Privacy Policy

1Information we collect

We collect the following categories of information, either because you give it to us directly, because it's generated by using the Service, or because your device provides it with your permission.

Account & profile information

• Identity & contact details: name, username, email address, phone number, and date of birth.
• Profile details you choose to add: gender, who you're interested in, a bio, profile photos, your nationality, country of residence, city, height, countries you've visited, relationship intent ("looking for"), interest tags, and optional Instagram/TikTok handles.
• Discovery preferences: the age range, distance, nationality, interest, zodiac, and relationship-intent filters you set for who you want to see.

Your email address and phone number are stored separately from your public profile and are never shown to other members — they're used only for sign-in, account recovery, and support.

Verification information

If you choose to request a "Verified" badge, we collect a photo of your government ID/passport and a guided selfie capture. See Identity verification below for how this is handled.

Activity & interaction data

• Swipes: who you like, pass on, or super-like, and the resulting matches.
• Messages: the text, images, replies, and emoji reactions you send in chats with your matches, and in the in-app support chat with our team.
• Safety actions: blocks and reports you file against other members (and reports filed against you), which we use to review and act on violations of our Terms of Use.
• Other engagement: profile views recorded while your profile is boosted, pins, favorites, and usage counters for swipes, rewinds, super-likes, and boosts (used to enforce daily/weekly limits).

Payment & subscription information

Wallet top-ups and subscription payments are processed by Stripe. We store the resulting balance, currency, subscription tier, renewal date, and a transaction history (amount, status, type, and date) — we do not receive or store your full card number. See Payments & wallet below.

Device & technical information

• A push-notification token (via Firebase Cloud Messaging) so we can deliver match, message, and support alerts to your device or browser.
• App/browser version, and attestation signals from Firebase App Check used to confirm requests come from a genuine copy of the app rather than an automated script.
• Basic sign-in security data: failed login attempts and lockout status tied to your email, and, if you enable two-factor authentication, its enabled/last-used status (the authenticator secret and backup codes themselves are stored only server-side and are never readable by us through the app).

Camera & photo library access

With your permission, we access your camera and photo library to let you take or choose profile photos, complete the guided face capture for identity verification, and align a payment card when reloading your wallet. We do not use your camera or photos for anything beyond the specific action you initiate.

2How we use your information

We use the information above to:

• Create and maintain your account, and authenticate you when you sign in;
• Show your profile to other members and show you candidates that match your discovery preferences;
• Operate core features — swiping, matching, messaging, favorites, boosts, rewinds, and super-likes;
• Calculate approximate distance between members for the discovery deck;
• Process wallet top-ups and subscription payments, and maintain your transaction history;
• Review identity-verification submissions and award the "Verified" badge;
• Send match, message, and support notifications;
• Detect, investigate, and act on fraud, impersonation, underage use, and violations of our Terms of Use, including reviewing blocks and reports;
• Secure accounts — rate-limiting login attempts, supporting two-factor authentication, and verifying requests come from a genuine client via App Check;
• Provide customer support through the in-app support chat; and
• Comply with legal obligations and enforce our Terms of Use.

We do not use your data to serve third-party advertising, and we do not sell your personal information.

3How we share your information

With other members

Your public profile — name, username, age, gender, bio, photos, interests, relationship intent, nationality, country of residence, city, height, countries visited, social handles you've added, and your verification badge — is visible to other members you're shown to or matched with. Your email, phone number, exact location, wallet balance, and payment history are never shared with other members.

With service providers

We rely on the following processors to operate the Service. Each only receives the data it needs to perform its function, under its own privacy terms:

For legal reasons

We may disclose information if required by law, regulation, legal process, or governmental request, or where we believe disclosure is necessary to protect the rights, property, or safety of Tinda, our members, or the public — including exchanging information with other companies for fraud protection.

Business transfers

If Tinda is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We'll notify you of any change in ownership or use of your personal data.

