your data, and we do not share it with advertisers.

6. International transfers

We are based in the EU. Several of our sub-processors are in the United States (Stripe, RevenueCat, Google, and Cloudflare). Where they transfer data outside the EU/EEA, we rely on Standard Contractual Clauses and the other safeguards GDPR requires.

7. Your rights

You have the right to:

• access the personal data we hold about you,
• correct it,
• delete it (you can do this in-app under Settings → Delete account, or by emailing us),
• request a copy in a machine-readable form (data portability),
• object to processing or withdraw consent,
• complain to your local data-protection authority.

Email privacy@hablame.me to exercise these rights. We aim to respond within 30 days.

8. Cookies and tracking

The Hablame website does not use third-party advertising cookies and does not track you across other sites. The app keeps you logged in by storing an authentication token on your device.

9. Security

We protect your data with industry-standard encryption in transit (TLS) and at rest, modern password hashing, and managed secret storage. We restrict access to production data to the people who need it. No system is perfectly secure, but we treat your data like our own.

10. Children

Hablame is only for adults aged 18 or older. We do not knowingly process data from anyone under 18. If you believe a minor is using the service, email us — we will delete the account and the data on it.

11. Changes to this policy

If we make material changes, we will notify you in-app and via email at least 30 days before they take effect.

12. Contact

Questions, requests, or complaints:privacy@hablame.me.