Privacy Policy

1. Controller and scope

This notice applies to the Blentin mobile applications, public website, account support, safety operations, and related services. SATCHEL-APPS, publisher of Blentin, is responsible for processing personal data through these services. Privacy and data-rights requests may be sent to contact@blentin.com. Blentin is an adults-only dating service and is not intended for anyone under 18.

2. Data we process

We process account and authentication data; date of birth and age; public and private profile information; profile photos and other media; messages, shared photos, stickers, read receipts, and conversation metadata; favorites and blocks; reports, moderation decisions, appeals, and safety records; precise device location used to calculate nearby results and approximate distance; device, integrity, crash, analytics, advertising-consent, and push-notification identifiers; support communications; and account-export or deletion records. Optional profile fields may reveal sexual orientation, sex life, gender identity, ethnicity, HIV status, other health information, practices, preferences, and relationship information. These fields can be sensitive or special-category data under GDPR Article 9.

3. Mandatory data, optional data, and sources

Some data is required to create and operate an account, including authentication details, adult-eligibility information, minimum profile details, security logs, and technical data needed to deliver the service. If required data is missing, we may be unable to create the account, show nearby profiles, deliver messages, process safety reports, or comply with law. Other data is optional, including many profile fields, photos, precise device permissions, push notifications, advertising choices, and sensitive profile details. Most data comes directly from you or your device; some data is generated by your use of Blentin, by other users when they interact with you, by app stores or operating-system services, by moderation tools, or by service providers acting for us.

4. Purposes and legal bases

We process data to create and secure accounts, verify adult eligibility, provide profiles, nearby browsing, filters, messaging, media, professional-service discovery, exports, and deletion under the contract you request. We use legitimate interests, balanced against your rights, to prevent fraud and abuse, secure the service, enforce rules, moderate content, investigate reports, improve reliability, and establish or defend legal claims. We process data when needed to comply with law. Optional analytics, personalized advertising, and device permissions rely on consent where required. Special-category profile data must be optional and processed only after separate explicit consent; withdrawing that consent must be as easy as giving it and does not affect prior lawful processing.

5. Sensitive profile data and explicit consent

Some optional profile fields, filters, messages, reports, or media may reveal sexual orientation, sex life, gender identity, ethnicity, HIV status, health information, practices, preferences, or other sensitive information. Do not add sensitive information unless you want it processed for the feature where you provide it. Where GDPR Article 9 applies, Blentin relies on your separate explicit consent for optional sensitive profile processing and on appropriate lawful bases for safety, legal, or user-requested communication contexts. You can withdraw consent or remove optional profile fields, but some already-shared content, safety records, legal records, or records involving other people may be handled under the retention and rights rules in this policy.

6. Age, authenticity, and vulnerable users

Blentin is restricted to adults aged 18 or over. We process birth date, age, account signals, reports, and safety records to enforce this rule. If we suspect that an account belongs to a minor, is impersonating someone, or creates a serious safety risk, we may restrict visibility, request proportionate verification, preserve evidence, suspend or delete the account, and report urgent or unlawful content to competent authorities where required or permitted by law. Users should report suspected underage accounts or impersonation through the app or by contacting support.

7. Visibility, recipients, processors, and transfers

Information you add to your public profile is shown to eligible users according to product visibility and safety rules. Messages and shared media are disclosed to their intended participants. Authorized staff and service providers may access only what is needed for hosting and database services, authentication, storage, email delivery, push notifications, analytics or advertising where enabled, app integrity, content moderation, support, security, and legal compliance. These providers include Supabase infrastructure, Hostinger for website hosting and Paris-based moderation VPS infrastructure, Resend for privacy and safety emails where configured, Firebase/Google services for analytics, crash reporting, Remote Config, App Check, Cloud Messaging, and Google Mobile Ads/User Messaging Platform where enabled, Apple services for iOS delivery, app stores, and moderation infrastructure. Personal data may be transferred internationally using applicable legal safeguards. We do not sell personal data. We may disclose information when lawfully required or to protect users and the service.

8. Cookies, SDKs, analytics, advertising, and app stores

The website and apps may use strictly necessary technologies for security, authentication, fraud prevention, preferences, routing, crash diagnostics, and service delivery. Analytics, advertising, attribution, and similar SDKs or cookies are used only where configured and where the required consent or other lawful basis exists. App stores, operating-system providers, payment providers, and advertising networks may process data under their own terms and privacy notices when you use their services, install the app, manage subscriptions, make purchases, or change platform privacy settings.

9. Location, matching, profiling, and automated tools

With device permission, Blentin uses precise location to determine service availability, find nearby profiles or services, order results, and calculate distance. Other users receive an approximate location or distance rather than your raw coordinates. You can withdraw device permission, but nearby features may stop working. Filters, preferences, distance, activity, safety rules, and availability may affect which profiles or services are displayed. Automated integrity and spam-prevention tools may flag content or accounts for restriction or human review. You may contact us to ask about an automated outcome or request human review where applicable.

10. Public-media moderation and human review

When you submit public-profile media, automated moderation analyzes the media and returns an allow, review, or block outcome using signals associated with sexual, explicit, or otherwise unsafe content. Media awaiting review remains non-public and may be viewed by authorized staff. Rejected media is not published. We may process moderation signals and decisions, request identifiers, reports, appeals, and limited security or diagnostic logs to enforce our rules, handle disputes, prevent abuse, and maintain reliability. Automated tools can make mistakes. You may contact support to ask about an outcome or request human review where available. Media shared through a private feature is not automatically permitted merely because it is private and may be reviewed when reported or where required by law.

11. Retention, deletion, and security

Active account data is kept while the account is needed to provide the service. An in-app deletion request hides the account and schedules deletion after a 30-day window. Some limited records may be kept longer for security, fraud prevention, report handling, disputes, legal obligations, backup cycling, or the establishment, exercise, or defense of legal claims. Short-lived verification data and temporary export archives are deleted or expire when no longer needed. We use access controls, row-level security, private storage, temporary download tokens, integrity controls, and logging minimization, but no system can guarantee absolute security.

12. Retention examples

Deletion and retention periods depend on the data and reason for processing. Profile and account data are normally removed from active service after the deletion window unless a lawful exception applies. Messages, media-sharing records, reports, blocks, moderation decisions, legal-acceptance records, consent history, export-request records, push-token records, payment or app-store records, and security logs may follow different periods where needed for user safety, accounting, dispute handling, legal proof, or fraud prevention. Temporary server export links expire after 72 hours and are designed for limited downloads. Backups and provider logs may persist for short technical cycles before being overwritten or deleted.

13. Your choices and GDPR rights

Depending on the processing, you may request access, rectification, erasure, restriction, portability, or objection; withdraw consent at any time; and complain to the CNIL or your local supervisory authority. You can edit profile data, manage device permissions and advertising choices, block users, delete your account, and request an account-data export in the app. The local-device archive is created immediately. Server exports use password and email-code verification and a private link that expires after 72 hours. Some mixed-person records—such as received messages, reports about you, or internal moderation details—may require a manual rights-and-freedoms review. Current server exports include owned-media metadata but not all private media bytes; request a supplementary review if needed. We normally respond within one month, subject to lawful extensions.

14. Contact, complaints, and changes

Send privacy and rights requests to contact@blentin.com and identify the account email where necessary. We may request proportionate identity verification and will not ask for more data than needed. You may lodge a complaint with the French data protection authority, CNIL, at www.cnil.fr, or with your local supervisory authority. Material changes to this policy will be dated and communicated through appropriate channels.