Privacy Policy
The short version
- We collect what we need to introduce you to people in Melbourne and help you plan dates: your phone number, your profile, your approximate location, your messages and your date plans.
- Other members see your profile (first name, age, suburb, photos, prompts). They never see your phone number or exact location.
- We don't sell your information, show you ads or track you across other apps.
- If someone reports you, or you report someone, our safety team may read the conversation involved.
- You can delete your account in the app at any time. Most of your data is deleted straight away.
1. Who we are
Sixish is operated by Erik Sawaya (ABN 93 459 952 619) ("Sixish", "we", "us"). We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). If you have a question about privacy, email [email protected].
If Sixish moves to a company in future, we'll update this policy and tell you in the app before the change.
2. What we collect
| Information | Why we need it | Who can see it |
|---|---|---|
| Mobile number | To sign you in with a one-time SMS code, keep one account per person, and stop banned people signing up again. | Only us. Never shown to other members. |
| Profile: first name, date of birth, gender, who you're interested in, the age range you're looking for, what you're looking for (long-term, open, casual), prompt answers, photos | To build your profile and find people who suit you. Your date of birth confirms you're 18 or over. | People we introduce you to see your first name, age (not your birthday), what you're looking for, prompts and photos. |
| Values answers (e.g. kids, drinking, pets) | To improve introductions. | Your individual answers aren't shown. An intro may show answers you both share ("In common"). |
| Weekly availability | To introduce people who are free at the same times and suggest date times. | Intros see the times you're both free. |
| Approximate location and suburb | To check you're in our launch area and to introduce people nearby. We round your location to about 1 km before storing it and only ask while you're using the app. | Intros see your suburb and a rounded distance (e.g. "3 km away"). Never your exact location. |
| Messages | To deliver your chats. | You and the person you're chatting with. Our safety team if the chat is reported (see section 5). |
| Your responses (Interested / Pass), matches, date plans | To run the service: open matches, suggest venues, send reminders. | The other person only learns you're interested if you're both interested. A Pass is never shown. |
| Private date feedback (did it happen? would you meet again?) | To improve introductions and spot safety issues, such as repeated no-shows. | Only us. |
| Selfie verification | To confirm you're a real person who matches your photos before your first date. See section 4. | Others see a "Verified" badge only. |
| Reports and blocks | To keep members safe and enforce our Terms. | Only us. The person you report or block isn't told it was you. |
| Device and technical data: push notification token, IP address, app and server logs | To send notifications, prevent abuse (such as limiting SMS code requests) and fix problems. | Only us and our service providers. |
Beta invite requests (sixish.love)
If you ask for a beta invite on our website, we collect your first name, mobile number, email, suburb, age range, gender, who you're interested in, and how you heard about us. We use it to send you a TestFlight invite, to let people in in balanced waves (so intros work for everyone), and to see which channels bring people in. Your mobile number also lets us link your request to your account when you sign up in the app. We keep a scrambled (hashed) version of your IP address only to stop spam sign-ups. We don't share these details with anyone except the providers listed in section 6. We delete a request once you've signed up in the app, or 12 months after you sent it, whichever comes first. Email us to have it deleted sooner.
Sensitive information
Some of this is "sensitive information" under the Privacy Act: your sexual orientation (which we can infer from who you're interested in), any religious views you share in your values answers or prompts, and the facial geometry used during verification. We only collect it with your consent. You give that consent by choosing to provide it when you set up your profile or verify. Other members only see what's described above.
3. How we use your information
- Introductions. Each day we pair members based on shared availability, what you're looking for, values in common, distance and recent activity. We cap how many intros each person gets so attention is shared fairly. Introductions are made automatically; you always decide who you're interested in.
- Dates. Suggesting times you're both free and public venues near both of you, and sending reminders.
- Safety. Verification, automated photo checks, reviewing reports, and banning accounts that break our Terms.
- Notifications. Your daily intros, new matches, messages and date reminders. Message notifications never include the message text. You can turn notifications off in iOS Settings.
