1. 我们是谁

Carisma 由 Carisma Dating 提供，地址：意大利米兰（以下简称“Carisma”或“我们”）。我们是你个人数据的控制者。联系方式：[email protected]。我们的欧盟代表是 Nader Raslan，意大利米兰。

2. 我们收集的数据

你提供给我们的：

• —账户：电子邮箱、密码（由我们的登录服务提供商仅以哈希形式保存，我们从不会看到）以及你为两步登录添加的手机号码。
• —资格：你的出生日期，用于确认你已年满 18 岁。其他人只能看到你的年龄。
• —资料：显示名称、性别（决定你能看到谁、谁能看到你）、居住国家、语言、兴趣、个人简介、可选的“更多关于我”信息（如工作、学业、家庭和生活方式），以及 1–5 张资料照片。
• —认证自拍，如果你选择认证资料。
• —消息和媒体：你发送的文字、照片、短视频和语音消息，以及你写的介绍。
• —请求和联系：你向谁发送请求，接受、拒绝或屏蔽了谁。
• —举报：你举报的内容以及你补充的细节。
• —你发送给我们的支持消息。

你使用 Carisma 时产生的：

• —设备推送令牌，如果你允许通知（加密保存）。
• —购买状态，如果你订阅（来自 Apple 或 Google，经由 RevenueCat——我们从不会收到你的银行卡信息）。
• —安全记录：登录和安全事件，例如两步登录的更改和账户删除。
• —设备完整性检查：每次请求都会验证 Google Play Integrity 或 Apple App Attest 令牌，以阻止伪造应用。该令牌不会被保存。

我们不收集：你的精确位置（Carisma 从不请求位置权限）、你的通讯录、你的相册（照片由你逐张选择）或广告标识符。Carisma 没有广告，也没有第三方分析或跟踪工具。

3. 我们为何使用这些数据（及法律依据）

4. 自动检查

• —照片和视频检查。资料照片、聊天照片、聊天视频和认证自拍在展示前，会由 Google Cloud Vision 和 Video Intelligence 自动检查是否含有露骨、暴力或误导性内容。被标记的内容会暂扣，等待我们的团队审核。
• —照片取景。上传资料照片时，系统会进行一次人脸检测，以确定裁剪的中心位置。只保存这一个点；不会存储任何人脸数据或模板，也不会用于识别你的身份。你可以自行移动该点。
• —不进行人脸识别。我们从不使用人脸识别或生物特征比对。认证自拍由人工而非机器审核。
• —没有匹配算法，也不进行用于广告的画像分析。

5. 谁代表我们处理你的数据

我们不会出售你的个人数据，也不会为第三方自身目的与其共享。以下服务提供商根据合同代表我们处理数据：

其他会员只能看到你放在资料中的内容、你发给他们的消息以及你的认证状态。在法律要求时、为保护他人安全或为向有关部门举报儿童性虐待材料，我们可能会披露数据。

6. 跨境传输

我们的主要系统位于欧盟。当提供商在你所在国家以外处理数据时，我们依据 欧盟委员会标准合同条款或充分性决定。

7. 数据保存期限

• —在你的账户存在期间，我们会保存你的数据以保证服务运行。
• —认证自拍在提交 14 天后删除，无论审核结果如何。
• —消息译文在生成 30 天后删除。
• —当你删除账户时，我们会删除你的资料、照片、语音消息、消息及其所在的对话、你的联系和请求、出生日期、国家记录、推送注册和登录信息。删除立即开始——你的资料会马上消失——并在不久后自动完成。
• —删除后我们仅保留安全和法律所需的内容：举报和审核记录（包括针对你的举报）、其他会员设置的屏蔽、安全日志、删除发生的记录以及最少的账单记录，保留期限为 法律要求的期限。
• —备份会在 有限期限 内被覆盖。

8. 你的选择和权利

• —随时在应用中编辑你的资料。
• —在设置中关闭通知和消息翻译。
• —在设置中隐藏已读回执。
• —屏蔽或举报任何人。
• —在应用中删除账户：我 → 设置 → 删除账户。另见 carismadating.com/delete-account。

根据你所在的地区，你可以要求访问、更正、删除你的数据或获取副本，反对或限制某些用途，并可随时撤回同意。请发送邮件至 [email protected]。你也可以向所在地的数据保护机构投诉 (Garante per la protezione dei dati personali)。

9. 安全

数据在传输过程中加密；存储的文件为私密文件，只能通过应用经过验证的请求访问；推送令牌加密保存；提供两步登录和备用代码。

10. 仅限成年人

Carisma 仅供年满 18 岁的人使用。我们会删除任何未满 18 岁者的账户。如果你认为有未成年人在使用 Carisma，请在应用内举报或发送邮件至 [email protected]。

11. 变更

重大变更生效前，我们会在应用内通知你。

12. 联系我们

Carisma Dating，意大利米兰 · [email protected]

1. Who we are

Carisma is provided by Carisma Dating, Milan, Italy ("Carisma", "we", "us"). We are the controller of your personal data. Contact: [email protected]. Our EU representative is Nader Raslan, Milan, Italy.

