Privacy Notice

Version 1.0 — Effective August 15, 2026

This is a courtesy translation. The Spanish version prevails in the event of any discrepancy.

1. Data controller

[Matchai, LLC] ("MatchAI"), located at [Capital Federal, Buenos Aires], is responsible for processing your personal data under Mexico's Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) and its Regulations.

Data Protection contact:

• Officer: [Gladys Chacartegui]
• Email: privacidad@matchai.online
• Address: [Capital Federal, Buenos Aires]

2. Data we process

2.1. Identification and contact

Name and surname, date of birth (to verify you are of age and compute your age), gender, email address, phone number, language and time zone.

2.2. Profile data

Photos, bio, interests, lifestyle, prompt answers, search preferences and anything else you choose to publish. What you publish on your profile is visible to other users.

2.3. Usage and interaction data

Profiles viewed, likes, passes, matches, messages sent and received, reports and blocks, timestamps of your actions, features used.

2.4. Technical and device data

IP address, device identifier, browser and OS type and version, device language, access logs, app errors and push notification token.

2.5. Location data

Approximate location (from your IP) and, only if you grant device permission, precise location, to show you nearby people and compute distances. You can revoke this permission in your OS settings at any time; we will then use approximate location or the city you declare.

2.6. Payment data

Plan purchased, subscription status, billing history and payment processor customer ID. We do not store your full card number or security code: those are handled directly by the payment processor (Stripe) under its own PCI-DSS policies.

2.7. Sensitive personal data

For the purposes described here we process the following sensitive personal data:

• Biometric data: a short video of your face and the templates derived from it, used solely for optional photo verification.
• Sexual preferences and orientation: data inevitably inferred from the gender you seek and the preferences you set in a dating app.
• Health or ethnic origin data: only if you voluntarily include it in your profile or messages. We recommend you do not.

MatchAI commits to processing this data under the strictest security measures guaranteeing its confidentiality. Processing requires your express consent, given by accepting this Notice and, for biometric data, by voluntarily starting photo verification.

2.8. Minors

The Service is exclusively for people 18 or older. We do not knowingly collect data from minors. If we detect or are notified of a minor's account we suspend it immediately and delete the data. Parents or guardians may write to privacidad@matchai.online.

2.9. Waitlist

If you join the waitlist at https://matchai.online before launch, we only process: your email address, the date you joined, the language of the page and the version of the consent you accepted. We do not store your IP address or any other data.

• Purpose: to let you know, by email, that MatchAI is available. We don't use your email for anything else or share it with third parties.
• Basis: your consent, given by ticking the box on the form, which you can withdraw at any time.
• Where: on Amazon Web Services (us-east-1 region, United States), acting as data processor.
• Retention: until we send you the launch notice and, at most, 12 months after you joined; after that it is deleted automatically. Backups of the list keep deleted data for 35 more days, then it is gone.
• Unsubscribe: write to privacidad@matchai.online and we'll remove your email from the list. The launch email will also include an unsubscribe link.

3. Purposes

3.1. Primary purposes (necessary for the Service)

1. Create, authenticate and manage your account, and verify your email, phone and age.
2. Show your profile to other users and show you other people's profiles.
3. Generate compatibility suggestions using automated systems and AI models.
4. Enable matches, messaging and Service notifications.
5. Process subscriptions, payments, renewals, invoicing and refunds.
6. Prevent, detect and investigate fraud, fake accounts, harassment, abuse and unlawful activity, and enforce our Terms and Community Guidelines.
7. Provide support, handle requests and reports, and send you operational notices and changes to our legal documents.
8. Comply with legal obligations and respond to competent authorities.
9. Perform photo verification when you request it.

3.2. Secondary purposes (not necessary)

10. Product analytics, aggregate statistics and improvement of our algorithms.
11. Satisfaction surveys and user research.
12. Marketing communications, promotions and MatchAI news.

You may refuse processing for secondary purposes without affecting your access to the Service, by writing to privacidad@matchai.online or using the unsubscribe link in each marketing message.

4. Automated decisions and profiling

We use automated systems to rank and suggest profiles, prioritize content and detect abusive behavior. Automated detection may lead to limiting or suspending an account. You may request human review of any automated measure affecting you by writing to soporte@matchai.online.

