a.Information You Provide

When you register and use Boba, we collect information you voluntarily provide, including:

• Account information (name, email address, password)
• Profile information (photos, date of birth, gender, location)
• Physical attributes (height, body type, eye color, hair color)
• Lifestyle preferences (diet, exercise, smoking, drinking habits)
• Background information (education, employment, religion)
• Dating preferences (who you're looking for, preferred attributes)
• Personality assessment responses (Facets quiz)
• Messages, voice notes ("yaps"), and other communications with matches
• Verification documents (ID, selfies) when you choose to verify your identity
• Payment information when subscribing to premium features

Sensitive Data: Some information you provide may be considered sensitive, including your racial or ethnic origin, religious beliefs, and sexual orientation. You choose whether to share this information on your profile.

b.Information Collected Automatically

When you use Boba, we automatically collect:

• Device information (browser type, operating system, device identifiers)
• IP address and approximate location
• Usage data (pages visited, features used, actions taken)
• Log data (access times, error logs, referring URLs)

c.Information from Third Parties

We may receive information from:

• Payment processors (transaction confirmations, not full card details)
• Identity verification services (verification results)
• Analytics providers (aggregated usage patterns)

We use your information to:

• Create and maintain your account and profile
• Match you with compatible users based on your preferences and our algorithms
• Enable communication between you and your matches
• Process payments and manage subscriptions
• Verify your identity and prevent fraud
• Moderate content and enforce our community guidelines
• Provide safety features and detect harmful behavior
• Translate messages between users who speak different languages
• Improve our services, algorithms, and user experience
• Send you service-related communications
• Analyze usage patterns and conduct research
• Personalize your experience and show relevant content
• Market our services and measure advertising effectiveness

AI-Powered Features: We use artificial intelligence to help with matching, content moderation, message translation, safety analysis, and our AI companion feature. Your interactions may be processed by AI systems to provide these services.

a.With Other Users

Your profile information is visible to other users based on your privacy settings. When you match with someone, they can see your profile and communicate with you. Users in incognito mode have limited visibility.

b.With Service Providers

We work with trusted third-party vendors who help us operate Boba, including:

• Cloud hosting and infrastructure providers
• Payment processors (Stripe)
• AI and machine learning services (for moderation, translation, matching)
• Analytics and performance monitoring services
• Identity verification services
• Email and communication services

These providers only access data necessary to perform their services and are bound by confidentiality obligations.

c.For Advertising & Marketing

We may share certain information with advertising partners to deliver relevant ads and measure campaign effectiveness:

• Hashed identifiers (like hashed email addresses) for custom audience targeting
• Aggregated, non-identifying demographic information
• Conversion data to measure ad performance

You can opt out of personalized advertising through your device settings or the platforms' own opt-out mechanisms.

d.When Legally Required

We may disclose information when required by law, legal process, or government request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

We use cookies and similar tracking technologies to:

• Keep you logged in and maintain your session
• Remember your preferences and settings
• Understand how you use our platform
• Analyze traffic and usage patterns
• Deliver and measure the effectiveness of advertising
• Prevent fraud and enhance security

Essential Cookies: Required for the platform to function. Cannot be disabled.

Analytics Cookies: Help us understand usage patterns and improve our services. We use services like Google Analytics.

Advertising Cookies: Used by us and our partners to deliver relevant ads. You can manage your preferences through your browser settings or opt-out mechanisms provided by advertising platforms.

You can control cookies through your browser settings. Note that disabling certain cookies may affect functionality.

You have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct inaccurate information in your profile
• Deletion: Delete your account and request erasure of your data
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing for direct marketing purposes
• Restriction: Request limitation of processing in certain circumstances
• Withdraw Consent: Withdraw consent where processing is based on consent

Account Deletion: When you delete your account, we retain your data for 30 days to allow for recovery. After this period, your data is permanently deleted, except where retention is required by law or for legitimate business purposes (such as preventing banned users from creating new accounts).

US State Privacy Rights: If you reside in California, Colorado, Connecticut, Virginia, or other states with privacy laws, you may have additional rights including the right to know what data is collected, opt out of sales or sharing, and non-discrimination for exercising your rights.

EU/EEA Rights: If you are in the European Union, you have rights under GDPR including lodging complaints with supervisory authorities.

To exercise your rights, contact us at the email address below. We will respond within 30 days.

We retain your data only as long as necessary:

• Active accounts: Data retained while your account is active
• Deleted accounts: Data retained for 30 days, then permanently deleted
• Messages: Encrypted and retained while relevant conversations exist
• Verification documents: Deleted after verification is complete or within 90 days
• Payment records: Retained as required by financial regulations
• Safety records: Reports and moderation actions may be retained longer for platform safety

For questions about this Privacy Policy or to exercise your privacy rights, contact: Mango Machine LLC mangomachine.agency@gmail.com

MANGO MACHINE LLC is the data controller responsible for your personal information under this Privacy Policy.