1. Introduction & 18+ Eligibility
Welcome to Sugare ("Sugare", "we", "our", or "us"), operated by [Legal Entity / Company Name]. Sugare is a dedicated social discovery and matchmaking platform designed exclusively for consenting adults seeking sugar dating connections based on mutual preferences.
We take your personal privacy seriously. This document governs all interactions with the Sugare mobile application and any related APIs or web portals.
2. Information We Collect
Sugare collects only the information necessary to create your profile, facilitate introductions, verify authenticity, process subscription access, and uphold safety. We categorize collected information as follows:
A. Account Credentials & Basic Identifiers
- Firebase Authentication UID: A unique cryptographic user identifier generated upon signup.
- Email Address: Obtained via Google Sign-In or manual account creation for account recovery, transactional notifications, and service communications.
- Display Name: Your chosen public profile moniker.
- Phone Number (Optional): If provided during two-factor or phone authentication.
B. Profile & Matchmaking Information
- Age & Date of Birth: Required to confirm you are 18+ years of age.
- Gender Identity: Self-selected category (Male, Female, Non-Binary).
- Account Category: Self-identified role within the matchmaking ecosystem: Sugar Baby, Sugar Daddy, or Sugar Mommy.
- Biography & Lifestyle Preferences: Text bio and interests you voluntarily provide to communicate your preferences.
C. Profile Photos & Media Content
- Profile Pictures & Public Gallery: Photos uploaded to showcase your profile to prospective matches.
- Image Hosting Infrastructure: All user-uploaded media is processed and securely hosted through Cloudinary CDN. Sugare does not permit non-consensual imagery, nudity, or copyrighted material.
D. Identity & Photo Verification Data (Optional)
- Verification Selfies & Government IDs: If you voluntarily apply for a verified badge (
isVerified: true), you may submit a live selfie or a photograph of a recognized government document (e.g., passport, driving license, or national identity card). - Restricted Access: Verification documents are accessible solely to authorized administration personnel for manual review in an isolated moderation queue. They are never published on your public profile or shared with other members.
E. In-App Purchase & Billing Records
- Google Play Order Identifiers: Receipt tokens (
orderId, e.g.GPA.xxxx-xxxx-xxxx-xxxxx), product SKU (sugare_trial_7dorsugare_premium_30d), activation timestamps, and expiration timestamps. - Hashed Purchase Tokens: We generate SHA-256 cryptographic hashes of Google Play purchase tokens stored in our verification database to prevent token replay attacks.
- No Payment Card Data: Sugare never receives, accesses, or stores your credit card numbers, debit card numbers, UPI PINs, or banking credentials. All payments are processed directly by Google Play Billing.
F. Technical, Device & Safety Information
- Device Diagnostics: Device manufacturer, hardware model, operating system version, and application build number.
- Safety & Moderation Logs: Abuse reports submitted by you or about you, including category (
inappropriate_photo,scam,harassment,underage,impersonation), text descriptions, and administrative actions taken.
3. How We Use Your Information
Sugare processes your personal information for lawful and legitimate purposes:
- Account Provisioning & Security: Creating, maintaining, and authenticating your account securely using Firebase Authentication.
- Matchmaking & Discovery: Showing your public profile to prospective matches based on mutually selected categories (
sugar_baby,sugar_daddy,sugar_mommy) and approximate regional location. - Subscription Entitlement Verification: Validating purchases with the Google Play Developer API v3 to unlock trial and premium tier privileges.
- Trust & Safety Enforcement: Detecting duplicate accounts, preventing spam, investigating reports, warning offenders, removing violating imagery, and banning bad actors.
- Customer Support: Responding to user inquiries, troubleshooting app issues, and processing account deletion requests.
- Statutory Compliance: Complying with applicable laws, legal requests, and law enforcement directives.
4. Location Privacy & Geolocation
We know that discretion and privacy are paramount for our community. We handle location with strict privacy safeguards:
- Permission is Optional: Granting device location permission is completely optional. You may also manually select your city and state.
- Approximate City-Level Display Only: Profiles display only approximate geographical information (e.g., "Mumbai, MH" or "Bengaluru, KA"). We never display your street address, building name, or exact GPS coordinates to other members.
