Effective July 2026 · Last revised July 13, 2026 · SameNight, New York, NY · support@samenight.tech
SameNight is a verified social layer for live events: you prove you're attending an event, then optionally connect with other verified attendees of that same event. This policy covers the SameNight iOS app and this website.
| Data | Why | Kept |
|---|---|---|
| Email address | Account sign-in (one-time codes) and the pre-launch waitlist | Life of account; purged ≤30 days after deletion |
| Profile (display name, birth date, bio, pronouns, interests, languages) | Your discovery profile and 18+ age gating. Other users only ever see a derived age band — never your birth date. Bio and interests are processed by AI services to power matching and suggested openers (see “AI features”) | Life of account |
| Profile photos & videos | Profile display. Automatically screened for safety by an AI moderation service before/alongside human review (see “AI features”) | Life of account; storage objects removed on deletion |
| Event attendance & verification decisions | Lobby access — the record that you verified for an event | Life of account |
| Ticket-proof photos (QR/barcode covered) | Human review of attendance only; screened by the same AI moderation service | Deleted no later than 7 days after the decision |
| Per-event mode choices and visibility opt-ins (Friends / Dating / Group / Networking / Community) | You are only ever shown to people compatible with what you opted into | Life of account; auto-cleared after the event ends + 30 days |
| Likes, matches, messages | Connecting and chatting. Non-mutual likes are never revealed to anyone | Until unmatch or account deletion; non-mutual likes at most 90 days after the event |
| Reports, blocks, safety records | Trust & safety — keeping the platform safe | Reports 180 days from resolution; safety/audit records up to 365 days |
| Product analytics (closed set of app events; IDs and enum labels only) | Understanding activation and liquidity. Never chat content, never free text, never counterparty identities | Event-level records at most 180 days; deleted with your account |
Dating is opt-in per event and mutual-intent only: your dating opt-in is never visible to anyone — it is only consumed server-side to decide whether two people who both opted in may see each other. Who liked you is never shown or sold; a like only surfaces as a mutual match.
All traffic is encrypted in transit (TLS 1.2+). Data is encrypted at rest by our hosting provider. Access to user data is deny-by-default with per-table access policies; session tokens live only in the iOS Keychain. Verification-proof photos sit in a private bucket readable only by reviewers via short-lived links, then auto-deleted.
SameNight is strictly for adults 18 and over. A hard age gate runs at signup, and any underage signal leads to immediate suspension and purge of the account.
Six service providers process data on our behalf — no data brokers, no ad networks, no data sales. SameNight does not "sell" or "share" personal information as defined by the CCPA/CPRA, so no opt-out is required.
| Provider | What they receive | Why |
|---|---|---|
| Apple | App distribution, in-app purchase receipts, push notification tokens and payloads | The App Store, purchases, notifications |
| Supabase | All application data (database, file storage, sign-in) | Application hosting |
| OpenAI | Uploaded photos/posters via short-lived private links; bio and interest text | Automated image safety screening; matching (semantic similarity). Not used for model training |
| Anthropic | Bio, interest tags, languages, social energy, event title — never names, ages, gender, or chat content | Suggested conversation openers and matching summaries. Not used for model training |
| Resend | Internal operator emails with queue counts only — never your email, name, or content | Alerting our moderators that review work is waiting |
| Cal.com | Only what someone booking a call types into the form on our partners page — name, email, and their note. Nothing from the app, and nothing from any app user | Scheduling partnership and collaboration calls. The Cal.com embed is the single third-party script on this site and loads on that one page; no other page contacts it |
Depending on where you live (GDPR, CCPA/CPRA, and similar laws), you have the right to access, correct, export, restrict, object to processing of, and delete your personal data. All of these are available in-app or via support@samenight.tech; requests are verified against your authenticated account. You may also lodge a complaint with your local supervisory authority.
If this policy changes materially we will notify you in the app before the change takes effect. This page always carries the current version.