courtme.ai: Privacy Policy

Effective Date: 2026-07-13 Last Updated: 2026-09-27 Entity: CourtMe, Inc. (Delaware C-Corporation; principal place of business: Austin, TX) Contact: privacy@courtme.ai

1. Plain-language summary (TL;DR)

This summary does not replace the full Policy below.

2. Information we collect

2.1 Information you provide

2.2 Information collected automatically

2.3 Information from third parties

Automated photo checks. Every photo you upload is run through automated checks, including face detection, to confirm the photo is usable and meets our content guidelines. The face-detection output is discarded immediately. We never retain it, never store it against your account, and never use it to identify you or anyone else. We do not currently run identity face-matching, and we do not generate or store biometric identifiers anywhere in courtme. When dating mode launches, the identity verification it requires will be governed by our Biometric Data Notice (see Section 2.5). IRL events do not use it.

2.4 Sensitive Personal Information (SPI)

We collect or infer the following categories defined as Sensitive Personal Information under California CPRA (and equivalent under other state laws):

We use SPI only for the purposes you would reasonably expect from a matchmaking product (matching and safety, and, for the interests you write in intake, choosing sponsor booth cards and booth recommendations as described in Section 12A) and not for inferring characteristics about you for any other purpose. You may limit our use of SPI by contacting privacy@courtme.ai.

2.5 Features described in this Policy that are not yet available

courtme today is event-scoped: you join a specific event and are matched with other attendees of that event. The features below are described elsewhere in this Policy, or exist in the app in a disabled state, and are not available to you today. We do not collect the data they would involve, and we will update this Policy and its effective date before any of them launches.

3. How we use your information

3.1 To provide the service

3.2 To improve the service, and how AI processes your data

We do not use your data to train AI models - ours or anyone else's. courtme does not train, fine-tune, or otherwise build AI models on your information.

What we do instead is send your information to AI providers at the moment you use a feature, so they can return a result for you. That is inference, not training:

Each of these providers is a subprocessor bound by the data processing agreement described in Section 4.1. We keep the inputs and outputs of these calls on our own systems and retain them under Section 9.

To measure and improve how well matching works, we use de-identified or aggregated statistics - for example match rates, meet rates, and how often a suggested match was approved - which are not linked to you.

If we ever decide to train models on user data, we will update this Policy and its effective date, tell you, and offer an opt-out before doing so. We would never use biometric data (facial geometry) or voice-identification data for model training in any case.

3.3 To communicate with you

3.4 To market courtme

3.5 To meet legal and safety obligations

3.6 To review communications for safety, support, and product quality

Your in-app messages are stored on our servers and are not end-to-end encrypted. Authorized courtme personnel may review the content of:

for safety and abuse investigation, fraud and ban-evasion prevention, moderation, responding to your support requests and disputes, product-quality review, and improving our matching and AI systems. (We do not train AI models on your content at all - see Section 3.2 - but the safety, support, and legal review described here is separate from that and continues regardless.)

This internal access is role-limited, purpose-scoped, and audit-logged: only trained Trust & Safety and product/research staff may reach this content, each access is tied to a specific purpose (for example safety, moderation, support, research, product quality, or legal) and a stated reason, and every access is recorded in an internal audit log. Retaining messages on our servers rather than end-to-end encrypting them is what makes this safety and support review possible, and is standard practice for dating and messaging services; the access controls and audit logging above are the safeguards on it.

4. Sharing of information: including SALES/SHARES under California law

4.1 Service providers (subprocessors)

We share personal information with the vendors below, each bound by a data processing agreement (DPA) to use the data only to provide services to us. We maintain and update this list as our subprocessors change.

Subprocessor Purpose Data involved
Supabase Database, authentication, file storage Account, profile, messages, photos
Anthropic AI matchmaking, bio generation, content-moderation classifiers Profile, prompts, messages/intake (pseudonymized where feasible)
Voyage AI Text embeddings used to shortlist which attendees to rank Short text drawn from your profile
AWS - Amazon Rekognition Photo content moderation and face-detection quality checks Photos
Stripe Payments and host billing Payment info (we do not store full card numbers)
Twilio SMS: phone verification codes. Safety check-in and emergency-contact SMS belong to dating mode and are not yet available (Section 2.5) Your phone number
LiveKit Real-time voice transport for AI intake Voice audio stream
Deepgram Speech-to-text transcription of voice intake, and text-to-speech for the AI matchmaker's voice Voice audio, transcripts, the matchmaker's reply text
PostHog Product analytics Usage/event data, identifiers
Sentry Error and crash monitoring Diagnostics, IP address, identifiers
Inngest Background job orchestration Data needed to run scheduled/async jobs
Resend Transactional and lifecycle email Email address, message content
Vercel Web hosting IP address, request logs
Expo / EAS Mobile builds and push-notification delivery Device/push tokens
Google Places API (venue data); Analytics/Ads (see 4.2) Venue queries; usage/conversion data
Apple / Google (app stores) App distribution, push delivery, and age-signal where available. courtme has no in-app purchase (Section 2.5) Push tokens, age category

We do not use OpenAI as a subprocessor at this time; if that changes, we will update this list.

