Impress Me
Impress Me is operated by Dizdarium OÜ (17603659), Sepapaja tn 6, Lasnamäe linnaosa, 15551 Tallinn, Harju maakond, Estonia. We are the data controller for the personal information described in this policy. We are established in Estonia, in the European Union, and we apply the EU General Data Protection Regulation (GDPR) to everyone who uses Impress Me, wherever they live.
Questions, requests about your data, or complaints: support@impressme.app. We have not appointed a data protection officer; the operator answers requests to this address directly.
When you create an account: your email address, or the name and email address your Apple or Google sign-in shares with us, and your date of birth.
Your profile: your name, your gender and the genders you are interested in, your city, your photos, a short voice introduction (optional), your personality quiz answers, and the profile details you choose to fill in (height, job, education, nationality, ethnicity, languages, religion, children, what you are looking for, lifestyle answers such as smoking, drinking and exercise, interests, prompt answers, and your story). Some of these are sensitive; see "Sensitive Information" below.
A selfie for identity verification. See "Identity Verification and Biometric Data" below — it is processed as biometric data.
What you do in Impress Me: your likes, passes and blocks; your conversations and everything you send in them — messages, voice notes, photos and date plans; the reports you file; the tags you give when a conversation ends (see "Ratings After a Conversation"); your settings, saved filters and notification choices; and a referral code, if you enter one.
Collected automatically: your location — the place you choose, or, if you allow it, your device’s current position — used to show you people nearby; device and app information (device model, operating system, app version and language); a push-notification token; crash reports; usage events about which features you use (see "How We Use Your Information"); and an integrity check, run on your device by Google Play or Apple, that tells our servers a request comes from the genuine app.
From the app stores and our payment provider: a record of each purchase (product, price, date and the store’s transaction reference). We never see or store your card details.
When you contact us: your email address and what you tell us.
To run the service: build your profile, compute your personality aura and compatibility scores, show you other people and show you to them, carry your conversations, send you notifications about them, and apply your credits and subscription. If you signed up with a creator’s referral code, we count your purchases towards that creator’s commission; the creator sees totals, never who bought.
To keep the service safe: verify that you are a real person, enforce the 18+ age requirement, check photos and text for prohibited content, review reports, act on blocks, and keep a record of what we decided (see "Reports, Moderation and Safety Records").
To improve the service, if you allow it: we record usage events — for example that an account signed up, sent a like, reached a stage of a conversation or made a purchase — with our analytics provider, under a pseudonymous identifier: a one-way hash of your account id. With them we store a few facts so that we can compare groups of users: your plan, age, city and country, personality type, whether you are verified, and your credit balance. We never send your name, email address, photos, messages, gender, the genders you are interested in, religion or ethnicity. This is not anonymous data: we can still connect it back to you, so it stays covered by the rights described below. We ask you after you sign up; until you say yes nothing is recorded, and you can change your answer at any time in Settings → Usage analytics.
We also count, in aggregate, how far conversations get between people whose personality types match and people whose types differ. These counts hold no names, no account identifiers and no conversation identifiers — only totals — and cannot be traced back to you.
We also count anonymous totals of how many accounts complete each step of sign-up, to improve sign-up. These counts hold no names, no account identifiers and no personal details, and cannot be traced back to you.
We do not sell your personal information. There is no advertising in Impress Me, and we share nothing with advertisers. We do not use your data to train AI models, and we do not allow the providers who process it for us to do so.
We do not send you marketing emails. Push notifications are about your matches and conversations; you choose which ones you get in Settings, and you can turn them off in your device settings.
Where data-protection law requires us to name a legal basis, these are ours. The article numbers refer to the GDPR.
To perform our contract with you (Art. 6(1)(b)): your account and profile, the matching that is the service itself, your conversations and the notifications about them, your credits and subscription, and your voice introduction if you add one.
Your consent (Art. 6(1)(a)): your device’s precise location and push notifications, both of which your device asks you for, the waitlist emails, and usage analytics, which we ask you about after you sign up. For identity verification, which uses biometric data, we ask for your explicit consent on a separate screen (Art. 9(2)(a)), and we ask for it separately for your gender settings, religion and ethnicity too (see the next section). You can withdraw any consent at any time — see "Your Rights" — without affecting what was done before; withdrawing consent to verification pauses your profile, because verification is required to use Impress Me.
Our legitimate interests (Art. 6(1)(f)): keeping the service safe from abuse, fraud and underage users, including the automated checks of photos, text and reported accounts and the safety records we keep; crash reporting; counting visits to our website; anonymous totals of how far conversations get and of how many accounts complete each sign-up step; recognising a waitlist sign-up when you register; and refusing new purchases after repeated refunds. We balance these against your interests and use the least identifying data that will do the job. You can object to any of them — see "Your Rights".
