Privacy Policy

This Privacy Policy explains how OnlyPapis, Inc. ("Salgamos", "we", "us" or "our") collects, uses, shares and keeps personal information when you use the Salgamos mobile app and the salgamosapp.com website (together, the "Services"). It also explains the choices and rights you have.

Summary

• Salgamos is for adults 18 and older. We ask for your birthdate and close accounts of anyone under 18.
• We collect what you give us to build your profile and connect you with people, such as your phone number or email, name, birthdate, gender, who you want to date, photos and prompt answers.
• Some of this is sensitive. Who you're interested in dating can reveal your sexual orientation. We use it only to show you relevant profiles and to show your profile to others according to your settings. We never sell it or use it for advertising.
• Location is approximate. With your permission we use your device's location to show distance and nearby people. Other people see a distance, not your exact location.
• We scan photos for safety. Every uploaded photo is automatically checked for explicit content, and explicit photos are rejected.
• No ads, no selling. There is no advertising in the app or on the website at this time, and we do not sell or share personal information for cross-context behavioral advertising.
• Website analytics are optional. Google Analytics runs on our website only if you accept it in the cookie banner, and never when your browser sends a Global Privacy Control signal.
• You're in control. You can edit your profile, change visibility, delete your account in the app, and make privacy requests at salgamosapp.com/privacy-request.

Who we are and how to contact us

The Services are operated by OnlyPapis, Inc., 1317 Edgewater Dr Unit 1296, Orlando, FL 32804, United States. For users in the European Economic Area (EEA), OnlyPapis, Inc. is the controller of your personal information.

• Email: [email protected]
• Privacy requests: salgamosapp.com/privacy-request
• Privacy choices: salgamosapp.com/privacy-choices
• Cookie settings: salgamosapp.com/cookies

Who the Services are for

Salgamos is only for adults aged 18 and older. When you sign up you enter your birthdate. If it shows you are under 18, you can't use the Services and we close the account. If we learn that someone under 18 has an account, we close it. If you believe a minor is using Salgamos, please report the profile in the app or email us.

Salgamos is not offered in the United Kingdom at this time.

Information we collect

Account and sign-in information

You can sign in with your phone number (we send you a one-time code by SMS), with Apple, with Google, or with an email address and password. Sign-in is provided by Google Firebase Authentication (Identity Platform). Depending on the method you choose, we receive your phone number, your email address, and an account identifier from Apple or Google. We don't receive your Apple or Google password.

Facebook sign-in is no longer offered. If you previously used Facebook to sign in, you can ask to reclaim your old profile, and we will review the request manually. To do this we may ask you for information that helps us confirm the profile is yours.

Profile information

To create a profile, you provide:

• your first name and birthdate (other people see your age, not your birthdate)
• your gender or identity
• who you're interested in dating
• your relationship intention
• photos (up to 9)

You can also choose to add:

• an "about me" text
• answers to prompts, which can be text, voice recordings or photos
• optional details such as your job, hometown, height, interests and pronouns (for some of these you can choose whether they're shown on your profile)
• your language preference

Your profile, including your photos, name, age and the details you choose to show, is visible to other Salgamos users.

Sensitive information

Who you're interested in dating can reveal your sexual orientation, and your photos or other profile details may reveal other characteristics about you. We use this information only to provide the features you ask for: showing you relevant profiles and showing your profile to others according to your preferences. We do not sell it and we do not use it for advertising. Details beyond the required profile fields are optional, and you can remove them at any time.

Location

With your permission, the app uses your device's approximate location to show how far away other people are and to show you people nearby. Other users see a distance, not your exact location. You can turn off Nearby visibility in the app, and you can turn off location permission in your device settings at any time (some features, like distance and Nearby, won't work without it). If you use our paid "change location" feature, we use the city you choose instead.

Please keep in mind that any service that shows distance can, in some circumstances, be used by others to estimate where someone is. Use the visibility controls if this is a concern for you.

