ThaiFriendly

Privacy Policy

What we collect, why we collect it, and the choices you have.

On this page
  1. Who Are We
  2. Where This Policy Applies
  3. Privacy & Safety Tips
  4. Information We Collect & How We Use It
  5. Legal Basis for Processing
  6. Data Disclosure
  7. Age Policy
  8. Face Verification
  9. Your Rights
  10. Security
  11. Data Retention & Deletion
  12. International Data Transfers
  13. Automated Decision Making
  14. Data Protection Officer
  15. Policy Changes

Who Are We

ThaiFriendly is a dating app operated by Oxixo Private Limited - a company registered in Singapore:
Oxixo Private Limited,
105 Cecil Street, The Octagon,
#18-00, Singapore 069534

Where this Privacy Policy Applies

This privacy policy applies to all websites, apps and services operated by Oxixo Private Limited.

Privacy and Safety Tips

Please consider how much information and the accuracy of such information that you share with us and other members.

  • Date of Birth: You may select a random day and month to enhance your privacy. While we do not disclose your birthdate, your displayed age might allow others to deduce it over time.
  • Photos: Avoid sharing images that could reveal sensitive details like your home, car license plate, or personal contact numbers.
  • Personal Information: Do not share personal details (e.g., phone numbers, home addresses, financial data) with other users. If you need to exchange contact details, consider using a temporary social media account instead of your primary one.
  • Profile Security: Refrain from posting contact details or social media handles on your profile, as these could be exploited by data harvesters.
  • Username: Choose a pseudonym instead of your real name for your username to maintain anonymity.
  • Email Registration: Use a private email address rather than a disposable one to prevent unauthorized access to your account. Consider using an email alias from providers like Gmail for registration to provide us with a unique email and to give you confidence we do not sell your email address.

Information We Collect and How we use it

Without any information from you it is impossible to participate in online dating. Some information is mandatory such as your date of birth while other information is optional such as profile bio information. As well as information provided by you we also collect information automatically such as your IP address and access times. This information helps improve the quality of our matching, develop our products, and provide a more safe dating environment.

Providing accurate information is not always necessary especially to help protect your privacy such as sharing your date of birth. Please remember anything that you share on your profile is publicly available and even after we delete your information it may still exist if other users have taken a screenshot or stored it. Please keep this in mind when sharing your information and never share information like your home address, phone number or financial information on your profile or in messages with other users.