4Location data

If you grant location permission, we use your device's GPS to calculate distance between you and other members for the discovery deck. Before it's stored anywhere another member could read it, your location is rounded to roughly 100 meters of precision — we don't share your exact coordinates. You can decline or revoke location permission at any time from your device or browser settings; discovery will fall back to working without distance-based filtering.

5Identity verification

Verification is optional. If you request it, you submit a photo of your government ID or passport and complete a guided selfie capture. Your device compares the selfie against your existing profile photo using an on-device geometric-similarity check — this is a supporting signal for our review team, not biometric identification, and it is never the sole basis for approving or rejecting a request. A human administrator reviews the submission before awarding the "Verified" badge.

Your ID document image is stored in a restricted, access-controlled location that only our review team can open — it is never visible to other members and is not included in the automatic deletion that runs when you delete your account (see Data retention & deletion), since we may need to retain it for a limited period for fraud-prevention and legal-compliance purposes.

6Payments & wallet

Tinda offers a wallet you can top up to pay for features like Boost, and paid subscription tiers (Gold and Platinum). All card payments are handled directly by Stripe, our payment processor — we never receive or store your full card number. We do store the outcome: your wallet balance and currency, your subscription tier and renewal choices, and a ledger of top-up and spend transactions (amount, status, and date) so we can show you your own payment history and support billing questions.

7Data retention & deletion

We keep your information for as long as your account is active, so the Service can function. You can permanently delete your account at any time from within the app. Deleting your account immediately and permanently removes:

• Your profile and private contact details (email/phone);
• Your matches and the full message history in every conversation;
• Your swipe history and favorites;
• Your push-notification registration and reserved username; and
• Your uploaded profile photos and other files stored under your account.

Your sign-in credentials are deleted as the final step, so the deletion can't leave you in a broken, half-deleted state.

We may also retain limited information where required to comply with a legal obligation, resolve disputes, enforce our agreements, or where content you sent is part of another member's own conversation history (e.g. a message you sent that the recipient hasn't deleted).

8Your rights & choices

• Access & correction: you can view and edit most of your profile information directly in the app at any time.
• Deletion: you can permanently delete your account and data from the app's settings, as described above.
• Location: you can deny or revoke location permission from your device/browser settings.
• Notifications: you can disable push notifications from your device/browser settings.
• Camera & photos: you can deny or revoke camera/photo-library permission; note that some features (profile photos, verification, wallet card scan) won't work without it.
• A copy of your data or other requests: contact us at support@medtechs.my and we'll respond as required by applicable law.

Depending on where you live, you may have additional rights under local law (for example, to object to or restrict certain processing). Contact us and we'll do our best to help.

9Security

We use industry-standard safeguards to protect your information, including encryption in transit, access-restricted storage for sensitive files like ID documents, server-side enforcement of who can read or write which data (so, for example, only you can ever read your own private contact details or wallet balance), rate-limited login attempts with account lockout, optional two-factor authentication, and bot/ abuse protection via Firebase App Check. No method of transmission or storage is 100% secure, but we work to protect your information using measures appropriate to its sensitivity.

10Children's privacy

Tinda is intended for adults 18 years of age and older only. We do not knowingly collect personal information from anyone under 18. If we become aware that an account belongs to someone under 18, we will take steps to remove that account and the associated data. If you believe a minor is using Tinda, please contact us at support@medtechs.my.

11International data transfers

Tinda is operated using service providers — including Google Firebase and Stripe — that maintain infrastructure in multiple countries. As a result, your information may be processed and stored in countries other than the one you live in, which may have different data protection laws. Where required, we rely on appropriate safeguards for these transfers as offered by our service providers.

12Cookies & local storage

The Tinda web app doesn't use third-party advertising cookies or trackers. It does use your browser's local storage and on-device caching (for example, to keep your session signed in and to cache profile cards and chat messages so the app feels fast) — this data stays on your device and is used only to operate the app itself.

13Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to the Service or applicable law. If we make material changes, we'll notify you through the app or by other reasonable means before the change takes effect. The "Last updated" date at the top of this page always reflects the current version.

14Contact us

If you have questions about this Privacy Policy or how we handle your information, reach out any time: