Privacy Policy

Curtains is operated by Billion Flower Moon Studios LLC, a Wyoming limited liability company.

In brief#

• This is one policy for the Curtains app and the website, curtainsdating.com.
• We collect what a dating app needs to work. We never collect your precise location, your card details, or the face scans from the face check, which stay on your phone.
• We collect your gender identity, sexual orientation and who you're interested in only with your consent.
• Everything members post or send is reviewed before anyone else sees it: by automated checks, a person, or both. Every image uploaded to Curtains is checked against known child sexual abuse material, and a person reviews every report.
• We don't sell your data, show ads, or track you across other apps and websites. We do not collect, use, or sell personal data to train large language models.
• We store your data with our cloud providers in the United States. The exceptions are analytics, for the app and the website, and email delivery, handled in the European Union, and the emails you send us, which our email provider may store outside the United States (section 7). The people who run Curtains work remotely, including from outside the United States, and reach member data through restricted, logged access.
• Everyone, in every state, gets the same privacy rights. We answer requests within 45 days.
• The website has no accounts, sets no cookies of its own, and sends us nothing you type into it. It counts page views without cookies.

1. Who we are and what this policy covers#

Curtains (also written "Curtains Dating") is an iOS dating app for adults 18 and older in the United States, together with the website curtainsdating.com. Billion Flower Moon Studios LLC runs both. In this policy, "we", "us" and "Curtains" mean that company. "You" means anyone who uses the app or visits the website.

This one policy covers both the app and the website. It explains what we collect, how we use it, who we share it with, how long we keep it, and your rights.

Apple's own privacy policy covers what Apple does with your information as the App Store, the payment provider and the sign-in provider.

Questions: email privacy@curtainsdating.com, call +1 (307) 317-0275, or write to Billion Flower Moon Studios LLC, 2106 House Ave, Cheyenne, WY 82001, USA. Section 16 lists all our contact addresses.

2. What we collect#

2.1 What you give us

• Date of birth. You give us your date of birth and confirm that you're 18 or older. We use your date of birth to confirm you're 18 or older and to show your age. Your profile shows your age, never your date of birth, and we never show your date of birth to other members.
• Name. Your first name comes from your Apple Account when you sign in with Apple, and you can edit it on Apple's screen before you share it. If Apple doesn't share one, you type it once. You choose whether your profile shows it in full or as an initial. To change the name itself later, write to support@curtainsdating.com. Apple may also share your last name; we don't keep it.
• Profile. Your photos, the other details you add to your profile, and your settings and preferences. We also give each profile a random profile ID, shown in the menu on the profile, so members can point us to a profile in a report. Profile photos can come from your photo library; we receive only the photos you choose to upload. They must show you. If you take the face check (section 2.3), your phone compares them with a selfie. Before any photo or Scene leaves your phone, the app removes the location data and other hidden details stored in the image file (EXIF metadata).
• Scenes. Images you take with the in-app camera and share with your matches: all of them, or only your hard matches, as you choose. A Scene expires 24 hours after you post it.
• Messages and reactions. What you write in conversations, and your reactions to Scenes. Messages are text only.
• Your city. The city you live in. The app suggests one from your connection's IP address, and you confirm or change it. If you change it later, we keep a record of the change.
• Reports, appeals and support requests, including anything you attach.
• Your agreements and choices. When you agreed to our Terms, this policy and our Community Guidelines, including that we may answer Apple's questions when you ask Apple for a refund (section 6.3); when you acknowledged our safety notice; and each consent you gave or withdrew: for sensitive data (section 2.2) and for the face check (section 2.3).

2.2 Sensitive data, only with your consent

At sign-up, on a separate screen, we ask for your consent to use:

• your gender identity, including whether you're nonbinary or transgender;
• your sexual orientation; and
• who you're interested in.

This consent is required to use Curtains, because matching can't work without this information. Showing your orientation or your gender identity on your profile is optional, and neither shows unless you turn it on. We collect these only if you agree. We use them only to provide Curtains (matching you with other members, and showing on your profile the details you choose to show) and for safety. They never go to our analytics providers. We never sell them or use them for advertising. You can withdraw your consent at any time. If you do, matching stops, and we offer to delete your account (section 10).