Data Required? Purpose Publicly Visible Collection Method Shared?
Email Address Required Account management, login, customer support, communications Not Public User Provided Shared with moderators
Username Required Displaying a pseudo-name to other users when including your profile in search and chat. It is not recommended to use your real name or other identifiable information for your username. Public User Provided Shared with moderators
IP address and device details Required Fraud & abuse prevention, error tracking, developing our products (for example what language your device is using, its screen resolution etc) Not Public Automatically collected Shared with error tracking services, anti-fraud services
Advertising identifiers (including Apple's IDFA and Android advertising ID) Optional; subject to applicable consent and device permissions Advertising attribution and campaign measurement, retargeting, custom audiences, lookalike audiences, and excluding existing members from campaigns aimed at finding new members Not Public Automatically collected when permitted by your device settings and applicable consent Shared with advertising partners, including TikTok, for the purposes explained under Data Disclosure
Date of Birth Required Age verification and for search Age is public but not date of birth User Provided Date of Birth stored internally but age shared with third parties for analytics and marketing
Profile Photos A minimum of one photo is required - more photos are optional. Having photos makes using our apps a better experience for all Public User Provided Hosted on a content delivery network to improve international performance and loading times, and shared with moderators to ensure our site stays compliant with app store and legal regulations
Photos and Videos sent in Chat Not required Functionality of our app allows sending photos and videos to other members, this feature is optional Visible to the person you share them to and anyone that has the direct link to the file (which is impossible to guess) User Provided Hosted on a content delivery network to improve international performance and loading times, and shared with moderators to ensure our site stays compliant with app store and legal regulations
Facial Data May be required Facial data allows us to confirm that the photos on your profile are genuine, enables you to search for other members that have completed this step, and helps us stop fake profiles, impersonation and members we have banned from creating new accounts. For more details see Face Verification Video selfie, selfie reference images, and the face template calculated from them are kept private. They are used to verify your profile photos and to recognise accounts created by members we have banned User Provided Video selfie is temporarily shared with Amazon Web Services after which it is deleted. Reference images are stored internally by us to validate future photos you add to your profile, and may be seen by our moderators. Your face template is stored with Amazon Web Services.
Gender / Looking for Gender Required Used to show you compatible matches that meet your requirements Public User Provided Shared for the purpose of fixing errors, improving performance, anti-fraud and abuse, gender but not looking for is shared for marketing
Location Optional Used to show you nearby members, and to show your profile in search results. General location is publicly visible (such as city/suburb) but we round your GPS lat and long to 3 decimal places to preserve your privacy. Prompted for consent before sharing, approximate location sharing is accepted also consent can be denied. After submitting consent it can be revoking at any time in your device or browser settings. After giving us consent we may automatically collect this information in the background until consent is revoked either by settings on the device or by contacting us Shared for the purpose of fixing errors, improving performance, anti-fraud and abuse
Financial Information (when paid directly) Optional To provide you additional services Not public User Provided We do not store payment information such as card number, expiry, cvv but we may store billing name and address for anti-fraud, audit, and tax purposes. Payments made through our apps are handled by Apple or Google and are subject to their respective privacy policies.
Third party login information (Apple / Google etc) Optional For account creation and login, anti-fraud and abuse prevention Not public Automatic collection We store a unique ID provided by the third party login provider in order to secure your account and identify your login. This information is not shared with other third parties and is unique to us so not useful to a third party provider anyway.
Login Credentials (iOS iCloud Keychain) Automatic (iOS app only) On iOS devices, we store an encrypted authentication token and your username in Apple's iCloud Keychain to allow you to quickly restore your account if you reinstall the app or set up a new device. This data is encrypted by Apple and synced securely via your iCloud account. You are always shown a confirmation screen and can choose to use a different account instead. These credentials are automatically removed when you log out or delete your account. Not Public Automatic collection (iOS only) Stored in Apple's iCloud Keychain infrastructure which is end-to-end encrypted by Apple. Not shared with any other third parties.
Customer support communications (call recordings, emails sent to our support) Optional For helping you with account queries or any support issues Not public User Provided Not shared
Chat messages Optionally provided by you or another user Chatting on our site lets you chat without revealing any contact details Visible to you and the person you are communicating with. Our moderators and support staff can see your messages when they review your account, for example after a complaint or a support request, or when our automated checks flag a serious safety issue User Provided - either you or another user Checked automatically by our own systems for scams, requests for money, selling sex, drugs, child safety risks and other serious breaches of our Terms of Use. Internal use for moderation and anti-fraud. Not shared with other third parties.
Profile Bio (height, weight, headline, description, interests etc.) Optional For displaying your profile to other members and including you in search results for the attributes you provide Public User Provided Shared for moderation and anti-fraud purposes
Access times, session lengths, actions taken (eg. liking other users, hiding other users), referring URLs, search terms, ads you interacted with Required For hiding members that you aren't interested in, managing lists to help you organize contacts better, develop and improve our app Some information like last access time is public, other information like users you have blocked/hid is private Automatic Shared for marketing and anti-fraud purposes

Data Disclosure

We share your data with various third parties essential for providing our services.

Data Shared with Other Users

Your profile, including information such as your headline, description, pseudonym, and photos, is visible in search results. While full photo viewing and detailed profile information require a membership to view, consider carefully what information you are comfortable making public.

Data Shared with Third Parties

We collaborate with third parties to enhance our service delivery. The specific third parties we work with and their purposes include:

  • Amazon Web Services (AWS): Cloud infrastructure, face verification processing, and email delivery.
  • Advertising partners, including TikTok Ads: We share device advertising identifiers, including Apple's IDFA and Android advertising ID where available and permitted by your consent and device settings, with advertising partners including TikTok. We use this sharing to attribute app installs and other actions to our ads and measure campaign effectiveness; show our ads again to people who have previously visited or used our services (retargeting); create groups of users for relevant advertising (custom audiences); find potential new members with characteristics or interests similar to our users (lookalike audiences); and exclude existing members from advertising campaigns aimed at finding new members.
  • Apple / Google: In-app payment processing and app distribution.
  • CDNetworks: Content delivery network used for hosting and delivering profile photos and media for improved international performance.
  • Moderation services: Compliance review and complaint resolution.
  • Law enforcement: To comply with lawful requests such as court orders or subpoenas, or where we believe disclosure is necessary to prevent imminent harm.

Age Policy

Our services are strictly for users aged 18 and over. If you encounter a user who may be under 18, or if you see a photo featuring a child, please report it immediately. We actively remove such content to ensure compliance with our age policy. Additionally, we prohibit users from indicating whether they have children in their profiles to safeguard against potential online predators.

Face Verification

Face verification confirms that the photos on your profile are really you, and helps keep fake profiles and banned members off our apps. It may be required before you can use some features or continue using your account. Before it starts we explain how your face data is used; by starting verification you give your explicit consent to that use. To verify you can initiate it from your edit profile page. The process can be completed using any device with a camera but on a phone is easiest. Verified users can also search for other verified users.

What data is collected?

A short selfie video. From it we create reference images (still frames from the video) and a face template: a set of numbers that describes the geometry of your face. The face template is not a photograph. The video is deleted straight after processing; the reference images are kept privately and may be seen by our moderators when they review your profile or a complaint.

