Privacy Policy

Your privacy matters to us. This Privacy Policy explains how First Commit LLC, a New York limited liability company ("First Commit," "Company," "we," "us," or "our"), collects, uses, shares, and protects your personal information when you use Orea — including the Orea mobile application, the website at oreadating.com, and all related services (collectively, the "Service"). For purposes of applicable data-protection laws, First Commit LLC is the data controller of personal information processed through the Service.

By using the Service, you consent to the collection, use, and sharing of your information as described in this Privacy Policy. If you do not agree with this policy, please do not use the Service.

We encourage you to read this policy in full. If you have any questions, please contact us at privacy@oreadating.com.

1. Information We Collect

1.1 Information You Provide Directly

• Phone number: Used for account creation and authentication via one-time password (OTP) verification
• Profile information: Name, gender, sexual orientation, pronouns, relationship preferences, bio, and any other details you choose to add to your profile
• Photos: Profile photos and verification photos you upload to the Service
• Birth date, time, and location: Used to compute your astrological profile, including your sun, moon, and rising signs, planetary placements, and house positions. This is core to how Orea calculates compatibility
• Zodiac data: Your computed astrological chart data, including sign placements, aspects, and compatibility scores with other users
• Communications: Messages sent to other users through the Service, as well as communications with our support team
• Payment information: If you purchase premium features, payment processing is handled entirely by third-party providers (Apple App Store, Google Play Store, or RevenueCat). We do not store your payment card details

1.2 Information Collected Automatically

• Device information: Device type, model, operating system version, unique device identifiers, push notification tokens, and app version
• Usage data: How you interact with the Service, including features used, swipe patterns, profiles viewed, session duration, and engagement metrics
• Log data: IP address, browser type and version, access times, pages viewed, referring URLs, and crash or error reports
• Location data: With your explicit consent, we collect approximate location data (city-level) to show you potential matches nearby and enable distance-based filtering. We do not track your precise GPS location in the background. You can disable location sharing at any time through your device settings

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 Matching and Compatibility

• Computing your astrological birth chart and compatibility scores with other users
• Presenting you with match recommendations based on astrological compatibility, preferences, and location
• Enabling mutual matching through our swipe-based discovery system

2.2 Personalization

• Tailoring your experience based on your preferences, behavior, and astrological profile
• Showing relevant profiles and optimizing match quality over time

2.3 Horoscope Generation

• Generating personalized horoscope content and astrological insights based on your birth chart data
• This content may be produced using artificial intelligence technology provided by Anthropic. Your birth chart data (not your name, photos, or other identifying information) may be processed by Anthropic's AI models for this purpose

2.4 Safety and Security

• Detecting, preventing, and addressing fraud, abuse, and violations of our Terms of Service
• Verifying user identity through photo verification
• Monitoring for and removing prohibited content
• Protecting the safety of our users and the integrity of the platform

2.5 Analytics and Improvement

• Analyzing usage patterns and trends to improve the Service
• Conducting research and development for new features
• Measuring the effectiveness of our matching algorithms

2.6 Communications

• Sending service-related notifications (new matches, messages, account updates)
• With your consent, sending promotional communications about Orea features and offers
• Responding to your support requests and inquiries

3. Third-Party Services

We work with trusted third-party service providers to operate the Service. These providers are contractually obligated to protect your information and may only use it as directed by us. Our key service providers include:

4. Data Sharing

We do not sell your personal information. We will never sell your data to advertisers, data brokers, or any other third parties.

We may share your information only in the following limited circumstances:

• With other users: Your profile information (name, age, photos, astrological data, and preferences) is visible to other users as part of the matching experience. You control what you include in your profile
• Service providers: With the third-party providers listed in Section 3, solely for the purpose of operating and providing the Service
• Legal requirements: When required by law, regulation, legal process, subpoena, court order, or governmental request
• Safety: When we believe in good faith that disclosure is necessary to protect the safety, rights, or property of Orea, our users, or the public, including to prevent harm, fraud, or illegal activity
• Business transfers: In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information
• With your consent: In any other circumstances where we have obtained your explicit consent

5. Data Retention and Deletion

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

• Active accounts: Your data is retained while your account remains active
• Account deletion: When you delete your account, we will delete or anonymize your personal information within 30 days, including your profile, photos, astrological data, and messages
• Messages: Messages between users are retained while both accounts are active. If you delete your account, your messages will be removed from the other user's view within a reasonable timeframe
• Legal retention: We may retain certain data beyond account deletion where required by law, necessary to resolve disputes, enforce our agreements, or for legitimate safety purposes (such as preventing banned users from creating new accounts)

Your right to delete your account: You may delete your account at any time through the app settings or by contacting us at privacy@oreadating.com. We will process your deletion request promptly and confirm once complete.

6. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

6.1 Rights for All Users

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information and account
• Portability: Request a machine-readable copy of your data
• Opt out: Opt out of marketing communications at any time by following the unsubscribe link in any marketing email or adjusting your notification settings
• Withdraw consent: Withdraw consent for location sharing or other optional data collection through your device settings

6.2 California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act and the California Privacy Rights Act, including:

• The right to know what personal information we collect, use, disclose, and sell
• The right to request deletion of your personal information
• The right to opt out of the sale or sharing of your personal information. As stated above, Orea does not sell your personal information
• The right to non-discrimination for exercising your privacy rights
• The right to correct inaccurate personal information
• The right to limit the use of sensitive personal information

6.3 European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR), including:

• The right to restriction of processing
• The right to object to processing based on legitimate interests
• The right to lodge a complaint with your local data protection authority

Our legal bases for processing your personal information include: performance of our contract with you (providing the Service), your consent (marketing communications, location data), our legitimate interests (security, fraud prevention, service improvement), and compliance with legal obligations.

6.4 Exercising Your Rights

To exercise any of these rights, contact us at privacy@oreadating.com or use our online contact form. We will verify your identity and respond to your request within 30 days (or within the timeframe required by applicable law). We will not charge a fee for processing your request unless the request is manifestly unfounded or excessive.

7. Cookies and Tracking Technologies

Our website uses cookies and similar technologies for the following purposes:

• Essential cookies: Required for authentication, session management, and security. The Service cannot function properly without these
• Analytics cookies: Help us understand how users interact with the Service so we can improve the experience. These are anonymized and aggregated
• Preference cookies: Remember your settings and preferences across sessions

We do not use advertising or third-party tracking cookies. You can manage cookie preferences through your browser settings. Disabling essential cookies may prevent you from using certain features of the Service.

Our mobile app does not use cookies but may use device identifiers and similar technologies for the purposes described above.

8. Security Measures

We implement industry-standard security measures to protect your personal information, including:

• Encryption: All data is encrypted in transit using TLS (Transport Layer Security) and at rest using AES-256 encryption
• Authentication: Secure authentication via JWT tokens and phone-based OTP verification through Amazon Cognito
• Log redaction: Hard redaction of sensitive data (tokens, PII, user content, location coordinates) in all system logs. User identifiers are logged as truncated cryptographic hashes to prevent identification
• Access controls: Strict role-based access controls limiting employee access to user data on a need-to-know basis
• Infrastructure: Hosted on AWS with enterprise-grade security, including network isolation, automated threat detection, and regular vulnerability assessments
• Monitoring: Continuous security monitoring and incident response procedures

While we take extensive precautions to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, and you use the Service at your own risk.

9. Sensitive Personal Information

Orea collects certain categories of sensitive personal information, including:

• Sexual orientation and gender identity
• Precise birth date, time, and location (used for astrological profile computation)
• Approximate location data (with your consent)

This information is collected solely to provide the core functionality of the Service (matching, astrological profile generation, and compatibility analysis) and is handled with heightened security measures. You can update or remove your gender, orientation, and preference information from your profile at any time.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our servers and service providers are located. These countries may have different data protection laws than your jurisdiction.

We ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses (SCCs) approved by the European Commission where applicable, and compliance with applicable data transfer frameworks.

11. Children's Privacy

Orea is not intended for anyone under the age of 18. We do not knowingly collect, use, or disclose personal information from children under 18. We do not knowingly allow anyone under 18 to create an account or use the Service.

If we become aware that we have collected information from a person under 18, we will take immediate steps to delete that information and terminate the associated account. If you believe that a minor has provided us with personal information, please contact us immediately at support@oreadating.com.

12. Third-Party Links

The Service may contain links to third-party websites, apps, or services that are not operated by us. We are not responsible for the privacy practices, content, or security of these third parties. We encourage you to review the privacy policies of any third-party services you access through our Service.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Service (such as an in-app notification), by email, or by other reasonable means at least thirty (30) days before the changes take effect.

The "Last updated" date at the top of this page indicates when this policy was most recently revised. We encourage you to review this policy periodically. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: