WeMet Privacy Policy

Information you give us:

• your mobile number. You sign in with it: when you ask to sign in, we send a one-time code to it by text message, and you type the code back to us. The first time, that code also confirms the number is yours, and we keep the number and the date it was confirmed. No other member is shown it unless you and a member we introduced you to both say yes (section 4a). We accept mobile numbers only from Australia, New Zealand, Singapore, the United States and Canada, and from each of these countries only once joining has opened there; for a United States number we first check what kind of line it is (section 5); we do not check Canadian numbers this way;
• contact details for arranging to meet the people we introduce you to. When you and a member we introduced you to both say yes, we show them the mobile number you sign in with (section 4a). You can also tell us whether that number is on WhatsApp, add a WeChat ID and a Telegram username, and choose to show the email address you sign in with; each of these is optional, and you can change or remove them on your profile at any time. If you added a separate WhatsApp number, a LINE ID or another phone number before we changed how contact details are shared, we keep them on your profile until you remove them there or close your account, but we no longer show them to other members;
• your email address. When you join, you confirm it with a one-time code we send to it. We use it to contact you about your account, and you can also sign in with it and a one-time code instead of your mobile number;
• your date of birth, which we ask for before the questionnaire, and your first name. We ask for your first name only, never for a surname, and we never show a surname to other members; a first name can have two parts, so we cannot stop someone typing a surname. Documents you upload for the Prime Circle check may show your full name, and we delete them after the check (section 8). Your date of birth is used to confirm you are old enough to use WeMet where you live (18 or over, or the higher minimum age in Terms section 1) and to show your age as a number;
• your gender and the genders of the people you would like to meet;
• the country you live in (Australia, New Zealand, Singapore, the United States or Canada), which must be the country of your mobile number (a +1 number can be from the United States or Canada), and your postcode. In the United States we keep only the five-digit ZIP code (never the four extra digits of a ZIP+4 code), in Canada only the first three characters of your postal code, and in Singapore only its first two digits (your postal sector). We never ask for your street address. We use your postcode to show the name of its area, to tell which city or region it is in, to work out the minimum age that applies to you (Terms section 1), whether a person or software does your photo check (section 2) and your time zone, and, once introductions start, to estimate distances and travel times between the centres of postcode areas. If you joined before we asked for a postcode, we also hold the city and suburb you gave then, until you give your postcode;
• your preferred age range, and how far you are willing to travel to meet someone (a travel time or a distance);
• what you are looking for (relationship goal and commitment timeline); whether you have children (no; yes, living with you; yes, part of the time; yes, not living with you; or yes, grown up) and whether you want children (definitely, probably, not sure, probably not, definitely not, or you have children and do not want more);
• your background details: your nationality, your residency status in the country where you live (citizen, permanent resident, work visa, student visa, partner or family visa, or other visa), your highest level of education, your occupation (a category) and your annual income before tax (a range, in the currency of your country). Each is picked from a list and is required to complete your profile. We do not verify them; the income range you pick stays as you gave it even if you pass the Prime Circle income check, which is a separate result (below). We collect them so that the people we introduce you to know more about you, and we do not use them to choose who we introduce you to; the only one an introduction letter may mention is your occupation category, and only when it is the same as the other member's (section 3b). You can see and change them on your profile at any time. The members we introduce you to see all five (section 4); our team can see them when we look after your account. We keep them like the rest of your profile (section 8);
• your industry, languages and how much sharing a language matters to you, height and how much a partner's height matters to you, smoking and drinking habits, and interests; and, if you choose to add one, a short self-introduction in your own words (your bio), which you can write yourself or draft with our AI writing help (section 5, Anthropic). A self-introduction is checked before anyone else sees it (section 3a);
• three preferences that are never shown to other members: whether you would date someone who already has children, whether you would date someone who smokes or vapes, and the height you would prefer in a partner;
• if you choose to add them, more details about you: your hometown (a country and, if you like, a city), your MBTI type, your daily rhythm, interests from our list and up to three of your own words, three words that describe you, three things that win you over, three things that put you off, the looks, styles and kinds of energy you are drawn to (picked from picture cards), the height range you would like in a partner, your favourite kinds of first meeting, when you are usually free (days of the week and parts of the day) and how often you would like an introduction. Each is optional. Today only you and our team can see them, and we do not use them to choose introductions; the three things that put you off are never shown to other members, to IDO or in a letter. If we start to show or use any of the others, we will say so in this policy first;
• your confirmation that you are here for a genuine relationship;
• your answers to the WeMet type questionnaire (25 multiple-choice questions about how you like to plan, where your energy comes from and how you say things), saved as you go so that you can finish later, and how long each question was on your screen before you answered it;
• your picks for the eight multiple-choice prompts about you (for example, your perfect Sunday), some of which an introduction letter may mention (section 3b), and how long each prompt was on your screen before you answered it;
• your answers to the short multiple-choice questions we ask from time to time, in our weekly letter to members who are waiting for introductions to open, on your Home page or with an introduction letter (for example, the kind of first meeting you prefer);
• the picture you choose for your type card (a woman, a man or a still life);
• your photos;
• if we introduce you to a member: your answer (yes or no); whether you tapped to see their photos, how long you read the reasons before tapping, and how long the photos were on your screen before you answered; whether you tell us the letter got what you are looking for; and, after you both say yes, the days and parts of the day you are free that week, the meeting times and places you propose, accept or change, your answers to our check-in about three days later (for example, that you have booked a date, are still talking or will not meet, with a reason from our list) and your answers to our questions after a date (whether you met, and whether you would like to see them again); and the messages you write in the introduction chat, any report you make in it and, if you end it, the reason you pick from our list, if you pick one (section 4b);
• if you use the photo check: a selfie you take at the time. Where software does the check, the selfie is used once, for the check described in section 2, and we do not keep it. Where a person does the check (section 2), we keep the selfie only until the check is over (section 8);
• if you ask for Private Matchmaking, share your WeMet profile with IDO's matchmakers, or reply to a matchmaker's message: what section 6 describes;
• if you contact us: what you write to us, and any file or photo you send, by email or in the chat, and the chat details described in section 5;
• if you buy Plus or the Prime Circle (Terms of Use sections 8a and 8b): your payment records, which are the product, the price, the currency, any tax, the date, whether the payment succeeded or was refunded, and Stripe's reference numbers for you and your payment. Stripe holds your card's brand, last four digits, expiry and country, and our team can see these in Stripe when handling a payment or refund. Stripe collects your card details on its own payment page; we never receive or store your full card number or security code (section 5, Stripe);
• if you apply for the Prime Circle check (Terms of Use section 8b): the documents you upload (payslips, a tax notice, or bank or investment statements), which can show your full name, employer, address, income, balances and transactions, and, for the looks check, the approved photos you already gave us; and the result of the check: each category, pass or fail, the date, when it ends and who on our team decided;
• if you join the Prime Circle: the category you require in the members you are introduced to there, your picks and how many are left, and your refund requests, with the reason if you give one.

