At 30andMe, your privacy is fundamental to our mission. This Privacy Policy explains how we collect, use, and protect your personal information when you use the 30andMe mobile application and website (collectively, the "Service").
1. Information We Collect
Account Information
When you create an account, we collect:
- Name, email address, and date of birth
- Profile photos
- Location (city-level, for matching purposes)
Profile & Compatibility Data
To power our AI matching engine, we collect your responses to our compatibility questionnaire, covering:
- Values, beliefs, and worldview
- Personality traits and communication style
- Lifestyle preferences (diet, fitness, travel, etc.)
- Life goals (relationship type, children, career, relocation)
Usage Data
We collect anonymized analytics about how you use the app, including match interactions, chat engagement, and feature usage.
Identity Verification
To confirm you're a real person, we ask for a verification selfie. It is reviewed by our team, kept private (never shown on your profile), and used only to verify your account. We do not use it for facial recognition or other biometric analysis.
Age & Eligibility
30andme is a service for adults. You must be at least 18 to use it and 30 or older to be matched. The Service is not directed to anyone under 18, and we do not knowingly collect data from minors.
2. How We Use Your Information
- Matching: Your profile data is converted into vector embeddings and compared against other users to generate compatibility scores.
- Communication: To facilitate in-app messaging between matched users.
- Improvement: To improve our matching algorithm and user experience.
- Safety: To detect and prevent fraud, abuse, and policy violations.
Service Providers
We rely on trusted providers to run the Service. They process data only on our behalf, under contract, and may not use it for their own purposes:
- Cloudflare R2: encrypted photo & media storage & backups
- Google & Apple: sign-in, if you choose it
- Expo: push-notification delivery
3. What We Never Do
- We never sell your personal data to third parties.
- We never share your contact information without mutual consent.
- We never use your data for targeted advertising.
- We never require social media account linking.
4. Data Security
We use industry-standard encryption (TLS 1.3) for data in transit and AES-256 encryption for data at rest. Vector embeddings are stored separately from personally identifiable information.
5. Data Retention
We retain your account data for as long as your account is active. You can request deletion at any time. Upon deletion, your data is permanently removed within 30 days.
6. Your Rights
- Access your personal data
- Correct inaccurate information
- Request deletion of your data
- Export your data in a portable format
- Withdraw consent at any time
7. Cookies
Our website uses only essential cookies. We do not use tracking or advertising cookies.
8. Changes
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification.
9. Contact
Questions? Email privacy@30and.me.