The face check (section 2.3) has its own consent screen at sign-up. It processes images of your face on your phone only, and its results aren't biometric data, but we handle them with the same care.

2.3 What we collect from your phone and the app

• Location. Curtains never asks for permission to use your phone's location, and never uses it. We use the city you give us (section 2.1) to show distances between members, for Local mode and the leaderboard, and to check that you live where Curtains is available. To suggest that city, we look up the approximate city and state of your connection's IP address. The suggestion isn't stored: only the city you confirm is. To keep Curtains closed in places where it isn't available, we also check which state your connection comes from, without asking for permission, when you sign up, change your city or buy Tickets, and at a few other moments, such as when you start a conversation or upload a photo. We keep only the latest result: the state, and when we checked. No precise location is collected, stored or sold, and we don't keep a history of where you've been.
• Face check. When you sign up, if your iPhone supports it, we ask you to take a face check: your phone takes a live selfie and compares it with your profile photos. We ask for your consent first. It all runs on your phone; the selfie and any face data never leave it and are deleted right after each check. We receive only the results: whether you passed, didn't match, skipped it or your phone couldn't run it; which of your photos matched; and when. If you passed, your phone also compares each new profile photo with your checked photos. You can skip the face check, and if it doesn't match, you can still use Curtains. We use the results only to help keep fake accounts off Curtains, for example when we review a report. They never change who sees your profile or the order profiles appear in, and other members never see them. Our Biometric Information Policy explains the details.
• Device-integrity signals. Signals from Apple's App Attest and DeviceCheck. They help us confirm that requests come from a genuine copy of the app, prevent fraud, and keep banned accounts from coming back.
• Device and connection data. Your IP address, device model, iOS version, app version and push-notification token. Our servers log requests with technical data. We also record your IP address, with the time, when you sign up, sign in, upload a photo or Scene, or buy Tickets, to protect accounts, prevent fraud and meet our legal reporting duties (sections 6.4 and 8).
• Activity. Your likes and matches, when you were last active, which Scenes you viewed and who viewed yours, and your Ticket holds, uses and returns. We also keep a record of who you've exchanged messages with and when (not what was said), which we need to send the safety alerts in section 6.2.
• Screenshots. When someone takes a screenshot of a Scene, iOS tells the app, and we tell the person who posted it. Screenshot detection covers Scenes only.
• App analytics, crash and performance data. Pseudonymous events about how the app is used, such as which screens are opened, and technical reports when the app crashes or runs slowly, so we can fix it. They go to our analytics provider. They're tied to an internal ID, not to your name or email address. They never include message content, profile text, images, your sexual orientation or gender identity, or any location finer than city.
• Email records. When we email you, our email delivery provider records when the email was delivered and whether it was opened or a link in it was clicked. The provider doesn't let us switch this off. We use these records only to check that our emails arrive.

2.4 What we get from Apple

• Sign-in. Curtains uses Sign in with Apple only. Apple gives us an ID for your Apple account. We store it only as a keyed hash: a coded form we can match but can't turn back into the ID. Apple also shares an email address with us (your own address, or an Apple relay address if you chose to hide yours) and your first name (section 2.1).
• Purchases. Apple processes every payment. We receive transaction IDs, which Ticket bundle you bought and when, and whether a purchase was refunded. We never see your card or other payment details.
• Refund requests. If you ask Apple for a refund, Apple tells us about the request (section 6.3).
• Apple's age check. When you sign up, and before you change your city to a state whose law requires an age check, we ask Apple to share your age range. In some states, Apple must confirm that you're 18 or older before you can join (Where Curtains is available). Elsewhere, if Apple can't confirm your age, you can still join, but we may review your account. We keep only the outcome and the date. Apple's response is discarded right after the check. We use the outcome only to apply our 18+ rule and to comply with the law, and we share it only in a report the law requires (section 6.4).

2.5 What we get from other members and our safety tools

• Reports that other members make about you, and the messages they send you.
• Results from our safety checks, such as a match against known child sexual abuse material or a flag from our automated checks (section 4).