• your WeMet type and where your questionnaire answers place you on each of its three scales, worked out automatically from your answers (section 3a), with the versions of the questionnaire and of the scoring rules used. You are shown your type and which way you lean on each scale, never the underlying numbers;
• checks on how the questionnaire was answered, for example whether every answer was the same, whether the answers came very quickly, or whether two related answers point opposite ways. They are not shown to other members and they do not change your type;
• earlier answers: when one of your questionnaire, prompt or weekly-letter answers is replaced or removed, we keep the earlier answer and when it was replaced;
• your invite code, a random code in the link on your type card that tells us whose link it was; and, if you came to WeMet through an invite link, which code it carried: another member's, or one we gave to a partner business, such as IDO (section 6), or to someone who promotes WeMet (we record it only in the first 14 days after you create your account, and never your own code). We do not show the person whose code it was that you joined. If someone joins the waitlist through your invite link, we record a credit for a free second introduction for each of you (Terms of Use section 4) and email you how many credits you have earned, never who joined. To stop one person earning credits more than once, we keep a scrambled code (a keyed hash) of the email address and of the mobile number of each person who earned a credit through an invite link, and we keep these codes after that person's account is deleted (section 8);
• if a link that brought you to WeMet carried a campaign label (utm_source and utm_campaign, for example the name of the website or post that linked to us), the label of the first such link, recorded once, in the first 14 days after you create your account;
• while advertising and analytics measurement is on for your browser (section 10a): the Google Analytics identifiers for your browser and visit (from the _ga and _ga_ cookies), the Meta browser and click identifiers (_fbp and _fbc), the reference of the Google or Meta advertisement click that brought you (Google's gclid, gbraid or wbraid, or Meta's fbclid), the address of the WeMet page you arrived on with anything that could identify an invite removed, your browser's user-agent string, the IP address of the request that recorded them, and which version of your cookie choice they were collected under; where measurement was on by default, which notice you saw (the one on our public pages or the line on sign-in and joining), under which version of our cookie notice, and when. We keep them so that we can tell Google and Meta when you complete a step of joining WeMet, including when that happens without you on our website, for example when your photo check is approved (sections 5 and 10a). We keep them only as section 8 says, and never after you opt out or choose "Reject";
• whether and when you joined the founding-member waitlist and which area it counts you in (worked out from your postcode), the weekly letters we have delivered to you, and when you opened each one;
• the result of each photo check: whether it passed, when it was done, a reference number for the attempt, which photo it was compared with, and, if it failed, the kind of failure (for example, that no face was found). If a pass is withdrawn, we record when and why. When we check that your main photo shows one face, we record when that check was made, never what it found, to apply the limit in Terms section 3. Where software does the check, we never keep the selfie, a similarity score or a face template;
• where a person does the photo check (section 2): when you sent each selfie, which main photo it was to be compared with, the decision, when and by whom it was made, any reason given, and, if the check was cancelled, why (for example, that your main photo changed); and each time a person on our team opened your selfie in our review tool, who it was and when;
• if you continue the photo check on your phone by scanning a code: a scrambled form (a hash) of that short-lived code, never the code itself;
• if your mobile number is a United States number: the result of checking what kind of line it is (whether we accepted it; the kind of line Twilio reported, or that Twilio reported the number as not valid or not from the United States or Canada, or that the check could not be made; and when, and whether the check was made when a code was requested to sign in or join, or when a number was added to an account), kept with a scrambled form (a hash) of the number rather than the number itself and deleted 90 days after the number was last checked. We usually make this check before we send a code to the number, so we keep this result even if the number is never confirmed; if the check cannot be made then, we make it after the code is typed, before we accept the number. We also keep a record on your account each time we check a number you ask to add to it, which we use to limit how often that can happen, and a record on your account if the check could not be made when your number was added. When we check a number for someone who is not signed in, we keep the time of the check and a scrambled form of the IP address the request came from, made with a secret key (a keyed hash), to limit how many numbers can be checked in an hour, from one address and in total; we delete them once they are an hour old (we check every five minutes). We do not check Canadian numbers this way;
• if your mobile number is confirmed through our own verification step rather than when you sign in: a record of each attempt, with its outcome, its time, and scrambled forms of the number and your IP address, never the number or address themselves;
• photo review outcomes and, if a photo is not approved, the reason;
• once introductions have opened where you live, your introductions: which members we introduced you to and when, the letter we wrote for each of you (section 3b), when you opened it, and how the introduction ended (for example, a no from either of you, the three days passing, or a shared yes). To choose introductions, our program also keeps, for each week it runs, the details it used about each member (section 3b; never a name, contact detail, postcode, location or photo) and, for each possible pair in the same country, whether the pair passed each rule and its estimates of how likely both members are to say yes. If a person on our team reviews an introduction (section 3b), we keep their decision and, if they stopped it, the reason, and, if they paired a member with someone else, that change and any reason they gave;
• for each message in an introduction chat (section 4b): when it was sent, whether it was delivered, held, let through or kept back, the result of the AI check (the kind of problem found, if any) and, if a person decided, who decided and when; each time a person on our team opened the chat, who it was and when; and, for each request we make to an AI about a chat, a technical record of the kind of task, its size and its estimated cost, never the text;
• if you add a self-introduction: the result of our checks on it (whether it is waiting, shown, held or removed, which kind of problem the checks found, if any, the AI's reason, and who on our team approved or removed it), kept with a scrambled form (a hash) of the text, not a copy of it. If you use our AI writing help or profile tips, we keep how many times you used them each day, the tips we showed you and whether you used, declined or dismissed them, and the latest writing idea we made for you, with a scrambled form of the text it was made from;
• if a member we introduced you to tells us something felt wrong after a shared yes, or you tell us so, an alert for our team (it does not name either member; our team looks it up);
• if you shared contact details with a member under our earlier way of sharing them: which of your contact details you chose to share with them, and when;
• reports you make or that are made about you, safety review notes, and the decisions we make about your account;
• each time a person on our team shows your mobile number or your contact details in our admin tool: who it was, when, and which details were shown;
• notes and tags that our team keeps about a member, for example about a support request. They are not shown to the member in the app. A note is never changed once written; if one is removed, it is hidden but kept until the account is deleted;
• if you ask us to delete your information, a record of your request, when it was made, the date it is due and what we did;
• a record of each email and text message we send you, other than sign-in codes: what kind it was, when it was sent and whether it was delivered; a scrambled form (a hash) of each one-click unsubscribe link we put in our emails; and, if you unsubscribe or reply STOP to a text message, that choice and when you made it;
• if a person on our team chooses your introduction for quality checks (at most five pairs at a time): a copy of each email we send to you or the other member of that pair, made with mobile numbers, email addresses and chat usernames masked and with nothing from the introduction chat, sent to an internal WeMet mailbox, with a record of each copy; and, once a day, for those pairs, the number and times of chat messages and text messages, how many messages were held or removed, any report, and who ended the chat and the reason they picked, never the content of a message;
• product events such as when you signed up, signed in with your mobile number, confirmed your email address, finished the questionnaire, viewed your type report, opened or downloaded your type card, completed your profile, uploaded your photos, verified your photo, joined the waitlist, opened a weekly letter, viewed or responded to an introduction, or made a Private Matchmaking request;
• if you add WeMet to your home screen or install it as an app: when you last opened WeMet from its icon while signed in (recorded at most once every 12 hours, and deleted when you close your account). Whether or not you add it, we also count, for each day and for everyone together, how often our suggestion to add WeMet to your home screen was shown and its "Install" and "Not now" buttons were tapped, how often the add-to-home-screen item in your account's menu and the install button on our help page were tapped, how often WeMet was installed (where the browser tells the page), and how many WeMet pages were loaded while WeMet was open from its icon. These counts contain no name, account, device or address, and are not linked to your account;
• while our live page records are switched on: which WeMet pages you open, recorded by page name (for example, the Pricing page or sign-up question 5), never the web address, what you click or what you type; about when each page first appeared on your screen; and the last time it was open on your screen (while a page is open in the tab showing in your browser, your browser tells us about every 30 seconds that it is still there, whether or not you are using it; we keep only the latest of these times). If you are signed in, these records are linked to your account through the cookies that keep you signed in (section 10). If you are not, they are linked only to a random number that your browser tab creates for the visit and discards when the tab is closed or reloaded; we do not use a cookie, anything stored on your device, or your IP address for this. We do not join these page records made before you sign in, or after you sign out, to your account, but because they are close in time to your signed-in records they should not be treated as anonymous;
• a count of visits to our public pages, made by our server for every visitor, whatever you chose about measurement (section 10a), with no cookie and nothing stored in your browser. For each page loaded we record the day and time, the page address without anything after its question mark, a rough source (for example, a search engine or an advertisement), the campaign labels in the link (utm_source, utm_medium and utm_campaign), only the name of the website that sent you, the kind of device, the kind of browser (for example, the browser built into a social media or messaging app, worked out from your browser's user-agent string, which is not stored), the page language and a daily visitor code: a scrambled form (a hash) of a random value for that day, your IP address, your browser's user-agent string and our website. Your IP address and user-agent string are not stored, and the random value is deleted within about two hours after the Sydney day ends, after which the codes can no longer be linked to each other or worked back. The same code also records, once a day, when you start and finish the questionnaire before signing up, open the sign-up screen, open or start the Private Matchmaking enquiry form or send an enquiry, with the country your browser's time zone belongs to. When the mobile number of a new account is confirmed, we keep with that account one rough source (for example, "Google search" or "Meta ads") taken from that browser's first public page that same day; we never do this for a Canadian browser or account, or a browser that sends the Global Privacy Control signal;
• technical records needed to run and secure the service: when you last used WeMet, the requests your browser makes to our servers, the records our sign-in service keeps of each sign-in and each one-time code it sends, including the IP address the request came from, and the IP address and browser details recorded when you give a consent. When a mobile number or an email address is entered to sign in or to join, our sign-in service may keep it even if it is never confirmed with the code we send to it (for example, a mistyped number), until we remove it.

If you are our contact at a venue that works with WeMet, we keep your name, email address and phone number, if you give them to us, with our notes about working with the venue, so that we can work with it. Only our team can see them. They are stored with the rest of WeMet's information in Sydney and kept until we remove the venue from our records or you ask us to delete them (section 8a).

Your gender together with who you would like to meet can reveal your sexual orientation. Your photos, and answers about children or health-related habits, may also be sensitive. We collect these only with your consent, which you give by entering them into your profile after reading this policy, and we use them only to run WeMet: to introduce you to members who fit what you both said you want, to show your profile to the members we introduce you to, to keep members safe and, only if you give the separate consent described in section 6, to pass who you want to meet to IDO's matchmakers. We do not use sensitive information for marketing and we never sell it.

Unless a person does your photo check (next paragraph), the photo check uses biometric information. Amazon Rekognition compares the face in your selfie with the face in your main photo and, if a person has not yet reviewed your main photo, first checks that it shows exactly one face; to do this, it turns the photos into face measurements. Biometric information is sensitive information. We use it only with your separate consent, which you give on the photo check screen, and only to check that the two photos show the same person and, where it is checked first, that your main photo shows one face. From the face check on your main photo we use only the number of faces found. Amazon Rekognition does all of this in Sydney. We do not keep the selfie, the face measurements, a similarity score or a face template after the check. We have opted out of Amazon using this content to improve its services, but Amazon says it may still store and use the photos sent to it in order to provide and maintain its service (section 5). You can withdraw this consent at any time from your profile. Your profile is then hidden until you verify again.

If you live in Illinois, Texas or Washington in the United States, or in Quebec in Canada, or we do not yet know which state or province you live in and you may live in the United States or Canada, a person on our team does your photo check instead, and no face-recognition software is used: your selfie is not sent to Amazon Rekognition, and no face measurements, similarity score or face template are made. Our system decides which way your check is done from your postcode and, until you give one, from the country on your profile or else your mobile number; if it knows none of these, a person does your check while the United States and Canada are open. The selfie you send is stored privately in our file storage in Sydney, only our team can see it, we record each time one of us opens it in our review tool, and a person on our team compares it with your main photo. We delete it once the check is over (section 8).

Financial information. If you apply for the Prime Circle check, the documents you upload for it, and its result, reveal your income or assets. We treat them with the same care as sensitive information: we collect them only with your separate consent, which you give on the upload screen; they are stored privately in our file storage in Sydney; only the people on our team in Australia who decide Prime Circle checks can open them, in our review tool, and we record each opening; and we delete them as soon as the check is decided (section 8). We use them only to decide your check, never to choose your weekly introductions or for marketing, and we never sell them or give them to IDO. The Prime Circle looks check uses only the approved photos you already gave us and is decided by a person, without face-recognition software.

No identity or credit check is made against your date of birth or any document you upload, and we never contact your employer, bank or tax office. We do not collect religion, ethnicity, political opinion or health records.

• to create and secure your account and sign you in, with your mobile number or, as a backup, your email address;
• to confirm your mobile number and your email address, so that a real, contactable person is behind each account and one person cannot easily hold several;
• to confirm that you are an adult before you take the questionnaire, to review your photos before they are shown, and to run the photo check;
• to work out your WeMet type from your questionnaire answers, to show you your type report, and, if you choose to share it, to make your type card;
• to run the founding-member waitlist while introductions are not yet open in your area: to show you how your area is doing and, when we send one, our weekly letter, which we release on Wednesdays at 19:00 in the time zone of your postcode area (Sydney time if we do not know that time zone, for example because you have not given a postcode);
• to introduce members to each other. We open introductions city by city, and we only ever introduce members who live in the same country. Section 3b describes how introductions are chosen and how the letters are written, and section 3a the decisions a computer program makes about you;
• to show your profile to the members we introduce you to, and theirs to you;
• to run the introduction chat after a shared yes, to send its messages to an AI check, to post WeMet's own questions and meeting ideas in it, and to remind a member who has not replied (section 4b);
• to check self-introductions before anyone else sees them, to help you draft yours if you ask, and to suggest how to improve your own profile (section 5, Anthropic). We never change what you write: you choose whether to use a draft or a tip, and you save it yourself;
• when you and a member we introduced you to both say yes, to show each of you the other's contact details and to help you plan a first meeting (section 4a); to suggest places for a first meeting, on your Home page and after a shared yes (section 5, Google); to ask how it went; and, when needed, for our team to look up a member's mobile number or contact details to help them, for example to connect two members who cannot reach each other, to handle a report or safety concern, or to meet a legal obligation;
• to record which invite link or campaign link brought you to WeMet, so that we can see which members, partners, promoters and campaigns bring new people to WeMet;
• while advertising and analytics measurement is on for your browser (section 10a): to measure how visitors find WeMet and which of our advertisements on Google, Facebook and Instagram lead to people joining, and to show our advertisements to people likely to join;
• where we offer them, to sell and run Plus and the Prime Circle: to take payment through Stripe, send receipts and the confirmation of your purchase, give refunds, and keep tax and accounting records;
• to do the Prime Circle check, to show your "Verified" categories to the Prime Circle members you are introduced to, to choose Prime Circle introductions (section 3b) and to count your picks;
• to prevent payment fraud: Stripe checks payments for fraud and may decline one (section 3a);
• to keep WeMet working and secure: to find and fix errors (section 5, Sentry), and to watch for misuse, such as someone requesting large numbers of sign-in codes. For this, our team receives a daily summary and alerts by email that hold totals, for example of sign-ups, of codes sent and confirmed in each country and what those codes cost, and of the United States numbers we refused after checking what kind of line they are, by reason, and the titles of the most frequent errors, with personal details removed as section 5 describes for Sentry. We never put a name, a mobile number or an email address in them. To count codes by country, our system reads Twilio's records of the codes sent for WeMet, which include the numbers; it uses each number only to find its country and does not keep it;
• to answer you when you contact us, to review reports, enforce our Standards, investigate suspected misuse and keep records of those decisions;
• to contact you about your account and your use of WeMet: the email with your type report; reminders if you stop partway through joining (up to three emails and, for an Australian mobile number, one text message) or have one step left (emails about three and ten days later and, for an Australian mobile number, one text message about three days later); emails when a photo is approved or not approved (with the reason, picked from a fixed list), when a photo check is needed, when your profile is ready, and about your invite credits; a weekly update on Wednesdays at 19:00 in your time zone, with your own progress and the steps you still have to take; and, once introductions open in your area, emails telling you a letter is waiting, a reminder before it closes, an email when an introduction ends, an email when a new message is waiting in your introduction chat, an email about joining the next round of introductions with the steps you still have to take, and emails and, for an Australian mobile number, text messages about a meeting you are planning; and, if you buy Plus or the Prime Circle, receipts, purchase confirmations and emails about your check, your picks and refunds. Section 11 says how to turn these off. If you ask for it, we also pass your Private Matchmaking request, or share your profile, with the matchmaking business described in section 6;
• with the page records described in section 1a, to see how many people are using WeMet and where sign-up stalls, and to help members who have WeMet open right now (our team can see a signed-in member's first name, account status, the page they are on, whether it is on our website or in the app, and how many minutes ago it was last on their screen);
• to understand how WeMet is used, using the product events and the home-screen records and counts described above, so we can improve it;
• to comply with the law and respond to lawful requests.

Some decisions about you are made by a computer program alone, without a person. A person reviews every photo before it is shown, and makes every decision to reject a photo, remove a self-introduction, act on an account or resolve a report, and every Prime Circle check. No member is suspended by a computer program alone. To ask how a decision about you was made, email hello@wemet.dating or use the chat. The main decisions a program makes alone today are:

• the photo check. If you choose to verify, Amazon Rekognition compares your selfie with your main photo, whether or not a person has reviewed that photo yet, and our system records whether they show the same person. If a person has not yet reviewed your main photo, Amazon Rekognition first checks that it shows exactly one face; if it does not, the check stops, it does not count as an attempt, and we ask you to change the photo. Like any automatic comparison, it can fail even when both photos show you, and, apart from the check a person does (below), nobody at WeMet can mark you as verified by hand. Until a check passes, other members cannot see your profile and we cannot introduce you to anyone. You can try five times in any 24 hours, unless our support team resets your attempts. Where a person does the photo check instead (section 2), that person makes this decision, not a program; our system decides which way your check is done, as section 2 describes. Information used: your selfie and your main photo;
• your WeMet type. From your 25 questionnaire answers, our system works out where you sit on three scales (how you like to plan, where your energy comes from and how you say things) and which of eight types that gives, using fixed rules that are the same for everyone who answers the same version of the questionnaire. No person reviews it. It decides what your type report and your type card say; it does not decide whether you can use WeMet or join the waitlist. WeMet is new: once enough members have taken the questionnaire, we may refine these rules once, using the answers of WeMet's first members; if your type changes, we tell you and show you your updated report. Information used: your questionnaire answers;
• account checks. Our system does not accept a date of birth that shows you are under the minimum age where you live (18, or 19 or 21 in the places Terms section 1 lists; you cannot go on to the questionnaire). If your date of birth shows you are 18, 19 or 20, it does not yet know where you live, and you may live in the United States or Canada, it first asks for your ZIP or postal code to find that minimum. It does not accept a mobile number that is not from Australia, New Zealand, Singapore, the United States or Canada, a United States number that Twilio reports as an internet (VoIP), landline or other non-mobile line, as not a valid number, or as a number from outside the United States and Canada (if Twilio cannot tell us, we accept the number and record that it was not checked; Canadian numbers are not checked this way), a country on your profile that is not the country of your mobile number, a number you have not confirmed with the one-time code we send to it, or a number already verified on another WeMet account, unless that account was closed by its owner while it was in good standing (Terms section 2). It also limits how often codes can be requested and tried. Information used: your date of birth, your mobile number and, where needed, your postcode and the kind of line Twilio reports;
• whether you can join the founding-member waitlist. Our system checks that your account is open, that you have confirmed your mobile number and your email address, accepted the Terms of Use and this policy, and given a date of birth that shows you are at least the minimum age where you live, that you have finished the questionnaire, your profile basics and the prompts, that you have uploaded at least one photo that has not been rejected, and that your main photo has not been rejected. Information used: your account, your profile, your questionnaire and prompt answers and your photos;
• where introductions have opened, whether you are admitted from the waitlist, which members we introduce to each other, and the reasons in each letter (section 3b). A program decides admission, applies the rules, estimates how likely two members are both to say yes, to meet and to want to see each other again, and pairs members; an AI writes each letter from facts our program chose. In the first weeks after introductions open in an area, a person on our team reviews the week's introductions before they are released, and after that a person may review them; a reviewer can stop an introduction or pair a member with someone else who passes every rule, but can never introduce two members a rule keeps apart; depending on how the review is set up that week, introductions nobody reviews are either released as the program chose them or not released that week. Information used: what section 3b lists;
• whether a message you write in the introduction chat is delivered at once or held for a person (section 4b). A program never removes a message: a person decides whether a held message is let through or kept back. Information used: the text of the message;
• whether your self-introduction is shown. When you save it, our system looks for contact details, social media names, links to other apps and wording about money or gifts, and an AI (section 5, Anthropic) checks it for contact details, money or gift requests, sexual content and harassment. If neither finds anything, it is shown to the members we introduce you to; otherwise it is held until a person on our team approves or removes it, and, if the AI cannot check it in time, a person checks it instead. A program never removes a self-introduction, and nobody edits it: if it is removed, you are told why in general terms and can write a new one. Information used: the text of your self-introduction;
• whether you can request Private Matchmaking. Our system checks that your membership is active, when you joined, how complete your profile is, that your profile can be shown to other members (section 3 of the Terms), when you last made a request and whether one is still open. Information used: your account status and the date you joined, your profile, your photo check result and your earlier requests;
• payments. If you buy Plus or the Prime Circle, Stripe's own systems may decline a payment automatically as suspected fraud; if that happens, you can try another card or contact us. Information used: what section 5 says Stripe receives.

We open introductions city by city. Where they have opened, a computer program chooses at most one introduction a week for each member who takes part, and only when there is someone who fits; some weeks there is none. We only introduce members who live in the same country. To be included, you need an open account, a confirmed mobile number and email address, a finished profile and questionnaire, three to six approved photos including your main photo, a passed photo check and your acceptance of our Privacy Policy; you must have been admitted from the founding-member waitlist (our program estimates, from the members in your area who could be introduced to you, using their area, gender, who they want to meet and age group, how often it could introduce you, and admits you when that is often enough; it may move you back to the waitlist if it stays too low for a long time, and in some areas everyone who meets the other conditions is admitted); you must be taking part that week (where introductions have opened, you take part automatically once you meet these conditions, unless you pause; you can pause and resume in the app, and a pause never ends an introduction already under way) and not already have an introduction waiting for an answer. A member on a safety hold after a report is left out until the hold ends. A photo check that a person approved (section 2) counts the same as one done by software.

Rules that are never learned. Two members are never introduced if: either is not a gender the other wants to meet; either's age is outside the other's preferred age range (or, if someone has not set one, more than five years from their own age); the estimated travel time between the centres of their postcode areas is more than either member's travel limit (four hours if they have not set one), or we cannot estimate it, or they live more than 150 km apart; their relationship goals are more than one step apart; one definitely wants children and the other definitely does not (or has children and does not want more), or one would not date someone with children and the other has them; one would not date someone who smokes and the other does; either has blocked the other; or they have been introduced before (unless an earlier introduction ended without either of them opening the letter, in which case they may be introduced again after 90 days). Every rule is checked again on your current details just before the letters are written.

How pairs are scored. For pairs that pass the rules, a scoring model estimates how likely both members are to say yes, to meet and to want to see each other again. It uses: where each member sits on the three scales of their WeMet type; how many of their questionnaire answers to everyday situations are the same; how many prompt answers they both picked; whether their relationship goals are the same; the age gap; the travel time; whether they share a language other than English and how much that matters to each of them; whether each member's height preference is met and how much it matters to them; and, for a member who would prefer a partner who does not smoke or vape but is open to one, whether the other member smokes or vapes. It does not use your photos or how you look, your nationality, residency status, education, occupation or income, your faith or cultural background, health, drinking, your self-introduction, or the optional details in section 1. This is the same for Prime Circle members: the result of their check is never used for the weekly introduction. For weekly introductions, nobody at WeMet rates anyone's looks, and we do not make or keep any score of how attractive or popular a member is. The only exception is the Prime Circle looks check, which a member asks for: a person decides pass or fail, no score is made or kept, and the result is used only for the Prime Circle (below). Today the model uses fixed starting settings. We plan to improve it with members' answers to their introductions and their feedback (yes or no, whether they met, whether they would like to meet again); the rules above never change that way.

How pairs are chosen. The program pairs members so that as many promising introductions as possible happen that week, with each member in at most one. It gives some priority to members who have waited longer and to members who have fewer people who fit. It also uses some chance, so that it keeps learning which introductions work: it sometimes chooses a pair it is less sure about, and for a small group of members chosen at random each week it chooses among the pairs that pass the rules partly at random. When it chooses someone a little outside who it would usually pick for you, the letter says so; introductions made partly at random for that small group are not labelled. A new member's first introductions are never chosen partly at random. A member never has two weekly introductions waiting at once; a Prime Circle member may also get one Prime Circle introduction (below). No member is ever shown a score or a percentage.

Prime Circle introductions. Where we offer the Prime Circle (Terms of Use section 8b), when our program chooses the week's introductions, it also chooses Prime Circle introductions, separately, only among Prime Circle members who have unused picks, Plus and a current pass. It uses the same rules that are never learned, plus one more: each member is introduced only to members who passed the category they require. It scores and chooses pairs in the same way as above. Each Prime Circle member gets at most one Prime Circle introduction a week, only when someone fits. The letter is written in the same way, and also shows which categories each member passed, never an amount or a document.

