Privacy Policy

This Privacy Policy explains how DateRoute collects, uses, keeps and discloses information about people who use the Service: the DateRoute app (on iPhone and on the web at app.mydateroute.com), the invite page your date opens, and this website (mydateroute.com). DateRoute plans mystery dates in Bangkok.

We collect the minimum we need to plan and run your date. By using the Service, you acknowledge that you have read and understood how your information is handled as described in this Privacy Policy.

Your Account

You sign in with Apple, with Google, or with a one-time code we email to you. There is no password and we never ask for a phone number.

• Your email address, which identifies your account whichever way you sign in
• Your first name, if Apple or Google shares it when you first sign in, or if you add it yourself. It is optional
• A link between your account and your Apple or Google sign-in, so you can sign in again
• Sign-in codes, which we store only in salted and hashed form and which expire after 10 minutes

Your Profile and Defaults

• Your usual date preferences: starting area in Bangkok, budget, vibes and dietary choices
• The first name of the person you usually go with, if you add it, to prefill invites
• Your notification settings

Your Dates

• Each date you plan or book: day, time, length, budget, vibes, dietary choices and starting area
• The route we plan for it and the stops revealed to you
• After the date: your thumbs up or down per stop, an optional overall rating and an optional note. Stops you give a thumbs down are not planned for you again
• Plans you preview without booking. If you are not signed in, these are deleted after 7 days

Invites for Your Date

You can invite the person you are going with through a link. They do not need an account or any contact details to join.

• Your date's first name, as you type it for the invite
• If your date joins without an account, their device receives a random key from us so it can show the date and receive its notifications. It is not a hardware or advertising identifier and is not derived from the device. We store only a one-way hash of it, when it was created and last used, which dates it joined and its notification tokens. No name, email address or phone number
• If your date gives an overall rating or a note after the date, we keep it with that date

Notifications

If you allow notifications, we keep your device's push token (in the iPhone app, through Apple Push Notification service) or your browser's Web Push subscription. We use them to send the meeting point, clues and stop reveals, reminders and "News and specials" if you have switched them on, and replies to your messages. We delete a token when you remove the device or turn notifications off, when the push service tells us it no longer works, or when your account or invite key is deleted.

Support Chat

When you use "Chat with us" in the app, we keep the messages you exchange with our team, one private conversation per person per date, to help with your date and any change of plans.

App Usage and Error Events

The app sends anonymous events about which steps were reached (for example "date planned" or "stop unlocked") and, when part of the app fails, an error event with the area and type of error. Each event carries a random ID created by the app on your device and a few small values. Events never include email addresses, names, venues, locations or the text of an error. We use them to see where people get stuck and what breaks. The app contains no third-party analytics, advertising or tracking SDKs.

This Website

• Early-access and newsletter signup: if you join the list, we keep the name and email address you enter so we can tell you when the app is available to you and send DateRoute news. You can unsubscribe through the link in any email
• Website analytics: we use Umami, an analytics tool we run ourselves rather than a third-party analytics service, to count page views, referring sites, campaign tags in the link you followed and basic browser and device information. Umami does not use cookies and does not store your IP address
• Technical data such as your IP address is processed by our hosting provider to deliver pages and protect the Service

• Your location. The app does not track where you are. Directions open the venue in your maps app, and anything that app collects is governed by its own provider
• Phone numbers
• Payment details. DateRoute is free during the beta and takes no payments. You pay venues directly for what you order
• Contacts, photos or other data from your device

To Run the Service

• Signing you in and keeping your account secure
• Planning routes that match your preferences and avoid stops you did not like
• Running your date: revealing stops on schedule and letting your date join from the invite
• Sending the notifications described above
• Answering your messages and helping with changes to your plans

To Improve and Protect the Service

• Understanding, from anonymous events, ratings and notes, which steps and stops work and which do not
• Finding and fixing errors
• Preventing abuse, for example by limiting how often sign-in codes can be requested
• Complying with legal obligations and enforcing our Terms of Service

We do not sell personal data, show ads, or track you across other apps or websites.

We use the following providers to run the Service. They process data on our behalf for these purposes only:

• Apple: Sign in with Apple, and notifications to the iPhone app through Apple Push Notification service
• Google: Sign in with Google
• Your browser's push service (for example Google, Mozilla or Apple): delivering notifications in the browser
• Cloudflare: hosting the web app and this website, delivering traffic to our servers, and sending sign-in code emails
• OVHcloud: the server that runs our API and database
• Our email list service: storing the early-access and newsletter list and sending those emails

These providers may process data outside Thailand. Where they do, we rely on the safeguards available under applicable data protection law.

Apart from the service providers above, we only disclose your information:

• To the person you invite: your date sees the date you booked, the stops as they are revealed, and the first name you entered for them
• To venues, only what is needed for your visit, such as a booking for two at a given time. Venues do not see your profile
• To legal authorities when required by law
• To a successor in the event of a merger, acquisition or sale of the Service, who must keep this Policy's protections

• Account, profile, dates, ratings, notes and chat: while your account exists
• Sign-in codes: 10 minutes
• Plans previewed without an account: 7 days
• Invite keys of people who joined without an account: deleted, with everything linked to them, after 180 days without use
• Notification tokens: until removed as described in section 2.5
• Newsletter signups: until you unsubscribe or ask us to remove you
• Database backups: kept for 14 days, then overwritten

When you delete your account, we delete your sign-in links, email address, name, profile, settings, notification tokens, invites you joined, ratings, notes, draft plans and chat messages. An active date is cancelled first. We keep a record of past bookings without your personal details, and remove your date's name from them, for our records.

We use appropriate technical and organizational measures to protect your information, including encrypted connections, hashed sign-in codes and invite keys, access controls, and server logs that record the route of a request but not your IP address or the links you opened. Stops that have not been revealed yet are never sent to your device.

While we work to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure.

Subject to applicable law, including Thailand's Personal Data Protection Act, you have the right to:

• Access your personal information and receive a copy of it
• Correct inaccurate or incomplete data
• Request deletion of your information
• Object to or restrict processing
• Withdraw consent where we rely on it, for example by turning off notifications or unsubscribing
• Data portability where applicable

In the app, under Settings, "Get a copy of your data" gives you everything tied to your account as a file, and "Delete account" deletes your account as described in section 7. You can change your profile and notification settings at any time. For anything else, contact us at team@mydateroute.com.

The Service links to other services, such as maps apps for directions, venue websites, and our Instagram account. When you use them, their own privacy policies apply.

We may update this Privacy Policy from time to time, for example as the Service leaves beta. We will post the new version on this page and update the date at the top, and we will tell you in the app or by email about material changes. Your continued use of the Service after the changes are posted means you accept them.