2.6 When you visit our website

The website has no accounts, and it sets no cookies of its own. Nothing you type on it is sent to us: for example, a name you add to the cancellation receipt you can make on our home page stays in your browser. Two providers handle visits:

• Our network and security provider hosts the website and protects it from attacks. To deliver pages, it processes technical data such as your IP address and your browser's request headers, and keeps these logs for about 30 days. It may set strictly necessary security cookies (section 13).
• Our website analytics provider counts page views for us, without cookies. Nothing is stored on your device, and your visits aren't linked from one day to the next. For each page view, it records which page was viewed and when, with technical details such as browser, device type, operating system, screen size and the page you came from. It discards your IP address before anything is stored, and we don't work out your location from it. The data is stored in the European Union and kept for up to 1 year.

2.7 When you contact us

• Email. We receive your email address, your message and the usual email details.
• Phone. If you call or text +1 (307) 317-0275, we receive your phone number and anything you tell us or leave in a message.
• Direct refunds. If we pay a refund directly instead of through Apple (for example, after you cancel a purchase), we ask for the details we need to send the payment.

2.8 What we don't collect

• Precise location, or a history of where you've been. This includes the location data stored inside photo files, which the app removes before upload (section 2.1).
• Your card or other payment details. Apple handles payment.
• The selfie, or any face data, from the face check. They stay on your phone.
• Health information. We don't ask for it, and profiles have no health-related fields: nothing about drinking, smoking or drug use, HIV status or disability. If you choose to mention your health in your profile, a message, a report or an email to us, our Consumer Health Data Privacy Policy explains how we handle it.
• Your contacts or address book.
• Your phone number through the app. We have it only if you call or text us.
• Your activity in other companies' apps and websites.

3. How we use your information#

We use your information to:

• Run Curtains. Create and protect your account; show you other members and show you to them; work out distances from members' cities, and whether Local mode is on in your city; deliver messages, reactions and Scenes; keep track of your Tickets; and send the notifications you allow. Discovery shows only members who were active in the last 21 days.
• Check eligibility. Confirm that you're 18 or older and that Curtains is available where you live.
• Protect members and Curtains. Run the safety checks and reviews in section 4; look into reports; prevent fraud, abuse of the Ticket system and banned members coming back; send safety alerts; and report child sexual exploitation as the law requires.
• Handle purchases. Deliver Tickets, process cancellations and refunds, and keep tax and accounting records.
• Talk to you. Answer your questions, and send account, purchase, safety and legal notices.
• Improve Curtains. Learn how the app and website are used, from the analytics in sections 2.3 and 2.6; fix crashes and slowdowns; and keep our safety checks working well. We never use your information to train large language models.
• Meet legal duties, and protect our rights and other people's.
• Do what you ask or agree to, such as answering Apple's questions about a refund you requested (section 6.3).

Discovery decides whom to show you, and in what order, from your preferences, your city and activity, such as how recently members were active.

What we never do with your information:

• We don't sell it.
• We don't use it, or share it, for advertising. Curtains shows no ads.
• We don't track you across other companies' apps or websites.
• We don't use it for profiling that produces legal or similarly significant effects, such as decisions about credit, housing, insurance, education, jobs or health care.
• We do not collect, use, or sell personal data to train large language models.

4. Safety checks and review#

We use the checks below for safety only, never for advertising.

• Review before anyone sees it. Your profile, photos, Scenes and messages are shown to other members only after they pass our review: automated checks, a person, or both. Something that's flagged waits for a person. If we refuse a message, it isn't delivered, and we tell you.
• Every uploaded image (profile photos and Scenes) is checked against known child sexual abuse material before any person sees it, by matching its hash (a digital fingerprint of the whole image) against lists of known material.
• Automated checks look for signs of scams and serious harm in messages, and in profile text (your name, bio and other answers), before they're shown. They're a word-and-pattern check on our own systems and an automated moderation provider, which receives only the text, without your email address, profile ID or other account identifiers. They hold anything they flag for a person to review. An image classifier we run ourselves helps our reviewers.
• A person reviews reports, flagged content and content waiting for approval, and sees only that, plus the context needed to decide.
• Child sexual exploitation is reported to the National Center for Missing & Exploited Children (NCMEC), as federal law requires (section 6.4).

