Privacy policy

Last updated 11 November 2026

tendays is a slow-dating service for adults in Singapore. This policy explains what personal data we collect, why, and the choices you have, in line with Singapore's Personal Data Protection Act (PDPA).

What we collect

• Your email address, to sign you in.
• From identity verification (Singpass MyInfo): your date of birth, and a one-way keyed fingerprint of your ID number. We never store the ID number itself.
• A live selfie, which becomes your sealed photo. It is only shown to the one person you are matched with, from day nine of a match, while you are both still in it.
• Your profile: first name, gender, preferences, values, lifestyle, dealbreakers, prompt answers and time zone.
• What you write and record in tendays: letters, answers, messages, voice notes, day-ten choices and anything you choose to share after day ten.
• Reports you make or that are made about you, and the outcome of their review.
• A random id stored in a cookie on your device, kept only as a keyed fingerprint, to stop removed accounts returning.
• If you subscribe: a payment reference from Stripe or the app store. We never see your card number.

Why we use it

• To verify that everyone is a real adult, and to stop duplicate and returning removed accounts.
• To show you one compatible person at a time and run the ten days.
• To keep people safe: reports are reviewed by a person, who sees only the minimum message context needed, and every view is logged.
• To take payment for subscriptions.

We don't sell your data, and we don't use your messages or photos for advertising.

Who we share it with

Service providers who run parts of tendays for us, under contract: Supabase (database and file storage), Vercel (hosting), Singpass (identity), our liveness provider, LiveKit (audio calls), Stripe (payments), Resend (email), Apple, Google and Expo (app sign-in, push notifications and app purchases, with RevenueCat), Sentry (crash reports) and PostHog (product analytics). Sentry and PostHog get our internal account number and which screens and steps were used, never your messages, letters, answers, voice notes or photos. Data may be stored or processed outside Singapore with protection comparable to the PDPA. We share data with authorities only when the law requires it, or to protect someone from serious harm.

How long we keep it

Until you delete your account, then it is deleted, except: the identity fingerprint and device fingerprint of accounts removed after review (or deleted while a report was open), which we keep to stop them returning; and the admin audit log, which keeps a record of reviews without message content.

Your choices

• Download a copy of your data from Settings.
• Correct your profile at any time.
• Take a break, or delete your account from Settings. Deletion is immediate and permanent.
• Ask us anything about your data: our privacy contact.