Privacy Policy

1. Who we are

pikk.one (“we”, “us”) operates the pikk.one mobile application and this website. For data protection purposes the data controller is Carcaroli LTD, a company registered in England and Wales under company number 13585788, whose registered office is at 3rd Floor, 86-90 Paul Street, London, England, EC2A 4NE.

You can reach us any time at support@pikk.one.

2. What we collect

Data	Where it comes from
Account identity — a user ID, your email address or the identifier your sign-in provider returns	Created when you sign in with Apple or Google. We never see or store your password for those accounts.
Profile — display name, age, gender, photo and the text of your bio	Entered by you.
Location — the city you set, and coordinates for it	Chosen by you in the app so we can match you with people in the same place.
Matching activity — likes, matches, passes, unmatches and reports	Generated as you use the app. This is what the matching itself runs on.
Messages — the content and timestamps of chats with your matches	Written by you and the person you matched with.
Device — push notification token, platform and app version	Collected when you allow notifications, so we can tell you about a new match or message.
Purchases — which optional paid feature you bought and the store's receipt	Passed to us by the App Store or Google Play. We never receive your card details.
Website analytics — pages viewed on this site, approximate region, browser	Google Analytics, and only if you accept it in the cookie banner. See section 9.

3. Why we use it

To run the matching itself — showing profiles to the people entitled to see them, and recording who liked whom.
To deliver your messages and notify you about them.
To keep people safe: investigating reports, enforcing bans, and detecting fake or abusive accounts.
To process a purchase you chose to make and to honour what it entitles you to.
To fix crashes and keep the service running.
To meet legal obligations, and to defend legal claims.

Under the GDPR our legal bases are: performance of a contract (running the service you signed up for), legitimate interests (safety, abuse prevention, keeping the service reliable), consent (push notifications, and website analytics), and legal obligation where a law requires it.

We do not sell your personal data, and we don't run advertising.

4. Who can see what

This is the part most policies gloss over, so we'll be exact about it.

Women's profiles are not listed anywhere. There is no grid, directory or search that returns them, for any user, at any price.
Men cannot swipe. There is no control in the app that lets a man page through women, so there is no way to browse them at all.
A woman's profile is visible only to the men she has chosen — however many that is — and to nobody else. No man can see her before she has chosen him.
Men's profiles are shown to women in the area, one at a time, so that a woman can choose.
Messages are visible to the two people in the conversation. Our staff access them only when a report or a legal obligation requires it.
Unmatching is permanent. Once a match is ended it can't be restored by either side, the photo is hidden, and the two accounts can never be matched again.

5. How your photo is stored

Profile photos are held in private cloud storage that is not publicly readable. When the app needs to display one it asks our server for a short-lived signed link that expires shortly after it is issued. There is no permanent public URL to your photo, so a link can't be copied out of the app and shared to work indefinitely.

When you replace your photo, the previous file is deleted from storage.

We use a small number of service providers, and only for the purposes below:

Google Firebase — sign-in and push notifications.
Apple and Google — processing in-app purchases and telling us that a purchase is valid.
Google Analytics — this website only, and only with your consent. It is not in the mobile app.

We may also disclose data where we are legally required to, or where it is necessary to protect someone's safety.

7. How long we keep it

While your account exists — your profile, matches and messages are kept so the service works.
When you delete your account — your profile, photo and personal details are deleted. Messages you already sent may remain visible to the person you sent them to, shown without your profile.
Safety records — where an account was banned, we keep a minimal record so the same person cannot immediately return.
Purchase records — kept as long as tax and accounting law requires.

8. Your rights

If you are in the UK, EU or EEA you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or provide it in a portable format. Where we rely on consent you can withdraw it at any time. You also have the right to complain to your national data protection authority.

If you are in California you can request disclosure or deletion of your personal information, and you cannot be discriminated against for asking. We do not sell or share personal information as those terms are defined by the CCPA.

You can delete your account from within the app at any time, or write to support@pikk.one and we will act on your request within one month.

9. Cookies on this website

This website loads no analytics and sets no analytics cookies until you accept them in the banner. If you accept, we load Google Analytics 4 (property G-ME55FJDCR1), which sets cookies to count visits and understand which pages are read. If you decline, or simply ignore the banner, nothing is loaded and you are not measured.

Your choice is remembered in your browser's local storage under the key pikkone:consent. Clearing your browser data resets it and you'll be asked again. The site also loads the Outfit typeface from Google Fonts.

The mobile app contains no advertising or analytics trackers.

10. Age limit

pikk.one is for adults. You must be 18 or older to create an account. If we learn that an account belongs to someone under 18 we delete it.

11. International transfers

Your data may be processed outside the country you live in, including outside the UK and the EEA. Where that happens we rely on appropriate safeguards — the UK International Data Transfer Agreement and the European Commission's Standard Contractual Clauses with our providers — so that it keeps the same level of protection. Write to us if you'd like details of the safeguards that apply to you.

12. Changes to this policy

If we change this policy we'll update the date at the top of the page, and we'll tell you in the app before anything material takes effect.

13. Contact

Questions, requests or complaints: support@pikk.one.