Human review. In the first weeks after introductions open in an area, a person on our team reviews the week's introductions before the letters are released, and after that a person may review them; depending on how the review is set up that week, an introduction they have not reviewed by then, or one made again after they stopped another, is either released as the program chose it or not released that week. They see each member's first name, age, gender, area, country and WeMet type, whether there has been a report in the last 30 days, whether the member is on a safety hold, and the letter; they may also see each member's main photo, and other photos only if they open them, and each time photos are shown to them it is recorded. They can let an introduction go ahead or stop it for a fixed reason, such as safety, a data error or a broken rule; a stopped introduction is not shown to either member, and the program may then pair them with someone else. They can also pair a member with someone else from the members our program found possible for that member that week, including someone it scored lower; every change needs a typed reason. Every rule above is checked again on current details, they can never introduce two members a rule keeps apart, and each change is recorded with who made it.

The letters. Each introduction comes with a letter for each member, signed by WeMet. An AI writes it: we send Claude, Anthropic's AI model, through Amazon Bedrock, a service of Amazon Web Services, in AWS's Australian regions, a short list of WeMet's own fixed sentences about the two of you, the language to write in, and whether the letter is one of those a little outside who we would usually pick. They can cover: both WeMet types and how they complement each other; prompt answers you both picked; the other member's prompt answers; a relationship goal you share; a language you share other than English; whether you live close or about half an hour apart; children plans that are the same; and your occupation category, only when it is the same for both of you. The other member's name is replaced by a placeholder. We never send the AI your name, contact details, postcode, suburb, age, photos, self-introduction or anything you wrote. A second AI check makes sure every line is supported by those sentences; if a letter cannot be written or checked, we use a letter made from our own templates instead. We keep each letter's text, which sentences it used, which model wrote it, and technical records of the requests (time, size, cost and any error), not the requests themselves. Amazon says Bedrock does not use this content to train models and does not share it with the model's maker.

When a letter arrives. Where introductions have opened, letters are released on Wednesday at 19:00 your time; we email you that a letter is waiting, without any details about the other member. The letter stays sealed until you tap it. You first read why we introduced you, then you can tap to see the other member's photos and self-introduction, and you have three days to say yes or no, with one reminder a day before the end. If either of you says no, or the three days pass, the introduction ends for both of you, both of you see the same neutral message, and we email each of you to say it has ended (the email names the other member only if you opened their letter). If you both say yes, sections 4a and 4b apply. Before your next letter opens, we may ask whether a date you planned took place.

Members we introduce you to see, in their letter: your first name, your age as a number, the name of the area your postcode is in (never the postcode itself) or, if you have not given a postcode, your suburb, your WeMet type, your five background details (section 1), and the reasons the letter gives, which may mention your answers to the prompts, your relationship goal, a language you share, roughly how far apart you live, your plans about children where they are the same as theirs, and your occupation category where it is the same as theirs. After they tap to see your photos, they also see your approved photos and, if you added one and it has passed our checks, your self-introduction. If you both say yes, each of you also sees the other's contact details (section 4a). If you are in the Prime Circle, the Prime Circle members we introduce you to also see, in that letter, which categories you passed (for example "Verified: income"), never an amount, a document or a score; members we introduce you to in a weekly introduction do not see them.

Other members never see: your surname (we never ask for one), your date of birth, your postcode, your email address, mobile number and other contact details, unless you both say yes (section 4a), your selfie, your questionnaire answers or where they place you on each scale (people we introduce you to see only your type), the checks on how you answered, your answers to the short questions we ask from time to time, your preferred age range, travel time or distance, whether you would date someone who has children or who smokes or vapes, the height you would prefer, how much height or a shared language matters to you, your industry, your interests, your height, your smoking or drinking answers, the optional details in section 1, whether you joined through someone's invite link, the rules or scores used to choose introductions, who else you have been introduced to, whether you said yes (unless you both did), your answers to our check-in and questions after a date, your reports, whether you have Plus, whether you applied for a Prime Circle check or did not pass one, the documents you uploaded, your payment details, or how many picks you have. Photos that have not been approved are not shown to anyone. Nobody who has not been introduced to you can find or view your profile; there is no public directory or search. Apart from our team, the only exception is IDO's matchmakers, and only if you give the separate consent in section 6.

The internal scores are not sent to any member's browser, including yours.

If you share your type card, the card and its link show your type and, if you chose one, the picture you chose for it, and carry your invite code, but not your name, your photo or any other detail about you unless you choose to add it. Anyone you share it with can pass it on.

When you and a member we introduced you to both say yes, WeMet shows each of you, at once, the other's first name and contact details, so that you can arrange to meet: the mobile number they sign in with, whether it is on WhatsApp, and, if they chose to add them, their WeChat ID, their Telegram username and the email address they sign in with. You see each detail as it is on their profile at that moment. Each of you can see the other's details for 30 days after the shared yes. WeMet hides them at once if either of you tells us you will not meet, if either of you blocks the other, if either of you ends the introduction chat (section 4b) or WeMet ends the introduction (for example after a report), if either account is closed, suspended or removed, and while either account is on hold.

WeMet can also help you plan your first meeting. Each of you can mark the days and parts of the day you are free that week; neither of you sees the other's choices, only the times you both marked, although after a few changes the overlap may show more about the other's times. We may suggest places and times, and either of you can propose a time and a place, which the other can accept or change. When you both confirm, we email each of you the time and place with a calendar invitation and, for an Australian mobile number, send a text message, and we remind you about a day before. About three days after a shared yes, we ask each of you how it is going; we use your answers to run and improve introductions, and if you tell us something felt wrong, our team is alerted and we offer you a way to report it. If you cannot reach each other, you can message WeMet's support on WhatsApp, and a person on our team will help.

Anything the other member has already seen or saved, for example in their phone's contacts or a chat app, stays with them; we cannot remove it from there. Apart from the introduction chat (section 4b), WeMet does not carry messages between members, and we do not see or keep what you send each other outside WeMet. The Terms of Use (section 5) say what a member may use your contact details for.

When you and a member we introduced you to both say yes, WeMet opens a short chat for the two of you inside WeMet, next to the contact details in section 4a. It is open for up to 7 days. It closes earlier when you confirm a first meeting, and either of you can end it while it is open (you can pick a reason from our list, and if you pick that something felt wrong, our team is alerted); ending the chat also ends the introduction for both of you, and WeMet then stops showing each of you the other's contact details. It is plain text only: links, files and photos cannot be sent, although an email address can. There are limits on how many messages can be sent.

AI check of messages. Messages you write are sent to an AI check (Claude, through Anthropic's own service, in the United States; we send only the text of that message), which looks for requests for money, loans or payment details, offers of investments, trading or crypto, requests for gifts, sexual harassment or explicit content, threats, and text that tries to instruct the check itself. A message the check flags is held: the other member never sees it, you see that it is being checked, and a person on our team decides whether to let it through or keep it back. We never edit a message. Normally the check takes a few seconds and your message is delivered when it passes. If the AI cannot check a message in time, a message that passes a fixed list of words is delivered after about a minute and we keep trying to check it; if the check then flags it, or cannot be made for any reason other than the AI service being unavailable or busy or our daily limit of checks being reached (for example, the AI declines to check it), it is taken back from the other member and held for a person; in those last cases only, it stays delivered without a check. A message that the fixed list catches is never delivered before a check or a person has looked at it.

WeMet AI in the chat. WeMet posts a few messages of its own, labelled as WeMet's AI assistant and shown differently from yours; they never speak for either of you. When the chat opens, WeMet posts one opening question, normally written by an AI, and after 24 hours in which neither of you has written, it may post a new light question (at most three in a chat), also normally written by an AI; when the AI is not available, we post fixed wording instead. For these we send Claude, through Anthropic's own service, only: both WeMet types, the facts that both of your introduction letters gave, each member's self-introduction as the other member was shown it, the kinds of first meeting you both chose, and the languages you use WeMet in; never a name, photo, contact detail, postcode, an answer the other member was not shown, or anything written in the chat. On days 2, 4 and 6, WeMet may also post fixed words inviting you to meet, with a few place ideas (section 5, Google). If one of you has not replied to a message for 12 hours, we may remind that member once by email and, for an Australian mobile number, by text message, at most twice in a chat and only between 09:00 and 21:00 in their time zone; the reminder does not contain the message. If a new message reaches you and you have not read it after about 10 minutes, we may also email you that a message is waiting, at most once every three hours and only between 09:00 and 21:00 your time, unless you have turned these emails off; that email does not contain the message.

Reports and who reads the chat. You can report any message the other member sent, or the whole chat, from inside it. Nobody at WeMet reads a chat except a person on our team who is handling a report about it or a message the check held, and every time they open a chat we record who opened it and when.

How long we keep it. We keep the messages, whether each was delivered, held, let through or kept back, the check's result, and reports, so that the chat works and to keep members safe. We delete the messages 90 days after the introduction ends (when either of you ends the chat or says you will not meet, the introduction closes, or the 30 days in which you can see each other's contact details (section 4a) are over, including after a confirmed meeting, whichever is first; if the introduction is closed later, for example because an account is closed, we count from then), but never while a report or a held message from that chat is still waiting for a person. Closing your account ends the chat but does not delete it any sooner; if we delete information at your request, a chat with a report or held message still waiting is kept as evidence until a person has dealt with it.