2. The data we collect

You give us:

• —Account: email address, password (stored only as a hash by our sign-in provider; we never see it), and your phone number if you add one for two-step sign-in.
• —Eligibility: your date of birth, to confirm you are 18 or older. Only your age is shown to others.
• —Profile: display name, gender (which decides who you see and who sees you), country of residence, languages, interests, bio, optional "More about me" details (such as work, study, family and lifestyle), and 1–5 profile photos.
• —Verification selfie, if you choose to verify your profile.
• —Messages and media: text, photos, short videos and voice notes you send, and Introductions you write.
• —Requests and connections: who you send requests to, accept, decline or block.
• —Reports: what you report and any details you add.
• —Support messages you send us.

Created when you use Carisma:

• —Device push token, if you allow notifications (stored encrypted).
• —Purchase status, if you subscribe (from Apple or Google, through RevenueCat — we never receive your card details).
• —Security records: sign-in and security events, such as two-step sign-in changes and account deletion.
• —Device integrity check: a token from Google Play Integrity or Apple App Attest is checked on each request to block fake apps. It is not stored.

We do not collect: your precise location (Carisma never asks for location access), your contacts, your photo library (you pick individual photos), or advertising identifiers. Carisma has no advertising and no third-party analytics or tracking.

3. Why we use it (and our legal bases)

4. Automated checks

• —Photo and video checks. Profile photos, chat photos, chat videos and verification selfies are automatically checked for explicit, violent or misleading content by Google Cloud Vision and Video Intelligence before they are shown. Anything flagged is held for review by our team.
• —Photo framing. When you upload a profile photo, face detection runs once to choose where crops of that photo are centred. Only that single point is kept; no face data or template is stored, and nothing is used to identify you. You can move the point yourself.
• —No face recognition. We never use face recognition or biometric matching. A person, not a machine, reviews verification selfies.
• —No matching algorithm and no profiling for advertising.

5. Who processes your data for us

We do not sell or share your personal data with third parties for their own purposes. These providers process it on our behalf, under contract:

Other members see only what you put on your profile, the messages you send them, and your verified status. We may disclose data when the law requires it, to protect someone's safety, or to report child sexual abuse material to the relevant authorities.

6. International transfers

Our main systems are in the European Union. Where a provider processes data outside your country, we rely on the European Commission's Standard Contractual Clauses or adequacy decisions.

7. How long we keep data

• —While your account exists, we keep your data so the service works.
• —Verification selfies are deleted 14 days after you submit them, whatever the outcome.
• —Message translations are deleted 30 days after they are made.
• —When you delete your account, we delete your profile, photos, voice notes, messages and the conversations they were in, your connections and requests, your date of birth, country history, push registrations and your sign-in. Deletion begins immediately — your profile disappears at once — and completes automatically shortly after.
• —We keep, after deletion, only what safety and the law require: reports and moderation records (including reports about you), blocks other members placed, the security log, the record that your deletion happened, and minimal billing records. We keep these for as long as the law requires.
• —Backups are overwritten within a limited period.

8. Your choices and rights

• —Edit your profile at any time in the app.
• —Turn off notifications and message translation in Settings.
• —Hide your read receipts in Settings.
• —Block or report anyone.
• —Delete your account in the app: You → Settings → Delete account. See carismadating.com/delete-account.

Depending on where you live, you can ask to access, correct, delete or receive a copy of your data, object to or restrict some uses, and withdraw consent at any time. Email [email protected]. You can also complain to your data protection authority (Garante per la protezione dei dati personali).

9. Security

Data is encrypted in transit; stored files are private and reachable only through the app's checked requests; push tokens are stored encrypted; two-step sign-in and backup codes are available.

10. Adults only

Carisma is only for people aged 18 or over. We remove accounts belonging to anyone under 18. If you believe a minor is using Carisma, report them in the app or email [email protected].

11. Changes

We will tell you in the app before material changes take effect.

12. Contact

Carisma Dating, Milan, Italy · [email protected]