Legal obligation (Art. 6(1)(c)): handling notices about illegal content and telling people what we decided, as the EU Digital Services Act requires; keeping accounting and tax records; and responding to lawful requests from authorities.
Sensitive information: see the next section.
Some details you can give us are special-category data under the GDPR: your religion, your ethnicity, and your gender together with the genders you are interested in, because together they can reveal your sexual orientation. Lifestyle answers such as smoking or drinking can also say something about your health. Your verification selfie is biometric data and is covered in the next section.
Religion, ethnicity and lifestyle answers are optional. You decide whether to add them; if you do, they are shown on your profile, and you can change or remove them at any time in Profile → Edit, which stops us using them at once. Your gender and the genders you are interested in are needed for matching. Other users’ apps receive them in order to match you, but do not display them (see "What Other People Can See").
We use this information only to show your profile and to match you with people. We never use it for advertising or to set prices, and we never sell it or share it with advertisers. We do not send your gender, the genders you are interested in, your religion or your ethnicity to our analytics provider.
We use this information only with your explicit consent (Art. 9(2)(a)), which we ask for separately, with its own unticked box, when you set your gender settings or add your religion or ethnicity — and in the app for accounts created before we asked that way. We record when you gave it. You can see it and withdraw it in Settings → Sensitive information: withdrawing it for your religion or ethnicity removes them from your profile, and removing them in Profile → Edit ends their use too. Your gender and the genders you are interested in are published with your profile to the apps of other signed-in users, as described in "What Other People Can See"; they can be changed but not removed, because matching cannot work without them, so the way to withdraw that consent is to delete your account. Until an account created before then has answered for each of them — the app asks again each time it is opened — its gender settings, and any religion or ethnicity already on its profile, keep being used exactly as before: shown on the profile where they were shown, and used for matching. For that period we rely on the fact that you chose to make this information public on your profile (Art. 9(2)(e)).
In some countries, same-sex relationships can expose the people in them to legal risk. Where your home country is one of them, Impress Me does not offer same-sex matching or a non-binary gender option, and the same applies to a possible match in which either person’s home country is one of them (see "Features That Differ by Country" in the Terms). To apply this, our server reads your home country together with your gender and the genders you are interested in when a conversation would start. It keeps no separate record of it.
When you join, we ask for a selfie so we can confirm you are a real person and that your profile photos are of you.
That selfie is sent to Amazon Rekognition, a facial-analysis service operated by Amazon Web Services in the United States. It checks that one real face is present and compares the selfie with each of your profile photos. This is BIOMETRIC processing. We do it only after you have given your explicit consent on a separate screen that explains it, and we record when you gave it.
The result and the comparison scores are stored on your account. The selfie is kept in private storage while your account exists, for one further purpose: any NEW profile photo you add is compared with it, so a verified profile cannot quietly become someone else. A photo that does not match is taken down, and you are told which one. The selfie is never shown on your profile, never shared with other users, and is deleted when you withdraw your consent or delete your account.
Verification confirms that a real, consistent person is behind an account. It is NOT a criminal-records check, a character reference, or any assurance about how someone will behave. See the Terms.
You can withdraw your consent at any time in Settings → Face check consent. We then stop all face checks, delete your selfie and the comparison results derived from it, and remove your verified badge. Verification is required to use Impress Me, so your profile is paused — nobody new can see you and your chats are locked — until you verify again or delete your account. If you withdraw more than once in a short period, giving consent again may only be possible after a wait.
Some things about you are computed rather than read: your personality profile (from your quiz answers), your compatibility with other people, and the order in which profiles are shown, which also takes into account how recently you were active, whether a boost is running, and whether you have recently left matches without a reply. These decide what you see and who sees you. They do not decide anything with a legal or similarly significant effect, and you can change your quiz answers at any time.
Content is also checked automatically. New profile photos, and photos sent in a chat, are scanned by Google Cloud Vision for nudity, violence and similar content: a profile photo it rejects is not shown and you are told why, and a chat photo that does not pass is not sent. The text of messages and of your story is compared with a list of prohibited words and phrases; a match is queued for a person to review, and nothing is deleted automatically. When verification is on, a profile photo that does not match your selfie is taken down automatically and you are told which one.
When an account is reported, Claude, an AI model made by Anthropic, checks the report. It receives the last 30 messages of the conversation between the person who reported and the person reported — the text only, each cut to 200 characters and marked only as written by one or the other — and the reported person’s prompt answers and story. It does not receive names, account ids, photos, location or contact details, or anything the person who reported wrote about the report. It names the kind of breach it finds, if any, with a short reason.
