Fikir — Privacy Policy
Effective date: May 12, 2026 · Last updated: May 25, 2026
This Privacy Policy describes how Fikir (referred to as "Fikir," "we," "us," or "our") collects, uses, and protects information when you use our mobile application.
If you have questions about this policy, email us at team@fikirdating.app.
1. Who We Are
Fikir is a dating application operated by Bruck Assefa (the "Operator"), based in Washington State, United States. Fikir is currently available only to users located in the United States.
2. What We Collect
Account Information
- Email address (for authentication)
- Authentication tokens (managed by Supabase, our backend provider)
- Push notification token (for sending notifications to your device)
Profile Information You Provide
- First name, last name (optional), date of birth, gender
- Current city and country of origin
- Photos (up to 4 profile photos plus a verification selfie)
- Bio, lifestyle preferences, faith, language, and other profile fields you fill out
- Match preferences (age range, gender, location)
Activity Data
- Tosses sent and received
- Waves sent and received
- Matches and unmatches
- Messages sent in matched conversations
- Moments you post (photos or text)
- Reactions to others' moments
- Reports you submit about others
- Lemon and Golden Lemon balance and transactions
Technical Data
- Device type and operating system version
- App version
- Approximate session timing for the daily moment cap and feed cap
Information We Do NOT Collect
- We do not collect your precise GPS location.
- We do not access your contacts, calendar, microphone, or camera roll without your explicit permission.
- We do not track you across other apps or websites.
3. How We Use Your Information
We use your information to:
- Operate the Fikir service (match you with potential dating partners, deliver messages, post moments)
- Authenticate you and keep your account secure
- Process in-app purchases of Lemons and Golden Lemons (via RevenueCat and Apple)
- Send push notifications about matches, messages, waves, tosses, and moments (you can disable these in iOS Settings)
- Investigate reports of abuse and enforce our Terms of Service
- Improve the app (aggregated, anonymized usage patterns)
- Communicate with you about service updates or moderation actions
What We Do NOT Do With Your Data
- We never sell your personal data.
- We never use your photos to train AI or machine learning models.
- We do not share your data with advertisers.
- We do not use your information to build profiles for advertising networks.
4. Who Sees Your Information
Other Users
- Other users see your profile fields, photos, age, city, and moments you post (visibility settings apply — you can set moments to "matches only" vs "public").
- Once matched, the other party can read messages you send them in chat.
- Other users do not see your email, push token, or activity data (tosses sent, etc.) unless they are the other party in a match.
Service Providers
We share data with these third parties only to operate the service:
Law Enforcement
We may disclose information when required by law (subpoena, court order, etc.) or when we believe in good faith that disclosure is necessary to prevent imminent harm.
5. Photo Storage and Use
Your profile photos and moment photos are stored in our private storage bucket. Access is restricted such that:
- Profile photos are visible to other Fikir users in feeds and matches per normal visibility rules.
- Moment photos are visible only to the audience you choose ("matches only" or "public").
- Verification selfies are visible only to our moderation team for the purpose of confirming your account.
Photos are never used for AI/ML training, advertising, or anything outside of operating the Fikir service.
6. Data Retention
We retain your data as long as your account is active. You can request deletion at any time (see Section 7).
After account deletion:
- Profile data and photos: deleted within 30 days.
- Messages: deleted along with the matched conversation.
- Activity records (anonymized): may be retained for up to 12 months for fraud prevention and aggregate analytics.
- Moments: deleted on expiry (24 hours) or on account deletion, whichever comes first.
We may retain certain information longer if required by law (e.g. for tax records on purchases) or to enforce these terms.
7. Your Rights
You have the right to:
- Access the data we hold about you. Email us at team@fikirdating.app.
- Correct inaccurate data via the Edit Profile screen, or by emailing us.
- Delete your account and data. Use the in-app account deletion option in Settings, or email team@fikirdating.app. We will complete deletion within 30 days.
- Export your data (data portability). Email us and we'll provide a copy of your account data.
- Block another user, which removes them from your feeds in both directions.
- Report another user's profile or moment content. Reports are reviewed by our moderation team.
8. Children's Privacy
Fikir is a dating app and is restricted to users 18 years of age or older. We do not knowingly collect information from anyone under 18. If we learn that someone under 18 has used Fikir, we will delete their account and all associated data.
If you are a parent or guardian and believe your child has provided us with information, please email team@fikirdating.app immediately.
9. Security
We use industry-standard practices to protect your information:
- All connections to our backend are encrypted via HTTPS/TLS.
- Authentication uses standard token-based systems (no plaintext passwords stored).
- Backend access is restricted to operators and authorized personnel.
- Database access is governed by Row-Level Security (RLS) policies that prevent users from accessing data they shouldn't see.
No system is 100% secure. If we become aware of a security incident affecting your data, we will notify you and any required authorities within a reasonable timeframe.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do:
- We will update the "Last updated" date at the top.
- For significant changes, we will notify users via in-app message or email.
- Continued use of Fikir after changes constitutes acceptance of the updated policy.
11. Contact
For privacy questions, data requests, or to report a concern:
We aim to respond within 7 business days.
12. EU, UK, and Swiss Users — Your Rights Under GDPR
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) and equivalent laws give you specific rights and protections.
Data controller
The data controller is Bruck Assefa (Fikir), reachable at team@fikirdating.app. There is no separately appointed Data Protection Officer (DPO); at our current scale we are not required to appoint one.
Lawful basis for processing
We rely on the following lawful bases under GDPR Article 6:
- Performance of a contract — for everything strictly required to operate the matching service (account creation, photo storage, delivering messages, posting moments, matching algorithm).
- Your explicit consent — for the special-category profile data you choose to share (see below). This consent is given at signup via a clear opt-in checkbox; you can withdraw it at any time by deleting your account or by emailing us to request that we stop processing those specific fields.
- Legitimate interests — for safety, fraud prevention, and content moderation.
Special-category data (Article 9)
Some information you choose to share on your Fikir profile may qualify as "special category" data under GDPR Article 9:
- Religion / faith (the Faith field on your profile)
- Information that may reveal ethnicity or national origin (country of origin, cultural background, languages spoken)
We process this data on the basis of your explicit consent, given at signup.
International data transfer
Your data is stored and processed in the United States by our infrastructure provider Supabase (a service of Supabase Inc.). This is a transfer outside the EEA / UK. The transfer is protected by Supabase's Standard Contractual Clauses (SCCs). Supabase's data processing addendum is available at supabase.com/dpa.
Your rights
Under GDPR you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — correct inaccurate data
- Erasure ("right to be forgotten") — delete your account and associated data
- Restriction — limit how we use your data while a complaint is resolved
- Data portability — receive your data in a structured, machine-readable format
- Object — object to processing based on legitimate interests
- Withdraw consent — at any time, for processing based on consent
- Not be subject to automated decision-making
How to exercise your rights
Email team@fikirdating.app. We will acknowledge within 7 business days and fulfill within 30 days.
Right to lodge a complaint
You have the right to lodge a complaint with your local data protection authority via the European Data Protection Board: edpb.europa.eu. UK residents can contact the Information Commissioner's Office: ico.org.uk.