Privacy Policy
Effective Date: March 7, 2026
Citas Medellín («we», «us», or «our») respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you access or use our dating platform, including the website at citasmedellin.app and our related mobile application (collectively, the «Service»).
The Service is operated by Citas Medellín, based in Medellín, Colombia. Our contact email is info@citasmedellin.app.
We are the Data Controller for the personal data we process through the Service, in compliance with Colombian Law 1581 of 2012 (Estatuto de Protección de Datos Personales) and its implementing Decree 1377 of 2013. For users located in the European Union or European Economic Area, we also observe the principles of the EU General Data Protection Regulation (EU GDPR) where applicable.
By accessing or using the Service, you acknowledge that you have read and understood this Policy.
1. Information We Collect
We collect personal data to provide, improve, and secure the Service.
1.1 Data You Provide
Account Information: Email address, password, display name, date of birth, gender, and search preferences (e.g., age range, location) provided during registration.
Profile Data: Photos, bio, and other optional details you choose to add to your public profile.
Special Category (Sensitive) Data: You may choose to provide information that reveals your sexual orientation. By providing this information, you explicitly consent to our processing of this sensitive data for the purpose of facilitating connections with compatible users.
Payment Data: Billing details (e.g., cardholder name, partial card number) for subscriptions. We do not store full credit card numbers. Transactions are processed by PCI-DSS compliant third-party payment providers.
Verification Data: Government-issued ID, biometric selfies, or other documentation provided for age or identity verification purposes, where required.
1.2 Data Collected Automatically
Usage Data: IP address, device type, operating system, browser type, pages viewed, time spent, and login history.
Location Data: General location (city/country) derived from your IP address. We do not collect precise GPS location data.
Device Identifiers: We collect certain technical attributes to generate a device identifier for fraud prevention and security, including detecting bot activity and multiple account abuse.
1.3 Third-Party Analytics and Crash Reporting
We use third-party tools to monitor the performance and stability of our Service. Specifically, we use Mixpanel for product analytics and user behavior tracking, and Sentry for crash reporting and error tracking. These tools may collect device data, usage events, and error logs. This data is used solely to improve our Service and not for advertising.
1.4 Data Collection Summary (Privacy Nutrition Label)
To provide transparency aligned with App Store and Google Play standards, here is a summary of the data we collect:
- Data Linked to You: Contact Info (Email is private; Phone/WhatsApp is shared only with connected matches), Identity/Biometrics (Facial geometry for verification only), User Content (Photos, Bio, Preferences), Purchases (Subscription history), Identifiers (User ID, Device ID), Diagnostics (Crash logs via Sentry), and Usage Data (Interaction events via Mixpanel).
- Data Not Linked to You: Aggregated anonymous analytics.
- Data Used to Track You: We do NOT collect data used to track you across apps and websites owned by other companies for targeted advertising.
2. How We Use Your Information
We process your data for specific, limited purposes and rely on the following legal bases under Colombian Law 1581 of 2012:
To Provide and Operate the Service: We use your data to create accounts, facilitate connections between users, and process payments.
Legal Basis: Contractual necessity and your consent at registration.
Safety, Moderation, and Verification: We monitor for prohibited content (e.g., solicitation, harassment) and detect fraud to ensure a safe environment.
Legal Basis: Legitimate interests and legal obligation under Colombian law.
Improvement and Analytics: We analyze usage trends and user behavior to improve our algorithms, features, and platform performance.
Legal Basis: Legitimate interests.
Personalization: We use your activity and preferences to recommend relevant profiles and improve your experience.
Legal Basis: Legitimate interests.
Marketing: We may send you newsletters or promotions. You may opt out at any time.
Legal Basis: Consent.
Legal Compliance: We process data to comply with applicable Colombian laws, including anti-trafficking obligations under Law 985 of 2005, tax obligations, and valid court orders.
Legal Basis: Legal obligation.
Sensitive Data Processing: We process data revealing sexual orientation solely for the purpose of matching you with compatible users.
Legal Basis: Explicit consent.
3. How We Share Your Information
We do not sell your personal data. We share data only in these specific circumstances:
Service Providers: We share data with trusted third-party processors who assist in operating the Service, including:
Hosting and infrastructure providers;
Payment processors (e.g., Stripe, Apple, Google) for subscription billing;
Identity verification partners, where applicable;
Analytics providers (data shared in anonymized or aggregated form only).
All such providers are bound by data processing agreements requiring them to process data only on our instructions and in accordance with applicable law.
