Use on Web
Privacy PolicyEffective Date: 2025-02-23
At Deep, your privacy matters to us. We’re committed to being transparent about how we collect, use, and protect your information whether you use our app or website. By using Deep or visiting thedeepapp.com, you agree to the terms of this Privacy Policy. Don’t worry, we’ll keep it as simple as possible while making sure you know exactly how we handle your personal data.
Please also refer to our EULA and Terms of Use, which together with this Agreement form your complete legal agreement with Du Jour Ltd and the use of Deep.
1. Information We Collect
When you use Deep (the app), we gather the following information to help provide the best experience possible:
- Personal Information: When you create an account, we collect basic information like your name, email address, birthdate, and location.
- Profile Data: This includes your answers to personality questions and anything else you add to your profile, like preferences, photos, interests, and your AI-generated profile picture.
- GPS Data: For providing a smooth usage experience and suggesting matches closest to you. You can disable this feature in your device settings, however Deep will be unable to provide you with matches.
- Usage Data: We collect data on how you interact with the app, including app activity, device information, IP address, and crash logs.
- Payment Information: If you make purchases or subscribe to any premium services, we collect payment details. Note: We use trusted third-party payment processors (Google and Apple Pay), so we don’t store your card details.
Our website, thedeepapp.com, also use basic tools such as Google Tag Manager and Metricool to monitor how users interact with our Website. These services may collect anonymous data, such as
- Browser type and version
- Device type
- General location (e.g., city or region)
- Pages visited and time spent
This data helps us improve the performance and content of our Website. No personally identifiable information (PII) is collected through these tools.
We also use Google Fonts to enhance our site's design and performance. Google Fonts does not set cookies.
If you submit a form on our Website (such as our Contact Form or Data Deletion Request Form), we may collect:
- Your name
- Your email address
- Any additional information you voluntarily provide
This data is used solely to respond to your inquiry or process your request.
1.2 Cookies
At this time, we do not use cookies to personally track or profile visitors. Metricool may use technical cookies strictly necessary for anonymous analytics purposes.
2. How We Use Your Data
We use the data we collect for the following purposes:
- To Provide the Service: We use your information to operate Deep, manage your account, and ensure everything works smoothly.
- To Personalize Your Experience: We tailor your app experience based on your preferences, interests, and interactions with other users.
- To Improve Deep: We analyze how you use the app to make improvements, fix bugs, and add new features.
- To Communicate with You: We may send you updates, newsletters, or promotional content. You can always opt out of marketing emails if you prefer.
- For Legal Compliance: We use your data to comply with applicable laws and regulations (such as GDPR, CCPA, etc.).
We process your data based on one or more of the following lawful bases under GDPR:
- Consent: When you have given explicit consent to process your data.
- Contractual Necessity: When processing is necessary to fulfill our agreement with you.
- Legal Obligation: When we are required to comply with legal obligations.
- Legitimate Interests: When processing is necessary for our legitimate business interests, provided it does not override your rights.
3. How We Share Your Information
We take your privacy seriously and only share your information in specific cases:
- With Other Users: Your profile information (minus your sensitive personal details) will be visible to other users once you start interacting with them.
- Service Providers: We may share your data with third-party service providers who help us run the app (payment processors, email services, cloud hosting, etc.). They are only permitted to use your data to assist with the app’s operations and must keep it secure.
- AI features: Only your public profile description and input in the generative fields provided may be shared with our our third-party provider Monster API (Generative Cloud, Inc.) for us to be able to provide our services. Generative Cloud, Inc. follows local privacy laws including the GDPR and only retain the third-party data we share with them for a limited time as established in their privacy policy. Please refer to ‘user generated data’ and ‘data retention policy’ specifically (the remainder is in relation to direct client/service provider accounts/usage). Please reach out to us as your data processing officer on dpo@dujourgroup.com if you wish to use your rights as noted in this privacy policy.
- Ads: In order to provide our service for free we will be serving you ads managed by Appodeal. Please refer to their privacy policy for further information.
- Payment processing and subscriptions: As an app user payment processing needs to be done through Google Play or the App Store who store and manages your sensitive data relating to payments. We don’t store your direct payment details ourselves, but we do use a third-party provider called Revenuecat to manage, analyse and track your purchases and subscriptions in Deep so we are able to optimize our services and payment processes. We might share your name, email address, country and transactional data (such as, but not limited to, amount, date, related google play or apple store id) with Revenuecat. Revenuecat complies with relevant privacy laws including the GDPR. You can refer to their privacy policy for more information in regards to how they process end user (your) information. Please reach out to us as your data processing officer on dpo@dujourgroup.com if you wish to use your rights as noted in this privacy policy.
- For Legal Reasons: We may disclose your information if required by law or to protect our rights, users, or the safety of others.
- Marketing Purposes: Your AI profile picture is yours to keep and can be used outside of Deep by you; however, they might be used for marketing purposes by Deep and Du Jour as required.
4. How We Protect Your Data
We implement industry-standard security measures to protect your data and limit data there might need to be shared in order to provide our services. Where possible, we anonymize or encrypt sensitive data to enhance privacy.