How is it used?

  • To confirm that your profile photos, and photos you add later, show you.
  • To let you search for other verified members.
  • To compare your face template with the face templates of other accounts on our dating apps, to stop fake profiles and impersonation, and to recognise a new account created by someone we have banned. An account that matches a banned member is closed. If you believe an account was matched by mistake, contact our support team and a member of our team will review it.
  • To group accounts that belong to the same person, so that duplicate accounts can be found, one-time offers and promotions (such as Boost) are applied fairly, and action taken against one account (such as a ban) applies to the person's other accounts.

Separately from face verification, photos you add to your profile, including at sign-up, are checked with automated face analysis: they are compared with the face templates of members we have banned, and automated face analysis estimates attributes of the person shown, such as age range and gender, which we use to detect members under 18, check profile details and moderate photos. These checks protect our members and rely on our legitimate interest in member safety, and in Thailand on the establishment, exercise or defence of legal claims; they do not store a face template for you unless you complete face verification.

Will the data be shared with third parties?

Amazon Web Services (AWS) processes the selfie video on our behalf and then deletes it, and stores your face template for us. In the event of complaints, reference images may be shared with our moderation team. We do not sell your face data.

Where will this data be stored?

Reference images are stored on our private servers. The selfie video is processed by AWS in the United States and your face template is stored by AWS in Singapore.

How long will the data be stored?

The reference images and face template are retained for the lifetime of your account. When you delete your account, they are deleted within 30 days of your request, or within 60 days when an account is removed by our team.

If we closed (banned) your account for breaking our Terms of Use, the reference images and face template are kept while the account remains closed. When such an account is deleted, we delete the reference images once the face template has been safely recorded, and keep the face template for 5 years from the closure, or 10 years where the account was closed for child safety, violence or threats by an adult, so that the person cannot simply open a new account. It is then deleted.

Accounts of people under 18 are erased, including their photos and face data. We keep only one-way coded identifiers (such as the email address and app identifiers) to stop the same person rejoining before they turn 18, and delete them on the date we estimate they turn 18, from the date of birth or age they gave us or, where we have neither, from the age estimated from their photos.

Your choices

You can withdraw your consent at any time by deleting your account, after which your face data is deleted as described above. Where we have closed your account for breaking our Terms of Use, we keep the face template for the period above even if you withdraw your consent, because we need it to establish, exercise or defend legal claims and to protect our members.

Your Rights

We provide tools for managing your data with our services. Depending on your location, you may have some or all of the following rights:

Right of Access (Data Download)

You can download a copy of your personal data in a structured, commonly used format at any time by using our Data Download Tool. Enter the email address registered to your account and we will send a download link to that address, provided it is confirmed; this works even if you can no longer log in. This also serves as your right to data portability.

Right to Erasure (Data Deletion)

You can request deletion of your account and personal data anytime inside our app or by using our Data Deletion Tool. Please note that data will be deleted in accordance with our Data Retention Policy.

Right to Rectification (Update and Correct Information)

You can update or correct your information at any time by logging into our app and going to your profile settings. If you need help with this please Contact our support team.

Right to Object

You have the right to object to processing of your personal data where we rely on legitimate interests as our legal basis. Upon receiving your objection, we will cease processing unless we have compelling legitimate grounds that override your interests. To exercise this right, contact our support team.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances, for example while we verify the accuracy of your data or assess an objection you have raised. To exercise this right, contact our support team.

Right to Withdraw Consent

Where we process your data based on consent (such as location sharing or face verification), you may withdraw that consent at any time. For face verification, withdrawing consent means deleting your account, as described in Face Verification. Otherwise you can do this through your device settings, app settings, or by contacting our support team. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal, and some features may become unavailable as a result.

Updating or Revoking Device Permissions

You can update or revoke permissions for our app on your device at any time by going to your device settings and finding our app in the list of installed apps. You can then update or revoke permissions as needed. Please note after revoking permissions the corresponding features may not be available (you will not be able to see people in your area if you do not share GPS location data for example).

Uninstalling the App

You can uninstall our app at any time by going to your device settings and finding our app in the list of installed apps. You can then uninstall the app. Please note that after uninstalling this does not close or delete your account. On iOS devices, encrypted login credentials stored in your iCloud Keychain may persist after uninstalling to allow you to quickly restore your account if you reinstall. These credentials are automatically removed if you log out before uninstalling, or you can remove them by deleting your account. To close or delete your account you have to do this inside the app or by Contacting our support team.

Right to Lodge a Complaint

If you are unsatisfied with how we handle your personal data, you have the right to lodge a complaint with a data protection supervisory authority. For users in the EEA, this is the supervisory authority in your country of residence. For users in Singapore, you may contact the Personal Data Protection Commission (PDPC) at www.pdpc.gov.sg.