- Improving Sixish. Understanding what leads to real dates, using aggregated or de-identified data where we can.
We don't sell your personal information, use it for advertising, or share it with data brokers. The app contains no advertising or third-party tracking code.
4. Photo checks and selfie verification
- Photo checks. Uploaded photos are checked by an automated moderation service (Amazon Rekognition) for nudity, violence and similar content. Some photos are reviewed by our team.
- Selfie verification. Before your first date is confirmed, you take a short live selfie. Amazon Rekognition checks that it's a live person and compares it with your first profile photo. We keep the result (pass or fail, and confidence scores), not the video. The service processes the video only to perform the check.
- Verification tells you that someone is a real person who looks like their photos. It is not a background or identity check.
5. Reports and safety reviews
When a member reports someone, our safety team may review the reported person's profile and photos, the messages exchanged between the two people, and relevant account history, so we can decide what to do. We may also review an account if our automated checks flag it. We may share information with police or other authorities when the law requires it, or when we reasonably believe it's needed to prevent a serious threat to someone's life, health or safety.
6. Service providers and overseas disclosure
We use these providers to run Sixish. They can only use your information to provide their service to us.
| Provider | What for | Where |
|---|---|---|
| Neon (database, hosted on Amazon Web Services) | Storing account, profile, match and message data | Sydney, Australia |
| Fly.io | Running our servers | Sydney, Australia (Fly.io is a US company) |
| Cloudflare R2 | Storing photos | [Confirm the bucket's location/jurisdiction setting; may be outside Australia] |
| Cloudflare (Pages and D1) | Hosting our website and storing beta invite requests | Oceania region (Australia/New Zealand). Cloudflare is a US company. |
| Twilio | Sending SMS sign-in codes | United States |
| Amazon Web Services (Rekognition) | Photo moderation and selfie verification | Sydney, Australia |
| Apple (Push Notification service) | Delivering notifications | United States |
Where information goes overseas, we take reasonable steps under APP 8 to make sure it's handled consistently with the Australian Privacy Principles, including through the providers' contractual commitments.
7. How long we keep it
- When you delete your account (Profile → Delete account), we immediately delete your profile, photos, values answers, availability, the messages you sent, your notification tokens and your verification records, and we end your matches. Your phone number is released so you can sign up again later.
- We keep a minimal record that the account existed, along with any reports made by or about it and any ban, so we can keep members safe and meet legal obligations. If an account is banned, we keep a one-way scrambled (hashed) copy of the phone number to stop it being used to sign up again.
- Database backups are kept for a short period (currently no more than [7] days) and then overwritten.
- If you don't use Sixish for 24 months, we delete your account as described above. We'll send you a notification about 30 days beforehand; opening the app keeps your account.
8. Security
Your data is encrypted in transit (HTTPS) and stored with providers that encrypt data at rest. Sign-in uses one-time SMS codes and short-lived tokens stored in your iPhone's Keychain. Only people who need access to run and protect the service have it. No system is perfectly secure, so please tell us straight away if you think your account has been compromised.
9. Your choices and rights
- Access and correction: you can see and edit your profile in the app. To request a copy of the personal information we hold about you, email us.
- Deletion: delete your account in the app at any time, or email us.
- Pause: stop getting new intros without deleting anything (Profile → Pause new intros).
- Location and notifications: you can change these in iOS Settings. Sixish needs your approximate location to work, because introductions are local.
We'll respond to requests within 30 days. If you're not happy with how we've handled a privacy concern, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).
10. Age limit
Sixish is only for people aged 18 and over. We don't knowingly collect information from anyone younger. If you believe someone under 18 is using Sixish, please report them in the app or email us.
11. Changes
If we make important changes to this policy, we'll tell you in the app or by SMS before they take effect. The date at the top shows when it last changed.
12. Contact
Erik Sawaya (ABN 93 459 952 619) · [email protected]