When you report a profile, a Scene or a message, we copy what you reported into a restricted evidence vault, so it can still be reviewed after it's removed, the Scene expires or the conversation is deleted: the profile's photos, the Scene, or the message plus up to 20 messages around it. Section 8 says how long the vault keeps it.

If we act against your content or account, you can appeal. Our Community Guidelines explain how.

5. Public statistics: the leaderboard#

We publish a leaderboard in the app, which shows how many members in each city were active in the last 21 days and the number needed to unlock Local mode there. It's built from aggregated data. Cities are the ones members give us, never ZIP codes. Any count under 20 shows as "fewer than 20". It contains no information about any individual member.

6. Who we share it with#

6.1 Service providers and other companies that help us run Curtains

We use other companies to run Curtains. Except where the table says otherwise, they're service providers: they process personal information only for us, under contracts that let them use it only to provide their service to us.

Apple also handles your information under its own terms and privacy policy, as part of the Apple services you use with Curtains: your Apple account, App Store purchases and push notifications. Our email inbox provider and our bank handle what they receive under their own terms and privacy policies.

NCMEC isn't a service provider: we send it reports because federal law requires it (section 6.4).

6.2 Other members

Curtains is for meeting people, so some of your information is visible to other members:

• Your profile (your name, photos, age, profile ID, the details you choose to add, how recently you were active, and a "New here" label for your first 14 days) is shown to members in discovery, with your distance from them, worked out from your cities. Never your precise location. How recently you were active shows as "Online now" (within the last hour), "Active today" or "Active this week"; after a week, nothing shows. Your orientation and your gender identity show only if you turn them on.
• Your Scenes are visible to the matches you choose (all of them, or only your hard matches) until they expire. You can see who viewed your Scenes, and members can see that you viewed theirs.
• Messages and reactions go to the members you send them to.
• Screenshots. If you take a screenshot of someone's Scene, they're told.
• Reports. We don't tell members who reported them.
• Safety alerts. If we ban an account because it may be using a false identity, or because there's a significant risk it will try to get money from members by fraud, we send a safety alert to every member who received a message from it. The alert shows the name on the banned account's profile, its profile ID and when that member last exchanged messages with it. So if your account is banned for this reason, the members you messaged see your profile name, your profile ID and the time of your last messages with them.

6.3 Apple, for refund requests you've agreed to

When you ask Apple to refund a Ticket purchase, Apple may ask us for information to help it decide. You agree to this as part of the agreement you accept at sign-up (our Terms, Section 5.6), and we record that agreement. We answer only while it stands. If it does, we tell Apple:

• that you consented;
• whether the Tickets were delivered;
• what share of that purchase's Tickets you've used; and
• whether we'd prefer the refund to be granted in full, granted in part, or declined.

We never send Apple your messages, photos or matches. To withdraw your agreement, write to privacy@curtainsdating.com. After that, we won't answer Apple's requests about your purchases.

6.4 Safety and the law

• Child safety. We report apparent child sexual exploitation to NCMEC, as federal law requires: child sexual abuse material, and the sex trafficking or online enticement of a minor. A report can include information about the people involved, such as their profile details, email address, date of birth, age-check outcome and IP addresses, and the content concerned. We preserve what we report for as long as the law requires (section 8).
• Legal process. We disclose information when the law requires it, for example in response to a valid subpoena, court order or search warrant. Our law enforcement guidelines explain what we hold and what each kind of request needs.
• Emergencies. We may disclose information when we believe in good faith that it's needed to prevent death or serious physical injury.
• Protecting rights. We may use or disclose information to enforce our Terms, look into fraud or abuse, or establish or defend legal claims.

6.5 If the business changes hands

If Curtains is sold, merged or reorganized, your information may pass to the new owner only if it keeps the promises in this policy. We'll tell you before it happens. Where the law requires your consent first, as New York's dating-service law does, we'll ask for it and won't transfer your information without it.

6.6 What we never do

We don't sell personal information, and we don't share it for cross-context behavioral advertising. We haven't done either in the past 12 months. We don't track you, as Apple's App Tracking Transparency rules define tracking, so the app never asks for permission to track you.

Apart from the companies in section 6.1, the only recipients of personal information are those in sections 6.2 to 6.5: other members, Apple (for refund requests, with your agreement), NCMEC, law enforcement and courts, and a new owner of the business.