Messages

When you chat with someone, we store your messages, photos and voice notes so we can deliver them. The person you're chatting with can see them, and they may save or copy them outside the app.

Verification

Verification is optional. If you choose to verify, you take a live selfie doing a pose we request. Our team compares it to your profile photos. The verification selfie is used only for verification and is not shown on your profile.

Purchases

Salgamos Plus subscriptions and other in-app purchases are made through the Apple App Store or Google Play. RevenueCat processes your purchase status so we know which features you've unlocked. We receive information like the product you bought, the purchase date and whether your subscription is active. We don't receive your full card details.

Safety, reports and abuse prevention

• Reports and blocks. If you report or block someone, or someone reports you, we keep the report, the reason and related information so our team can review it.
• SMS abuse protection. To limit how many login codes can be requested, we store phone numbers and IP addresses only as keyed hashes (a one-way scrambled form). We may also show a Cloudflare Turnstile check to tell people apart from automated abuse.

Device, usage and crash information

The app uses Google Firebase Analytics to record usage events, such as which screens are viewed. This does not include the content of your messages. The app uses Firebase Crashlytics to collect crash reports, which are linked to an internal account ID so we can fix problems. We also receive basic technical information such as device type, operating system, app version and IP address when your device connects to our servers.

Push notifications

If you allow notifications, we use Firebase Cloud Messaging (and the Apple Push Notification service on iPhone) to send them. This requires a device token. You can choose which types of notifications you get in the app's settings, or turn them off in your device settings.

Website information

When you visit salgamosapp.com:

• A strictly necessary first-party cookie stores your privacy choices and language.
• Google Analytics runs only if you accept optional analytics in the cookie banner. It never runs if your browser sends a Global Privacy Control (GPC) signal or if you opt out. You can change your choice any time in Cookie settings.
• If you submit a privacy request or set privacy choices on the website, we store that information so we can handle it.

Information from earlier versions of Salgamos

If you used an earlier version of Salgamos, your account data was moved to our new system so you could keep your profile. That information is now handled under this Privacy Policy.

How we use your information

We use personal information to:

• Provide the Services: create and secure your account, show your profile, show you profiles that match your preferences, show distance and nearby people, deliver messages and notifications, and provide the features you've purchased.
• Keep people safe: check photos for explicit content, review reports, verify profiles, enforce our Terms of Service and Community Guidelines, and prevent fraud, spam and abuse.
• Keep the Services working: fix crashes and bugs, understand how features are used, and improve the app and website.
• Communicate with you: respond to support and privacy requests and send service messages (for example, about your account or a policy change).
• Meet legal obligations: comply with law, respond to valid legal requests, and protect our rights and the rights of others.

Our automated photo scanning rejects explicit photos. If an account is locked after a scan, a person on our team reviews it. If you think a moderation decision about you was wrong, contact us.

Photo moderation and child safety

Every photo uploaded to Salgamos, including profile photos, prompt photos, photos sent in chat and verification selfies, is automatically scanned by Amazon Web Services (AWS Rekognition) for explicit content. Explicit photos are rejected.

If a photo is flagged as explicit and the scan estimates that a minor may be shown, the account is locked for review. Where required by US law, we report the matter to the National Center for Missing & Exploited Children (NCMEC) and preserve related information as the law requires.

Legal bases for processing (EEA users)

If you are in the EEA, we rely on these legal bases under the General Data Protection Regulation (GDPR):

• Contract: to provide the Services you've signed up for, including your account, profile, matching, messaging and purchases.
• Consent: for sensitive information you choose to add to your profile (such as who you're interested in dating), location permission, push notifications, and website analytics. You can withdraw consent at any time; this doesn't affect processing that happened before you withdrew it. Some features may stop working if you withdraw consent they depend on.
• Legitimate interests: to keep the Services safe and secure, including photo moderation, reviewing reports, preventing fraud and abuse, and fixing problems. You can object to this processing (see "Your rights").
• Legal obligation: to comply with laws, such as reporting child sexual abuse material and keeping records the law requires.

