The short version
- The photos you upload for a match check are used only to generate your compatibility result, and are automatically deleted shortly afterwards.
- AI scoring runs inside our own Microsoft Azure environment, your photos are not sold or handed to a separate AI company.
- We don’t sell your personal data or use it for third-party advertising.
- You can ask us to access or delete your data at any time at ops@merdify.xyz.
Who we are
Mufmuf (“we”, “us”) provides an AI-powered matchmaking web app. For the purposes of data-protection law, the data controller is Mufmuf, operated by its owner. If you have any questions about this policy or your data, contact us at ops@merdify.xyz.
What we collect and why
We collect only what we need to run the service:
- Photos you upload (for a visual match check), used to generate your compatibility score. The comparison and its image are temporary and deleted automatically (see “How long we keep it”). The image you compare against is processed in memory only and is never stored. Legal basis: your consent and performance of the service you requested.
- Account details (such as your email address, name, and a provider identifier) when you register with Google, Apple, or an email sign-in link, used to create and secure your account. Legal basis: performance of a contract.
- Profile and activity (profile details you add, the people you swipe on, and your matches), used to provide the discovery and matchmaking features. Legal basis: performance of a contract.
- Basic usage and diagnostics (such as which actions you take and error logs), used to keep the service working and improve it. Legal basis: our legitimate interest in a reliable, secure product.
We do not ask for special-category data, and you should not upload photos of anyone who has not agreed to it (see our Terms of Service).
How long we keep it
- Match-check photos and comparisons: deleted automatically about 28 days after they are created, enforced in both the database and storage on the same clock.
- The image you compare against: never written to disk, held in memory only for the single request.
- Account and profile data: kept while your account is active. When you delete your account it is first deactivated and then permanently removed after a short grace period (about 30 days), which also removes your profile, swipes, and matches.
Who we share it with
We don’t sell your personal data. We share it only with the service providers (“processors”) that help us operate the app, under appropriate contractual safeguards:
- Microsoft Azure, Cloud hosting, PostgreSQL database, encrypted Blob storage, Azure OpenAI (compatibility scoring), and Application Insights (diagnostics). Primary region: israelcentral.
- Google LLC, “Sign in with Google” authentication, only if you choose Google to sign in.
- Apple Inc., “Sign in with Apple” authentication, only if you choose Apple to sign in.
We may also disclose data if required by law or to protect the rights, safety, and security of our users and the service.
Where your data is processed
Our infrastructure runs primarily in Microsoft Azure. Some processors may process data in other countries; where that happens, we rely on appropriate safeguards (such as the providers’ standard contractual clauses) to protect your data.
Your rights
Depending on where you live, you may have the right to access, correct, delete, export, or restrict the processing of your personal data, and to object to certain processing or withdraw consent. You can exercise these rights from within the app where available, or by emailing ops@merdify.xyz. You also have the right to complain to your local data-protection authority.
How we protect your data
We encrypt data in transit and at rest, restrict access using least-privilege identities, and keep secrets in a managed key vault rather than in code. No system is perfectly secure, but we work to protect your information and to delete what we no longer need.
Children
Mufmuf is intended for people aged 18 and over. It is not directed at children, and we do not knowingly collect data from anyone under that age.
Changes to this policy
We may update this policy as the service evolves. When we make meaningful changes we’ll update the “last updated” date at the top, and where appropriate we’ll let you know in the app.
Contact
Questions or requests? Email ops@merdify.xyz.