We share personal information only with the service providers that run WeMet for us, and only as needed for that purpose:

• Supabase, which provides our database, sign-in, file storage and server functions. Its sign-in service passes your mobile number to Twilio, and your email address to Resend, to send your one-time codes. Your data is stored in Supabase's Sydney, Australia region. Supabase is a company based in the United States; its staff may access infrastructure from outside Australia for support and security purposes.
• Fly.io, which hosts the WeMet application in Sydney, Australia. Fly.io is a company based in the United States.
• Resend, which delivers the email we send you: your one-time codes and our notification emails. It receives your email address and the content of each email. Our emails never carry another member's photo, profile details or anything they wrote, and carry another member's first name only in an email telling you that an introduction whose letter you opened has ended or that a new message from them is waiting in your introduction chat. Other emails about an introduction or a shared yes only tell you that there is something to see in WeMet; the email confirming a meeting carries its time and the place's name and address, which we look up from Google when we send it and do not keep. Emails about your own account may name your WeMet type (the email with your type report also names the type it pairs with in the WeMet type story, with a few lines about them), your area and the steps you still have to finish. Resend is a company based in the United States. It sends our email from servers in Japan, and it keeps its records of the email it sends, including your email address, in the United States. If our team has chosen your introduction for quality checks (section 1a), Resend also delivers the masked copies to an internal WeMet mailbox.
• Twilio, which sends the one-time codes by text message that sign you in and confirm your mobile number. Twilio receives your number, and sometimes the language for the text message, and checks the code you type. For a United States number, Twilio's Lookup service also tells us what kind of line it is (for example mobile, landline or internet phone); for this it receives the number, and we keep only the result, with a scrambled form of the number (section 1a). We never send a Canadian number to Twilio's Lookup service. For an Australian mobile number, Twilio also sends our other text messages (section 3): reminders about joining or about a step you still have to finish, a reminder that a message in your introduction chat is waiting for a reply, messages about a meeting you are planning and, if an IDO matchmaker writes to you, a link to their message (section 6). Each holds a short line and a link, never another member's name or details. Twilio receives nothing else from your profile. Twilio keeps its own records of the text messages it sends, including the number each one went to. Your mobile number and these message records are shared with Twilio only to deliver the messages, to check your codes, to learn whether you replied STOP and, for a United States number, to check what kind of line it is, never for marketing. Twilio is a company based in the United States and handles your number outside Australia.
• Amazon Web Services, whose Amazon Rekognition service does the photo check in Sydney, Australia, unless a person does your photo check (section 2). It receives your selfie and your main photo for the comparison and, if a person has not yet reviewed your main photo, that photo first, to check that it shows one face. We have opted out of Amazon using this content to improve its services. Amazon says it may still store and use the photos sent to Rekognition in order to provide and maintain that service. Amazon Web Services also provides Amazon Bedrock, through which Claude, Anthropic's AI model, writes the introduction letters, in AWS's Australian regions, from the sentences section 3b describes. Amazon says Bedrock does not use this content to train models and does not share it with the model's maker. Amazon Web Services is part of Amazon, a company based in the United States.
• Anthropic, a company based in the United States, whose Claude AI models we use, through Anthropic's own service, for these things: to check a self-introduction when it is saved (we send only its text, section 3a); to draft a self-introduction when you ask (we send only the starter lines you picked, or the words you typed with any contact details removed first, and the language; never your name, account or profile); to suggest how to improve your own profile text (we send your text with email addresses, links, social media names, long numbers, dates and postcodes removed, with your WeMet type and language); and to write the short texts of meeting suggestions after a shared yes (we send both members' WeMet types, their answers to three questions about first meetings, the suburb each lives in and, for each suggested place, its kind, its distance from the halfway point, and the day and part of the day; never names, contact details, postcodes or the place's name); and, in the introduction chat, to check messages (we send only the text of each) and to write WeMet's own questions (section 4b). Anthropic handles this in the United States. Anthropic's commercial terms say it does not train its models on this content.
• Google, whose Google Maps Platform (Places) service we use to suggest places for a first meeting. For the ideas on your Home page, our server sends Google the centre of your postcode area, the kind of first meeting you prefer and your language; after a shared yes, the halfway point between both members' postcode areas and the kind of meeting, or the words you type to search for a place. We keep only Google's references for the places. Photos of places load in your browser directly from Google, so Google receives your IP address and browser details when you see them. We never send Google your name, account or address.
• Stripe, which will process payments for Plus and the Prime Circle for Deeplay Pty Ltd when you buy them. Our contract is with Stripe Payments Australia Pty Ltd, part of the Stripe group, whose parent company, Stripe, Inc., is based in the United States. Stripe collects your card details on its own payment page, and receives your email address, your country, the product, the amount and a reference number for your WeMet account. It processes the payment, sends receipts, may run the page where you manage Plus or change your card, and checks payments for fraud. Stripe also uses some payment information for its own purposes, such as preventing fraud and meeting its legal obligations, under its own privacy policy (stripe.com/privacy). We send Stripe nothing from your profile, your photos, your answers or your Prime Circle documents. Stripe processes payment information in the United States and other countries.
• Functional Software, Inc. (Sentry), which receives reports of errors in the WeMet website and app so that we can fix them, and stores them in its European Union data region. A report says what went wrong and where in our code, the address of the WeMet page without anything after its question mark, your browser and device type, and a short list of what happened just before the error, such as the pages opened, the requests made and the buttons tapped. Before a report leaves WeMet, we remove email addresses, phone numbers, codes, tokens, postcodes and dates from it, and we do not attach your name, your account's reference number, your cookies or the content of a form you send. Sentry sees the IP address a report from your browser comes from; we have set Sentry not to store IP addresses. Sentry is a company based in the United States.
• Google, whose Google Workspace service holds our email accounts, including hello@wemet.dating and support@wemet.dating. If you email us, your email is received and stored by Google, and email to hello@wemet.dating or support@wemet.dating is forwarded to Crisp (below), where our support team reads and answers it. Google is a company based in the United States and may store email outside Australia.
• Google, whose Google Analytics and Google Ads services we use to measure how visitors find WeMet and which of our advertisements lead to people joining (section 10a). On our public pages, Google's tag sends Google what section 10a describes. From our server, while measurement is on for you, we send Google Analytics the name and time of each of these steps: completing sign-up, finishing the questionnaire, completing your profile and joining the waitlist, with the Google Analytics identifiers kept with your account (section 1a), your country and a scrambled (hashed) code made from your account's reference number, not the number itself. When you complete sign-up after arriving from a Google advertisement, we also send Google Ads the reference of that advertisement click, the time of your sign-up and a reference number for that step. From our server, and from our tags, we never send Google your name, email address, mobile number, WeMet type, answers, age, gender, preferences or photos. Google is a company based in the United States.
• Meta Platforms, whose Meta Pixel and Conversions API we use to measure which of our advertisements on Facebook and Instagram lead to people joining (section 10a). While advertising measurement is on for you, the Meta Pixel on our public pages sends Meta what section 10a describes, and our server sends Meta the name and time of the same steps as for Google, a reference number for each step, the Meta identifiers kept with your account (section 1a), your browser's user-agent string, the IP address kept with them (for up to 30 days), the address of the WeMet page you arrived on with anything that could identify an invite removed, and, in the scrambled (hashed) form Meta requires, your country, your email address, your mobile number and a code made from your account's reference number. When someone sends a Private Matchmaking enquiry on our public page, or agrees to share their WeMet profile with IDO (section 6), and advertising measurement is on for them, our server also sends Meta a "Contact" event with its reference, its time, the page address, the browser identifiers, user-agent string and IP address, and, in scrambled (hashed) form, the mobile number and email address given; we keep those identifiers for at most 8 days. Meta uses the scrambled details to match the step to a Facebook or Instagram account; we never send Meta your name, WeMet type, answers, age, gender, preferences or photos. Meta Platforms is a company based in the United States.
• Crisp IM SAS, a company in France, which runs the chat in the app and on our website, and the support inbox where we read and answer email sent to hello@wemet.dating or support@wemet.dating. Crisp stores chat conversations, and those emails, in the European Union. When we answer that email in Crisp, Crisp sends our reply. When you use the chat, Crisp receives what you write, any file you send, and technical details from your browser, such as your IP address, your browser type and the address of the page you are on. If you are signed in, we also pass Crisp the internal reference number of your WeMet account and your account email address, so that we can find your account. Apart from what is sent to us in the chat or by email, and what you let us see by co-browsing (described below), we never pass Crisp your mobile number, your photos or your introductions. If you leave the chat before we reply, Crisp may send our reply to the email address it has for you, and it may alert our team's phones when you write. The network, email and phone-notification services Crisp uses, including to receive the email we forward to it and to send our replies and these alerts, include companies in the United States, such as Cloudflare, which carry the message on its way.
• A person on our team sends every reply we write to you, in the chat or by email; Crisp's AI does not answer you on its own. Automatic notices, such as our message outside support hours, are sent without a person. When we write a reply, we may use Crisp's AI writing tools to draft it or correct its spelling and grammar. To do this, Crisp may pass the conversation to one of its AI providers: OpenAI, Anthropic or Google, companies based in the United States, or Mistral, a company based in the European Union. Crisp says these providers use it only to produce the draft and do not keep it. We cannot check this ourselves, and a provider's own terms may let it keep the text for a time: OpenAI's standard terms, for example, let it keep text sent to it for up to 30 days to check for abuse. If we translate a message, Crisp may use Microsoft Azure, a company based in the United States, which Crisp says does not keep it.
• While the chat is open, our support team can see what you type in it before you send it. From the moment the chat loads until that browser tab is closed, reloaded or goes to another website, even after you close the chat, move to another WeMet page or sign out, our support team can also see that you are on WeMet, the WeMet page you are on and an approximate location that Crisp works out from your IP address; Crisp keeps that location with the conversation. Our support team can also ask to see the WeMet page you have open (co-browsing). It starts only if you agree when Crisp asks you, each time. Crisp hides what you type into form fields, WeMet hides other members' names, photos and details, and Crisp does not record the session. The rest of that page, which may include your own photos and profile, passes through Crisp so that we can see it.
• WhatsApp, a service of Meta Platforms, a company based in the United States, if you message WeMet's support WhatsApp number or our team contacts you there (for example, to help after a shared yes): WhatsApp receives your number and the messages, under WhatsApp's own terms. We use WhatsApp only for support, never for marketing.
• Members of the WeMet team in Sydney, who review photos and self-introductions, compare selfies with main photos where a person does the photo check, decide Prime Circle checks (only people on our team in Australia, who open the documents in our review tool, and every opening is recorded), may review and re-pair the week's introductions (section 3b), read the masked email copies made for quality checks (section 1a), answer support, help members who cannot reach each other after a shared yes, and handle reports. Every decision to reject a photo, act on an account or resolve a report is recorded with who made it and the reason. Our team can see the mobile number a member signs in with, and their contact details, in our admin tool. They are hidden until a person on our team chooses to show them, and each time they are shown we record who showed them, when, and which details were shown.

We may disclose information to law enforcement, regulators or courts where we are required or authorised to by law, and to protect the safety of a member or the public. We keep records of such disclosures.

We do not sell your personal information for money, and we do not give it to data brokers. We give advertising and analytics companies only what sections 5 and 10a describe, and only while measurement is on for your browser, apart from the cookie-free signals Google's tag may send from our public pages (section 10a). In some places, such as some states of the United States, giving Google and Meta this information for advertising may count as "selling" or "sharing" personal information; section 10a explains how to opt out.

We use outside artificial intelligence on your information in these places, all described in section 5: the photo check (Amazon Rekognition); the introduction letters (Claude through Amazon Bedrock, in Australia); checking self-introductions, drafting a self-introduction when you ask, ideas for improving your own profile text, the texts of meeting suggestions, and the check of messages and WeMet's own questions in the introduction chat (Claude through Anthropic's own service, in the United States); and Crisp's AI tools, which we may use when we write a reply to you in the chat or by email, or to translate a message. Google also applies its automatic spam and security filtering to all email in our mailboxes. Your WeMet type is worked out by WeMet's own program with fixed rules, and the scoring model that helps choose introductions is WeMet's own program; no outside artificial intelligence service receives your answers to the 25 questionnaire questions. We do not use any other outside artificial intelligence service to read your profile, your photos or what you write to us. If that changes, we will name the provider in this policy first.

