Privacy
Version 2026-11-05.2 — November 5, 2026.
Who processes your data?
Dundu is operated by Kashora LLC, 1209 MOUNTAIN ROAD PL NE, STE N, ALBUQUERQUE, NM 87110, United States. Kashora LLC is responsible for the processing described here. Contact for your data and support: contact@dundu.app.
Dundu is intended for an international audience aged 18 and over. Optional Premium offers may be available on iOS when their availability is confirmed in the store. Diamond purchases and paid gifts remain disabled. The mobile app remains ad-free; the website home page uses Google AdSense.
On this web page, loading Google AdSense sends Google technical connection information, including your IP address and the URL of the page viewed. Google may use cookies or other identifiers to display and measure ads, and to personalize them according to the applicable choices and settings. See Google’s information about partner sites and its ad settings. This web integration does not send Google your Dundu account profile, religion or preferred gender.
Data used and purposes
| Use | Data | Basis for processing |
|---|---|---|
| Create the account and secure sign-in | Sign-in address, identifier, sign-in provider, verification status and technical session information. | Providing the requested service; legitimate interest in preventing unauthorized access and an applicable obligation where one exists. |
| Display your profile and suggest shared interests | Display name, photos, date of birth, gender, introduction, city/country, languages, interests and relationship goal. | Providing the requested service. Information that is not necessary is optional. |
| Optional religion | The religion you choose to provide, only after separate explicit agreement distinct from the terms of use, for the profile and matching purposes explained when you make the choice. | Your explicit consent. You may leave this unanswered, refuse or withdraw this agreement in your profile without losing your account; withdrawal stops this use and removes the active value. Withdrawal does not make earlier uses based on that agreement unlawful. |
| Optional preferred gender | The gender preference you choose for matching. This information may reveal aspects of your sexual orientation. | Your explicit consent, separate from consent concerning religion and from the terms of use. Without agreement, searches remain without a gender preference. Withdrawing consent in your profile removes this active preference and restores searches without a preference. |
| Nearby profiles and map | Location transmitted with your permission, the map area viewed and distance preferences. | Your choice to use the feature and your agreement to share location. You can withdraw permission in your phone’s settings. |
| Posts, stories and interactions | Content sent, comments, likes, follows, reports and viewing information. | Providing the requested features and legitimate interest in protecting members. |
| Live audio/video | Image, voice, participant identifier, presence status, comments and technical connection information. | Providing the feature you start or join; camera and microphone permissions when you broadcast. |
| Notifications | Installation identifier, notification token, language, time zone, preferences and events intended for your account. | Operation of the alerts you choose, phone permission for push notifications and legitimate interest in account security. |
| Purchases and Premium entitlements | Dundu account identifier sent to RevenueCat, store products and transactions, entitlement dates and status, renewals, restorations and refunds. SDK exchanges also include technical information about the device, app and connection, including the Apple vendor identifier (IDFV) when available, app, SDK and operating system versions, language, store and the request’s IP address. This integration does not send RevenueCat your full social profile, religion or gender preference; card details are handled by the store. | Carrying out the requested purchase and restoration; legitimate interest in preventing fraud and incorrect entitlement assignments; legal obligations applicable to supporting records and disputes. |
| Verification, support and safety | Verification request and supporting documents if you use that process, help requests, reports, decisions and useful technical logs. | Requested feature, legitimate interest in preventing abuse and handling complaints; applicable legal obligations. An identity document is not systematically required to exercise a right. |
Suggestions use, among other things, the interests, languages and preferences you provide. Religion and preferred gender are used for matching only if you have given the corresponding consents. A suggestion does not guarantee compatibility or a meeting. We do not present this ranking as a decision that, on its own, produces legal effects.
Who receives the information?
Other members see profile information and content made accessible to them through sharing features. Live viewers receive the broadcast image and voice. A recipient may keep a screenshot or copy; avoid sending information you do not want to circulate.
People responsible for support, safety and moderation access the information necessary for their duties. Information may be disclosed to an authority or adviser when necessary to meet an obligation or handle a dispute.
- Namecheap hosts the website, API, database and service files, as well as the contact mailbox: Namecheap information.
- Google Firebase provides authentication and notification delivery: Firebase privacy. Private messaging is unavailable at launch.
