Privacy Policy

Last updated: March 2026

1. INTRODUCTION

This Privacy Policy describes how Secret Friend Match (Android application com.secretfriend.match, published by SAS LeadForge, France) collects, uses, stores, shares, and protects personal data when you use our mobile application and website https://secretfriendmatch.com/. By creating an account or using the app, you acknowledge this policy together with our Terms of Use.

Secret Friend Match is an entertainment application offering AI-generated fictional characters, chat, scenarios, optional voice features, in-app purchases of Secret Tokens, and optional rewarded video ads.

2. DATA COLLECTED

We may collect, or process on behalf of our users, the following categories of personal data when you use or interact with Secret Friend Match:

• Provided by you: email, password (if you create an email account), display name, date of birth (for mandatory 18+ age verification), language preferences, and in-app choices.
• Generated during use: AI conversation history, scenario progress, hearts earned, Secret Token balance and transaction history, and rewarded-ad completion events linked to your account.
• Technical and security data: Firebase user identifiers, authentication tokens, device model, operating system version, app version, Play Integrity and Firebase App Check signals where enabled, and anonymised diagnostic logs.
• Rewarded advertising (only with your explicit consent where required): device advertising ID, IP address (possibly truncated), device information, and engagement metrics. Processed by ad partners (e.g. Google AdMob; mediation partners may apply) solely to deliver rewarded videos and validate rewards. If you refuse advertising consent, we do not collect ad-personalisation data for that purpose.

3. GOOGLE USER DATA (GOOGLE SIGN-IN)

Secret Friend Match offers optional sign-in with your Google Account using OAuth 2.0 and Firebase Authentication.

Google user data accessed by our application: when you choose Google Sign-In, our application accesses the Google user data you authorise on Google's consent screen, typically including your email address, a unique Google user identifier, your display name, and your profile picture URL.

How we use Google user data: we use this data only to provide or improve user-facing features of Secret Friend Match, including to create and authenticate your account, maintain your signed-in session, secure your account, save and sync your in-app progress and purchases, and restore access on a new device. We do not use Google user data for any other purpose.

How we share Google user data: we do not sell Google user data. We do not transfer or disclose Google user data to third parties for purposes other than providing the service. Google user data is shared only with Google Firebase Authentication and related Firebase infrastructure providers that process data on our instructions solely to operate sign-in, account management, and app functionality.

How we protect Google user data: security procedures are in place to protect the confidentiality of your data, including TLS encryption in transit, authenticated access to backend systems, Firebase security rules, Firebase App Check, and restricted internal access on a need-to-know basis.

Google user data retention and deletion: we store Google user data while your account remains active and for a limited period afterwards if required for legal, accounting, or security purposes, then delete or anonymise it. You may delete your account from the app or via our account deletion page. You may revoke Google Sign-In access at https://myaccount.google.com/permissions.

Secret Friend Match's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is not used for advertising and is not used to train generalized machine-learning or artificial-intelligence models.

4. PURPOSES

• Create, authenticate, and secure your account.
• Verify that you are 18 years or older.
• Provide chat, scenarios, voice features, and AI-generated content.
• Operate the Secret Token economy (purchases, rewards, limits).
• Prevent abuse and fraud (integrity checks, rate limits).
• Improve stability and performance using aggregated statistics.
• Deliver and measure rewarded ads only with appropriate consent.
• Comply with legal obligations.

5. LEGAL BASIS

Performance of the contract (providing the service), legitimate interests (security, anti-fraud, product improvement, proportionate analytics), and legal obligation where applicable (e.g. age verification). For rewarded advertising and related signals where GDPR applies: consent obtained via Google UMP and in-app settings. You may withdraw advertising consent at any time via the app or system prompts.

6. RECIPIENTS AND PROCESSORS

• Google Firebase (Authentication, Firestore, Storage, Cloud Functions, App Check, and related services as configured).
• Google Play Billing for in-app purchases.
• AI inference providers (e.g. Google Cloud / Vertex AI, OpenAI, or others we integrate) to generate responses from your prompts and session context.
• Google AdMob and, if mediation is enabled, other ad networks solely as required to serve rewarded ads with consent.

We do not sell your personal data to third parties. Sharing is limited to operating the service and meeting legal requirements.

7. INTERNATIONAL TRANSFERS

Data may be processed in the European Union and, for certain providers (e.g. United States), transferred subject to appropriate safeguards such as Standard Contractual Clauses approved by the European Commission, supplementary measures where required, and provider certifications where applicable.

8. RETENTION

We store your personal information for the length of time needed to fulfill the purposes outlined in this privacy policy unless a longer retention period is required or permitted by law. Account data, conversations, and progress are kept while your account is active. Date of birth is retained to enforce the 18+ rule while the account exists. When the data retention period expires for a given type of data, we delete or destroy it. You may request deletion of your data by deleting your account in the app, using our account deletion page, or emailing apps@secretfriendmatch.com.

9. SECURITY

We use encryption to protect your information in transit (TLS), access controls, Firebase security rules, Firebase App Check, and Google Play Integrity signals where enabled. No method of transmission or storage is 100% secure; we work to minimise risk.

10. YOUR RIGHTS (GDPR AND SIMILAR LAWS)

Depending on your location, you may have rights of access, rectification, erasure, restriction, portability, and objection, and the right to withdraw consent for processing based on consent. Contact: apps@secretfriendmatch.com. You may lodge a complaint with your local supervisory authority (in France: CNIL).

11. MINORS

Secret Friend Match is strictly for users aged 18 and over. We do not knowingly collect data from anyone under 18.

12. COOKIES AND SIMILAR TECHNOLOGIES

The mobile app does not use browser cookies. Identifiers used by the SDKs described above (e.g. advertising ID) are subject to this policy and your device or in-app settings.

13. CHANGES

We may update this policy; the "Last updated" date will change. Material changes may be notified in-app or on this page.

14. CONTACT, WEBSITE, AND CONTROLLER

Application: Secret Friend Match (com.secretfriend.match)
Email: apps@secretfriendmatch.com
Website: https://secretfriendmatch.com/
Google Play: Play Store listing
Terms of Use: terms-of-use.html
Controller: SAS LeadForge — 4 allée de la Geffrière — 35600 Sainte-Marie — France — SIREN 932 450 927, R.C.S. Rennes

15. CONSUMER DISPUTES (EU)

If you are a consumer in the European Union, you may use the European online dispute resolution platform: https://ec.europa.eu/consumers/odr/