How we share information

We don't sell your personal information. We share it only as described here.

With other users

Your profile, distance, and the messages and content you send are visible to the people you interact with on Salgamos.

With service providers

We use service providers that process personal information on our behalf and under our instructions:

• Supabase: database, file storage and hosting of the app backend (United States region)
• Google Firebase and Google Cloud: authentication, push notifications, app analytics and crash reports
• Amazon Web Services: photo moderation
• RevenueCat: purchase and subscription status
• Apple and Google: app stores, in-app purchases and sign-in
• Cloudflare: security, DDoS protection and website delivery

Our own server hosts the website and our internal admin tools.

For legal and safety reasons

We may preserve and disclose information if we believe in good faith that it's necessary to comply with law or legal process, to report to NCMEC or law enforcement, to enforce our terms, or to protect the safety, rights or property of our users, the public or Salgamos.

Advertising, selling and sharing

There is no advertising in the Salgamos app or on our website at this time. We do not sell personal information, and we do not share it for cross-context behavioral advertising. If we ever add advertising, we will update this Privacy Policy before doing so.

Because Google Analytics on the website runs only after you opt in, and never when your browser sends a Global Privacy Control signal, we treat GPC as a valid opt-out request. Our website does not otherwise respond to "Do Not Track" browser signals, because there is no common standard for them; GPC is the signal we honor.

International transfers

We are based in the United States, and your information is processed in the United States, where data protection laws may differ from those in your country. When we transfer personal information from the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses where applicable. You can contact us for more information about these safeguards.

How long we keep information

We keep your account information for as long as your account is open.

When you delete your account in the app (Settings > Delete account), your profile is hidden immediately and your account is closed. We then delete or de-identify your information, except for limited records we need to keep for safety, legal obligations, fraud prevention and disputes, such as:

• ban records, stored as hashed identifiers, so banned people can't simply create a new account
• reports and moderation records
• records the law requires us to keep, such as information preserved for NCMEC reports
• purchase records needed for accounting and tax

We also keep the following only for as long as it is needed for its purpose, and then delete or de-identify it:

• deleted-account data not covered above
• hashed phone numbers and IP addresses used for SMS abuse protection
• app analytics and crash reports
• website analytics, if you opted in
• website privacy requests and choices

Messages you sent may stay visible to the people you sent them to if they saved or copied them.

Your choices

• Edit your profile: change or remove profile details and photos in the app.
• Visibility: turn off Nearby visibility and use the other visibility controls the app offers.
• Location: turn off location permission in your device settings.
• Notifications: choose notification types in the app or turn them off in your device settings.
• Website cookies: accept or reject optional analytics, and change your choice any time in Cookie settings.
• Delete your account: in the app, go to Settings > Delete account. Deleting your account doesn't cancel a subscription bought through Apple or Google; cancel it in your App Store or Google Play settings.

Your rights

Rights in the EEA

If you are in the EEA, you have the right to:

• Access the personal information we hold about you
• Rectification: have inaccurate information corrected
• Erasure: have your information deleted
• Restriction: limit how we use your information in some situations
• Portability: receive information you provided in a machine-readable format and have it sent to another company
• Object to processing based on our legitimate interests
• Withdraw consent at any time, where we rely on consent
• Complain to your local data protection supervisory authority

We respond within the time required by applicable law. Under the GDPR this is generally one month, which can be extended by two further months in some cases; if so, we'll tell you why.

Rights in California

If you are a California resident, you have the right to:

• Know and access the personal information we collect, use and disclose
• Delete personal information we collected from you
• Correct inaccurate personal information
• Opt out of the sale or sharing of personal information. We do not sell or share personal information, but you can still submit an opt-out request.
• Limit the use of sensitive personal information. We use sensitive personal information only to provide the Services you request and for other purposes the law allows, not to infer characteristics about you.
• Non-discrimination: we won't treat you differently for exercising your rights.

