Privacy Policy

Last updated: August 2026

1. Data Controller

The entity responsible for data processing within the ShaMmz app is Shammz Studio. Contact: shammz.dev@gmail.com

2. Data We Process

When using ShaMmz, we process the following categories of personal data:

• Account data: first name, last name, nickname, email address, date of birth, city, country
• Biometric data: facial images and face embeddings (mathematical vectors derived from them), used to verify your profile and to power face search
• Private search attributes: e.g. height, body type, hair color, hair length, eye color, gender — used exclusively internally for advanced search and never displayed publicly
• Usage data: chat messages and images, last-active timestamp, profile views, device identifiers for push notifications
• Technical data: IP address, device information, app version (as part of normal operation)

3. Purpose of Processing

We process this data to:

• biometrically verify your profile (including a liveness check) and prevent abuse
• enable face search and advanced search
• provide the chat feature
• manage your account and contact you when necessary
• detect abuse, duplicate accounts, and banned users

4. Disclosure to Third Parties

To provide the app, we use the following service providers as data processors:

• Google Firebase (authentication, database, push notifications, app security)
• Cloudinary (storage and processing of uploaded images)

We do not share your data with any third parties beyond these technical service providers, except where legally required.

5. Retention Period

Your data is retained for as long as your account exists. After account deletion, your data is permanently deleted following a 30-day transition period. Reported violations may retain face embeddings for abuse prevention beyond account deletion.

6. Your Rights

You have the right at any time to:

• request access to the data stored about you
• request correction of inaccurate data
• delete your account and associated data (via the app settings)
• object to certain processing activities

For any requests regarding your data, please contact shammz.dev@gmail.com.

7. Data Security

We apply technical and organizational measures to protect your data, including access restrictions, encrypted transmission, and server-side security rules for our database.