☾Privacy Policy

Celesse — Last updated August 25, 2026

Celesse ("we," "us," "our") operates a dating application built on transparency and intentionality. This policy explains what data we collect, how we use it, and the controls you have over it.

Information We Collect

• Phone number — Used to authenticate your account via SMS, authorize sensitive actions such as account deletion, and enforce the one-account-per-number rule. Phone verification does not establish a person's real-world identity.
• Profile information — Name, age, location area, gender, orientation, photos, bio, interests, and preferences you choose to provide. Location verification stores a representative metro center or coarse grid-cell center; the raw device coordinates used to resolve that area are discarded.
• Behavioral data — Engagement metrics within active matches, such as response rate, message timing, initiation, and conversation effort. Used to calculate your reputation (ELO) score and operate matching.
• Real conversation content — Messages sent to real matches are stored while the match is active so conversation history works across devices and app restarts. They are processed for quality scoring and safety scanning. Raw messages are deleted when the match closes. The AI Coach never generates or inserts messages in these conversations, and we do not sell conversation data.
• Coaching conversation content — Messages exchanged with a clearly labeled fictional practice match are stored through the 24-hour coaching period so the Coach can preserve context across turns and devices.
• Coach purchase records — Product ID, store transaction identifier, purchase status, price, currency, and Coach-credit redemption state. We do not receive or store your full card or payment-account details.

How We Use Your Data

• To authenticate your account and maintain account security
• To match you with compatible users based on engagement quality and preferences
• To search within your verified metro by default and, only if you choose Global Mode, consider compatible users elsewhere in the United States who made the same choice
• To analyze conversation quality for ELO scoring and match improvement
• To scan for harassment, abuse, scams, and policy violations
• To suggest date locations based on mutual interests and preferences

SMS Messaging

You will receive SMS messages from us only for transactional security purposes, including sign-in/account-verification codes and codes you request to confirm account deletion. We do not send marketing or promotional SMS. Message frequency varies based on your requests; message and data rates may apply. Reply STOP to opt out or HELP for help. Opting out may prevent phone-based sign-in or deletion verification until SMS is re-enabled.

Local and Global Matching

Celesse searches locally first. Metro users search within the same verified metro. When either person has a rural location, local eligibility uses the distance between coarse location-area centers, not exact device coordinates. If no compatible local match is available, you may choose Global Mode, which removes proximity restrictions within the United States. A non-local match is created only when both people have independently chosen Global Mode.

AI and Data Processing

Celesse uses artificial intelligence to analyze conversation content and engagement behavior. This includes measuring engagement quality (such as response rate, latency, initiation, and energy matching), assisting with safety review, and operating the reputation and coaching systems. Profile fields and preferences are used by the matching system; Celesse does not currently use facial recognition or biometric identification.

Real-match messages are retained only while that match remains active. When a match closes, Celesse deletes its raw message history from the server. Derived engagement scores may remain because they describe account behavior rather than preserve the conversation itself. A safety report retains the reporting user's description and minimum review metadata, not the closed chat transcript.

The AI Coach is a separate training sandbox. It creates fictional, preference-compatible practice personas and gives private feedback on practice messages. Raw coaching dialogue is removed after the coaching period expires. Derived scores and banked coaching progress remain until you delete your account.

Data Storage and Security

Passwords are not collected — authentication uses phone verification and short-lived tokens. Data is encrypted in transit and access to production systems is restricted. Access tokens expire every 15 minutes and refresh tokens rotate with device/session protections. In native mobile builds, session credentials are kept in the operating system's protected credential storage rather than WebView local storage. Real-time connections use one-time, short-lived tickets so access and refresh credentials are not placed in WebSocket URLs. No system can guarantee absolute security.

Data Sharing

We do not sell your data. We do not share your personal information with third parties for marketing purposes. We do not share, sell, rent, or provide your mobile phone number or messaging consent data to third parties or affiliates for marketing or promotional purposes. We may share data with service providers (including SMS delivery, cloud infrastructure, Apple or Google in-app billing, and RevenueCat purchase verification) solely to operate the service, or when required by law.

Sponsored Date Suggestions

When you and your match begin planning to meet, we may suggest date venues. Restaurants and venues can pay for placement in these suggestions. Sponsored suggestions match your mutual preferences (dietary, price range, interests) — a restaurant cannot push itself to incompatible users. We do not share your personal data with sponsors.

Your Rights

• Delete everything: After your current match cycle has closed, use the Nuclear Button in Settings and confirm the request with a short-lived code sent to your verified phone. Successful verification permanently deletes your profile, matches, messages, photos, coaching progress, and behavioral data, subject only to the safety-enforcement exception below.
• Access your data: Contact us to receive a copy of your data.
• Control SMS: Reply STOP to opt out or HELP for help. Transactional codes are sent only when requested or required for an account action.

One Exception: Safety

When an account is removed for a safety violation, Celesse may retain the minimum account, enforcement, report, and behavioral information needed to prevent re-entry, investigate abuse, protect other users, comply with law, or resolve disputes. This exception does not preserve closed-match chat transcripts unless retention is legally required.

Children's Privacy

Celesse is for adults 18 and older. We do not knowingly collect data from minors.

Changes to This Policy

We may update this policy as the app evolves. Significant changes will be communicated through the app.

Contact

For privacy questions or data requests, use the support/contact method published in the app or on the official Celesse website. Do not send passwords or one-time codes.