5. Sharing and transfers

5.1. Processors

We engage providers that process data on MatchAI's behalf and instructions, under contractual confidentiality and security obligations:

5.2. Transfers

We may transfer your personal data, without requiring your consent in the cases set out in article 37 of the LFPDPPP, to:

• Judicial, administrative or prosecutorial authorities upon a duly founded request, or where necessary to prevent or report a crime.
• Legal, accounting or audit advisors bound by confidentiality.
• Acquirers, in a merger, spin-off, acquisition or asset sale, who will be bound by this same Notice.

Any other transfer requires your prior consent.

5.3. International transfers

Our providers may store or process data outside Argentina, mainly in the United States and the European Union. In those cases we require contractual safeguards providing protection equivalent to this Notice.

6. Your rights and withdrawal of consent

You have the right to Access, Rectify, Cancel and Object (ARCO rights) regarding your personal data, to withdraw your consent and to limit its use or disclosure.

How: send your request to privacidad@matchai.online including:

1. Your full name and a means to reply to you.
2. A copy of official ID (or of the representative's power of attorney) to prove identity.
3. A clear description of the data and the right you wish to exercise.
4. Any document that helps locate the data.

Timelines: we reply within twenty (20) business days and, if the request is well founded, act within fifteen (15) business days thereafter. These may be extended once by an equal period with notice.

Exercising these rights is free; only justified reproduction or shipping costs may be charged.

From Profile → Privacy you can also export your data and request account deletion directly at any time.

If you believe your data protection rights have been infringed, you may file a complaint with the competent data protection authority in Argentina.

7. Retention and deletion

• We keep your data while your account is active.
• On deletion request the account enters a 30-day grace period during which you can restore it; afterwards it is irreversibly deleted or anonymized.
• Biometric data is deleted once verification concludes and, in any event, when you withdraw consent.
• We retain longer, and only as necessary: billing records (tax law), evidence of abuse reports, blocks and removals (to prevent removed users from returning and protect the community), and information required by an authority or to defend legal proceedings.
• Messages you sent to another person remain in that person's inbox under their own relationship with the Service.

8. Security

We apply reasonable administrative, technical and physical measures: encryption in transit (TLS) and at rest, role-based access control, operation logging, backups, dependency review and staff training. No system is infallible; if a breach materially affects your rights we will notify you without undue delay, as required by law.

9. Cookies

We use cookies, local storage and similar technologies to keep your session, remember your language and measure usage. Details and controls are in the Cookie Policy.

10. Annex — EEA and United Kingdom

If you are in the EEA or the UK, in addition to the above:

• Legal bases (art. 6 GDPR): performance of a contract (running your account, matches, messaging and payments); consent (sensitive data, precise location, non-essential cookies and marketing); legitimate interests (security, fraud prevention, product improvement); and legal obligation.
• Special category data (art. 9 GDPR): biometric data and data concerning your sex life or sexual orientation are processed on the basis of your explicit consent, withdrawable at any time.
• Rights: access, rectification, erasure, restriction, portability, objection and not to be subject to solely automated decisions with significant legal effects, plus the right to lodge a complaint with your supervisory authority.
• International transfers: covered by Standard Contractual Clauses or other valid mechanisms.
• Withdrawal of consent: does not affect the lawfulness of prior processing.

11. Annex — California (CCPA/CPRA)

California residents have the right to know, delete and correct their personal information, to limit the use of sensitive information and not to be discriminated against for exercising those rights. MatchAI does not sell or share your personal information as defined by the CCPA/CPRA, and does not use it for cross-context behavioral advertising. To exercise your rights write to privacidad@matchai.online.

12. Changes to this Notice

We may update this Notice. The current version is published at https://matchai.online and in the app with its version number and date. For material changes we notify you by email or a prominent in-app notice at least fifteen (15) calendar days in advance.

13. Consent

By checking the acceptance box, creating an account or continuing to use the Service, you give your express consent to the processing of your personal data, including the sensitive data described in section 2.7, under this Privacy Notice.

[Matchai, LLC] — [Capital Federal, Buenos Aires] — privacidad@matchai.online