7. Where your data is processed#

• Our servers and storage. We store and process your data with our cloud providers in the United States. There are three exceptions: analytics, email delivery and our email inboxes, all below.
• The people who run Curtains work remotely, including from outside the United States, and reach member data through restricted, logged access.
• Analytics. Our analytics providers store the website's page views, and the app's events and crash and performance reports, in the European Union.
• Email delivery. Our email delivery provider, which sends our emails to members (such as our safety notice, receipts, safety alerts and deletion confirmations), stores data in the European Union.
• Our email inboxes. Our email inbox provider stores the emails you send us, and our replies, in data centers in the United States and other countries.
• Our other providers process data in the United States, except our network and security provider and our image safety providers: US companies whose services run on their own global networks (section 6.1).
• Apple handles sign-in, payments, push notifications, device-integrity checks and the age check on its own systems.

Curtains is offered only in the United States.

8. How long we keep it#

• Legal holds. If the law requires us to preserve something (for example, under a court order or a law enforcement preservation request), we keep it until that duty ends, even if you've asked us to delete it.
• Sign-in data (the keyed hash of your Apple ID, and the email and name Apple shares) is kept like your profile. If an account is banned, the hash is kept as ban-enforcement data.
• Other account data not listed above, such as device and push tokens, is kept while the account exists and deleted on the same timeline as your profile.
• After you delete your account, these records stay for the periods above: conversations (30 days after they close), purchase and Ticket records, acceptances and consents, support, report and appeal records, email to and from us, evidence-vault copies, material in a report to NCMEC, IP addresses recorded with account activity, ban-enforcement data and, if we've taken action against the account, its data for 1 year. Server logs, analytics and our providers' logs age out on their own schedules.

9. Your rights#

We give these rights to everyone, in every state, whether or not your state's law requires it.

9.1 What you can ask for

• Access. Ask whether we process your personal information, and get a copy of it. We'll also tell you where it came from, why we use it and who we've disclosed it to, including a list of the specific third parties.
• Portability. Get your data in a machine-readable file you can take elsewhere: Settings → Legal & privacy → Download my data. It's usually ready within minutes. It includes your date of birth, your email address, the IP addresses we hold with their dates, and your city changes, and it includes the messages you sent. It shows other members only by profile ID. It doesn't include device identifiers or push tokens: we leave those out to protect your account, and the file lists them as a category instead.
• Correction. Ask us to fix information that's wrong. You can edit most of your profile yourself in the app. To change your name, write to support@curtainsdating.com.
• Deletion. Ask us to delete your personal information. If you ask us to delete messages we're keeping after a conversation closed (section 8), we delete them unless a report or a legal hold needs them. Section 9.4 explains account deletion.
• Opt-outs. Opt out of the sale of your personal data, of targeted advertising, and of profiling that produces legal or similarly significant effects. We don't do any of these, so there's nothing to switch off. You can still send an opt-out request, and we'll record it. We honor Global Privacy Control signals as an opt-out (section 13).
• Withdrawing consent. Withdraw any consent you've given, such as for sensitive data or the face check. If you withdraw your consent for sensitive data, matching stops, and we offer to delete your account (section 10).
• Appeals. Appeal if we turn down a request (section 9.3).

We won't discriminate against you for using these rights.

9.2 How to ask

• In the app: Settings → Legal & privacy.
• By email: privacy@curtainsdating.com.
• By mail: Billion Flower Moon Studios LLC, 2106 House Ave, Cheyenne, WY 82001, USA.

We make sure a request comes from you before we act on it. In the app, your signed-in session does this. For email or mail, we'll ask you to confirm the request from the email address on your account. We ask only for what we need to do this.

You can use an authorized agent. We'll need your signed permission, and we may ask you to confirm the request with us directly.

We answer within 45 days. If we need more time, we may extend once, by up to 45 more days. If we do, we'll tell you why within the first 45 days. Requests are free.

9.3 If we say no: appeals

If we turn down all or part of a request, we'll explain why. To appeal, reply "appeal" to our answer, or write to privacy@curtainsdating.com. We'll look at your request again and send you a written decision, with reasons, within 45 days. If we turn down your appeal, we'll tell you how to contact your state Attorney General.

