Fikir — Privacy Policy
Effective date: May 12, 2026 · Last updated: June 18, 2026
This Privacy Policy describes how Fikir (referred to as "Fikir," "we," "us," or "our") collects, uses, and protects information when you use our mobile application.
If you have questions about this policy, email us at team@fikirdating.app.
1. Who We Are
Fikir is a dating application operated by Ahadu Lab LLC, a Washington limited liability company (the "Operator"), based in Washington State, United States. Fikir is currently available only to users located in the United States.
2. What We Collect
Account Information
- Email address (for authentication)
- Authentication tokens (managed by Supabase, our backend provider)
- Push notification token (for sending notifications to your device)
Profile Information You Provide
- First name, last name (optional), date of birth, gender
- Current city and country of origin
- Photos (up to 4 profile photos plus a verification selfie)
- Bio, lifestyle preferences, faith, language, and other profile fields you fill out
- Match preferences (age range, gender, location)
Activity Data
- Tosses sent and received
- Waves sent and received
- Matches and unmatches
- Messages sent in matched conversations
- Moments you post (photos or text)
- Reactions to others' moments
- Reports you submit about others
- Lemon and Golden Lemon balance and transactions
Technical Data
- Device type and operating system version
- App version
- Approximate session timing for the daily moment cap and feed cap
Information We Do NOT Collect
- We do not collect your precise GPS location.
- We do not access your contacts, calendar, microphone, or camera roll without your explicit permission.
- We do not track you across other apps or websites.
3. How We Use Your Information
We use your information to:
- Operate the Fikir service (match you with potential dating partners, deliver messages, post moments)
- Authenticate you and keep your account secure
- Process in-app purchases of Lemons and Golden Lemons (via RevenueCat and Apple)
- Send push notifications about matches, messages, waves, tosses, and moments (you can disable these in iOS Settings)
- Investigate reports of abuse and enforce our Terms of Service
- Improve the app (aggregated, anonymized usage patterns)
- Communicate with you about service updates or moderation actions
What We Do NOT Do With Your Data
- We never sell your personal data.
- We never use your photos to train AI or machine learning models.
- We do not share your data with advertisers.
- We do not use your information to build profiles for advertising networks.
4. Who Sees Your Information
Other Users
- Other users see your profile fields, photos, age, city, and moments you post (visibility settings apply — you can set moments to "matches only" vs "public").
- Once matched, the other party can read messages you send them in chat.
- Other users do not see your email, push token, or activity data (tosses sent, etc.) unless they are the other party in a match.
Service Providers
We share data with these third parties only to operate the service:
Law Enforcement
We may disclose information when required by law (subpoena, court order, etc.) or when we believe in good faith that disclosure is necessary to prevent imminent harm.
5. Photo Storage and Use
Your profile photos and moment photos are stored in our private storage bucket. Access is restricted such that:
- Profile photos are visible to other Fikir users in feeds and matches per normal visibility rules.
- Moment photos are visible only to the audience you choose ("matches only" or "public").
- Verification selfies are visible only to our moderation team for the purpose of confirming your account.
Photos are never used for AI/ML training, advertising, or anything outside of operating the Fikir service.
6. Data Retention
We retain your data as long as your account is active. You can request deletion at any time (see Section 7).
After account deletion:
- Profile data and photos: deleted within 30 days.
- Messages: deleted along with the matched conversation.
- Activity records (anonymized): may be retained for up to 12 months for fraud prevention and aggregate analytics.
- Moments: deleted on expiry (24 hours) or on account deletion, whichever comes first.
We may retain certain information longer if required by law (e.g. for tax records on purchases) or to enforce these terms.
7. Your Rights
You have the right to:
- Access the data we hold about you. Email us at team@fikirdating.app.
- Correct inaccurate data via the Edit Profile screen, or by emailing us.
- Delete your account and data. Use the in-app account deletion option in Settings, or email team@fikirdating.app. We will complete deletion within 30 days.
- Export your data (data portability). Email us and we'll provide a copy of your account data.
- Block another user, which removes them from your feeds in both directions.
- Report another user's profile or moment content. Reports are reviewed by our moderation team.
8. Children's Privacy
Fikir is a dating app and is restricted to users 18 years of age or older. We do not knowingly collect information from anyone under 18.
In compliance with the U.S. Children's Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under 13. If we discover we have collected personal information from a child under 13, we will delete it promptly.
If we learn that someone under 18 has used Fikir, we will terminate their account and delete all associated data.
If you are a parent or guardian and believe your child has provided us with information, please email team@fikirdating.app immediately.
9. Security
We use industry-standard practices to protect your information:
- All connections to our backend are encrypted via HTTPS/TLS.
- Authentication uses standard token-based systems (no plaintext passwords stored).
- Backend access is restricted to operators and authorized personnel.
- Database access is governed by Row-Level Security (RLS) policies that prevent users from accessing data they shouldn't see.
No system is 100% secure. If we become aware of a security incident affecting your personal information, we will notify you and any required authorities without undue delay, and where required by applicable law, within 72 hours of discovery. Our notification will describe (to the extent known) the nature of the incident, the categories of data affected, the steps we are taking, and recommended steps for you.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do:
- We will update the "Last updated" date at the top.
- For significant changes, we will notify users via in-app message or email.
- Continued use of Fikir after changes constitutes acceptance of the updated policy.
11. Contact
For privacy questions, data requests, or to report a concern:
We aim to respond within 7 business days.