What can follow without a person deciding first: messages of the reported person that the check finds against our rules can be hidden from both people; a report it finds clearly harmless can be closed; and in the clearest serious cases the account is taken out of the app at once — put on hold when there are signs that the person is under 18, and suspended when it is plainly running a scam, offering sex for money or sexually harassing someone. A hold or a suspension needs words the reported person actually wrote to rest on. Nothing is deleted, the account owner is told by email what happened and why, and a person can reverse it. Every other report, and every report the check cannot handle, waits for a person to decide.
Voice notes and voice introductions are not checked automatically; a person hears them only if someone reports them.
Apart from these holds and suspensions after a report, no account is suspended or removed by an automated system: a person decides. You can ask for a person to look again at any automated decision about your content, your account or a report you filed by writing to us within six months (see "How We Moderate Content" in the Terms); if it was wrong, we reverse it.
Other signed-in users see your public profile: your name, your age, your city and roughly how far away you are, your personality type, your photos (see below), your prompt answers, your story, your interests, your basics (height, job, education, nationality, ethnicity, languages, religion, children, and what you are looking for), your lifestyle answers, your voice introduction, the aura style you have chosen, the personality traits your profile lists, whether you are verified, and whether you are free to start a new conversation. Much of this is optional, and anything you leave empty is not shown. They also see the rating tags other people have given you, as described in "Ratings After a Conversation".
Some information goes out with your public profile without being displayed, because the app uses it on other people’s devices to decide who is shown to whom and in what order: your gender and the genders you are interested in, a rough level (not the exact score) for each personality trait behind your type (these levels shape how your aura moves, how you rank in discovery and the order your traits are listed in), roughly which week you were last active, whether your profile is paused, whether a boost is running, whether you are currently ranked lower for not replying to matches, and when your public profile last changed. The app does not display these, but anyone signed in who reads the app’s data directly can see them, so do not treat them as private.
They do NOT see your exact location or coordinates, your email address, your date of birth, your verification selfie, your quiz answers, your credit balance, or whether you subscribe.
Before you match, other users see one of your photos, blurred. In a conversation, the other person sees your photos blurred until you both accept the Photo Reveal, and sharp after that while the conversation stays open. Treat anything you upload as something your matches will eventually see — the reveal is a stage in the experience, not a security boundary.
When you like someone, they can see that you did, along with your profile. In a conversation, the other person sees everything you send in it — messages, voice notes, photos and date plans — and can still read it after the conversation ends, until it is deleted.
Beyond other users, we share personal information only with the service providers listed in "Where Your Data Goes", each bound to use it only on our instructions; with the moderators who review reports for us, under a written agreement that includes confidentiality; and with authorities where the law requires it.
When a conversation ends, each of you may pick tags that describe the other — for example "Friendly" or "Slow to respond". We store the tags you give, linked to your account and to that conversation. Only a conversation in which you both wrote can be rated.
Nobody is ever shown who gave a tag. A tag appears on a profile only once at least three different people have given it, and how many gave it is shown as a range such as "3+" or "10+", never as an exact number. The same applies to what you see on your own profile.
The tags you have given are included when you download your data (Settings → Download my data). Tags other people gave you are not listed one by one, because each would reveal who gave it.
A rating stops counting after 12 months and is deleted about a month after that. When you delete your account, we delete the ratings you gave and the ratings other people gave you.
When you report someone, we store who reported whom, the reason you chose, anything you wrote, and when. So that the report can still be checked after the other person changes or deletes things, it also keeps a copy of the last 30 messages of your conversation with them (each cut to 200 characters; for a voice note, only the fact that one was sent) and links to the reported person’s photos as they were at that moment. The person you report is not told who reported them.
A report is also checked automatically, as "Automated Processing" describes. The result — the kind of breach, a short reason and the words it rests on — is kept with the report under the same rules.
Content flagged by our automated checks is kept for review in the same way: the account, an excerpt of up to 200 characters, and why it was flagged.
Reports and flagged content are read only by our moderators. Every time a moderator opens the messages attached to a report, we record who opened them and when, so that we can tell you, if you ask, who has read your messages.
These records are kept after either account is deleted, because they are how we protect other users, answer a complaint about a decision, and deal with legal claims or requests from authorities. Twelve months after a report or a flag has been dealt with, we delete the copied messages, excerpts and photo links and anything the person who reported wrote, and keep only the record of the decision: which accounts, which rule, what we decided, by whom and when. We keep the content longer only while a legal claim, a request from an authority or an open complaint needs it. When an account is deleted, its photos are deleted with it, and the links in a report then lead nowhere.
