Hinweise zum Datenschutz

These Information Notices contain the Privacy Policy, Cookie & Tracking Notice, Safety Guidelines, Legal Notice and Trust Charter. They are provided for information and do not require contractual acceptance. This does not reduce users’ statutory rights or Lashees’s obligations. Your contract with Lashees consists of the Terms of Use and, for paid photo slots, the Subscription & Payment Terms. These notices are available in French and English; in case of discrepancy, the French version prevails. They remain available at any time in the app.

Contact: privacy@lashees.me · support@lashees.me · legal@lashees.me

Privacy Policy

LASHEES, SAS whose registered office is at 9 rue de la Gare, 94230 Cachan, France, is responsible for the personal data it processes through the Service. Contact: privacy@lashees.me. Privacy requests are handled by Olivier Levy at privacy@lashees.me. We apply the data-protection laws in force in each country where the Service is offered, including applicable rules on dating-related data, deletion, retention and international transfers.

1.1 Data We May Collect

• Account data: name, date of birth, email address, third-party sign-in identifiers and authentication metadata.
• Profile data: photos, biography, family situation, whether the person wants children, desired relationship type, age preferences and answers supplied in the app.
• Dating preferences, profile answers and the use of the Service itself may reveal sensitive information, even though the app does not ask for orientation, health, religion or ethnicity fields. See section 1.3.
• Approximate location data: used to determine approximate distance and eligible feeds. Exact live position is not shown to other users. We do not keep a history of movements.
• Usage data: profile views, lashes, matches, messages metadata, settings, device and log data.
• Safety data: in-app reports, blocks, photo review results and moderation decisions.
• Payment data: purchase status and transaction references; full card data is normally handled by payment providers.
• Messages sent to Lashees through our contact addresses.

Your date of birth, an email address or sign-in identifier, and the data needed to display your profile are required to create an account; without them, we cannot provide the Service.

1.2 Why We Use Data

1.3 Sensitive Data

Because Lashees is a dating service in which women browse men’s profiles, using the Service may reveal information about your sexual orientation or sex life. This is special-category data under the GDPR. We process it only with your explicit consent, which we collect separately from the acceptance of the Terms of Use when you create your account.

You may withdraw this consent at any time by contacting privacy@lashees.me or deleting your account. Withdrawal leads to account deletion: your profile and conversations immediately become inaccessible to other users, and data is then erased under the periods and exceptions in section 1.9. It does not cancel an Apple or Google subscription; you must cancel that separately through the store to prevent future renewals. Withdrawal does not affect the lawfulness of earlier processing.

1.4 Location

We use location to show approximate distance and limit eligible profile distribution. We do not display precise live location or retain movement history. Device permissions can be changed in device settings.

1.5 Messages

Messages are delivered between participants. The Lashees team may examine relevant message content when it is reported for safety or legal review. We do not routinely screen chat content automatically. Access is limited to authorised staff.

1.6 Automated Tools

Automated checks assist with reviewing photos before publication. Feed eligibility uses age ranges and approximate location; among eligible profiles, selection is random and weighted proportionately by each man’s number of published photos. We do not use profiles, photos or messages to train AI models and do not make final moderation sanctions solely by automated means.

1.7 Recipients

We use Google Cloud for hosting, databases and usage statistics; Cloudflare for real-time chat, photos, DNS and network services; Google Firebase Authentication / Identity Platform for account access; Expo Notifications, Firebase Cloud Messaging and Apple APNs for user-enabled notifications; and expo-iap with the Apple App Store or Google Play for subscriptions and in-app billing. The sign-in provider selected by the user also processes sign-in data. We may share data with professional advisers or authorities where justified or required by law.

1.8 International Transfers

Some providers, including Google, Cloudflare and Apple, may process data outside the European Economic Area, including in the United States. Lashees permits such transfers only where covered by a valid mechanism: an adequacy decision applicable to the recipient, including the EU–US Data Privacy Framework where the recipient entity is certified and the processing falls within its scope, or the European Commission’s standard contractual clauses with additional safeguards where necessary.

Safeguards are assessed against the recipient entity, the services used and actual access to data. Lashees limits transfers to necessary data and provides appropriate protections, including encryption in transit, restricted access and confidentiality commitments. Using a provider or choosing a European region does not by itself establish that international transfers do not occur. For recipient details or a copy of applicable safeguards, subject to the protection of confidential information, contact privacy@lashees.me.

1.9 Retention

• Active accounts: account and profile data are kept while the account is active. Accounts inactive for 2 years are deleted after prior notice.
• After account deletion: the profile stops being displayed immediately. Account data is deleted or anonymised within 30 days, except data needed for fraud prevention, safety or a dispute, which may be kept for up to one year after deletion, or longer where required by law.
• Messages: the conversation becomes inaccessible to the other participant as soon as an account is deleted. Messages are erased within 30 days after account deletion or after both participants have deleted the conversation, unless they are part of a report.
• Reports and safety evidence: kept for 1 year after the case is closed, or until the end of any legal proceedings.
• Proof of acceptance of the Terms and of consents: kept in a restricted-access archive for 5 years after account deletion to establish compliance and defend legal claims, unless a different legal period applies.
• Technical and security logs: kept for 12 months.
• Backups: overwritten within 30 days.
• Accounting and billing records: kept for 10 years, as required by French accounting law.