- No Continuous Background Tracking: Sugare does not track your real-time physical movements in the background while the application is closed.
5. Third-Party Service Providers
Sugare utilizes trusted infrastructure providers to power core functionality. We do not sell your personal data to data brokers. The following service providers process information strictly on our behalf:
| Provider | Purpose | Data Processed |
|---|---|---|
| Google LLC (Firebase) | Authentication & Cloud Firestore Database | UID, email address, profile metadata, subscription state |
| Cloudinary Ltd. | Media Hosting & Content Delivery (CDN) | Profile images, avatar photos, user gallery pictures |
| Google Play Billing | In-App Payment & Subscription Fulfillment | Purchase tokens, order IDs, product entitlements |
| Firebase Cloud Messaging (FCM) | Transactional & App Notifications | Device registration tokens, notification payload |
6. Data Retention & Deletion Schedule
We retain your personal data only as long as your account remains active or as required to deliver our services:
- Active Accounts: User profile data, photos, and messages are retained during the lifetime of your active profile.
- Upon Account Deletion: Your public profile is instantly hidden from discovery. Photos hosted on Cloudinary, profile details, and account credentials are permanently erased or irreversibly anonymized within thirty (30) days.
- Audit & Anti-Fraud Retentions: Cryptographic hashes of redeemed purchase tokens and essential financial transaction references are retained in immutable audit logs to comply with financial accounting obligations and prevent fraudulent re-use.
- Safety & Ban Records: If an account is banned for serious offenses (e.g., underage use, scams, or extortion), minimal non-identifying hash records are retained to prevent the offender from creating new accounts.
7. Data Security Architecture
We employ industry-standard technical and organizational security controls to safeguard your information:
- All communication between the mobile app, verification server, and cloud databases is encrypted via TLS 1.3 / HTTPS.
- Cloud Firestore rules strictly isolate user data; members cannot read or write data belonging to other accounts.
- Purchase verification and subscription entitlements are managed exclusively server-side via trusted Firebase Admin SDK instances.
- Administrative access to moderation queues requires multi-factor authentication, whitelisted UIDs, and role-based permissions.
8. Your Rights & Privacy Controls
Subject to applicable data protection laws, you possess the following rights:
- Right to Access: You can review your profile information directly within the app profile settings.
- Right to Rectification: You can update or correct your bio, photos, age, city, and preferences at any time.
- Right to Erasure: You can delete your account and request full data removal at any time.
- Right to Restrict or Withdraw: You can revoke device permissions (camera, storage, coarse location) directly in your Android system settings.
9. Account Deletion
You have full control over your account lifecycle. You can delete your account in two ways:
- In-App Deletion: Open the Sugare app → Go to Profile / Settings → Tap "Delete Account" → Review consequences → Confirm deletion.
- Web Deletion Request: Visit our dedicated Account Deletion Page or email sugare.app@gmail.com.
For full details on data deletion timelines and managing Google Play subscriptions, see our Account Deletion Page.
10. Children's Privacy (Strict 18+ Restriction)
Sugare is exclusively for adults. We do not knowingly collect, solicit, or maintain personal information from individuals under the age of 18. If we become aware that an account has been registered by a minor, we will immediately terminate the account, purge all associated media, and permanently block the account credentials.
If you suspect that a user is under eighteen, please submit an immediate report in-app under the "underage" category or email us at sugare.app@gmail.com.
11. International Data Transfers
Sugare operates on globally distributed cloud infrastructure provided by Google Cloud Platform and Cloudinary. Your data may be processed on secure servers located outside of your state or country of residence. By utilizing Sugare, you consent to the transfer of information to servers adhering to international security standards and robust data protection agreements.
12. Updates to This Privacy Policy
We may revise this Privacy Policy periodically to reflect updates to our technical architecture, product features, or applicable legal standards. When modifications are made, the revised date at the top of this document will be updated. Continued use of Sugare after the effective date of an amended policy constitutes acceptance of the changes.
13. Contact & Grievance Redressal
In accordance with the Information Technology Act, 2000, and applicable data protection regulations, queries or concerns regarding this policy may be directed to our Grievance Officer: