Privacy Policy
Last updated: August 24, 2026
TOKME is a proximity-based dating app. This document describes exactly what data we collect, why, who it is shared with, and how you can delete it. The app is intended for people aged 18 and over only.
This is an English translation provided for convenience. In case of any discrepancy, the Hebrew version prevails.
1. What data we collect
| Data | What exactly | Why |
|---|---|---|
| Account details | Email address, encrypted password (scrypt with a unique salt). With Google or Apple sign-in: the unique identifier, verified email address and name your account provides — no password | Sign-in and account security |
| Profile | First name, birth year, gender, who you're looking for, relationship status, city, height, bio, interests, dating intentions | Showing your profile to other users and matching |
| Photos | One profile photo, if you choose to upload one, and a verification photo if you verify your profile | Profile display and human verification. You can choose to reveal your photo only after a mutual match |
| Location | Precise GPS coordinates from your device | Computing distance between users. See section 2 — your exact location is never exposed |
| Content you create | Chat messages, opening lines, and WinMe challenge answers (video, voice, photo and text) | Delivering messages and showing answers to competition participants |
| Voice & video calls | Calls flow directly between devices (WebRTC); they are not recorded and not stored by us | Carrying the call, nothing else |
| Live subtitles | When you enable subtitles in a call, short audio segments are sent to our server for immediate transcription | Showing subtitles and live translation. See section 3 |
| Purchases | Credit packs purchased, balance, and credit transactions | Operating the credit system and showing history |
| Technical usage data | IP address, last-seen time, device push token | Rate limiting against abuse and spam, and delivering notifications (e.g. incoming calls) |
We do not collect: contacts, calendar, photo gallery (beyond the photos you chose), browsing history, advertising identifiers, or biometric data.
2. How we protect your location
This is the single most dangerous weak point in any distance-based dating app, so we addressed it explicitly. An app that publishes exact distance and exact bearing lets an attacker stand at three different points, take three measurements, and compute a person's exact address — an attack called trilateration.
In TOKME, your position is snapped to a fixed grid of about 150 meters before any distance or bearing is computed, and bearings are rounded to 15° segments. The snapping is deterministic, so repeated readings return exactly the same value and cannot be averaged. Your raw coordinates are never sent to another user — only a rounded distance and a coarse direction.
You can also turn off exposure entirely with private mode in settings. In private mode you appear on nobody's radar.
3. Live subtitles and translation
Live call subtitles are an opt-in feature. While enabled, short audio segments from the call are sent to our server and passed to an AI provider (OpenAI) for transcription; the text is shown to the other side, translated into their language when needed. Audio segments are used for transcription only, are not stored by us after processing, and are not used to train models. Automatic photo screening (section 5 of the Terms) uses the same provider. Turning subtitles off stops audio from being sent immediately.
4. Who data is shared with
We do not sell data, and we do not share it with advertisers or data brokers. Sharing is limited to the following parties only:
- Other users of the app — your public profile, rounded distance and coarse direction. In a WinMe competition: your challenge answers are shown to participants of that competition, while profiles remain anonymous until the finale.
- Google Play / Apple App Store — for payment processing. We never see or store payment details.
- Processing providers — subtitle transcription and automatic content screening (see section 3), restricted to that purpose only.
- Authorities — only if required by a binding court order.
5. Security
- Passwords are stored as scrypt hashes with a random salt unique to each user. They cannot be recovered.
- All traffic between the app and the server is encrypted with HTTPS/TLS.
- Sign-in tokens expire after 90 days.
- Sign-in and registration attempts are rate-limited to prevent password-guessing attacks.
6. Consent before communication
No user can send you a message without your explicit approval. You can decline a request, or decline and block — after which that person can never contact you again and will not appear in your search. You can block after a conversation has opened too, and every video call, voice call and competition has report and block buttons.
7. Data retention and deletion
Data is kept for as long as your account is active. You can delete your account at any moment:
- From the app: Profile → Delete account permanently.
- From the website: the account deletion page.
Deletion permanently removes your profile, photos, all messages and chats, all requests, WinMe answers, and your credit balance and transaction history. The action cannot be undone. Unused credits are not refunded. Billing records we are legally required to keep under tax law may be retained separately for the statutory period.
8. Your rights
You may access your data, correct it, delete it, and receive a copy of it. Most of these actions are available directly on the profile screen. For any other request, contact us at the address below and we will respond within 30 days.
9. Minors
The service may not be used by anyone under 18. If an account is found to have been opened by a minor, it is deleted immediately. See also our child safety policy (Hebrew).
10. Changes to this policy
We will update this page when the policy changes and update the date at the top. A material change will also be announced inside the app.
11. Contact
Privacy questions: nisim@tokme.me