Private Matchmaking is optional and separate from your WeMet membership. We pass your information to the matchmaking business below only in the ways this section describes, each with its own consent that you tick on its own screen. If you submit a Private Matchmaking request and tick the consent on that screen, we pass your first name, email address, the contact phone number you give on that screen (if you give one), your age, city, relationship goal, commitment timeline and your answers to the Private Matchmaking questions on that screen to I DO International Pty Ltd (ACN 625 201 685) ("IDO"), which runs IDO Matchmaking, a professional matchmaking business in Australia, so that a matchmaker can contact you by the method you choose on that screen (email or phone call). IDO is a separate company from Deeplay Pty Ltd. The person who founded WeMet and runs Deeplay Pty Ltd also owns IDO. IDO provides its matchmaking services on its own terms and sets any fees. Deeplay Pty Ltd receives no referral fee or other benefit from IDO for passing on a request. Your answers may include sensitive information, such as the gender of the partner you are looking for, if you choose to write it. We do not pass on the mobile number you verified when you joined. We record the exact consent text you accepted, its version, the time, and your IP address and browser. Through such a request, nothing else from your WeMet profile, and none of your photos, introductions or responses, is shared with IDO. Whatever you choose, your questionnaire answers, prompt answers, answers to our short questions, introductions and responses are never shared with IDO. We never share Prime Circle documents, check results or payment information with IDO.

You can withdraw the consent for a Private Matchmaking request (the paragraph above) at any time from the Private Matchmaking screen. Withdrawing stops us passing your request on if we have not already done so. If your request has already been passed to IDO, we do not ask IDO to return or delete it, and we do not tell IDO that you withdrew. From that point IDO holds your information under its own privacy policy and Australian privacy law, and you can ask IDO to stop by emailing verification@idoicity.com. Joining WeMet never causes any contact from IDO.

Sharing your profile with IDO. If you tick the consent on the Private Matchmaking card in WeMet, we share with IDO what that consent lists: your first name, email address and the mobile number you verified with WeMet; your WeChat ID if you enter one, how you prefer to be contacted and your best contact time; your age, gender, who you want to meet, city, region, country and the language you use WeMet in; your WeMet type; your income band, height, education, occupation category and your self-introduction once it has passed our checks; copies of your approved photos, sent as links that stop working after 7 days, including photos approved later (IDO may keep copies until you withdraw); and the campaign details of the link that brought you to WeMet. IDO's matchmakers may then contact you by WeChat, text message, phone call or email. IDO may tell us only whether it has contacted you and whether you became an IDO client; we use this for our own reporting and to measure our advertising. You can withdraw this consent at any time in WeMet. When you withdraw, or close your account, we stop sharing and tell IDO, and IDO stops contacting you and deletes the details and photo copies we sent, except the contact details it keeps on a do-not-contact list so that you are not contacted again, unless you are already an IDO client.

IDO's view of your profile. With a further, separate consent, IDO's matchmakers can open a private, read-only page on WeMet that shows your photos, basic details, profile details, self-introduction, WeMet type and type report, never your questionnaire or prompt answers, email address, mobile number, WeChat ID, postcode or date of birth. Under the current version of that consent, IDO receives one private link for you: anyone who has it can open the page, and IDO must keep it private. We keep only a scrambled form of the link. We record each opening with its time, IDO's staff reference where IDO's system provides one, and a scrambled code made from part of the network address it came from, never the address itself; we limit how often the page can be opened and alert our team to unusual use. The link stops working when you withdraw that consent or your Private Matchmaking consent, close your account, or if your account is suspended or removed or put on a safety hold. We keep the records of openings, and of links that were stopped, for 12 months.

Enquiries from our public page. Anyone can send a Private Matchmaking enquiry on our public Private Matchmaking page without a WeMet account. With the consent on that page, we pass to IDO what you enter (your first name, your WeChat ID and/or mobile number, your email address if you enter one, city, country, age range, how you prefer to be contacted and your best contact time), the language of the page and the campaign details of the link that brought you, and, if you choose to continue to the optional second step, your answers there about yourself and the person you would like to meet, which may include sensitive information. We also keep the IP address and browser details of each step; those of the second step are deleted after 30 days, and second-step answers that were never passed to IDO are deleted 90 days after you send them. You can withdraw by emailing privacy@wemet.dating with the reference shown after you send the form; withdrawing the enquiry also withdraws the second step, and we tell IDO, which stops contacting you and deletes the details we sent, except the contact details it keeps on a do-not-contact list, unless you are already an IDO client.

Messages from your matchmaker. If an IDO matchmaker writes to you through WeMet, we deliver the message by email (from mail.wemet.dating) or, if you gave only an Australian mobile number, by a text message with a link to a private page on wemet.dating, where you can read the conversation, reply and stop the messages without signing in. We keep only a scrambled form of that link. We keep the conversation (the matchmaker's name, their messages, your replies and whether each was delivered) in our database in Sydney and pass your replies to IDO. We delete it 12 months after its last message, and at once if you withdraw your Private Matchmaking consent, close your account or ask us to. If you ask to stop the messages, we keep that choice. These messages are about your enquiry with IDO, never marketing; replies to the email address or the text message itself are not read.

Your account, profile and photos are stored in Australia, in Supabase's Sydney region, and the WeMet application runs in Sydney on Fly.io. If you live in New Zealand, Singapore, the United States or Canada, this means your information is held in Australia. Amazon Rekognition does the photo check in Sydney, and the introduction letters are written through Amazon Bedrock in AWS's Australian regions; Amazon says it may store those photos to provide and maintain its service, as section 5 explains. I DO International Pty Ltd (IDO Matchmaking), which receives a Private Matchmaking request (section 6), is an Australian company. Documents you upload for the Prime Circle check are stored in our file storage in Sydney and deleted after the check (section 8).

Some of your information leaves Australia:

• your mobile number, and sometimes the language for the text message, go to Twilio in the United States each time we send you a one-time code or another text message, and a United States number also goes to Twilio when we check what kind of line it is;
• error reports (section 5) go to Sentry, a United States company, which stores them in the European Union;
• a self-introduction you save, the words you give our writing help, your profile text for writing ideas, and the facts for meeting suggestions, and the messages and facts of the introduction chat (sections 4b and 5) go to Anthropic, a United States company, which handles them in the United States;
• for meeting ideas, the centre of your postcode area or the halfway point between two members' areas, and the words of a place search, go to Google, a United States company; photos of places load in your browser directly from Google;
• your email address, and the content of each sign-in code and notification email we send you, are handled by Resend, a United States company, which sends our email from Japan and keeps its records of that email in the United States;
• email you send us is stored by Google, a United States company, which may store it outside Australia; email to hello@wemet.dating or support@wemet.dating is also stored by Crisp in the European Union and handled as the next item describes;
• while measurement is on for your browser, what Google's and Meta's tools collect on our public pages, and what our server sends them (sections 5 and 10a), goes to Google and Meta, United States companies, which may process it in the United States and other countries; the cookie-free signals Google's tag may send before you choose, or after you opt out, go to Google in the same way;
• what you write in the chat, and any file you send, with the details listed in section 5, is stored by Crisp in the European Union. When we use an AI writing tool on a reply, it may be processed by OpenAI, Anthropic or Google in the United States, or by Mistral in the European Union; if we translate a message, by Microsoft Azure in the United States. It may also pass through the network, email and phone-notification services described in section 5, some of them in the United States;
• if you buy Plus or the Prime Circle, your payment information goes to Stripe, whose parent company is in the United States, and which processes it in the United States and other countries (section 5);
• if you message our support on WhatsApp, or we contact you there, your number and the messages go to WhatsApp (Meta Platforms), a United States company;
• Supabase and Fly.io are United States companies. Your data is stored in their Sydney infrastructure, but their staff may reach it from outside Australia to support and secure it.

While your account is open we keep your profile, photos, questionnaire and prompt answers, your type and account records so that WeMet can work. When you close your account, your profile is hidden at once, any introduction you have under way ends, and, unless we have suspended or removed your account, your mobile number can no longer be used to sign in to it. Closing your account does not delete your information, with these exceptions. We delete at once the record of when you last opened WeMet from its icon (section 1a), your contact details for dates (section 1), the record of which contact details you shared (section 1a) and any selfie still waiting for a person to check (below). Two more exceptions are about your mobile number: when you close your account, unless we have suspended or removed it (Terms section 2), we remove the number from your account in our sign-in service at once; and if someone else later verifies the same number, we also remove it from your closed account's profile. If we have suspended or removed your account, the number stays with that account. Even after the number is removed, our sign-in service may still keep its own record that the number was once used with your account.

• a support conversation, by chat or by email, is kept for 24 months after its last message if it involves a safety report, and for 12 months after its last message otherwise, and is then deleted. Crisp keeps the IP address of anyone who starts a chat as part of its own records, and may keep it after the conversation is deleted;
• page records (section 1a) are deleted automatically once 30 days have passed since the page they record was last open on your screen (we check every hour);
• a selfie sent for a person to check (section 2) is kept only while the check waits, and is deleted as soon as the check is decided or cancelled. A waiting check is cancelled when your main photo changes or is not approved, or when your account is closed, suspended or removed; if nobody has decided the check 7 days after you sent the selfie, the check is cancelled and the selfie deleted. A selfie that we cannot accept for checking is deleted at once; if we cannot tell at once whether it was accepted, or deleting it fails, it is deleted about an hour after you sent it. The record of the check (section 1a) is kept like the other photo check records;
• the record of which contact details you shared with a member (section 1a) is deleted as soon as that introduction ends, including when either of you closes their account or we suspend or remove either account. Your contact details stay on your profile until you remove them or close your account;
• after a shared yes, each member can see the other's contact details for 30 days (section 4a);
• the letters you receive, and the records our program makes when it chooses introductions (section 1a), are deleted 12 months after they were made, and the text of a letter about a member is cleared at once if that member closes their account. A person's decision in a review is also kept for 12 months. A safety hold is kept for 24 months after it ends;
• the record of the checks on your self-introduction is kept like the rest of your profile; the daily counts of how often you used our AI writing help are deleted after 7 days, and our totals for everyone after 60 days. The places suggested for your area are deleted after five weeks, and place searches made while planning a meeting after 7 days;
• the conversation with an IDO matchmaker (section 6) is deleted 12 months after its last message, or earlier as section 6 says; the records of each opening of IDO's view of your profile, and stopped links, are kept for 12 months;
• the scrambled unsubscribe links in our emails stop working, and are deleted, after 180 days;
• the scrambled codes of the email address and mobile number of a person who earned an invite credit (section 1a) are kept after their account is deleted, so that a person cannot earn a credit twice;
• messages in an introduction chat are deleted 90 days after the introduction ends (section 4b), never while a report or held message from that chat is waiting for a person (section 4b);
• the visit counts on our public pages (section 1a) are kept with their daily visitor codes for 35 days, and the records of the questionnaire and sign-up steps until the next day, after which we keep only totals per day; the rough source kept with a new account is deleted with the account;
• the result of checking what kind of line a United States number is (section 1a) is deleted automatically 90 days after the number was last checked (we check every day), and the scrambled IP address and time kept to limit those checks are deleted once they are an hour old (we check every five minutes);
• records of photo checks, photo reviews, reports, decisions about accounts and the consents you gave are kept as long as we need them to run WeMet safely and to meet our legal obligations;
• your questionnaire, prompt and weekly-letter answers, the earlier answers we keep when one is replaced, your type results and the checks on how you answered are kept like the rest of your profile, until you ask us to delete them (section 8a);
• the record that you refused measurement (section 10a) is kept with your account until your account is deleted;
• the advertising and analytics identifiers kept with your account (section 1a) are deleted 90 days after you join the waitlist, or 12 months after you create your account if that comes first, and at once when you close your account, opt out or choose "Reject"; the IP address kept with them is deleted after 30 days. The advertisement click cookies on your browser (section 10) last 90 days. Google and Meta keep what they receive under their own terms, and we do not control how long;
• documents you upload for the Prime Circle check are kept only while the check waits, and are deleted as soon as it is decided or you cancel it. If nobody has decided a check 7 days after your upload, we cancel it and delete the documents. Closing your account or withdrawing your consent deletes any documents still waiting at once;
• the result of a Prime Circle check (category, pass or fail, date, when it ends, and who decided) is kept while your account is open and for 12 months after it closes or after you withdraw your consent, so that we can answer questions and complaints about it; a fail is kept for 90 days only;
• your Prime Circle choices and picks are kept while you are in the Prime Circle and for 12 months after you leave;
• payment and refund records are kept for as long as tax and accounting law requires, which in Australia is generally five years, even after you close your account. Stripe keeps its own records under its own terms;
• product events are kept while we need them to improve WeMet;
• everything else is kept until you ask us to delete it (section 8a).