Other Users: Your public profile (display name, photos, bio, age, neighborhood, and physical traits) is visible to other users of the Service. Your email address and billing data remain private and are never shared with other users.
Law Enforcement and Authorities: We may disclose data if required by applicable Colombian law, valid court order, or to comply with anti-trafficking obligations under Law 985 of 2005 and the Código Penal Colombiano. We will report indicators of human trafficking or child exploitation to the appropriate Colombian authorities.
Payment Dispute Defense: In the event of a payment dispute or chargeback, we reserve the right to share strictly relevant evidence with the relevant bank or payment processor, including IP access logs and proof of account usage, to demonstrate that the Service was provided.
Business Transfers: If Citas Medellín is involved in a merger, acquisition, or asset sale, your data may be transferred as part of that transaction. We will notify you in advance of any such transfer.
4. User Communication and Verification
4.1 No In-App Messaging
Citas Medellín does not provide in-app messaging. The platform facilitates connections between users; all subsequent communication occurs outside the Service via SMS or WhatsApp. We do not collect, store, or process the content of any communications between users that take place off-platform. Those communications are subject to the privacy policies of the respective third-party platforms (SMS carriers and WhatsApp/Meta).
4.2 Limitation on User Verification
We do not conduct criminal background checks or verify the true identity, background, or intentions of our users. Any information provided by users is taken in good faith but is not guaranteed. We explicitly encourage all users to practice caution when interacting with others.
5. Your Data Protection Rights
Under Colombian Law 1581 of 2012, you have the following rights regarding your personal data:
Access: Request a copy of the personal data we hold about you.
Rectification: Request correction of inaccurate or incomplete data.
Erasure: Request deletion of your account and associated data. Note: Male accounts are permanently deleted. Female accounts are soft-deleted (hidden from public view) to maintain historical invitation records for other users. We also retain certain data (e.g., transaction history, banned account identifiers) across all accounts where required by law or for legitimate safety purposes.
Restriction: Request that we pause processing of your data in certain circumstances.
Objection: Object to processing based on our legitimate interests.
Portability: Receive your data in a structured, machine-readable format.
Withdraw Consent: Withdraw consent for sensitive data processing at any time. Note that withdrawal of consent may affect your ability to use certain features of the Service.
To exercise any of these rights, please contact us at info@citasmedellin.app. We will verify all requests to prevent unauthorized access.
6. Data Retention
We retain personal data only for as long as necessary for the purposes described in this Policy:
Active Accounts: Retained for the duration of your membership.
Deleted Accounts: Male accounts and associated profile data are permanently deleted. Female accounts are soft-deleted (hidden from discovery) and retained securely to maintain historical invitation records for male users who previously interacted with them, and to allow for future account reactivation.
Transaction Records: Retained for a minimum of 5 years to comply with Colombian tax and accounting obligations.
Verification Data: Verification selfies and ID documents are retained securely for audit and ongoing fraud-prevention purposes.
Banned Accounts: We retain device identifiers, email hashes, and relevant identifiers of banned users to prevent them from creating new accounts and endangering user safety (legitimate interest).
Inactive Accounts: We reserve the right to delete accounts that have been inactive for an extended period of time.
7. International Data Transfers
Citas Medellín is based in Colombia. If we transfer your data to processors located outside Colombia (e.g., cloud infrastructure or payment processors based in the United States or Europe), we ensure that appropriate safeguards are in place, including contractual protections consistent with Colombian data protection law and, where applicable, the EU GDPR Standard Contractual Clauses (SCCs).
8. Security
We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS/SSL) and encryption at rest. Access to personal data is restricted to authorized personnel with a legitimate business need. However, no internet transmission is 100% secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.
9. Children’s Privacy
The Service is strictly for individuals aged 18 or older. We do not knowingly collect personal data from minors. If we discover that a user is under 18, we will immediately delete their account and all associated data.
10. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. Material changes will be communicated via email or a notice on the platform. The «Effective Date» at the top of this page reflects the date of the most recent revision. Your continued use of the Service after a change is posted constitutes your acceptance of the updated Policy.
11. Contact Us
If you have questions, concerns, or complaints about this Privacy Policy or how we handle your data, please contact us:
Email: info@citasmedellin.app
Website: citasmedellin.app
Citas Medellín, Medellín, Colombia
You also have the right to lodge a complaint with the Superintendencia de Industria y Comercio (SIC), the Colombian data protection supervisory authority, at www.sic.gov.co.