If you join the waitlist on impressme.app, we store your email address, the language you want the app in, the country you live in and, if you gave one, your city, the personality type from the website quiz if you took it, the campaign code of the link you arrived through if it had one (for example, which of our social accounts it was posted on), and when you gave and confirmed your consent. We never ask where you are from.
We use this to confirm your sign-up and to email you when Impress Me opens where you live. We also count sign-ups per campaign code, to see how many people each of our social accounts brings to the waitlist. The legal basis for these emails is your consent. You can withdraw it at any time with the link in every email or by writing to us, and your entry is then deleted at once.
If you later create an Impress Me account with the same email address, and your sign-in shows that the address is yours (you sign in with Google or Apple, or you tap the link in the verification email we send when you create the account), the app recognises your sign-up: it shows you the type from the website quiz, keeps a note on your account that you came from the waitlist and which type you had, and deletes your waitlist entry, since you no longer need the launch email. We do this in our legitimate interest in carrying on what you started on the website. The note is deleted with your account. An account that has not shown that the address is its own is told nothing.
Your address counts only after you confirm it from the email we send. Unconfirmed addresses are deleted after seven days. A confirmed entry is deleted when you leave the list, when it is recognised as above, and at the latest twelve months after you confirmed.
The quiz runs in your browser: your answers are not sent to us. To stop automated abuse of the sign-up, a one-way hash of your IP address is kept for no more than a day.
The list is stored in Google Cloud Firestore in Frankfurt, Germany, and the emails are sent through Google Workspace. Google processes both on our behalf.
When you visit impressme.app, each page you open sends us a short note: which of our pages it was, the domain of the website you came from if you followed a link (for example instagram.com, never the full address), the campaign code of the link if it had one, and whether you started and finished the website quiz. We only add these up into totals per day.
We do not use cookies or store anything on your device for this, we do not record your IP address or anything else that identifies your browser or device, and the totals cannot be traced back to you. We do this in our legitimate interest in knowing how many people visit the site and which links bring them. The daily totals are kept as statistics, stored in Google Cloud Firestore in Frankfurt, Germany.
Our website sets no cookies. It keeps two kinds of thing in your browser: the language you chose, until you clear it; and, for the current tab only and deleted when you close it, your website quiz answers and result and the campaign code of the link you arrived through, so that the quiz and the waitlist form can use them. The visit counter described above stores nothing at all. The staff area of the website, used only by our team, keeps its sign-in in the browser.
The app keeps on your device what it needs to work — your sign-in, your settings and cached content — and your answer to the usage-analytics question. Only if you allow usage analytics does it also keep an identifier (the hashed one described above, or a random one for an event recorded before the app knows your account) and a count of the events sent that day; saying no, or signing out, deletes them. Crash reporting uses its own installation identifier. The app uses no advertising identifiers and does not track you across other companies’ apps or websites.
These providers process personal information for us, each under a contract that limits them to our instructions.
Google (Firebase and Google Cloud) hosts our database, file storage, sign-in and server functions. Your profile, conversations and files are stored in the EU — the database in Frankfurt, Germany, and files in Google’s EU region; sign-in runs on Google’s global infrastructure. Google also scans photos for prohibited content (Cloud Vision), suggests places when you type your city (Google Maps Platform), and sends our emails (Google Workspace).
Amazon Web Services performs identity verification (Amazon Rekognition), in the United States.
Anthropic, in the United States, checks reported accounts with its AI model Claude; it receives only the texts described in "Automated Processing".
Apple and Google sell and charge for purchases made in their stores, run "Sign in with Apple" and "Sign in with Google" if you use them, check that requests come from the genuine app, and deliver push notifications. Notifications reach them through Expo (650 Industries) in the United States, which receives your push token and the text of each notification. RevenueCat in the United States tells us which purchases your account has made, under your account id.
Sentry receives crash reports and PostHog receives usage events. Both are US companies, and both store this data in the EU (Germany).
This means your personal information is transferred outside your own country, and some of it to the United States or to providers who can access it from there. Where you are in the EU/EEA or the UK, those transfers rely on the EU–US Data Privacy Framework where the provider is certified under it, and otherwise on the European Commission’s Standard Contractual Clauses (or the UK Addendum), together with the safeguards those providers publish. You can ask us for a copy of the safeguards for any provider. If we add a provider, we update this list before it receives your data.
We keep your personal information while your account exists, except where it goes sooner: a pass is forgotten after 30 days, so that person can be shown to you again; a conversation that has ended and has had no message for six months is deleted, with its messages, voice notes and photos; and a notification in your inbox is deleted after 90 days.