9.4 Deleting your account

You can delete your account in the app at any time: Settings → Account → Delete my account. You can also ask by email.

• Before you confirm, the app lists any Ticket purchase that is still within its cancellation time limit. Deleting your account cancels those purchases, and we refund them in full. Other unused Tickets are forfeited when you delete your account, unless the law requires a refund (see our Terms, Section 4.13).
• We delete your data from our live systems within 72 hours, and from backups within 30 days. When we've deleted it, we send a confirmation to the email address Apple shared with us.
• Your conversations disappear for the other members at once, and we delete them 30 days later (section 8).
• Some records stay for the periods in section 8, because the law requires them or because they protect members.
• Separately, unmatching removes a conversation for both members at once, and we delete it 30 days later.

10. Your privacy choices#

• Sale and advertising. We don't sell your personal information or share it for cross-context behavioral advertising, so there's nothing to opt out of. You can still send an opt-out request (section 9.1). Our website honors Global Privacy Control signals.
• Sensitive data. At sign-up, you consent to our using your gender identity, sexual orientation and who you're interested in. This consent is required, because matching can't work without this information. Showing your orientation or your gender identity on your profile is your choice. To withdraw your consent, change it in Settings → Legal & privacy or write to privacy@curtainsdating.com. We stop using the information as soon as we can, and within 15 days at the latest, and delete it from your profile. Because matching needs this information, matching stops when you withdraw your consent, and we offer to delete your account.
• Limits on sensitive data. We use sensitive data only to provide Curtains and for safety. That limit applies automatically; you don't need to ask for it.
• Face check. You can skip it at sign-up, and you can withdraw your consent at any time in Settings → Legal & privacy → Face check or by writing to privacy@curtainsdating.com. We then delete your face-check results, and you can keep using Curtains (section 2.3).
• Location. Curtains never asks for permission to use your phone's location. Your city is the one you confirm (the app suggests it from your IP address), and you can change it in the app.
• Notifications. Turn push notifications on or off in iOS Settings.
• Safety alerts. Every safety alert comes as a message in your in-app inbox and by email to the address Apple shares with us, plus a push notification if you allow notifications. There's nothing to set up.
• Apple refund requests. To stop us answering Apple's questions about your purchases, write to privacy@curtainsdating.com (section 6.3).
• Email. We send account, purchase, safety and legal emails only. We don't send marketing email unless you opt in.
• Taking a break. A membership hold hides your profile from everyone new for up to 1 year and keeps your Ticket balance (see our Terms, Section 7.5).
• Unmatching, blocking and deleting. Unmatching or blocking removes the conversation for both of you at once, and so does a soft match expiring; we delete it 30 days later (section 8). You can delete your account at any time (section 9.4).
• Consumer health data. See our Consumer Health Data Privacy Policy.

11. State-specific notices#

We give everyone the rights in section 9. Some state laws also ask us to say particular things. Here they are.

Connecticut. We ask for your consent before processing sensitive data (section 2.2), and you can withdraw it at any time (section 10). We do not collect, use, or sell personal data to train large language models. The top of this policy shows the month and year it was last updated. If we turn down your appeal, you can contact the Connecticut Attorney General at portal.ct.gov/ag.

California. California's privacy law (the CCPA) asks the businesses it covers to list the categories of personal information they collect. We give this list to everyone. We collect:

• identifiers: your first name, the keyed hash of your Apple ID, your email address, your profile ID, your IP address and device identifiers;
• characteristics protected by law: your age, gender identity and sexual orientation;
• commercial information: purchase and Ticket records;
• internet or other electronic network activity: app analytics events, crash and performance reports, website page views, and server logs;
• geolocation: only your city and the state your connection comes from, never precise location;
• audio, electronic or visual information: photos and Scenes, and voicemails you leave on our phone line;
• biometric information: none (the face check runs on your phone, and we receive only its results, section 2.3);
• inferences: limited discovery signals, such as how recently you were active, the outcomes of the face check and Apple's age check, and flags from our safety checks;
• sensitive personal information: your sexual orientation and gender identity, the content of your messages with other members, and anything about your health that you or another member share with us.