Apart from what section 8 says closing deletes, the page records, the selfies sent for a person to check, the documents uploaded for the Prime Circle check, the records of which contact details you shared, and the results of checking what kind of line a number is and the scrambled IP addresses kept to limit those checks, all in section 8, the short-lived codes for continuing the photo check on your phone (a code more than a day old is deleted when you create a new one), the questionnaire answers saved as you go (replaced by your final answers when you finish), and the other records section 8 says are deleted after a set time, we do not yet delete information automatically, and closing your account does not delete it, except that closing your account deletes the letters you received, the text of letters about you, and our program's records about you for choosing introductions (a safety hold stays for its 24 months). You can ask us to delete your information at any time, by email to hello@wemet.dating or through the chat. We record your request with the date it is due, and we will do so within 30 days, unless the law requires us to keep it. We may keep a record of a safety decision about your account, such as a ban, so that it cannot be avoided by signing up again. Our 30-day deletion covers the copies we control, including our copies of your chat and email conversations with us. Some records are kept by our service providers under their own rules, such as Resend's and Twilio's records of the emails and codes they sent you and the IP address Crisp keeps (section 8). They may keep these for longer than we do, and we cannot promise when they delete them. Copies in backups stay until those backups expire. If your Private Matchmaking request was already passed to IDO, you also need to ask IDO (section 6).

The advertising and analytics identifiers kept with your account and the IP address kept with them are also deleted automatically, as section 8 says, and opting out deletes them at once if you are signed in.

Your information is encrypted in transit and at rest. Sign-in uses one-time codes; there are no passwords to steal. Anyone who can receive the text messages sent to your mobile number can sign in to your account, so tell us at once if you lose your number or stop using it. Photos are stored privately and shown through short-lived links only to the people entitled to see them. Prime Circle documents are stored privately and opened only by the people on our team who decide those checks, and every opening is recorded. Members can read only their own records; every cross-member action goes through server-side checks. Only WeMet team members who need to can see a member's information, and every decision to reject a photo, act on an account or resolve a report is recorded with who made it and the reason. We notify affected people and the Office of the Australian Information Commissioner of eligible data breaches as the Notifiable Data Breaches scheme requires.

On the pages of your account, and on sign-in and the steps of joining, we do not load advertising or analytics tools. On our public pages we use advertising and analytics cookies and tools from Google and Meta, as section 10a describes. Two first-party cookies, wemet_ref and wemet_utm, record which invite code or campaign link brought a visitor to WeMet; they hold only that code or those labels and are described below. WeMet's fonts are served from our own servers. No Crisp code loads until you tap the chat button. If you buy Plus or the Prime Circle, you pay on Stripe's own payment pages, outside our website; any cookies Stripe sets there are Stripe's, under its own policy. If an error happens on a WeMet page, WeMet's own code sends an error report to Sentry (section 5); this sets no cookie and writes nothing to your browser's storage. Page records (section 1a) set no cookie of their own and write nothing to your browser's storage. A signed-out visit is told apart only by a random number held in the open tab's memory, and in our count of visits to public pages by a daily code our server makes without a cookie (section 1a); a signed-in visit is linked to your account through the cookies that keep you signed in, listed below.

WeMet uses only these cookies and browser settings:

• the cookies that keep you signed in;
• wemet_locale, a cookie that remembers the language you chose. It lasts up to one year, is also set for visitors who are not signed in, and can be read by scripts on our pages;
• wemet_ref, a cookie that remembers the invite code in a WeMet invite link you opened (for example, from someone's type card), so that if you join, we can record which code brought you (section 1a). It holds only the code, lasts 30 days, is not replaced by a later invite link, and is also set for visitors who are not signed in;
• wemet_utm, a cookie that remembers the campaign label (utm_source, utm_campaign and utm_content) of the first link with one that brought you to WeMet, so that if you join, we can record it (section 1a). A later link from a Google or Meta advertisement replaces it; no other link does. It holds only those labels, lasts 30 days from when it was last set, cannot be read by scripts on our pages, and is also set for visitors who are not signed in;
• wemet_consent, a cookie that remembers your choice about measurement (section 10a), or, where measurement is on by default, that you have not opted out, and which version of our cookie notice it was given under. It lasts 12 months, is also set for visitors who are not signed in, and can be read by scripts on our pages;
• while measurement is on for your browser (section 10a): Google Analytics cookies _ga and _ga_ followed by a code for WeMet's Google Analytics property, which last 13 months and are renewed each time you visit our public pages, and Google's advertising cookies whose names begin with _gcl_;
• while advertising measurement is on for your browser (section 10a): the Meta cookies _fbp and _fbc, which Meta sets for 90 days and renews on later visits; and three WeMet cookies, each lasting 90 days: wemet_click, which remembers the reference of the Google advertisement click that brought you (gclid, gbraid or wbraid) and the public page you arrived on; wemet_fbc, which remembers the reference of the Meta advertisement click that brought you (fbclid) in Meta's _fbc format with the time it was first seen; and wemet_clickseen, which holds only short scrambled codes of recent advertisement clicks and when each was first seen, never the click references themselves, so that reopening an old page cannot replace a newer click;
• before you answer our cookie notice, or before our measurement notice has appeared on your screen (section 10a), and only until then or until you close the tab: settings in your browser's session storage for that tab, wemet_gclid_seen and wemet_fbclid_seen, which hold the reference of the advertisement click the tab arrived with and when, so that it can be kept once measurement may start; and wemet_consent_prompt_closed, which remembers that you closed the question on a sign-in or joining page without answering it;
• wemet_region, a cookie that remembers which version of the cookie link at the bottom of our public pages your browser's time zone calls for ("Cookie settings", the Australian, New Zealand and Singapore wording, or the United States wording), so that the right one shows at once on later pages. It holds only that word, lasts 12 months, can be read by scripts on our pages, is also set for visitors who are not signed in, and never decides whether anything is measured;
• wemet_consent_reload and wemet_landing_reload, one-time notes in your browser's session storage for that tab, holding only a page address and a time, so that a page reloaded because your choice changed is not counted twice and is not reloaded again within a few seconds;
• wemet.safety-sheet.v1, a setting in your browser that remembers you have read our safety reminder;
• wemet.policy_notice_dismissed, a setting in your browser that remembers that you tapped "Got it" on our notice about a new version of this policy and the Terms of Use, holding only that version, so that we do not show the notice again on that browser;
• wemet_locale_hint_dismissed, a setting in your browser that remembers you dismissed our suggestion to switch language;
• wemet.prequiz, a setting in your browser that keeps your answers to the questionnaire on our public quiz page before you sign up, so that you can finish later and use them when you join. It stays in your browser, is not sent to us before you sign up and choose to use the answers, and is deleted 7 days after your last answer or once your answers are saved to your account; wemet.prequiz.removed, a note of about a minute that stops another open tab putting deleted answers back; and wemet.prequiz.import, a note in your browser's session storage for that tab while your answers are being saved to your account;
• wemet.stale_action_reload, a note in your browser's session storage for that tab holding only a time, so that when a page left open across an update to WeMet needs to be loaded again, it is reloaded at most once in 10 minutes;
• wemet_vip_join, a cookie set only if you tap "Join WeMet" after sending a Private Matchmaking enquiry on our public page. It holds the enquiry's reference with a code that proves it came from us, so that after you join we can offer to add your WeMet profile to that enquiry (nothing is shared without your consent, section 6). It lasts up to 30 days and cannot be read by scripts on our pages;
• ido_view_go, a cookie set only in the browser of an IDO matchmaker who opens a single-use link to a member's profile (section 6). It holds only "1", applies only to that link and lasts 2 minutes;
• wemet_install_prompt_dismissed, a setting in your browser that remembers that you tapped "Not now" on our suggestion to add WeMet to your home screen, or tapped its "Install" button and then closed your browser's install window without installing, so that we do not show the suggestion again on that browser for 30 days. It holds only the date. WeMet deletes it on a later visit, once those 30 days have passed or we have switched this feature off, and you can clear it in your browser at any time;
• if your browser supports it, a service worker: a small WeMet script your browser keeps so that, when a WeMet page cannot load because your browser cannot reach us (for example, with no connection), it can show a WeMet page saying you are offline. It keeps a copy of that one page, which includes the WeMet logo, in your browser's storage. It never keeps a copy of any other page or of your profile, photos, messages, introductions or anything else about you, and apart from downloading that page, it only passes on the page requests your browser would make anyway, and your browser checks our server for a newer version of it;
• if you tap the chat button: the Crisp chat loads from Crisp's servers, and Crisp sets cookies whose names begin with crisp-client/, such as crisp-client/session/ followed by the ID of WeMet's chat (a browser may show each / as %2F). They keep your chat conversation going across pages and visits. They last up to six months and are renewed when you come back. Crisp says its cookies are not used for tracking. Crisp also keeps settings in your browser whose names begin with crisp-client/, such as a copy of the chat session and a count of visits with the time of the last one, which Crisp can record only once the chat has loaded;
• wemet_support_chat_owner, a setting in your browser that WeMet writes once the chat has loaded. It holds a code made from your account's internal reference number, not the number itself, or one code shared by every visitor who is not signed in, together with the identifier Crisp gave that chat session. Before the chat next loads on that browser, WeMet compares that code with the person who tapped the button, and that identifier with the chat session Crisp has kept. If Crisp has left anything in the browser and the code belongs to someone else, the chat session is a different one, or the setting is missing or cannot be read, WeMet deletes Crisp's cookies and settings first; if they cannot be deleted, the chat does not load and we offer email instead. This is so that a conversation started while signed in is not shown to anyone who later uses the chat on that browser signed out or signed in to another account, and a conversation started while signed out does not carry on after someone signs in. WeMet cannot tell apart two people who both use the chat without signing in, so the second of them may see the first one's conversation. Deleting Crisp's cookies and settings does not delete the conversation: our support team still has it, for as long as section 8 says.

