Privacy policy

When you create an account

• The name you want to be known by. It does not have to be your legal name.
• Your email address, which you confirm with a code we send you.
• Your password. We store only a one-way hash of it, never the password itself.
• Your date of birth.
• Whether you are joining as a patron or a member.

Your profile

Your photos, in your public album and any private albums; your headline and “about me”; your suburb; and anything else you add, such as interests, what you are looking for, what you offer (patrons only), languages, height, weight, body type, hair colour, smoking, drinking, tattoos, education, children and occupation. Only your display name, your suburb and one public photo are needed to appear in Discover. Everything else is up to you.

Sensitive information, only with your consent

You can add your ethnicity and your religion to your profile. Both are “sensitive information” under the Privacy Act, so we ask for your express consent first and record that you gave it. Both are optional, and you can remove them, and withdraw your consent, at any time.

Your location

You choose your suburb by typing it or by tapping “use my location”. If you use your location, your device’s coordinates are sent to Google to find the suburb you are in. We keep your suburb and its centre point, and work out distances from that centre point. We also keep the coordinates your device reported, but nothing in Dulcet Club uses them or shows them to anyone. Other people only ever see a distance, worked out from your suburb’s centre.

Identity verification

To send messages or use private albums you verify your identity with a government ID and a live selfie. Veriff collects these and compares your face with the photo on your document. That comparison uses biometric information, which is also sensitive information, so we ask for your consent before you start. Veriff sends us only the result (verified or not, and the reason if not), the date of birth on your document, which we use to confirm you are 18 or over, and a reference for the check. We never receive your document, your selfie or any biometric data.

What you do on Dulcet Club

The messages you send and receive, including photos sent in a conversation. Your likes, dislikes and matches. Whose profiles you view, and who views yours. Message requests, and whether they were accepted. Private album requests and who has access. People you remove from a list. Reports you make. Your notifications and notification settings, your privacy settings, and when you were last active.

Subscriptions

Your plan, its status and billing period, and a record of each invoice. Card details are handled by our payment processor. We never see or store your full card number.

Technical information

Cookies that keep you signed in. Our hosting providers keep standard request logs, such as IP address, browser type and time, for security and to keep the service running. We use no advertising cookies, analytics or tracking pixels.

When you contact us

Your email address and whatever you tell us.

• From you, when you sign up, build your profile, upload photos and use the app.
• From Veriff, when you verify your identity: the outcome and your date of birth, as above.
• From your device, only when you choose to: your location, and the photos you pick.
• From other people on Dulcet Club, for example when they message you, like you, or report an account.
• Automatically as you use the service: sign-in cookies, request logs, and when you were last active.

• To run your account, and to show your profile to other people in Discover, ranked by recent activity and distance.
• To confirm your identity and that you are 18 or over, and to keep under-18s out.
• To deliver messages and notifications, and to control who can see your private albums.
• To manage your subscription and keep billing records.
• To keep the club safe: to look into reports, hide photos that break the rules, suspend or close accounts, and investigate scams and misuse.
• To send you emails the service needs, such as sign-in codes and changes to your account. We will not send you marketing without your consent, and every marketing email will let you unsubscribe.
• To fix problems and improve Dulcet Club.
• To meet our legal obligations.

We do not sell personal information, and we do not use it for third-party advertising.

• Other signed-in people can see your public profile: display name, age (not your date of birth), suburb or city and an approximate distance, public photos, headline, “about me” and the profile details you add, the verification shield, and when you were last active.
• Private albums are visible only to people you have given access, until you take it back.
• Messages are visible only to you and the other person in the conversation.
• Likes and views. The person you like or whose profile you view can see that you did.
• Our team. A small number of authorised people can see account details, photos and reports, to run, secure and moderate the service.
• Service providers, listed in the next section, for the job they do for us.
• Police, courts and regulators, when the law requires or allows it, or when we believe it is necessary to prevent a serious threat to someone’s life, health or safety.

We use these providers to run Dulcet Club. Some of them store or process information outside Australia, so your information is likely to be sent to the countries listed. We choose providers that protect information to a standard comparable to the Australian Privacy Principles.

Convex

Our database and file storage, which hold your account, profile, photos and messages

United States

Vercel

Hosting for the dulcet.club website

United States

Veriff

Identity verification: your ID document and selfie

Estonia (European Union)

Google

Finding your suburb from what you type or from your device's location

United States

When we start using an email delivery service and a payment processor, we will add them to this list before they receive any of your information.

• Everything travels over encrypted connections (HTTPS).
• Passwords are stored only as one-way hashes.
• Private photos are never published at a public link. Each request is checked against who has access, every time.
• We never hold your ID document or selfie.
• Access to our systems is limited to the people who need it.

No system is perfectly secure. If a data breach is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.

We keep your information while your account is open. When you ask us to delete your account, we delete or de-identify your profile, photos, messages and the rest of your account information within 30 days, except:

• billing records, which tax law requires us to keep for five years;
• information we need for an open safety investigation, a dispute, or a legal obligation, kept only until it is resolved.

Resized copies of public photos made for display expire within an hour. Our providers keep request logs for a limited period.

• Correct it. You can edit most of your profile in the app at any time.
• Get a copy. Email support@dulcet.club and we will send you the personal information we hold about you, free of charge, within 30 days.
• Delete your account. Email support@dulcet.club from the address on your account. We will confirm it is you, then delete it as described above. Deleting your account in the app is coming.
• Withdraw consent. Remove your ethnicity or religion from your profile and we stop holding it.
• Stay anonymous where you can. Your display name does not have to be your real name. We do need your email address and date of birth to give you an account, and a verified identity before you can send messages.

If we refuse a request, we will tell you why in writing and how to complain.

Dulcet Club is strictly for people 18 and over. If verification shows someone is under 18, their account is closed. If you believe someone under 18 is using Dulcet Club, email support@dulcet.club.

If you are unhappy with how we have handled your information, email support@dulcet.club. We will reply within 30 days. If you are not satisfied with our answer, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

When this policy changes, we update the date at the top. If a change matters to how your information is used, we will tell you in the app or by email before it takes effect.