Section 2 lists the sources, sections 3 and 4 the purposes, and section 8 how long we keep each category. We disclose these categories for business purposes to the companies in section 6.1 and to the recipients in sections 6.2 to 6.5. We don't sell or share anyone's personal information, including that of people under 16, and we haven't in the past 12 months. We use sensitive personal information only to provide Curtains and for safety, so there's no need to ask us to limit its use. California's "Shine the Light" law (Civil Code §1798.83) doesn't apply to us: we don't disclose personal information to third parties for their own direct marketing.

Virginia, Texas, Oregon, Montana, New Jersey and other states with comprehensive privacy laws. These laws give residents rights to access, correct and delete their personal data and get a portable copy; to opt out of its sale, of targeted advertising and of certain profiling; and to appeal when a business turns down a request. Everyone gets these rights (section 9), including the appeal process in section 9.3. We don't sell personal data, use it for targeted advertising, or use it for profiling that produces legal or similarly significant effects.

Texas. We don't sell personal data, including sensitive personal data.

Washington, Nevada and Connecticut: consumer health data. Our separate Consumer Health Data Privacy Policy covers Washington's My Health My Data Act, Nevada's consumer health data law and Connecticut's rules on consumer health data.

Nevada: sale of personal information. We don't sell covered information, as Nevada law (NRS chapter 603A) defines it. You can still send a request not to sell to privacy@curtainsdating.com, and we'll record it.

Illinois, Texas and Washington: biometric laws. The face check runs on your phone, after you consent, and we don't collect biometric identifiers or biometric information. Our Biometric Information Policy sets out our retention and destruction schedule.

12. Children#

Curtains is only for adults 18 and older, and our website isn't aimed at children.

• At sign-up, you give your date of birth and confirm that you're 18 or older.
• We also use Apple's age check (section 2.4).
• Any sign that you're under 18 blocks sign-up, and we delete the data from that blocked sign-up immediately.
• If we learn that an account belongs to someone under 18, we close it. If we find that an adult sought sexual contact with them, we report it to NCMEC (section 6.4).
• To report someone you think is under 18, use the report option in the app or email safety@curtainsdating.com.

13. Cookies and similar technologies#

Website. curtainsdating.com sets no cookies of its own: no analytics, advertising or tracking cookies. The only cookies that may appear are strictly necessary security and traffic cookies set by our network and security provider, which hosts, delivers and protects the site. They serve pages and block attacks, not analytics or advertising, and the site can't work securely without them. Our website analytics run without cookies and store nothing on your device (section 2.6). We show no cookie banner because there's nothing optional to agree to. If that ever changes, this policy and a banner will change first.

App. The app itself sets no cookies and contains no advertising or tracking code.

Signals. We honor Global Privacy Control as an opt-out of the sale of personal data and of targeted advertising. We don't do either, so the signal confirms what already happens. Because neither the website nor the app tracks you across other sites or apps, they work the same way whether or not your browser sends a Do Not Track signal. We don't let other companies collect information about your activity across websites or apps through Curtains.

14. Security#

We protect your information with:

• encryption in transit, and encryption at rest for all account data, including your date of birth;
• photos and Scenes that are never public: the app gets each one through a private link that works for a short time;
• restricted, logged access to member data;
• a restricted evidence vault, with every access logged;
• contracts that limit what our service providers can do with your information; and
• collecting as little as we can (section 2.8).

No system is perfectly secure. If a breach affects your personal information, we'll tell you and the authorities as the law requires. To report a security problem, email security@curtainsdating.com (see our security page).

15. Changes to this policy#

When we change this policy, we update the "Last updated" month and year at the top. For a material change, we'll tell you in the app or by email at least 30 days before it takes effect. If a change would let us use information we already hold in a materially different way, or would need your consent under the law, we'll ask for your consent first. Earlier versions are archived; email privacy@curtainsdating.com for a copy.

16. Contact us#

Billion Flower Moon Studios LLC, 2106 House Ave, Cheyenne, WY 82001, USA · Phone: +1 (307) 317-0275

Related policies: Terms · Community Guidelines · Consumer Health Data Privacy Policy · Biometric Information Policy · Safety center · Intimate images · Law enforcement · Security · Where Curtains is available