Pagan Fate Privacy Policy
This Privacy Policy explains how Iggdrasil DOO ("we", "our", or "us") collects, processes, and protects your personal data when you use the Pagan Fate mobile application on Apple iOS devices.
1. Overview & Privacy-First Architecture
Pagan Fate is designed to provide a safe, respectful environment for dating and meaningful connection within Pagan and polytheist communities. Our engineering principles prioritize privacy by design:
- No Third-Party Advertising: We do not include third-party advertising SDKs and do not sell or monetize your personal data.
- No Commercial Data Brokers: We do not integrate commercial behavioral tracking trackers (such as Google Analytics or Meta Pixel).
- European Cloud Infrastructure: Database records and encrypted user media are hosted in European Union cloud facilities (Ireland) under strict data protection standards.
- Coarse Location by Design: Precise GPS coordinates are never disclosed to other members or public feeds.
2. Personal Data We Collect and Process
We process only the categories of data necessary to authenticate members, facilitate intentional connections, assure community authenticity, and protect member safety:
A. Account & Authentication Data
- Account Identifiers: Internal unique user identifiers (UUID) generated at registration.
- Contact Information: Email address for account creation, confirmation, login, and essential service notices.
- Sign-In Providers: If you choose Sign in with Apple or Continue with Google, provider authentication tokens and identifiers are processed securely to authenticate your sessions.
B. Profile & Spiritual Identity Data
- Display Profile: Display name, city, country, biography, languages spoken, and spiritual path statement ("About my path").
- Traditions: Primary spiritual tradition and additional traditions you choose to associate with your profile. This information is provided voluntarily to assist members in finding kindred connections.
- Date of Birth & Age: Your birth date is collected during onboarding solely to verify the 18+ adult age requirement and calculate your displayed age. Your exact birth date is never displayed to other users and cannot be modified after initial onboarding.
- Relationship Intentions & Preferences: Your selected intention (Friendship, Love, or Both) and discovery preferences (gender preferences, distance, age range).
C. Media & Photographs
- Profile Photos: Up to 6 photographs uploaded to illustrate your profile.
- EXIF Metadata Stripping: Embedded EXIF metadata, including camera metadata and embedded GPS coordinates, is stripped locally on your device prior to upload.
- Secure Storage: Profile photos are stored in private cloud storage buckets accessible only via time-limited, signed URLs.
D. Location & Map Data
- Approximate Location: When location permissions are granted, your device coordinates are coarsened (~110-meter rounding) before transmission.
- Distance Bands: Other members only see generalized distance bands (for example: "Within 25 km"), never exact coordinates.
- Opt-In World Map: The World Map feature displays members in generalized geographic grid cells (0.1-degree granularity). World Map visibility is entirely opt-in and can be toggled on or off at any time in privacy settings.
E. Interactions & Messages
- Signals & Matches: Record of Passes, Waves (friendship interest), Hearts (romantic interest), and mutual connections ("The Threads Have Met").
- Direct Chat: Text messages exchanged between connected members. Messages are transmitted securely and are accessible only to the participants, except when a specific message is formally reported for moderation review.
F. Verification & Identity Assurance
- Level 1 Live Pose Verification: Onboarding selfie pose challenges evaluated to ensure accounts correspond to real individuals.
- Level 2 Staff Document Review: For elevated trust tiers, members may submit government-issued identification. Identification documents are reviewed by authorized compliance personnel via audited, time-limited access. Identification document numbers are cryptographically hashed and never stored in plaintext. Verification does not evaluate or certify religious beliefs.
G. Safety, Moderation & Enforcement
- Safety Actions: Blocked user lists, submitted abuse reports, moderation notes, and administrative enforcement records maintained to uphold community safety standards.
H. Subscriptions & Purchases
- Entitlements: Premium subscription status and receipt tokens verified via Apple StoreKit. Billing and payment card information is processed exclusively by Apple Inc.; Iggdrasil DOO never receives or stores your payment card details.
3. Third-Party Processors & Infrastructure
We work with trusted technical service providers who process data strictly under confidentiality and data protection obligations:
- Cloud Database & Storage: Supabase Inc. (infrastructure hosted in the European Union, Ireland,
eu-west-1). - Platform Distribution & Purchases: Apple Inc. (App Store distribution, StoreKit 2 receipt validation, Sign in with Apple, on-device translation).
- Identity Sign-In: Google LLC (Google OAuth authentication, where enabled by the member).
4. Account Deletion & Data Retention
You have full autonomy over your account and personal presence:
- In-App Deletion Workflow: You can delete your account at any time directly in the application under Settings > Account & Security > Delete Account.
- Immediate Removal: Upon confirmed deletion, your profile is immediately hidden from Discovery, search, and World Map. Active sessions and discovery drafts are removed.
- Data Scrubbing: Personal identifiers (name, email, bio, birth date, photos) are scrubbed and anonymized.
- Retained Records: For security, legal accountability, and fraud prevention, certain records are retained in restricted, read-only compliance archives: append-only financial transaction ledgers, abuse reports, moderation actions, and block lists. In direct chat threads, existing messages remain visible to the conversation partner attributed to "Deleted Member".
5. Minimum Age Requirement
Pagan Fate is strictly an adults-only (18+) platform. We do not permit individuals under 18 years of age to register. Any account discovered to belong to a minor will be terminated immediately.
6. Security Safeguards
We employ multi-layered security controls, including encrypted HTTPS/TLS in-transit data transmission, encrypted storage at rest, database row-level security (RLS) policies, and strict role-based compliance access auditing.
7. Privacy Inquiries & Rights
If you have questions about your personal data, wish to exercise applicable privacy rights, or need assistance with account data, please contact:
Iggdrasil DOO
Zgrada Solidarnosti, Lokal br. 7
Budva, Montenegro
Email: info@yggdrasil-doo.me (Subject: [Pagan Fate Privacy])