4.2 Advertising and analytics partners: TREATED AS "SALE"/"SHARE" UNDER CCPA/CPRA

We share information with the following partners for advertising and analytics. Under the California Consumer Privacy Act / CPRA, the activities below are legally categorized as "sale" or "sharing" of your personal information, even though no money changes hands directly for the data:

You have the right to opt out of this sale/sharing. Use the "Do Not Sell or Share My Personal Information" link in our footer, or email privacy@courtme.ai. We will honor Global Privacy Control (GPC) signals as opt-outs.

We do not sell or share Sensitive Personal Information for purposes other than those you'd reasonably expect.

4.3 Other users

4.4 Business transfers

If courtme is acquired, merged, or sells assets, your data may transfer to the acquirer. We will notify you before the transfer if your rights would meaningfully change.

4.5 Legal disclosure

We disclose data when legally compelled (subpoena, court order, government request) and when necessary to investigate suspected fraud, threats, or violations of our terms.

5. Automated decision-making (AI matchmaking)

Our matchmaking system uses automated processes, including AI / large language models, to score and suggest matches. Specifically:

If you are an EU/UK resident, you have additional rights under GDPR Article 22 regarding automated decision-making. See Section 7.4.

6. Cookies and similar technologies

We use cookies, SDKs, and similar technologies for:

You can manage non-essential cookies via our cookie banner on first visit and through your account settings. You can also use browser controls or Global Privacy Control (GPC) signals.

7. Your privacy rights

Depending on where you live, you may have the following rights:

7.1 All users

7.2 California residents (CCPA/CPRA)

To submit a request, use the "Do Not Sell or Share My Personal Information" link or email privacy@courtme.ai. We respond within 45 days (extendable by 45 with notice).

7.3 Texas, Colorado, Connecticut, Virginia, Utah, and other state law residents

You have substantially similar rights under your state's law. Submit requests to privacy@courtme.ai.

7.4 EU/UK residents (GDPR)

8. AI processing, and opting out of "sale"/"share"

AI training: there is nothing to opt out of - we do not use your data to train AI models (see Section 3.2). AI providers process your data only at the moment you use a feature, to return a result to you. If we ever decide to train models on user data, we will update this Policy and its effective date, tell you, and offer an opt-out first. We would never use biometric data (facial geometry) or voice-identification data for model training in any case. To object to AI processing generally, email privacy@courtme.ai.

Sale/Share opt-out: Use the "Do Not Sell or Share My Personal Information" link in our footer, or send GPC signals via your browser. We honor GPC.

9. Data retention

We keep personal information only as long as needed for the purposes in this Policy, then delete or de-identify it. When you delete your account, we remove your data on the timeline below, subject to the exceptions that follow.

9.1 Standard timelines

9.2 Exceptions - data we retain after deletion

Internal staff access to retained messages and intake is audit-logged and purpose-scoped (see Section 3.6).

10. Security

We use industry-standard measures including encryption at rest and in transit, access controls, and audit logging. No system is perfectly secure. If we discover a breach of your personal information, we will notify you and applicable regulators as required by law.

11. Children

courtme is 18+ only. We do not knowingly collect data from anyone under 18 years of age. If the date of birth you give us (or any other signal) indicates you are under 18, we block account creation and purge the associated sign-up data - including email address and phone number - from our systems, retaining only the minimal, non-identifying information needed to prevent immediate re-registration. If we otherwise learn we have collected data from a minor, we will delete it. If you believe a minor is using courtme, contact safety@courtme.ai.

12. International users

courtme is operated from the United States. If you access courtme from outside the US, your data will be transferred to and processed in the US.

For EU/UK users, we use Standard Contractual Clauses (SCCs) or equivalent safeguards for transfers outside the EEA/UK.

12A. IRL Mode & Events

When you join courtme at a partner event ("IRL Mode") - e.g., by scanning an event QR code or entering a join code - the following applies in addition to the rest of this Policy:

13. Changes to this Policy

We may update this Policy. Material changes will be communicated by email and in-app notice. Continued use after the effective date constitutes acceptance.

14. Contact

For EU residents, our EU representative is: not yet appointed; EU users may contact privacy@courtme.ai.

© 2026 CourtMe, Inc. · All rights reserved · Privacy Policy · Terms of Service · Age Policy · Safety · Community · Do Not Sell or Share