magnetic

Privacy Policy

Last updated: October 14, 2026

1. Introduction

Magnetic ("we," "us," "our") operates a dating application that uses artificial intelligence to analyze facial geometry for the purpose of compatibility matching. This Privacy Policy explains what information we collect, how we use it, and your rights with respect to that information.

By creating a Magnetic account or joining the founding list, you agree to the collection and use of information as described in this policy. If you do not agree, do not use the Service.

2. Biometric Data — Special Disclosure

IMPORTANT: Magnetic collects and processes biometric information as defined under the Illinois Biometric Information Privacy Act (740 ILCS 14/), the Texas Capture or Use of Biometric Identifier Act (Tex. Bus. & Com. Code § 503.001), the Washington My Health MY Data Act, and Article 9 of the European General Data Protection Regulation (GDPR).

Specifically, when you upload a photo, Magnetic uses an AI model to analyze geometric features of your face including: proportions of facial thirds (upper, middle, and lower), inter-orbital spacing, jaw angle, nose geometry, cheekbone prominence, lip geometry, and brow geometry. These measurements are encoded as an anonymous numerical vector of 32 values ("facial fingerprint").

WE STORE YOUR PHOTOS. The photos you upload are kept in our file storage (Supabase) so you can view, replace, or delete them from your profile. To analyze them, we send them to our AI provider, Anthropic, which returns the facial measurements and a written description of your features. That written description, not the photo itself, is sent to OpenAI to draw the illustrated avatar that other members see. Other members are never shown your photos. A small number of Magnetic administrators can view them for safety and support.

Your facial fingerprint is used solely to compute compatibility scores with other users within Magnetic. We do not sell, license, lease, trade, or otherwise profit from biometric data. We do not share it with third parties except as necessary to operate the Service (our database and file storage provider, Supabase, and the AI providers named above, Anthropic and OpenAI).

We will retain your facial fingerprint only as long as your account remains active, or for three (3) years from your last interaction, whichever comes first. Upon account deletion, your facial fingerprint will be permanently destroyed within 30 days.

3. Information We Collect

Account information: email address (required for authentication), display name, age, gender, and optional city.

Profile preferences: relationship preferences, non-negotiable dealbreakers (religion, politics, smoking, etc.), and weekly availability windows.

Photos and facial geometry: the photos you upload, the facial fingerprint, the underlying measurements, a written description of your facial features, and the illustrated avatar generated from it, as described in Section 2.

Usage data: which matches you expressed interest in, date confirmation and attendance records, ratings you submitted.

Payment information: we use Stripe to process payments. Magnetic does not store credit card numbers. Stripe stores your payment method under their privacy policy. We retain records of payment amounts, dates, and refund history.

Communications: if you email us or reply to one of our emails, we keep your message and address in our support inbox to answer you, for up to 12 months after the conversation ends. If you reply 'unsubscribe' or 'stop', we keep your address on a do-not-email list so marketing email stops for good.

Founding list: if you join before creating an account we collect your email and ZIP code (and the city and state it maps to), the invite link you arrived through, and campaign tags from the link you followed. You can also tell us your first name, gender, who you are looking for and birth year; these are optional. If the birth year you give when you join shows you may be under 18, we delete the founding-list entry you just created and keep only a one-way hash of the email address for 30 days, so that it is not added again.

4. How We Use Your Information

To operate the matching service: computing compatibility scores, finding available time slots, scheduling video dates.

To process payments and issue refunds via Stripe.

To send transactional emails about your dates (proposals, confirmations, reminders, refunds).

To enforce our no-show and suspension policies.

To improve the Service: we may analyze aggregate, anonymized matching data to refine our algorithm. This data cannot be traced back to individual users.

We use founding-list information to email you about Magnetic (a confirmation, when nights open near you, and launch news), to decide where to open and how to balance seats, and to give people who invite others earlier access. Every email has an unsubscribe link.

5. Your Rights

Access: You may request a copy of all personal data we hold about you, including your facial fingerprint and match history.

Deletion: You may request permanent deletion of your account and all associated data, including your biometric fingerprint. We will process deletion requests within 30 days. To request deletion, email privacy@varosity.com or use the Delete Account option in Profile > Settings.

Correction: You may update your profile information at any time through the app.

Portability: You may request an export of your personal data in a machine-readable format.

Opt-out of biometric collection: You may not use the facial matching feature without biometric analysis (it is the core function of the Service). However, you may delete your facial fingerprint at any time, which will remove you from the matching pool until you re-upload and re-analyze a photo.

Founding list: Founding-list entries have no account. Email privacy@varosity.com to see or delete yours. Unsubscribing stops email but does not delete the entry. We delete founding-list entries that have not become accounts within 24 months of joining.

GDPR / EU residents: You have additional rights including the right to restrict processing and the right to object. Contact us at privacy@varosity.com. Our legal basis for processing biometric data is explicit consent (Article 9(2)(a) GDPR), which you provide during the onboarding biometric consent step.

6. Data Security

We use Supabase (a SOC 2 compliant platform) to store your data in an encrypted PostgreSQL database. Access to account data is restricted by row-level security policies. People you are matched with can see your display name, age, city and state, and your avatar. If you have no illustrated avatar yet, a simple geometric avatar is drawn from your facial measurements. They are never shown your photos. Photo files are stored privately and can only be viewed through short-lived, expiring links that we generate for you when you are signed in. Avatar illustrations are currently reachable by anyone who has their exact web address. Facial fingerprints are stored as numerical vectors — they cannot be reverse-engineered into a photo.

We use HTTPS for all data in transit.

No method of transmission or storage is 100% secure. If we become aware of a data breach affecting biometric data, we will notify affected users within 72 hours as required by applicable law.

7. Data Sharing

We do not sell your personal data. We share data with the following service providers, each for the purpose stated: Supabase (database and file storage), Vercel (hosting), Stripe (payments), Resend (email delivery), Daily.co (video calls), Anthropic (AI analysis of your photos; an earlier profile-browsing feature, now switched off, also used it to write match notes from your display name, age, location and facial description), Zippopotam.us (looking up the city for the ZIP code you enter), OpenAI (drawing your illustrated avatar from a written description), Sentry (error monitoring) and PostHog (product analytics).

We may disclose information if required by law, subpoena, or court order, or if we believe disclosure is necessary to protect the safety of any person.

8. Children

Magnetic is strictly for users 18 and older. We do not knowingly collect information from minors. If we learn that a user is under 18, we will immediately delete their account and all associated data.

9. Changes to This Policy

We may update this Privacy Policy. We will notify you by email and by posting a notice in the app at least 30 days before any material changes take effect. Your continued use of the Service after that date constitutes acceptance of the updated policy.

10. Contact

For privacy-related requests including biometric data deletion: privacy@varosity.com

For general support: support@varosity.com

Varosity, Inc.