Privacy Notice
What data 72 processes, why, with whom, for how long, and the choices and rights available to you.
Last updated: September 1, 2026
This notice is information, not blanket consent. Contract acceptance, this notice acknowledgment, liveness/face-consistency consent, international AI/cloud transfer consent, and optional marketing consent are recorded separately.
1. Data and purposes
We process account, phone, profile, verified photo, age, declared gender, match preference, language, country/city, approximate location signals, device/install identifiers, App Check signals, notification tokens, usage analytics, catalog preferences, offers, chats, media, reports, support, and purchase entitlement records.
- Purposes include account security, discovery filtering, predefined campaign-eligibility assessment where permitted, 72-hour offers, permanent chats, translation/transcription, billing entitlement, notifications, fraud prevention, moderation, support, analytics, legal compliance, and deletion.
- Match preference may be corrected during onboarding and is locked after profile verification. It is deleted through the account-deletion workflow, subject only to the limited anti-abuse retention described below.
- The store processes payment-card details; 72 receives product, transaction, status, territory, and entitlement information rather than full card data.
2. Liveness and face-consistency
With separate explicit consent, camera captures are used to confirm a live person and maintain consistency between the verified person and the primary profile photo.
- Liveness video and non-reference capture frames are retained for up to 30 days for restricted automated checks, randomized human moderation/quality review, fraud prevention, and outcome appeals; they are then deleted unless a documented safety or legal hold applies.
- Up to four strongest verified reference frames are retained while the account remains active so later primary-photo changes can be checked; they are deleted through account deletion unless a legal hold applies.
- Evidence from a rejected or failed final decision is also scheduled for deletion after 30 days unless a documented safety or legal hold applies.
- OpenAI API temporary input files created for analysis are deleted promptly after the response cleanup path runs.
3. Providers and international transfers
Necessary data may be processed by Firebase/Google Cloud, Apple or Google billing and push services, OpenAI, mapping/location providers, and operational service providers listed in our current subprocessor record.
- Transfers can occur outside your country and are based on the applicable contractual, statutory, adequacy, consent, or other transfer mechanism.
- The registration gate records international AI/cloud transfer consent separately where required.
- We minimize payloads and do not send phone numbers or unrelated profile fields to catalog clients.
4. AI model training
72 does not use your profile, verification, message, voice, photo, video, support, or analytics data to train a general-purpose AI model for 72 or a third party.
- Data may be processed to produce the requested verification, moderation, transcription, translation, or assistant result and to secure the service.
- If a future training purpose is proposed, it will not begin without a new notice and the separate legal basis or explicit consent required by applicable law.
5. Retention
Retention is limited by purpose, product state, safety, and legal duties.
- Pending offers normally expire after 72 hours.
- Chats and media remain while needed for the active service or until deleted, blocked, expired, moderated, or the account is deleted, subject to report evidence and legal holds.
- Moderation evidence is normally retained for the disclosed review period; account-deletion anti-abuse identifiers may be retained in restricted form for up to 90 days before final purge.
- Push tokens and active-session records are removed or invalidated when no longer needed.
6. Your rights and controls
Depending on your location, you may request access, correction, deletion, restriction, objection, portability, withdrawal of consent, or review of an automated outcome.
- Withdrawing a consent does not make earlier lawful processing unlawful, but features that require that processing may stop.
- You can control catalog visibility, notification preferences, blocking, reporting, subscription management, and in-app account deletion.
- Contact support@ai72app.com and include your account phone country code only through the secure support flow when possible.
Controller/contact: 72 / Endy Labs — support@ai72app.com
Local privacy rights and complaint routes remain available under mandatory law.