Privacy Policy
This policy explains how Glaikan ("we", "us") collects, uses, shares and protects your personal data when you use our iOS and Android apps and this website. It applies to members in every country, and is written to meet Thailand's Personal Data Protection Act (PDPA), the EU and UK General Data Protection Regulation (GDPR), and the California Consumer Privacy Act as amended by the CPRA.
1. What we collect
- Account: your email address, or your Apple / Google sign-in.
- Profile: name, birthdate (to confirm you are 18+), gender, photos, bio, interests, and optional details such as job, education, height and MBTI.
- Who you want to meet: the genders you are interested in and what you are looking for.
- Approximate location: from your device when you allow it, to find people near you.
- Activity: likes and passes, matches, messages, voice notes and photos you send, reports and blocks.
- Device and security: device model, operating system, push-notification token, signed-in sessions and security events.
2. How we use it, and our legal bases
- To provide the service — discovery, matching and chat (performance of our contract with you).
- To keep members safe — detecting fake accounts, spam, scams and harassment, and screening photos for nudity with automated tools (our legitimate interests, and legal obligations).
- To process VIP subscriptions through the App Store and Google Play (contract).
- To show ads to free members, only as your ad-consent choice allows (consent where the law requires it).
- To send notifications: service announcements, and news and offers only if you turn them on (contract; consent for promotions). Who receives an announcement is chosen by app language, device settings and the country you are in; it is always written in the app language you chose.
3. Location privacy
- Raw GPS coordinates are never stored, shown or sent to other members. Stored locations are moved to a fixed spot inside a ~550 m cell, so distance can never pinpoint you.
- Distances are computed on our servers and returned rounded. You can hide your distance, your online status, or browse in Incognito mode (VIP) at any time.
- Without a location, discovery does not start — we never place you in a city you are not in.
- On our own servers we work out which country your stored location is in, to choose announcements meant for your country. No coordinates are sent to any outside service for this, and Travel mode does not change it.
4. Sensitive data and your explicit consent
Your gender and who you are interested in can reveal your sexual orientation, which the law treats as sensitive (GDPR art. 9, PDPA s. 26). When you accept this policy in the app you give your explicit consent for us to use it for one purpose only: showing you to potential matches and them to you. It is never used for advertising and never sold. You can change it in your profile at any time, or withdraw your consent by deleting your account.
5. Who processes your data
We do not sell your personal data. Trusted providers process it for us under contract:
- Supabase — hosting, database and sign-in
- Apple and Google — sign-in, in-app purchases, push delivery
- RevenueCat — subscription status
- Cloudflare — photo safety checks and selfie verification
- Sentry — crash reports, with location and tokens removed
- Expo — push notifications
- Geoapify — place search in Travel mode, without your identity
- Google AdMob — ads for free members, following your ad-consent choice
We disclose data to authorities only when the law requires it, and to protect members from serious harm.
6. International transfers
Glaikan serves members worldwide and our servers are in Singapore. When your data leaves your country we protect it with contractual safeguards such as the EU Standard Contractual Clauses and the equivalent measures your local law requires.
7. Your rights and account deletion
Wherever you live you can:
- Access and download your data — in the app, Settings → Privacy & safety → Download my data.
- Correct your profile at any time.
- Delete your account permanently — Profile → Settings → Manage account → Delete account permanently, or see how to delete your account.
- Object to or restrict processing, and withdraw consent.
- Complain to your data protection authority (for example the PDPC in Thailand, or your EU / UK supervisory authority).
California residents: we do not sell or share personal information for cross-context behavioural advertising beyond the ad consent you choose, and we will not discriminate against you for exercising your rights.
Write to support@glaikan.com to exercise any right. We reply within 30 days.
8. How long we keep data
- We keep your data while your account is active and delete it when you delete your account.
- We keep some records longer where safety or the law requires: reports and sanctions, a one-way hash of a banned account's email (so it cannot simply sign up again), and purchase records for accounting.
- When you unsend a message it disappears from both sides at once, but a confidential copy is kept for 30 days (or until an open report is decided) so our safety team can review harassment reports. Every access is logged.
9. Security
Data is encrypted in transit (TLS), access is limited by row- and column-level security, and our team's access to member data is role-based and logged.
10. Age
Glaikan is for adults 18 and over only. See our Child Safety Standards.
11. Changes to this policy
When this policy changes in a way that matters, the app shows you what changed and asks for your agreement again before you continue.
12. Contact
Glaikan privacy team
Email: support@glaikan.com
Website: https://glaikan.com
Address: Bangkok, Thailand