GeoMatch Privacy Policy
Last updated: 25 September 2026
GeoMatch helps people who are in the same venue at the same time find each other. We designed it to know as little about you as possible, and to forget most of it the same night.
Who we are
GeoMatch is operated by NETCETERA OÜ (registry code 16768111), Sepapaja tn 6, 15551 Tallinn, Estonia ("we", "us"). We are the data controller for the personal data described here. Contact us at hello@netcetera.co for anything about your privacy.
What we collect and why
| Data | Why we use it | Legal basis (GDPR) |
|---|---|---|
| Account details from Apple, Google or your email: email address, and name and profile photo if your provider shares them | To create and secure your account | Contract |
| Profile: display name, date of birth, gender, who you want to meet, age range, what you're here for, up to 3 photos | To show you to compatible people and to confirm you're 18 or over | Contract |
| Your location, only while the app is open | To list venues near you, confirm you're at the venue when you check in, and check you out automatically when you leave | Contract |
| Check-ins: which venue you checked into and when, and whether "I'm free" is on | To show you to other people in the same venue | Contract |
| Bluetooth signals | Your phone broadcasts a random token that changes every minute, and records tokens it hears from other GeoMatch phones nearby. This is how we know two people are in the same room. | Contract |
| Hellos, matches, blocks and reports | To let you say hi, match, and stay safe | Contract; legitimate interest in keeping users safe |
| Push notification token | To tell you when someone compatible arrives at your venue | Contract |
We do not store your precise GPS location. When you check in, your phone sends its position once so we can confirm you're within range. We keep only the venue you checked into, not your coordinates. The Bluetooth tokens are random and can't be linked to you by anyone other than us.
We do not sell your data, use it for advertising, or build profiles of you beyond what the app needs to work.
Who can see what
- People at the same venue who match your preferences (and whose preferences you match) see your display name, age and what you're here for.
- Your photos are only shown to someone after you've both said hi.
- After you've both said hi, the finder uses Bluetooth signal strength to show each of you whether you're getting warmer or colder. It never shows a location or a distance.
- Nobody sees your location, your email or your date of birth.
- If you block someone, neither of you will see the other again.
How long we keep it
- Check-ins end after 6 hours, when you check out, or when you leave the venue. Your hellos from that night are deleted with them.
- Bluetooth tokens expire within 5 minutes, and records of who was near whom within 3 minutes.
- Matches from tonight are kept for 24 hours so you can still block or report someone after they've left.
- Your profile, photos and blocks are kept until you delete your account.
- Reports you make about other people are kept so we can act on them, even after you delete your account.
Deleting your account
You can delete your account at any time from Profile → Delete account. This permanently deletes your profile, photos, check-ins, hellos, matches, blocks and any reports made about you, and closes your login account. Reports you filed about others are kept, as described above.
Who processes data for us
We use these providers to run GeoMatch. They process data only on our instructions:
- Convex (database and backend): hosts all app data, in the EU (Ireland).
- Clerk (sign-in): stores your login details.
- Apple and Google: if you sign in with them.
- Google Maps Platform: we send your approximate position to find nearby venues.
- Expo (push notifications): delivers notifications to your phone.
- Apple Maps / Google Maps: display the map in the app.
Some of these providers are based in the United States. Where your data is transferred outside the EU, it is protected by the EU–US Data Privacy Framework or Standard Contractual Clauses.
Your rights
Under the GDPR you have the right to access, correct, delete or export your data, and to object to or restrict how we use it. Email hello@netcetera.co and we'll respond within one month. You can also complain to a data protection authority: ours is the Estonian Data Protection Inspectorate, or you can go to the authority where you live, such as Spain's AEPD.
Age
GeoMatch is only for people aged 18 and over. We don't knowingly collect data from anyone younger, and we delete any account we find belongs to someone under 18.
Security
Data is encrypted in transit and at rest by our providers. Sign-in is handled by Clerk, so we never see or store passwords.
Changes
If we change this policy in a way that matters, we'll tell you in the app before the change takes effect.