To process requests from you such as updating data, retrieving data, deleting data we need to take necessary steps to ensure you are really the person that owns the account. The easiest way to do that is by confirming your email address is the same email used to register the account.

Security

We prioritize the security of your sensitive data by limiting the information shared to what is essential for our services. We implement robust security measures, including multiple layers of protection and regular system audits and updates. Additionally, we minimize data retention by automatically deleting sent photos, messages after one year, and profile visit history every few days.

Please be aware that no web service can guarantee complete security against unauthorized access, data loss, or other breaches. To enhance your account's security:

  • Always log out from shared computers after using our site.
  • Avoid forwarding emails from us as they may contain sensitive account access details.
  • Immediately contact our support team if you suspect your account has been compromised.
  • Keep your devices locked when not in use, especially those used for email or third-party logins like Apple or Google.
  • Opt for social logins like "Continue with Apple" or "Continue with Google," or ensure that strong two-factor authentication is enabled if using an email account.

Data Retention & Deletion

We retain your personal information only for as long as necessary for legitimate business purposes, as detailed in Information We Collect and How we use it.

Automatic Account Deletion

We may delete inactive accounts. If you have not logged in or sent a message for two years and do not have Premium, we may email you to say that your account will be deleted. If you do not log in within about a week, your account and its data are deleted. If you have unsubscribed from our emails, we cannot send this warning, and the account may be deleted without one.

Automatic Message Deletion

Your messages are automatically deleted after one year to minimize data storage. To keep copies of your messages, please use our Data Download Tool every six months.

Automatic Photo Deletion

Photos and videos sent in chat are deleted after three days to protect your privacy. You can delete them sooner by selecting "unsend" in the chat.

Automatic Profile Visit History Deletion

History of the profiles you visit is cleared every three days to ensure privacy.

Account Reset Feature

To reset your account, go to the app settings and select "Reset Account". This will clear all messages, likes, and matches but keep your blocked users, photos, and profile data.

Account Deletion

To delete your account, navigate to settings and choose "Delete Account" or contact our support team. Your profile will be immediately made unavailable, and all data will be permanently deleted after 30 days. For accounts closed for breaking our Terms of Use, see the retention periods below. We may also keep some data after an account is deleted where this is needed to comply with the law, to establish or defend legal claims, or for user safety, including when a matter has been or may be reported to the authorities. We keep only what that purpose requires and delete it when the purpose ends.

Accounts Closed for Breaking Our Terms of Use

If we closed (banned) your account for breaking our Terms of Use and it is then deleted, we delete your photos, verification images, messages, contact details and IP addresses, but keep for 5 years from the closure, or 10 years where the account was closed for child safety, violence or threats by an adult: your face template; your email address, phone number and social media handles in one-way coded form; the sign-in and device identifiers of the account; and the record of why the account was closed, including the reports and the messages it was based on. They are used only to recognise a returning account and to handle any dispute about the closure, and are then deleted.

International Data Transfers

Oxixo Private Limited is based in Singapore. Your personal data may be transferred to and processed in countries outside of your country of residence, including Singapore, the United States, and other jurisdictions where our service providers operate. These countries may have data protection laws that differ from those in your jurisdiction.

Where we transfer personal data outside of the European Economic Area (EEA), we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission or reliance on the recipient's participation in recognised data protection frameworks.

For users in Singapore, we comply with the data transfer requirements under Part VI of the Personal Data Protection Act (PDPA) by ensuring that recipients of your data are bound by legally enforceable obligations to provide a comparable standard of protection.

If you would like more information about the safeguards we use for international data transfers, please contact our Data Protection Officer.

Automated Decision Making

We employ heuristics inside our services at many levels to detect security issues, fraud, moderation issues, and also to adjust search weights. Where necessary profiles may be automatically forwarded to our moderation team for investigation in order to react to possible threats such as human trafficking or other legal issues as well as to improve the quality of our services. Messages, including private messages, are checked automatically for scams, requests for money, selling sex, drugs, child safety risks and other serious breaches of our Terms of Use; messages flagged as a serious safety issue are forwarded to our human moderators for review, and our moderators and support staff can also see an account's messages when they review it, for example after a complaint or a support request. Some actions, such as warnings, temporary restrictions and, for clear or repeated breaches, account closures, can be taken automatically. In most cases, if we close your account, you can ask us to review the decision using the link in the notice we show you; for anything else, contact our support team.

Data Protection Officer

Oxixo Private Limited has designated a Data Protection Officer and they can be reached by emailing dpo@thaifriendly.com or by post at the following address: Oxixo Private Limited, 105 Cecil Street, The Octagon, #18-00, Singapore 069534.

Policy Changes

The last update to this Privacy Policy occurred on Tuesday 13th October 2026 AD

Back to top