ForbiddenFlirt

Privacy Policy

Last updated: 15 September 2026

This policy explains what the ForbiddenFlirt mobile app (com.taboo.date) collects, why, who else can see it, and how to get it deleted. It covers the app and this website.

Who is responsible

ForbiddenFlirt is operated by the independent developer who publishes it on Google Play. For any privacy question or request, write to privacy@elenchia.online. We answer privacy requests at that address and aim to respond within 30 days.

What we collect

Account information. When you sign up we receive your email address and a Firebase user identifier from Google Firebase Authentication. If you sign in with Google, we receive the identity Google passes to us. We also store a password if you set one, and your phone number if you provide it.

Profile information you enter. Your name, date of birth (used to show your age), gender, photos, and any answers you give to the optional profile questions and preference settings.

Location. If you enable location, we store your latitude and longitude, and derive your country, region and city. This is what powers distance-based browsing. You can turn location off in the app's settings; the app keeps working without it.

Activity in the app. Likes and passes, matches, the messages you send and receive, read receipts, blocks, and reports you submit.

Device and technical data. A Firebase Cloud Messaging token so we can deliver notifications, plus basic device and app information, language and country settings. Our servers receive your IP address as part of normal internet traffic.

Purchases. If you buy a subscription or an in-app item, Google Play processes the payment. We receive the resulting entitlement information through RevenueCat — what you bought and whether it is active. We never receive or store your card details.

Why we use it

What other users can see

Your profile — your name, age, photos, and the profile details you filled in — is visible to other users of the app. If you enabled location, other users see an approximate distance to you, not your coordinates. Your email address, phone number and exact location are never shown to other users.

Treat anything you put in your profile or send in a chat as something another person can save, screenshot or repeat. We cannot take it back for you.

Profiles that are not members

The discovery feed in the app contains profiles that do not belong to registered ForbiddenFlirt members. They were not created by someone who signed up here, they do not read messages, and they never reply.

If one of those profiles shows you — your photo, your name, or details you recognise as yours — you have rights over that data even though you never signed up. Write to privacy@elenchia.online and we will remove the profile. You do not need an account to make that request, you do not need to explain why, and we will not ask you for more personal data than is needed to find the profile. We will confirm when it is done.

You can also ask us for a copy of what that profile holds about you, ask us to correct it, or object to it being used at all. If you are in the EEA or the UK, you may complain to your national data protection authority.

Who else we share it with

We do not sell your personal data. We share it only with the service providers that make the app work:

We may also disclose data where the law requires it, or where it is necessary to investigate a safety issue or protect someone from harm.

Where your data is stored

Our servers are in the United States. If you use the app from elsewhere — including the European Economic Area or the United Kingdom — your data is transferred to and stored in the United States.

How long we keep it

We keep your account data for as long as your account exists. When you delete your account, we delete your profile, photos and messages from our active systems. Backups are overwritten on a rolling basis and are fully cycled within 30 days. Records we are required to retain — for example, evidence relating to a safety report or a purchase — may be kept longer.

Deleting your account

You can delete your account from inside the app, in Settings. You can also ask us to delete it by writing to privacy@elenchia.online from the email address on your account. Deletion is permanent — your matches, messages and photos cannot be restored afterwards.

Your rights

Depending on where you live, you may have the right to access a copy of your data, correct it, delete it, object to or restrict how we use it, or receive it in a portable format. Write to privacy@elenchia.online and we will act on it. If you are in the EEA or the UK you also have the right to complain to your national data protection authority.

Security — and what we are still fixing

Traffic between the app and our servers is encrypted in transit, and our photo storage is not publicly listable.

We would rather tell you this than not. The optional password stored on our own servers is currently held without hashing. Your actual sign-in is handled by Google Firebase and is not affected, but you should not reuse a password here that you use anywhere else. We are changing this, and this section will be updated when it is done.

Children

ForbiddenFlirt is for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor is using the app, report the profile in the app or write to support@elenchia.online and we will remove the account.

This website

This website does not set advertising or analytics cookies and loads no third-party trackers. Our hosting provider processes standard request logs.

Changes

If we change this policy we will update the date at the top. For changes that meaningfully affect you, we will also tell you in the app.

Contact

Privacy requests: privacy@elenchia.online
Everything else: support@elenchia.online