Privacy

• Only your nickname, age, country, languages, bio and the photos you choose to post (after review by the team).
• Never your real name, surname, phone, email or M-Pesa / e-Mola number.
• Never your exact location: at most your country.
• Links and shares use random codes, never your name or sequential numbers.

• In calls, video goes through our relay server (TURN): the other person does not see your IP address. In Lives, video goes through our server and viewers do not see anyone’s IP either.
• Calls are not recorded. Text messages during a random call are not stored.
• You can start blurred: the other person only sees you when you tap “Show my image”. It is on by default for freelancers.
• A discreet watermark with the viewer’s nickname appears over the video. Recording or sharing someone else’s image leads to a ban and can be reported (“Recorded or shared my image”).

• In video calls and Lives, a detector runs on your own device over the image from your camera. The video does not leave your device to be analysed.
• Only when the detector fires do we keep a small encrypted snapshot that only the team can see (every view is logged). It is deleted after 30 days unless a violation is confirmed.
• If a minor or a crime is suspected, snapshots, reports and account records may be handed to the authorities.

• Before saving, we remove photo metadata (GPS, phone model, date).
• Verification: to appear to other people you send a photo of your ID document and a selfie holding it. It is only used to confirm you are 18+ and one account per person. From the document we keep only the result, the date of birth, the type and an encrypted fingerprint of the number (the number itself is not kept). The images are encrypted on InterServer servers in the USA (New Jersey), only the team sees them (every view is logged) and the document photo is deleted 30 days after approval.
• Automatic verification: if you choose «Start the verification», your ID and a selfie with liveness check are processed by Didit (identity verification provider, Spain), which processes the data in the European Union (AWS) on Cupido's behalf, as a processor. The legal basis is your consent, given on screen before you start; you can send the photos by hand instead. After the decision, Cupido asks Didit to delete the session; doubtful cases and minors are always reviewed by a person on the team.
• The verification selfie is encrypted, only the team can see it and every view is logged. The image is deleted 30 days after the verification is approved; only the result, the date and a fingerprint (hash) remain.
• For withdrawals we only keep the document type and its last 3 characters, never an image.

• Payments happen at PaySuite (M-Pesa, e-Mola): we never see your PIN or card details.
• The payment text is neutral (for example “Digital credits”), with nothing that says what Cupido is.
• In your dashboard the wallet number is masked (84•••123).

• Account: name, date of birth, email, phone and password (hashed). Only to sign in, handle payments and comply with the law.
• The date you accepted the content rules and, for freelancers, the date of the training.
• Private messages: kept so both people can read them, until one of them deletes their account.
• IP and device: at most 30 days, only for security and to stop fraud.
• Conversation ratings (👍/👎): only to order the lists, never shown to anyone.
• Payments and earnings: for as long as tax law requires, without your name once you delete your account.

• Only PaySuite (for payments) and our hosting provider: the data is kept on InterServer servers in the USA (New Jersey), protected and encrypted where stated above.
• The authorities only when the law requires it or a crime is suspected, especially against minors (requests to legal@cupido.co.mz).

In “My account”, “Delete account”. We delete your profile, photos, posts, messages, verification and identity. Only anonymous financial records remain, for the legal period, plus the evidence of a serious violation being handled with the authorities.

No content or names on the lock screen: only “You have a new message on Cupido”.

To see, correct or delete your data: apoio@cupido.co.mz.