- RevenueCat, Inc. verifies and synchronizes purchases and Premium entitlements when you use the offers or purchase process: RevenueCat privacy and data processing agreement. Apple manages App Store payments, renewals and refund requests under your Apple account terms. Transaction data and store notifications are used to update your entitlement.
- Agora provides transport for live audio/video: Agora privacy. The project was created with the Europe (EU) region; this selection does not guarantee that all of the provider’s processing stays within the European Union.
- OpenStreetMap Foundation provides map images when you open the map and receives the corresponding requests, including the IP address and displayed area: OpenStreetMap privacy.
These providers may process data in several countries, including outside your country of residence. The processing terms published by Namecheap and Google describe their contractual framework. To obtain information about processing locations and safeguards applicable to your situation, contact Kashora LLC. The operator’s address or a project’s region setting does not mean all data is processed in a single country.
For how long?
- Account, profile and content: while the account is used. For an account inactive for 12 months, a 30-day notice is made available in the app before closure. Activity during this notice period stops that closure.
- Verified deletion request: access is removed upon confirmation, then Dundu production data is purged within 30 days at the latest. The copies and exceptions below follow their own cycle.
- Stories: removed after 24 hours, then purged by the hourly task. Live comments: deleted at the end, with cleanup within 24 hours if a session is abandoned.
- Ordinary Dundu application logs under our control and notifications: 30 days. Safety, reporting and support cases: 90 days after closure; open cases are reviewed again.
- Verification documents and selfies: removed upon a decision or after no more than 30 days without a decision.
Separate retention may be necessary for a legal obligation, claim or identified incident. It is limited to useful information, with restricted access and reassessment. Information needed for an active Premium entitlement is retained to verify it and allow restoration. When an account is closed, the profile and content follow the Dundu purge described above; minimal transaction references are separated and placed under restricted-access review. Their retention depends on the documented reason: payment reconciliation, handling a refund or chargeback, an accounting or tax obligation applicable to the type of supporting record, or an identified dispute. Retention ends when that reason and the applicable periods have expired; information that is no longer needed must then be removed. You may request the date and reason applicable to your case at contact@dundu.app. These records are not used to bring a closed profile back into use; a “Lifetime” purchase does not justify retaining the entire profile indefinitely.
Deleting production data does not instantly erase every technical copy. Google states that it can take up to 180 days to remove Auth data and, following the corresponding request, the Firebase installation identifier from its active and backup systems. Namecheap also retains maintenance copies and internal connection logs under its own terms. How frequently copies are created does not establish a maximum erasure period; the 30-day period for Dundu application logs does not apply to these internal provider logs. Backups are not used to reactivate a deleted account: deletions must be reapplied before restoring the service.
Closing a Dundu account does not, by itself, confirm erasure of the provider record at RevenueCat. Deletion follow-up temporarily retains the necessary identifier in encrypted form and a separate step to be handled by an authorized operator: locating the provider record, reviewing references needed for entitlements and obligations, requesting removal of data no longer needed, then confirming the result. This step is not described as automated. A case still pending remains flagged for review, particularly after 30 days; the follow-up identifier is removed 90 days after overall closure of deletion follow-up, after confirmation of the provider steps and release of financial holds. The result and any remaining holds may be requested at contact@dundu.app. RevenueCat’s or Apple’s own periods and copies are not equated with the 30-day purge of Dundu production data.
Your choices and rights
You may edit your profile, separately withdraw the consents concerning religion and preferred gender, choose notifications, manage phone permissions and request deletion. The storage and permissions notice explains the technical settings.
Write to contact@dundu.app to request access to, correction or deletion of your data. Depending on applicable law and the basis for processing, you may also request portability or restriction, object to certain processing or give applicable instructions after death. We verify identity proportionately and respond within the deadlines imposed by applicable law. You may contact the competent authority for your residence, including the CNIL in France or the CDP in Senegal, where their jurisdiction applies.
The account closure process is described on the Delete my account page. Uninstalling Dundu does not delete the account. Requests to exercise rights do not require a paid subscription.
Security and updates
Dundu uses HTTPS connections and access controls for its services. No system can guarantee zero risk; we do not promise end-to-end encryption of communications. Let us know if you believe your account has been compromised.
This page states the policy version. You are informed of a material change within the service; updating this text alone does not authorize new processing that requires separate agreement.