Privacy Policy

For the "Matchmade" app (iOS and Android) and the website matchmade.codext.de. Last updated: 12 October 2026. The German version is authoritative.

In short

Controller

Codext GmbH, Frankenstraße 10, 74549 Wolpertshausen, Germany. Email: kontakt@codext.de, phone: +49 7904 5203106. Represented by the managing director Daniel Ehrhardt.

Data we process

Account and sign-in

You sign in either with your email address or with Sign in with Apple.

• Email: we store your email address and send you a six-digit sign-in code through our provider Resend. The code is valid for 10 minutes, can be entered at most five times and is stored by us only as a hash.
• Apple: Apple sends us a unique user identifier and, depending on your choice, your email address or an anonymous Apple relay address, and your first name. We never learn your Apple password.

After you sign in, the app stays signed in with a session token. We store only a hash of it and when it was created and last used. We also store when you created your account and when you were last active. Legal basis: Art. 6(1)(b) GDPR (providing the service).

Profile

For your profile we process: first name, date of birth, gender (woman, man, non-binary), who you want to meet, preferred age range and maximum distance, bio, up to three prompt answers, job, height, what you are looking for (for example something long-term or new friends), interests, the "I make the first move" setting and whether your profile is paused. First name, date of birth, gender, who you want to meet, what you are looking for and at least two photos are required. Everything else is optional.

We use your date of birth to calculate your age and to check that you are at least 18. Others only see your age, never your date of birth. Legal basis: Art. 6(1)(b) GDPR and, for information that reveals your sexual orientation, also your explicit consent under Art. 9(2)(a) GDPR (see Special categories).

Photos

You can upload up to six photos. Our server resizes each photo to at most 1440 pixels on the longest side, stores it as WebP and removes all metadata (EXIF), including GPS coordinates and device details. Before it is stored, our AI moderation checks every photo (see AI and profiling).

Photos are stored under a randomly generated, unguessable address on matchmade-api.codext.de so the app can show them to people you are suggested to or matched with. Anyone who knows this address can open the photo without signing in. The address is not linked or listed anywhere. Legal basis: Art. 6(1)(b) GDPR and, where photos reveal special categories of data, Art. 9(2)(a) GDPR.

Conversation with Mira and Vibe profile

During setup you have a short conversation with Mira, our AI matchmaker. She asks at most seven questions, for example about your perfect date, your weekend, what you are looking for, a dealbreaker and how you show affection. Your answers are sent to OpenAI during the conversation so Mira can reply.

At the end, Mira turns this into your Vibe profile: one of twelve dating archetypes with a short description, eight trait scores (openness, adventure, social energy, romance, ambition, humor, stability, spontaneity), your values, dealbreakers, love language and a summary used for matching. She also suggests a bio and three prompt answers that you can accept or edit. We store the conversation transcript and the Vibe profile.

Only tell Mira what you want to share. She does not need information about your health, religion or political views. Legal basis: Art. 6(1)(b) GDPR and, where your answers contain special categories of data, Art. 9(2)(a) GDPR.

Approximate location

If you allow it in your operating system, the app determines your location and sends it to us together with the name of your city. The coordinates are rounded to two decimal places, which is about 1 km. We do not store your exact position.

We use your approximate location to find people within your preferred distance and to show the distance in kilometers. Others see your city and this distance, never your coordinates or a point on a map. You can use Matchmade without sharing your location, but the distance filter will not apply. You can revoke the permission in your system settings at any time. Legal basis: Art. 6(1)(b) GDPR.

Swipes, matches and the Drop

We store who you like, super like or pass on and whether that happened in the Drop or in Discover, and your matches with the time they were created, their expiry time (24h spark), the compatibility score and the "Why you two" text. We store who we suggested to you in the Drop so suggestions do not repeat within 14 days. For two people who are suggested to each other we store the compatibility score, the "Why you two" text and three conversation starters. To write these texts, profile details and Vibe profiles of both people are sent to OpenAI. Legal basis: Art. 6(1)(b) GDPR and, where special categories are involved, Art. 9(2)(a) GDPR.

Chat and Vibe Check

We store messages with their time and read status on our servers to deliver them and to show you your chat history. They are visible to you and your match. The connection is encrypted with TLS; the messages themselves are not end-to-end encrypted. Before a message is delivered, our AI moderation checks it for harassment, threats, unwanted sexual content and scams. We do not read along in chats. We only look at individual messages when they are reported to us or when we follow up on a concrete indication of abuse. When you are typing, your match briefly sees this; it is not stored.

