10 Total
5 High severity
4 Medium severity
1 Low severity
Summary

Tinder's privacy policy explains what personal information the app collects about you — including your location, photos, messages, and even sensitive details like your sexual orientation — and how it uses and shares that data. Your information may be shared with Tinder's parent company Match Group, advertisers, and in some cases law enforcement. You have rights to access, delete, or download your data, and some users in the EU, UK, and California have additional legal protections.

Technical Summary

Tinder's Privacy Policy governs the collection, use, storage, and disclosure of personal data for users of the Tinder dating application and related services operated by Match Group LLC. The policy covers a broad range of data categories including profile information, geolocation, device identifiers, sexual orientation and other sensitive personal attributes, biometric data (for photo verification), and behavioral usage data. Key obligations include user rights to access, correct, delete, or port their data, with specific enhanced rights for EU/UK users under GDPR and California residents under CCPA. Notable provisions include the sharing of data with Match Group corporate affiliates, third-party advertising partners, and law enforcement; the use of automated decision-making for safety and matching; and the retention of data even after account deletion for defined periods. The policy designates Match Group, LLC (US users) and MTCH Technology Services Limited (EU/UK users) as data controllers.

Institutional Analysis

This policy engages GDPR (EU/UK), CCPA/CPRA (California), and Illinois BIPA in relation to biometric data processing. Compliance exposure exists around the lawful basis for processing sensitive perso…

This policy engages GDPR (EU/UK), CCPA/CPRA (California), and Illinois BIPA in relation to biometric data processing. Compliance exposure exists around the lawful basis for processing sensitive personal data categories under GDPR Article 9, cross-border data transfers from the EEA to the US, and th…

🔒

Compliance intelligence locked

Regulatory exposure, material risk, and due diligence action items.

Evidence Provenance
Captured March 19, 2026 14:59 UTC
Document ID CA-D-000228
Version ID CA-V-000159
Wayback Machine View archived versions →
SHA-256 92b75b13fd5389d5d7914c334ee86f7f74015c2023a3e9761e3329437274619f
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Cryptographically signed
Change Timeline
High Severity — 5 provisions
Medium Severity — 4 provisions
Low Severity — 1 provision