You can use an authorized agent to make a request for you. We may ask the agent for proof that you authorized them and may ask you to confirm your identity directly with us.

We respond within the time required by applicable law. Under California law this is generally 45 days for requests to know, delete or correct, which can be extended once by another 45 days if we tell you.

Rights in other US states

Depending on where you live, other US state privacy laws may give you similar rights, such as access, correction, deletion, portability and opting out of certain processing. You may also be able to appeal if we decline your request. To appeal, reply to our decision or email us with "Privacy appeal" in the subject line.

How to exercise your rights

• Submit a request at salgamosapp.com/privacy-request
• Set opt-out preferences at salgamosapp.com/privacy-choices
• Email [email protected]

For access, deletion and correction requests, we may need to verify your identity, for example by asking you to confirm details linked to your account, so we don't disclose or delete someone else's information. We don't require identity verification or an account for requests to opt out of sale or sharing or to limit the use of sensitive personal information. We may decline a request where the law allows, for example if it would reveal another person's information, and we'll explain why.

California notice at collection

This section summarizes the personal information we collect about California residents, why we collect it, and how long we keep it. We collect it from you, from your device, and from our service providers (such as Apple, Google and RevenueCat). We do not sell or share any of these categories.

• Identifiers (phone number, email, account IDs, IP address, device token)
  • Purposes: account, sign-in, security, notifications, support
  • Sold or shared: No
  • Retention: while your account is open, then as described in “How long we keep information”
• Personal records and characteristics (name, birthdate/age, gender)
  • Purposes: profile, age check, matching
  • Sold or shared: No
  • Retention: while your account is open, then as described in “How long we keep information”
• Sensitive personal information (who you're interested in dating, which may reveal sexual orientation; account login credentials; contents of messages; approximate location)
  • Purposes: providing the features you request, security, message delivery
  • Sold or shared: No
  • Retention: while your account is open, then as described in “How long we keep information”
• Commercial information (purchases and subscription status)
  • Purposes: providing paid features, accounting, disputes
  • Sold or shared: No
  • Retention: as described in “How long we keep information”
• Internet or network activity (app usage events, crash reports, website analytics if you opt in)
  • Purposes: fixing problems, improving the Services
  • Sold or shared: No
  • Retention: as described in “How long we keep information”
• Geolocation data (approximate device location or a city you choose)
  • Purposes: showing distance and nearby people
  • Sold or shared: No
  • Retention: while your account is open, then as described in “How long we keep information”
• Audio, electronic and visual information (photos, voice recordings, verification selfies)
  • Purposes: profile, messaging, verification, moderation
  • Sold or shared: No
  • Retention: while your account is open, then as described in “How long we keep information”
• Inferences (none drawn for profiling or advertising)
  • Sold or shared: No

We disclose these categories for business purposes to the service providers listed in "How we share information".

Security

We use measures designed to protect your information, including encryption in transit and access controls that limit who can see personal information. No system is 100% secure, so we can't guarantee the security of your information. Please keep your sign-in details private and report anything suspicious to us. If the law requires us to tell you about a security incident affecting your information, we will.

Third-party services

When you sign in with Apple or Google or buy a subscription through the App Store or Google Play, those companies handle your information under their own privacy policies. We encourage you to read them.

Changes to this policy

We may update this Privacy Policy from time to time. We'll change the "updated" date at the top, and if a change is significant we'll let you know in the app or by other appropriate means before it takes effect.

Contact us

If you have questions or complaints about this Privacy Policy or how we handle your information, contact us:

• OnlyPapis, Inc., 1317 Edgewater Dr Unit 1296, Orlando, FL 32804, United States
• Email: [email protected]
• Privacy requests: salgamosapp.com/privacy-request