For a Vibe Check we store the five questions and your answers. Once both of you have answered, the result appears as a card in the chat.

Messages are stored for as long as the match exists. After an unmatch, the chat is no longer shown to either of you. If one of you deletes their account, the match and all messages in it are deleted. Legal basis: Art. 6(1)(b) GDPR; for moderation Art. 6(1)(f) GDPR. Our legitimate interest is protecting our users from harassment, scams and illegal content.

Reports and blocks

When you report someone, we store who reported, who was reported, the reason, your optional description and, if applicable, the reported message. A report also blocks the person and ends an existing match. We review every report ourselves and look at the profile and the reported content to do so. The reported person is not told who reported them. We store blocks so that you are no longer shown to each other. Legal basis: Art. 6(1)(b) and (f) GDPR. Our legitimate interest is the safety of our users and preventing abuse.

Push notifications

If you allow notifications, we store your device's push token and platform (iOS or Android). We use it to notify you about new matches and messages, when your Drop is ready and two hours before a match expires. Notifications may include your match's first name. They are delivered through Expo's push service and from there through the Apple Push Notification service or Google's Firebase Cloud Messaging. You can turn off notifications in your system settings at any time. Legal basis: Art. 6(1)(b) GDPR.

Time zone and language

The app sends your device's time zone and language. We store both so that your Drop arrives at 19:00 local time and notifications and AI texts are in your language. Legal basis: Art. 6(1)(b) GDPR.

Server logs

For every request to our servers we process, for technical reasons, your IP address, the time, the endpoint requested, the status code and the app or browser identifier. We use these logs to detect attacks and abuse and to fix errors, and we delete them after 14 days. Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is secure and stable operation.

Sharing

You can share your archetype card and the result of a Vibe Check as an image. The image only leaves your device if you pass it on yourself through your operating system's share sheet. The Vibe Check image shows first names only. The link on the card (matchmade.codext.de/a/…) contains only the archetype, no information about you. The service you share through is responsible for its own processing.

Contact by email

When you email us, we process your email address and your message to reply (Art. 6(1)(b) and (f) GDPR). We delete the data once it is no longer needed, at the latest when statutory retention periods expire.

Special categories of personal data

Your gender together with who you want to meet can reveal your sexual orientation. Photos, bio, prompts and your answers to Mira can reveal other specially protected data, such as your ethnic origin, religious beliefs or health.

We process such data only with your explicit consent under Art. 9(2)(a) GDPR, which you give during setup, and only for the purposes described here: matching, showing your profile, AI features and moderation. Without this data we cannot suggest anyone to you.

You can withdraw your consent at any time with effect for the future by deleting your account or by writing to kontakt@codext.de. Because Matchmade cannot work without this data, we will then delete your account. Withdrawal does not affect the lawfulness of processing before the withdrawal.

What other users see

When we suggest you to someone in the Drop or in Discover, or when you match, that person sees: your first name, age, city and distance, your photos, bio, prompts, job, height, what you are looking for, your interests and shared interests, your archetype, your compatibility score and the "Why you two" text, and, where applicable, that you have already liked them.

Not shown: your email address, Apple identifier, date of birth, coordinates, trait scores, values and dealbreakers, your conversation with Mira and your filter settings. We do not newly suggest a paused profile to anyone. People you block no longer see you.

AI, profiling and automated decisions

Matching

We rank suggestions in the Drop and in Discover by a compatibility score. A fixed set of rules calculates it from your trait scores, shared interests, what you are both looking for, your values and dealbreakers. It adds a boost for recent activity and, in Discover, a boost if someone has already liked you. Before that, fixed filters apply in both directions: gender and age range, distance and blocks. This is profiling within the meaning of Art. 4(4) GDPR. It determines who you are suggested to and when. Legal basis: Art. 6(1)(b) and Art. 9(2)(a) GDPR.

AI features

Mira's conversation, your Vibe profile, the "Why you two" text, the conversation starters and the Vibe Check questions are generated by AI models from OpenAI. These texts can be wrong. They are suggestions and entertainment, not an assessment of you as a person.

Moderation

The AI checks photos before they are stored and messages before they are delivered. It can reject a photo or block a message. You then see a notice with the reason. If the check of a message fails for technical reasons, the message is delivered and the event is logged. Legal basis: Art. 6(1)(f) GDPR.

No decisions with legal effect

None of this automated processing produces legal effects concerning you or similarly significantly affects you within the meaning of Art. 22 GDPR. We only ban accounts after a human has reviewed the case. If you disagree with a moderation decision, write to kontakt@codext.de. A human will then review the decision and you can explain your point of view.