12. EU, UK, and Swiss Users — Your Rights Under GDPR
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) and equivalent laws give you specific rights and protections.
Data controller
The data controller is Ahadu Lab LLC (operator of Fikir), reachable at team@fikirdating.app. There is no separately appointed Data Protection Officer (DPO); at our current scale we are not required to appoint one.
Lawful basis for processing
We rely on the following lawful bases under GDPR Article 6:
- Performance of a contract — for everything strictly required to operate the matching service (account creation, photo storage, delivering messages, posting moments, matching algorithm).
- Your explicit consent — for the special-category profile data you choose to share (see below). This consent is given at signup via a clear opt-in checkbox; you can withdraw it at any time by deleting your account or by emailing us to request that we stop processing those specific fields.
- Legitimate interests — for safety, fraud prevention, and content moderation.
Special-category data (Article 9)
Some information you choose to share on your Fikir profile may qualify as "special category" data under GDPR Article 9:
- Religion / faith (the Faith field on your profile)
- Information that may reveal ethnicity or national origin (country of origin, cultural background, languages spoken)
We process this data on the basis of your explicit consent, given at signup.
International data transfer
Your data is stored and processed in the United States by our infrastructure provider Supabase (a service of Supabase Inc.). This is a transfer outside the EEA / UK. The transfer is protected by Supabase's Standard Contractual Clauses (SCCs). Supabase's data processing addendum is available at supabase.com/dpa.
Your rights
Under GDPR you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — correct inaccurate data
- Erasure ("right to be forgotten") — delete your account and associated data
- Restriction — limit how we use your data while a complaint is resolved
- Data portability — receive your data in a structured, machine-readable format
- Object — object to processing based on legitimate interests
- Withdraw consent — at any time, for processing based on consent
- Not be subject to automated decision-making
How to exercise your rights
Email team@fikirdating.app. We will acknowledge within 7 business days and fulfill within 30 days.
Right to lodge a complaint
You have the right to lodge a complaint with your local data protection authority via the European Data Protection Board: edpb.europa.eu. UK residents can contact the Information Commissioner's Office: ico.org.uk.
13. California Privacy Rights (CCPA / CPRA)
This section applies to residents of California. The California Consumer Privacy Act ("CCPA"), as amended by the California Privacy Rights Act ("CPRA"), gives you specific rights regarding your personal information.
Categories of personal information we collect
In the past 12 months, we have collected the following categories of personal information from California residents:
- Identifiers — email address, account ID, push notification token
- Personal information categories listed in Cal. Civ. Code § 1798.80(e) — first name, date of birth
- Characteristics of protected classifications — gender, age (collected for matchmaking)
- Internet or other network activity — app usage data, device type, OS version
- Geolocation data — city only; we do not collect precise GPS
- Audio, electronic, visual information — profile photos, moment photos, verification selfie
- Sensitive personal information — religion / faith and information that may reveal ethnicity or national origin, only when you choose to share these on your profile, with your explicit consent
Your California rights
As a California resident, you have the right to:
- Right to know — what personal information we collect, the sources, the business purposes, and the categories of third parties with whom we share it
- Right to delete — your personal information (subject to limited legal exceptions)
- Right to correct — inaccurate personal information
- Right to opt out of sale or sharing — Ahadu Lab LLC does not sell your personal information and does not share it for cross-context behavioral advertising. There is nothing to opt out of.
- Right to limit use of sensitive personal information — we use sensitive personal information (religion, ethnicity indicators) solely to operate the matchmaking service you signed up for
- Right to non-discrimination — we will not deny service, charge different prices, or provide a different level of service because you exercise your privacy rights
How to exercise your California rights
Email team@fikirdating.app with "California Privacy Request" in the subject line. We will verify your identity (typically by confirming you can receive email at the address linked to your Fikir account) and respond within 45 days, extendable by 45 additional days if needed (we will notify you of any extension).
You may designate an authorized agent to make a request on your behalf. The agent must provide written authorization from you, and we may verify directly with you before acting.
"Shine the Light" disclosure (Cal. Civ. Code § 1798.83)
California residents may request that we disclose how we share personal information with third parties for those third parties' direct marketing purposes. We do not share personal information with third parties for their direct marketing purposes.
14. Other U.S. State Privacy Rights
If you are a resident of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Indiana, Tennessee, Delaware, or another U.S. state with a comprehensive consumer privacy law, you have rights similar to those described in Section 13 above, including the right to:
- Access your personal data and obtain a copy in a portable format
- Correct inaccurate personal data
- Delete your personal data
- Opt out of targeted advertising, sale of personal data, or profiling (Ahadu Lab LLC does not engage in any of these)
- Appeal our refusal to act on your request
To exercise these rights, email team@fikirdating.app and identify your state of residence. We will respond within the timeframe required by your state's law (typically 45 days, extendable in some states). If we refuse your request, you may file an appeal by replying to our response, and we will respond to the appeal within 60 days. If you remain unsatisfied, you may contact your state Attorney General's office.
15. Push Notifications — How to Opt Out
You may stop receiving push notifications from Fikir at any time without affecting your account:
- iOS: Settings → Notifications → Fikir → toggle off "Allow Notifications"
- Android: Settings → Apps → Fikir → Notifications → toggle off
- In-app: Profile → Notification preferences (where available)
Disabling push notifications does not delete or change the data you have already shared with us; it only stops new notifications from being delivered to your device.