If you do not open the app for eleven months, we send you a notice in the app, and a month later we delete the account as if you had deleted it yourself. Opening the app once is enough to stop it. We do not do this while you have an active subscription, while you hold a staff role or a current partner agreement with us, or while a referral code of yours is active.
When you delete your account we delete: your profile and every field on it, your photos and voice recordings, your verification selfie, your conversations and the messages in them, your likes, passes and blocks, your notifications, your saved filters, and our copies of your purchase receipts. You disappear from discovery immediately; most of the rest goes at once, and all of it within 30 days. If you use Sign in with Apple, we also keep a refresh token from Apple on our servers only, until you delete your account, so that we can then revoke Impress Me’s access at Apple.
Ratings go with your account too: the ones you gave and the ones you received. Otherwise, a rating stops counting after 12 months and is deleted about a month after that.
Some records are kept after your account is deleted, because we need them for safety, accounting or the law: reports and flagged content involving your account — with what they contain for twelve months after the case is closed, and only the record of the decision after that (see "Reports, Moderation and Safety Records"); the record of who read reported messages; a record that we carried out a deletion you asked for by email (your account id, when and by whom — never your email address); if you bought something after signing up with a creator’s referral code, the record of that purchase used to pay the creator (your account id, the product and the amount); and, if you are a partner, your signed agreement. Apple and Google keep their own record of any purchase you made; we cannot delete theirs.
Copies held by our providers: crash reports are kept by Sentry for a limited period and then deleted; usage events stay with PostHog, under the pseudonymous identifier, until we delete them; and RevenueCat keeps the purchase history of your account id until we delete it. Deleting your account also asks PostHog and RevenueCat to delete them, which they complete shortly afterwards. Saying no to usage analytics stops new events but does not remove those already sent; ask us and we will delete them. Anthropic deletes the texts of a report check within 30 days, unless the law or the enforcement of its usage policy requires keeping them longer, and does not use them to train its models.
You can see and correct most of your information directly in the app (Profile → Edit). Your date of birth is fixed after signup to keep ages honest — contact us to correct a genuine error.
You can download a copy of your data at any time: Settings → Download my data. It contains your profile, settings, notifications and purchase records, your conversations with the messages you sent, the likes, passes and blocks you made, and the rating tags you gave, in a machine-readable format. It leaves out the other person’s messages and who rated you, because those belong to other people.
You can delete your account at any time in Settings → Delete Account. If you no longer have the app, email support@impressme.app from the address you signed up with (see impressme.app/delete-account).
You can withdraw a consent at any time: face checks in Settings → Face check consent; your religion and ethnicity in Settings → Sensitive information (your gender settings by deleting your account); usage analytics in Settings → Usage analytics; location and push notifications in your device settings; waitlist emails with the link in every email.
You also have the right to object to processing based on our legitimate interests, to ask us to restrict processing, and to receive the data you gave us so that you can take it elsewhere. Write to us for any of these.
We answer requests to support@impressme.app within one month. For a request by email we may need to confirm that the account is yours, usually by asking you to write from the address you signed up with.
You can complain to a data-protection authority, in particular the one where you live or work. Our lead authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee). We would like the chance to put things right first, but you do not have to contact us before complaining. We honour these rights wherever you live, not only where they are written down — see "Your Local Rights Come First" in the Terms.
Data is encrypted in transit and at rest, access to production data is restricted, and your account document is readable only by you. No system is perfectly secure, and we cannot guarantee absolute security. If a breach of your data is likely to put you at high risk, we will tell you without undue delay.
Impress Me is only for people aged 18 and over. We ask for your date of birth at signup and refuse accounts below that age. We do not knowingly collect information from anyone under 18; if we learn that we have, we delete the account and its data promptly. If you believe someone under 18 is using Impress Me, report the profile in the app, choosing the reason for someone under 18, or email support@impressme.app. Reports of this kind are handled before all others.
If you work with us as a creator, recruiter or moderator, we also hold what your partner agreement needs: your legal name, address, date of birth, tax details and payment details (bank account or PayPal address), the agreement you signed, and the figures we pay you on. We use them to perform the agreement and to meet accounting and tax obligations. Your details are deleted with your account, but the signed agreement — which contains your name, address and payment details — and the records of what we owed and paid you are kept as business records for as long as the law requires.
Before a material change takes effect, we will tell you in the app or by email and update the effective date above. Where a change needs your consent, we will ask for it; otherwise the new version applies from its effective date. Earlier versions are available on request.
Questions about this policy or about your data: support@impressme.app.