Recipients and processors

We use the following service providers. Those acting as our processors process the data only on our instructions under a contract according to Art. 28 GDPR.

Hetzner (hosting)

Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany. Our API and database run on Hetzner servers in data centers in Germany, and the photos are stored there too.

OpenAI (AI)

OpenAI Ireland Ltd, 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland, and its affiliate OpenAI, L.L.C. (USA) provide the AI models. We send OpenAI: your conversation with Mira (for Mira's replies, the archetype reveal and the suggested bio and prompts), profile details and Vibe profiles of two people (for "Why you two", conversation starters and the Vibe Check), messages before delivery and photos before storage (for moderation). We only send what the feature needs, no email address and no Apple identifier. Under its API terms, OpenAI does not use API inputs and outputs to train its models. OpenAI is our processor. The transfer to the USA is based on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).

Resend (email)

Resend, Inc., San Francisco, USA, sends the sign-in codes. For this, Resend receives your email address and the content of the email. Resend is our processor. The transfer to the USA is based on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).

Expo, Apple and Google (push notifications)

650 Industries, Inc. (Expo), Palo Alto, USA, forwards our push notifications and receives the push token and the text of the notification for this. Expo is our processor; the transfer to the USA is based on the EU Standard Contractual Clauses. Notifications are delivered to iPhones through the Apple Push Notification service (Apple) and to Android devices through Firebase Cloud Messaging (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).

Apple and Google (sign-in and app stores)

If you use Sign in with Apple, Apple (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland) processes the sign-in under its own privacy policy. The app is distributed through the Apple App Store and Google Play. When you download or update it, Apple or Google process data under their own privacy policies (Apple, Google). From the stores we only receive aggregated statistics and, if you agree to share them, crash reports.

Authorities

We only pass data to authorities when we are legally required to (Art. 6(1)(c) GDPR) or when we report illegal content, in particular child sexual abuse material (Art. 6(1)(c) and (f) GDPR; see Child safety).

Website matchmade.codext.de

The website is delivered through Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). When you visit it, Cloudflare processes technically necessary data such as IP address, time and page requested to deliver the website securely (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework (Art. 45 GDPR). The website uses no cookies, no analytics tools and no tracking. Fonts are loaded from our own server.

No ads, no selling, no tracking

We do not sell data and we do not show ads. The app contains no advertising, analytics or tracking SDKs. We do not use your data to track you across other companies' apps and websites.

Retention and deletion

• We store your account, profile, photos, conversation with Mira, Vibe profile, swipes, matches, messages, Vibe Checks, blocks, push tokens, time zone and language for as long as your account exists.
• When you delete your account in the app under You → Settings → Delete account, or by email, we immediately delete your account, your email address or Apple identifier, your profile, your photos including the files, your conversation with Mira and your Vibe profile, your swipes, matches and messages. Your messages therefore also disappear for your matches. Your photos can no longer be opened at their address. More on the Delete account page.
• Deleted data disappears from our backups within 30 days, when they are overwritten.
• Sign-in codes expire after 10 minutes. Sessions end when you sign out or delete your account.
• We delete server logs after 14 days.
• We keep reports about other users and the information we need to keep banned people from coming back with a new account for up to 12 months. This includes the report record about a reported account and a hash of the email address or Apple identifier of banned accounts. This also applies if the account concerned is deleted. Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is the safety of our users.
• Data we have to keep to establish, exercise or defend legal claims, or because of a request from law enforcement, is kept only as long as necessary for that purpose (Art. 6(1)(c) and (f) GDPR).
• We may delete accounts that have not been used for 24 months. We will tell you by email beforehand.

Security

All connections between the app, the website and our servers are encrypted with TLS. We store session tokens and sign-in codes only as hashes. We store photos without metadata under random addresses. Our servers are in Germany. At Codext, only the few people who need it for operations, security and handling reports have access to production data.

Minors

Matchmade is only for people aged 18 and over. You have to enter your date of birth during setup. Anyone under 18 cannot complete setup. If we learn that an account belongs to a minor, we suspend and delete it. More on the Child safety page.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)). You can change or delete much of your information directly in the app. For everything else, write to kontakt@codext.de, ideally from the email address of your account. To make sure nobody requests someone else's data, we may ask you to confirm your identity. We reply within one month.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany. You can also contact any other supervisory authority, in particular in the country where you live.

Changes

We update this policy when Matchmade or the law changes. We inform you about material changes in the app. The version published here applies.