Privacy Notice

Fabiola M. Alfaro Larios, trading as DateMuse (“DateMuse”, “we”), is the data controller for the personal data described here. That means we decide why and how your data is used, and we are responsible for it. Contact us at info.datemuse@gmail.com.

We only collect what a date planner actually needs:

• Account data — your email address, first name (optional), and a hashed password, or the sign-in details your Google or Lovable account shares with us. Used to create and secure your account and to reach you about it. Basis: performing our contract with you.
• Planner answers — your city, travel radius, budget, availability, date type and relationship stage. Used to suggest ideas that fit and to search for places near you. Basis: performing our contract, and your consent where you choose to share it.
• Your and your partner’s preferences — interests, likes, dislikes, things you would like to try, and free-text notes. Used to rank suggestions, avoid things either of you dislikes, and shape AI itineraries. Basis: consent. You can delete them at any time.
• Dates you save, plan and schedule — favorites, date plans, itineraries, custom places you type in, calendar times and notes. Used to show you your plans and export them to your calendar. Basis: performing our contract.
• Photos and videos you upload — stored privately under your own account so you can keep memories of a date. Used only to show them back to you, and to someone you deliberately invite to that date. Basis: consent.
• Sharing details — the email address you type when you invite someone to see a date, plus a link token. Used to deliver that one invitation and to let the recipient accept or decline. Basis: performing our contract and legitimate interests in operating the sharing feature.
• Usage, device and security data — pages visited, app version, device and browser identifiers, IP address, and error reports. Used to keep DateMuse secure, detect abuse and fraud, and fix bugs. Basis: legitimate interests.
• Support messages — anything you email us about a plan, a purchase or a bug. Used to answer you and improve the product. Basis: legitimate interests.

Card numbers and billing details are collected and processed by our payment provider, not by us. We only receive the fact that a payment succeeded, the amount, the plan, and the dates it runs to — enough to switch on the features you paid for.

We do not ask for your date partner’s name, and we do not build profiles of people who never created an account.

When you ask DateMuse for an itinerary, the planner answers and preferences you chose are sent to an AI service operated on our behalf, which returns a draft plan. That service is a processor working under our instructions; it is not allowed to keep your data or use it to train its own models for other customers. AI output is stored against your own account so you can reopen it later, and only you (or someone you invite) can see it.

We do not sell your personal data, and we do not share it with advertisers. We share it only with:

• Our payment processor, Stripe (including its Link service, which may act as reseller) — to take payment, manage your subscription, calculate and remit tax, prevent fraud, and issue receipts and refunds.
• Hosting, database and storage providers — to run DateMuse and store your plans, preferences and uploaded media securely.
• Google — when you search for real venues or view a map, we send your search words and an approximate location to Google’s Places and Maps services so we can return nearby results. Google’s own privacy notice covers how they handle that request.
• AI processing providers — as described in section 3.
• Error-monitoring and analytics providers — to keep the app reliable and spot abuse.
• Professional advisers — our accountants and lawyers, under duties of confidence.
• Authorities — courts, police or regulators, but only where we are legally required to disclose, and no more than that obligation demands.

Every provider above is bound to use your data only for the job we hired them for.

Nothing is shared with another person unless you send them an invitation. Invitations go to one named recipient, carry a link that expires, and must be accepted before anything opens. The recipient sees only the one date you shared: its itinerary and schedule. They do not see your photos, your other plans, or your preferences, and you can revoke the invitation at any time.

If you connect an account with a partner, each of you keeps your own private plans and photos; only dates you deliberately share become visible to the other.

DateMuse runs on cloud infrastructure located in the United States. If you live outside the United States, your data is transferred there. We rely on standard contractual clauses and equivalent safeguards with our providers, and we choose providers that publish their own security and transfer commitments.

• Account, plan and preference data: while your account is open.
• Photos and videos: until you delete them, or until your account is deleted.
• Invitations: until they are accepted, revoked, or reach their expiry date.
• Payment records: as long as tax and accounting law requires (typically seven years).
• Error and security logs: up to 30 days.
• If your account goes quiet for two years, we will email you once and then delete it rather than keep it indefinitely.

Wherever you live, you can ask us to:

• show you what we hold about you;
• correct anything that is wrong;
• delete your account and everything in it;
• limit how we use your data, or object to processing based on our legitimate interests;
• hand your plans and saved data back to you in a portable format;
• withdraw a consent you gave — for preferences, photos, videos or shared dates — without affecting anything we lawfully did before.

Email info.datemuse@gmail.com and we will answer within 30 days. If you are in the UK, EEA or another region with a data protection authority, you may also complain to that authority — but please come to us first, because most requests take minutes to settle.

You can also delete photos, videos, custom places, preferences and your whole account yourself, straight from the app.

Data is encrypted in transit and at rest. Access is limited to the people and systems that need it, and every table is isolated so a member can only read their own rows. Uploaded photos and videos sit in private storage that is not publicly listable, and links to them expire. We review our controls as the product grows, and if a breach ever puts your data at risk we will tell you and the relevant authority where the law requires it.

• Essential — a sign-in session token, and a small amount of browser storage needed to keep you signed in and remember what you are looking at. These cannot be turned off while you use the app.
• Analytics and error monitoring — used only to see which features fail or go unused, and to fix them. We do not run advertising or cross-site tracking cookies.

DateMuse is for adults aged 18 and over. We do not knowingly collect data from children, and we delete any account we learn belongs to a child.

If we change this notice in a way that affects how we use your data, we will update the effective date above and, where the change matters to you, email you before it applies.

Any question, request or complaint about your data goes to info.datemuse@gmail.com, addressed to Fabiola M. Alfaro Larios at DateMuse. We would rather hear from you than have you worry about it.