Where they run. We use Google Analytics, Google Ads and the Meta Pixel only on WeMet's public pages: the pages anyone can open without signing in, including the public quiz page, in every language. While you answer the questions on the public quiz page, these tools see only that you are on that page, never your answers. They never run on the pages of your account, on sign-in or the steps of joining, or on any page that shows another member, a letter, your profile or your photos. When you move from a public page to the pages of your account, the page reloads, so the tools stop. Before a public page with an invite code in its address loads, we remove the code from the address, so the tools never receive it.

What they do. Google Analytics and the Meta Pixel set the cookies listed in section 10 and send Google and Meta the public pages you open, when, how you arrived (including the campaign label and the advertisement click reference in the address), your device and browser type, and your IP address. If you arrived from one of our advertisements, we keep the reference of that click (Google's gclid, gbraid or wbraid, or Meta's fbclid, which we keep in Meta's _fbc format) in a cookie on your browser for 90 days, so that we can tell which advertisement brought you if you join. Meta may use what its Pixel collects, under its own terms, to deliver the advertisements it shows you and to choose them for you. If you then join WeMet, we keep the identifiers described in section 1a with your account so that our server can tell Google and Meta when you complete a step of joining, as section 5 says.

On by default, or asked first. If your device's time zone places you in Australia, New Zealand, Singapore or the United States, measurement may be on by default. The first time you open one of our public pages we show a short notice saying so, with a button to turn it off; no measurement tags load and nothing is sent to Google or Meta until that notice has appeared on your screen. If you arrive on sign-in or a step of joining first, a short line there says the same, and nothing is recorded or sent until that line has been on your screen or you have used the page; the first public page you open after that still shows the notice once before its tags load. You can turn measurement off at any time (below). If you are in Canada, if you are signed in and your WeMet profile says you live in Canada, or if we cannot tell from your device's time zone that you are in one of those four countries, our cookie notice asks you first: no measurement cookie is set and nothing is sent to Google or Meta for measurement before you accept, apart from the cookie-free signals described below (the tab you opened may hold the advertisement click reference in its session storage until you answer or close it, section 10). We work this out in your browser from its time zone setting; we do not use your IP address to locate you for this. Accepting and refusing are equal choices, and under "Settings" you can choose Google Analytics and advertising separately.

Opting out. You can turn measurement off, or change your choice, at any time with "Cookie settings" (in Australia, New Zealand and Singapore it reads "Cookie settings · Do not sell or share my info", and in the United States "Cookie settings · Do Not Sell or Share My Personal Information") at the bottom of every public page. If your browser sends a Global Privacy Control signal, we treat it as an opt-out everywhere, and Google's and Meta's tags do not load at all. Opting out, or choosing "Reject", stops the tools on that page at once and deletes the advertising cookies on wemet.dating (Google's _gcl_ cookies, Meta's _fbp and _fbc, wemet_click, wemet_fbc and wemet_clickseen) and the Google Analytics cookies (_ga and _ga_); turning only advertising off deletes the advertising cookies. If you are signed in, it also deletes the identifiers kept with your account and any step not yet sent; a step already sent cannot be called back. A choice you made before stays in place: if you refused, measurement is not turned back on by default, and an answer you gave is never replaced by a default. If you are signed in when you refuse, we keep a record with your account that you refused, so that measurement is not turned on by default for your account on another browser or device either; accepting again removes that record. Your choice is kept in your browser, so make it again on each browser or device you use.

Do not sell or share my personal information. In some states of the United States, such as California, giving Google and Meta information about your visits for advertising may count as "selling" or "sharing" personal information, and you have the right to opt out of it. Use "Cookie settings" (in Australia, New Zealand and Singapore it reads "Cookie settings · Do not sell or share my info", and in the United States "Cookie settings · Do Not Sell or Share My Personal Information") at the bottom of any public page and turn advertising off, or turn on Global Privacy Control in your browser; we honour either for that browser and, if you are signed in, for the identifiers kept with your account. You can also ask us by email to hello@wemet.dating. We will not treat you differently for opting out.

Before you choose, and after you opt out. Where we ask first, and after you opt out, Google's tag still loads on our public pages, with every kind of storage turned off (unless your browser sends Global Privacy Control). It sets and reads no cookie, but it sends Google short signals without cookies when a page loads, such as the time, the address of the page with any invite code removed, your browser details, whether you arrived from a Google advertisement and your choice, and, like every request your browser makes, your IP address. Google says it uses these signals to estimate, without identifying you, how many visits and sign-ups its advertisements lead to. The Meta Pixel does not load at all then.

Personalised advertising. While advertising measurement is on for your browser, Google and Meta may also use what their tools collect on our public pages to show you WeMet advertisements on other websites and apps, including their own services, and to measure those advertisements. WeMet shows its advertisements only to people in Australia, New Zealand, Singapore, the United States and Canada. WeMet never uses the pages of your account, your answers or anything you do after you sign in to choose who sees our advertisements. We may ask Meta to use the steps of joining our server reports (section 5) to stop showing our joining advertisements to people who have already joined and to find people similar to those who joined; Meta forms these groups itself, and we never upload customer lists (files of members, their email addresses or phone numbers) to Google, Meta or any other advertising network; the scrambled details our server sends with each step are described in section 5. You can also manage the advertisements you see in your Google and Meta settings.

We do not send marketing messages. If we ever offer them, we will ask for your separate, optional consent first, and you will be able to withdraw it at any time.

The emails and text messages in section 3 are about your account and your use of WeMet, not marketing. You can turn off the weekly update and the reminders about joining with the link in each of those emails, choose in your settings which emails about introductions and the weekly update you receive, and reply STOP to any of our reminder or meeting text messages to stop our text messages other than sign-in codes. Sign-in codes cannot be turned off. Receipts, purchase confirmations, Prime Circle check results, the payment link after you pass, and messages about your picks or refunds are service messages about your account, not marketing.

• edit your profile, preferences and photos at any time in the app;
• add, change or remove the optional contact details shown at a shared yes on your profile at any time, and remove contact details you added earlier (section 4a);
• end an introduction chat while it is open, and report any message in it (section 4b);
• pause taking part in introductions, and resume, at any time in the app (section 3b);
• turn off the weekly update and the reminders about joining with the link in each email, choose which emails about introductions you receive in your settings, or reply STOP to one of our reminder or meeting text messages (section 11);
• withdraw your consent to the photo check at any time from your profile (your profile is then hidden until you verify again);
• withdraw your Prime Circle consent at any time, in WeMet or by contacting us: we then delete any documents still waiting, stop showing your "Verified" categories and stop Prime Circle introductions, and keep the result as section 8 says;
• cancel Plus at any time (Terms of Use section 8a), and ask for a refund of unused Prime Circle picks (Terms of Use section 8b);
• report a concern or ask for help through the chat on our website or in the app, or by email to hello@wemet.dating;
• close your account at any time from your profile screen (closing deletes only what section 8 lists; see section 8a);
• ask us for a copy of the personal information we hold about you, including your payment records and check results, ask us to correct it, or ask us to delete it, by emailing hello@wemet.dating or through the chat; we respond within 30 days;
• withdraw your Private Matchmaking consent at any time in the app (section 6 explains what that can and cannot stop);
• turn advertising and analytics measurement off, or change your choice, at any time with "Cookie settings" (in Australia, New Zealand and Singapore it reads "Cookie settings · Do not sell or share my info", and in the United States "Cookie settings · Do Not Sell or Share My Personal Information") at the bottom of every public page, or with your browser's Global Privacy Control signal (section 10a);
• complain to us about how we have handled your information; if you are not satisfied with our response you can complain to the Office of the Australian Information Commissioner (oaic.gov.au), and, if you live in New Zealand, to New Zealand's Office of the Privacy Commissioner (privacy.org.nz). If you live in Singapore, the United States or Canada, you may also be able to complain to the privacy regulator where you live.

WeMet is only for people aged 18 and over, or older in some places in the United States and Canada (Terms section 1). We ask for your date of birth before the questionnaire; if it shows you are under the minimum age where you live, you cannot go any further, and we do not store that date or any questionnaire answer. If your date of birth shows you are 18, 19 or 20, we do not yet know where you live, and you may live in the United States or Canada, we ask for your ZIP or postal code first to find that minimum; if you are under it, the postcode we keep (section 1) stays with your account like the other information in this section. By then you have already given us your mobile number, your email address and your acceptance of the Terms of Use and this policy, and we also hold the technical records and product events described in section 1a and, if you came to WeMet through an invite link or a campaign link, which code or label it carried. They stay with the account you created, and we keep them as section 8 describes: your acceptance with the other records of the consents you gave, your mobile number and email address, so that you can sign in to the account again, until you ask us to delete them (section 8a), and the other records as that section says. We do not close the account or delete its mobile number or email address automatically, and we do not send that account the reminder email about an unfinished sign-up. We do not knowingly collect information from anyone under 18, and we remove from WeMet any account we find to belong to a minor; removing an account does not delete most of its information (section 8).

Each version of this policy has a version number and an effective date. When we change this policy, we publish the new version on this page, with its version number and effective date, no later than the day it takes effect. If we make a material change, such as collecting new kinds of information, using a new provider, or changing how verification works, we also tell you about it in WeMet where you will see it, such as a notice on the pages the change affects. Where we decide a change needs your acceptance, we ask you to accept the new version before you continue using WeMet, and we keep a record of the version you accepted. Where a change concerns something we do only with your separate consent, such as the photo check (section 2), a Private Matchmaking request (section 6) or measurement tools where we ask you first (section 10a), we ask for that consent on its own screen and never treat the new version as that consent. If our notice about a new version has a button such as "Got it", tapping it records that you accept that version, with the time, your IP address and your browser details, like any other acceptance; using WeMet never depends on it. Otherwise, if you keep using WeMet after the effective date, the new version applies to you. Every new member accepts the version in effect when they join.

Deeplay Pty Ltd (ACN 690 506 079, ABN 68 690 506 079), Sydney, Australia. Privacy questions, access, correction and deletion requests: hello@wemet.dating.