For questions about the retention period applicable to a particular record, contact privacy@lashees.me.

1.10 Your Rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability, objection, withdrawal of consent and information about automated processing. You may also give instructions on the retention, deletion and communication of your personal data after your death. Contact privacy@lashees.me. We respond within one month, which may be extended by two months where justified by the complexity or number of requests; if so, we inform you within the first month and explain why; we may ask for information to verify your identity. You may also complain to the CNIL or your local supervisory authority.

1.11 Security

We use proportionate technical and organisational safeguards, including access controls, encryption in transit, monitoring, backups and staff confidentiality. No system is completely secure.

1.12 Children

The Service is for adults aged 18 and over. We require a date of birth, prevent accounts declaring an age under 18 from using the Service, and conduct a human review of accounts suspected of belonging to minors.

1.13 Changes

We may update this Policy. Material changes will be communicated before they take effect where required.

Cookie & Tracking Notice

This notice describes technologies used by the Lashees app and any related website.

2.1 Categories

The app uses the following functional storage mechanisms and components:

No advertising trackers or optional user-tracking technologies are currently used. Session and onboarding storage serve the functions described above; they do not serve advertising tracking. BigQuery and Looker Studio serve service-side statistics, as described in the Privacy Policy.

2.2 Choices and Permissions

The app currently offers no optional-tracker choices because no optional trackers are used. Permissions for available functions, including notifications, are managed separately in the app or operating-system settings. Enabling notifications does not consent to advertising tracking.

If Lashees later introduces a non-essential tracker requiring consent, it will be activated only after a valid prior choice. Users will be informed of its purpose, provider and lifespan; accepting and refusing will be equally easy, and consent can be withdrawn. This policy will be updated before such tracking is introduced.

2.3 Mobile Identifiers

Authentication, notification and purchase services may process the technical identifiers and references needed for the requested function, such as an account identifier, notification token or transaction reference. Using them for these functions does not mean they are used for advertising tracking. The corresponding personal-data processing is described in the Privacy Policy.

2.4 Technology Information

Session information is used for as long as needed to maintain sign-in. The onboarding flag avoids repeating screens already shown. This local data can be cleared according to the sign-out and reset functions available on the device. Account data, notification identifiers and purchase data are processed for the purposes and periods described in the Privacy Policy. For questions about these components, contact privacy@lashees.me.

Safety Guidelines

Before Meeting

• Keep early conversations in the app.
• Never send money or financial information.
• Use the app’s messaging features to get to know someone before meeting.
• Tell a trusted person where you are going and who you are meeting.
• Choose a public place and organise your own transport.

During a Meeting

• Keep control of your drink, phone and transport.
• Leave immediately if you feel uncomfortable.
• Consent must be clear, voluntary and ongoing.
• Do not share your home address too early.

If Something Happens

• Get to a safe place.
• Contact local emergency services where there is immediate danger.
• Block and report the user in Lashees.
• Preserve messages or evidence where safe to do so.
• Seek medical, legal or specialist support when appropriate.

Lashees is not an emergency service. Reports are reviewed for platform safety and may be escalated where legally permitted or required.

Legal Notice

Publisher: LASHEES, a French simplified joint-stock company (SAS) with share capital of EUR 10,000.

• Registered office: 9 rue de la Gare, 94230 Cachan, France
• SIREN: 995 357 217
• RCS: 995 357 217 RCS Créteil
• VAT number: FR92 995 357 217
• Telephone: +33 1 59 35 35 40
• Publication director: Olivier Levy
• Contact: legal@lashees.me
• Official website: www.lashees.me
• Website hosting provider: Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, United States; telephone: +1 650 319 8930.
• App infrastructure: Google Cloud (servers and databases) and Cloudflare (including chat and photos). [CONFIRM AGAINST CONTRACT: Google Cloud entity, address and telephone for app-hosting services].

All website and app content is protected by intellectual-property law. Unauthorised reproduction or exploitation is prohibited.

Trust Charter

Lashees is designed to make dating feel safer, calmer and more intentional.

• Privacy by design. Profiles and location are shown only as needed.
• Choice before exposure. Product decisions should preserve user agency.
• No tolerance for harassment. Safety outranks engagement.
• Real people, real accountability. We invest in authenticity and anti-fraud controls.
• Responsible automation. Automated tools may assist photo checks; a person reviews reported conversations and appeals. We do not use user content to train AI models.
• No sale of private conversations. Messages are not a commodity.
• Minimal data. We collect what the Service needs, not everything we can.
• Human appeal. Important moderation decisions can be challenged.
• Clear business model. Paid features will not secretly undermine safety or privacy.
• Continuous improvement. We will learn from reports, incidents and user feedback.

Brand line: “Where dating feels good again — on your terms.”