Between Sets legal

Privacy Policy

Current member version: between-sets.privacy.v3

Last updated: July 29, 2026

Between Sets is an adults-only, fitness-focused dating and social matching platform operated from Ontario, Canada. This Privacy Policy explains what personal information we collect, why we use it, when it may be shared, how it is protected, and the choices and rights available to you.

Our privacy principle

Verification establishes trust eligibility. Consent determines access. An unverified member must not receive another member's protected photos, photo URLs, precise or approximate location, gym location, distance, or other protected profile information. Verification does not automatically make information visible. Access remains controlled by the profile owner's privacy settings, relationship state, consent, blocking decisions, and applicable safety rules.

Information we collect

Waitlist information: email address, consent record, referral information, and the first three characters of a Canadian postal code (FSA) used to assign a launch market.
Account information: email address, authentication identifiers, account status, legal-policy acceptance records, and support history.
Profile and matching information: display name, adult age or age range, gender and matching preferences, biography, interests, fitness information, selected market or city, photos, and privacy choices you provide.
Location-related information: market, city, FSA, selected activity venue or gym, and approximate distance when you authorize a feature that needs it. We do not make an exact home address a public profile field.
Identity and age-verification information: verification status and limited verified outputs needed to determine adult eligibility, such as verified date of birth. Our selected verification provider may collect a government identification document, image, selfie, liveness information, duplicate-account indicators, and related verification signals under its own privacy terms. Between Sets is designed to retain minimum authorization results and provider references rather than reusable biometric templates. Do not send identity documents to Between Sets through ordinary email or support messages.
Interaction information: likes, matches, messages, blocks, reports, account preferences, moderation results, and activity required to operate and protect the service.
Payment information: subscription, transaction, customer, entitlement, cancellation, refund, and dispute identifiers. Payment-card details are collected and processed by the selected payment processor rather than stored directly by Between Sets.
Technical information: IP address, browser or device details, security and fraud signals, cookies or similar session technologies, request logs, and diagnostic information.

How we use personal information

Provide accounts, profiles, waitlists, rollout access, discovery, matching, messaging, subscriptions, and account-rights tools.
Confirm identity, adult eligibility, legal acceptance, jurisdiction eligibility, privacy authorization, and feature eligibility.
Calculate or display market-level information and approximate distance without unnecessarily exposing precise location.
Process payments, manage Premium access, apply founder or referral entitlements, and prevent an earned entitlement from being charged incorrectly.
Moderate photos and messages, investigate reports, enforce blocks, prevent abuse, detect fraud, maintain security, and respond to emergencies or lawful requests.
Provide support, resolve disputes, communicate service notices, and respond to privacy or account-rights requests.
Improve reliability and understand aggregate service use. We do not use protected profile information to create public member directories.
Send promotional email only where legally permitted and with the required consent and unsubscribe mechanism.

Consent and your choices

We seek consent appropriate to the sensitivity and purpose of the information. Certain information is necessary to provide the service, protect members, process a requested transaction, or meet legal obligations. Optional profile, marketing, photo, gym, venue, and location disclosures remain subject to the choices presented in the service. You may withdraw optional consent, but doing so may disable the related feature. Blocking another member restricts access as required by the service's privacy and safety controls.

When information may be shared

With other members: only according to eligibility, consent, privacy settings, match or approval state, blocking status, and the feature being used.
With service providers: hosting, database, authentication, security, payment, identity/age verification, content moderation, email, monitoring, and technical-support providers that process information for us.
For safety and legal reasons: where reasonably necessary to protect a person, investigate abuse or fraud, enforce our agreements, comply with law, or respond to lawful legal process.
For a business transaction: in connection with financing, reorganization, sale, merger, or transfer, subject to appropriate confidentiality and legal safeguards.
At your direction: when you deliberately share information, authorize a connection, or ask us to disclose it.

We do not sell personal information as a standalone data product.

Service providers and international processing

Between Sets uses service providers that may process information in Canada, the United States, the European Economic Area, or other jurisdictions. Information processed outside your province or country may be subject to the laws of that jurisdiction. The platform uses Supabase for database and authentication infrastructure and Cloudflare for hosting and security. The intended Ontario launch architecture contemplates CCBill for payment processing, Veriff for identity and adult-age verification, and Hive for visual and text moderation, subject to final contracts, configuration, professional review, and production disclosure. Transitional or replacement providers may be used only after appropriate review. We will update this policy when the actual production provider set or material processing changes.

Automated moderation and fraud signals

Automated systems may help identify explicit content, scams, credential or payment solicitations, duplicate accounts, blocklist matches, unusual device or verification activity, and other safety risks. Content may be allowed, blocked, or held for human review. A high-risk result may temporarily restrict access. Automated results are not represented as infallible, and consequential or disputed decisions may be reviewed or appealed under our available processes.

Retention

We retain personal information only as long as reasonably necessary for the purposes described here, including providing the service, maintaining safety and fraud records, resolving disputes, completing financial records, enforcing agreements, and meeting legal obligations. Retention periods vary by information type and risk. Deleted information may remain in protected backups for a limited period before routine deletion or may be retained where legally permitted or required. Provider-held identity, moderation, and payment information is also subject to the selected provider's approved retention and deletion terms. We may de-identify information so it can no longer reasonably be associated with you.

Security

We use administrative, technical, and organizational safeguards appropriate to the sensitivity of the information. These include restricted server-side access, private storage boundaries, authorization checks, signed provider callbacks, rate limits, moderation controls, and security logging. No online system is completely secure. You are responsible for protecting your password and for contacting us promptly if you suspect unauthorized account activity.

Your privacy and account rights

You may request to:

access or obtain a copy of personal information associated with your account;
correct inaccurate or incomplete information;
withdraw optional consent or unsubscribe from marketing communications;
change available privacy settings;
delete your account, subject to permitted legal, safety, fraud-prevention, dispute, and financial-record retention; or
ask how information has been used or disclosed and challenge our compliance with this policy.

Account export and deletion controls are available through the Account Data & Deletion page. We may need to verify your identity before acting on a request. Some rights are subject to legal exceptions.

Adults only

Between Sets is intended only for people who are at least 18 years old and who meet any higher applicable service-age rule. An account with pending, unresolved, or confirmed underage status cannot use protected dating features. If you believe a minor has provided information to us, contact safety@betweensets.ca.

Cookies and session technologies

We use cookies and similar technologies that are necessary for authentication, secure sessions, rollout access, preferences, fraud prevention, and service operation. Additional analytics or marketing technologies should be disclosed and, where required, presented with an appropriate consent choice before use.

Changes to this policy

We may update this policy as the service, providers, or legal requirements change. We will post the revised version and update the date above. Where a material change requires renewed consent, the service may require acceptance before protected features become available again.

Contact and complaints

Questions, access requests, corrections, deletion requests, or privacy complaints may be sent to privacy@betweensets.ca. Please do not include passwords, identity documents, access keys, financial-account details, or precise live location in ordinary email. If you are not satisfied with our response, you may also contact the Office of the Privacy Commissioner of Canada or another privacy regulator with jurisdiction.