Privacy Policy for Mutual

1. Introduction

Welcome to Mutual ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Service").

Mutual is a Discover mutual interest without the awkwardness through unique user IDs and QR codes.

2. Information We Collect

2.1 Personal Information You Provide

• Account Information: Name, email address, and password when you register
• Profile Information: Username (automatically generated unique identifier)
• Communication Data: Match requests and interactions with other users

2.2 Automatically Collected Information

• Device Information: Device type, operating system, and app version
• Usage Data: App interactions, features used, and session duration
• Technical Data: IP address, device identifiers, and crash reports

2.3 Payment Information

• Platform Information: App Store (iOS) or Google Play Store (Android) transaction details
• Credit System: Credit balance and transaction history for app features

3. How We Use Your Information

We use your information to:

• Provide Services: Create and manage your account, process matches, and deliver app functionality
• Process Payments: Handle credit transactions through Apple App Store and Google Play Store
• Communication: Send account verification emails and service-related notifications
• Security: Authenticate users, prevent fraud, and protect against unauthorized access
• Improvement: Analyze usage patterns to enhance app performance and user experience

4. Information Sharing and Disclosure

4.1 With Other Users

• Your username is visible to other users when creating matches
• Match status is shared between matched users

4.2 With Third Parties

• Payment Processors: Apple App Store and Google Play Store for subscription processing
• Email Services: For account verification and notifications
• Service Providers: Technical infrastructure and hosting services

4.3 Legal Requirements

We may disclose your information if required by law, court order, or to protect our rights and safety.

5. Data Security

We implement industry-standard security measures including:

• Encryption: AES-256-CBC encryption for sensitive data
• Authentication: OAuth 2.0 with Laravel Passport for secure API access
• Password Protection: Bcrypt hashing for password storage
• Database Security: Secure database connections and access controls
• Token Management: Secure token generation and validation for email verification

6. Data Retention

• Account Data: Retained while your account is active
• Transaction Records: Kept for legal and accounting purposes
• Email Verification Tokens: Expire after 24 hours
• Authentication Tokens: Can be revoked at any time

7. Your Rights and Choices

You have the right to:

• Access: Request information about your personal data
• Update: Modify your account information
• Delete: Request deletion of your account and associated data
• Withdraw Consent: Opt out of non-essential communications
• Data Portability: Request a copy of your data in a structured format

8. Children's Privacy

mutual is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.

10. Third-Party Services

10.1 App Stores

• Apple App Store and Google Play Store for payment processing
• Subject to their respective privacy policies

10.2 Technical Services

• Cloud hosting and database services
• Analytics and crash reporting tools

11. Cookies and Tracking

We use local storage and session management for:

• User authentication and session persistence
• App preferences and settings
• Performance optimization

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of significant changes through the app or via email.

13. Contact Information

14. Jurisdiction

This Privacy Policy is governed by the laws of Jordan and any disputes will be resolved in the courts of Jordan.