Privacy Policy

What we collect

• Account details — your name, email address, password (stored only as a secure hash) and, if you add it, your mobile number and city.
• Bookings — the venue, date, time, party size, special requests and booking status, plus the name and contact details you give for the reservation.
• Payments — handled by our payment processors (Stripe and/or PayMongo). We receive the payment status, amount and, for saved cards, the card brand and last four digits. We never see or store your full card number.
• Location — only if you allow it, to show distances and nearby places and to filter Decide for Me picks. You can turn it off in your device settings at any time.
• Decide for Me activity — the filters you choose, the options shown and the result, so the game can work, so you can see your past picks, and so Smart Pick can learn your preferences.
• Reviews, photos and favourites you choose to add.
• Kismet Dates (only if you join) — your dating profile (first name, birth date, gender and who you want to meet, photos, bio, interests, date preferences, free times, rough location), who you like or pass on, your matches and dates, check-ins at the venue, and any blocks or reports. To verify your identity, an ID-verification provider checks a photo of your government ID and a selfie; we receive only the result and your birth date and never store the ID images. This includes sensitive personal information (age, and gender/orientation preferences), which we process with your consent and only to run Kismet Dates.
• Device and usage data — app version, device type, push-notification token, IP address and basic logs used for security, fraud prevention and fixing problems.

How we use it

• To create and secure your account and keep you signed in.
• To make, change and cancel reservations, take deposits and issue refunds.
• To share your booking details with the venue you book so they can serve you.
• To send booking confirmations, reminders and updates by email, SMS or push notification. You can turn off reminders and other non-essential messages in your profile.
• To run Decide for Me and to personalise Smart Pick. Random modes never use your preferences, and sponsorship never affects any game.
• To prevent fraud and abuse, enforce our Terms and meet legal obligations such as tax and accounting record-keeping.
• To understand how the service is used and improve it, using aggregated data where possible.

We rely on the performance of our contract with you, our legitimate interests (security, improvement), your consent (location, marketing messages) and legal obligations as our lawful bases for processing.

Who we share it with

• Venues you book — your reservation name, contact details, party size and requests.
• Other Kismet Dates members — people you could match with see your dating card (first name, age, photos, bio, interests, preferences, area and rough distance — never your exact location or contact details). A match sees the date details, and if either of you shares a safety link, the friend who opens it sees both first names, one photo and the date details.
• Service providers who process data on our behalf under contract: hosting and database providers, payment processors (Stripe, PayMongo), ID verification (Didit, for Kismet Dates), email and SMS delivery providers, push-notification delivery (Expo, Apple and Google) and map tile providers.
• Authorities when required by law or to protect the rights and safety of our users, venues or the public.

We do not sell your personal data and we do not use it for third-party advertising.

Cookies and storage

Our website uses only essential cookies: to keep you signed in, protect against cross-site attacks, and remember settings such as dark mode. Our apps store your sign-in tokens securely in your device's keychain or keystore. We do not use advertising or cross-site tracking cookies.

How long we keep it

We keep your account data for as long as your account is open. When you delete your account we erase your profile, favourites, notifications, Decide for Me history and device tokens. Booking, payment and review records are kept in anonymised form for as long as tax, accounting and consumer-protection laws require, and so venues keep accurate records. Security logs are kept for a limited period.

Your rights

Under the Data Privacy Act you have the right to be informed, to access, to correct, to object, to erasure or blocking, to data portability, and to file a complaint with the National Privacy Commission. You can update most details in your profile and delete your account there or in the app (Profile → Delete account). For anything else, contact us using the details below.

Security

We use encryption in transit (HTTPS), hashed passwords, rotating sign-in tokens, access controls and audit logs. No system is perfectly secure; if a breach affects your personal data we will notify you and the National Privacy Commission as required by law.

Children

Kismet is not intended for children under 18. Some venues (bars, lounges) are for adults only and may check ID.

Changes

We may update this policy. If the changes are significant we will tell you in the app or by email before they take effect.

Contact us

[Company legal name]
[Registered business address], Philippines
Data Protection Officer: [Data Protection Officer name]
Email: privacy@kismetph.com