5. Your Rights and Choices
Depending on your location, you may have certain rights over your personal information, including:
- Right to Access: Request a copy of the information we store about you.
- Right to Rectification: Request corrections to inaccurate or incomplete data.
- Right to Erasure (right to be forgotten): Request permanent deletion of your data.
- Right to Restriction of Processing: Request limits on how we process your data.
- Right to Data Portability: Request a copy of your data in a structured format.
- Right to Object: Object to data processing in certain situations.
- Right to Opt-Out: You have the right to opt out of targeted advertising, the sale of personal data, and profiling that leads to legal or similarly significant decisions affecting you.
- Nondiscrimination and nonretaliation: For exercising your rights.
Please refer to our section in relation to ‘Global Privacy Considerations’ for further information on locality and exact law.
If you want to delete your data, you can do it from within the App (in the Settings screen) use our data deletion request form here. Or contact us at dpo@dujourgroup.com.
6. Children’s Privacy
Your privacy and safety are our top priorities. Deep is strictly for individuals 18 years and older. We take active measures to verify user age and prevent underage sign-ups, including requiring a valid date of birth and conducting periodic account reviews. We do not knowingly collect or solicit personal information from anyone under the age of 18. If we learn that a user under 18 has provided us with personal data, we will delete that information as soon as possible. If you believe we have collected data from a minor, please report the user in the app or contact us immediately at hello@thedeepapp.com.
7. Retention of Your Information
We retain your personal data for as long as your account is active or as needed to provide our services. If your account becomes inactive, we may retain your data for a limited period, unless:
- You request its deletion.
- Local laws require earlier deletion.
- Retention is no longer necessary for security, fraud prevention, or business purposes.
Specific Retention Periods:
| Data Type | Retention Period | What Happens After? |
|---|---|---|
| Account Data | 24 months after inactivity | Anonymized or deleted unless required for legal reasons |
| Messages & Matches | 12 months after inactivity | Anonymized or deleted |
| Payment Data | As required by law (typically 7 years) | Securely deleted after the legal period |
| Usage Data (non-personal analytics) | Indefinite (anonymized) | Used for product improvement |
| Data deletion requests | Up to 24 months | Case number and outcome retained and personal data deleted |
| Contact requests | 12 months are query has been resolved | Anonymized or deleted |
To keep you informed, we may send periodic reminders about your inactive account. If you don’t respond within the given timeframe, certain data (e.g., messages) may be anonymized or removed. You will have the opportunity to opt out of these notifications.
8. International Transfers
Deep is operated from New Zealand, and your personal data may be stored and processed in countries outside of your own. If you’re located in the European Economic Area (EEA) or California, we will take steps to ensure your data is transferred in accordance with local privacy laws.
Currently, all of our data is stored with our service provider in the United States.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we do, we’ll post the updated policy in the app, and you’ll be notified of the changes. Your continued use of the app after the policy is updated signifies your acceptance of the new terms.
10. Contact Us
If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please get in touch with us at hello@thedeepapp.com.
You can also reach out to our Data Protection Officer, Rikke Simone, via email at dpo@dujourgroup.com.
Appendix 1: Global Privacy Considerations
- GDPR (EU): If you are based in the European Union, you have additional privacy rights, including the ability to access, correct, and request the deletion of your data, as well as the right to object to processing in certain cases.
- CCPA (California): California residents have the right to request information about what personal data we collect and to opt-out of the sale of personal data (though we don’t sell your data).
- Other Jurisdictions: If you're using Deep in other jurisdictions, additional privacy rights may apply. We aim to respect all privacy laws and safeguard your personal information.
- Laws we follow/uphold:
- Right to Access as per PIPEDA, GDPR Article 15, CCPA/CPRA, CPA, VCDPA, CTDPA, UCPA, LGPD, POPIA.
- Right to Rectification as per PIPEDA, GDPR Article 16, CPRA, CPA, VCDPA, CTDPA, LGPD, POPIA.
- Right to Erasure (Right to be Forgotten) as per GDPR Article 17, CCPA/CPRA, CPA, VCDPA, CTDPA, UCPA, LGPD, POPIA.
- Right to Restriction of Processing as per GDPR Article 18, LGPD.
- Right to Data Portability as per PIPEDA, GDPR Article 20, LGPD.
- Right to Object as per GDPR Article 21, LGPD, POPIA.
- Right to Opt Out as per CPRA, CPA, VCDPA, CTDPA, UCPA.
- Nondiscrimination and nonretaliation as per CCPA/CPRA, CPA, VCDPA, CTDPA, UCPA.
Appealing a Decision (CPA, VCDPA, CTDPA)
If you disagree with how we have responded to your request regarding your data rights, you have the right to file an appeal. Should you remain unsatisfied with our resolution, you can escalate your complaint to the relevant attorney general:
Filing a Complaint (GDPR Article 77, LGPD, POPIA)
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the appropriate data protection authority.
If you are located in the EEA, you can find a list of local data protection authorities here.
