Your data, handled with care.

Cedar Dating is a product of Hiikoni Holdings, LLC, a Texas limited liability company with a principal place of business at:

600 River Pointe Dr., Suite 200
Conroe, TX 77304
United States

References to “Cedar” in this policy mean Hiikoni Holdings, LLC operating the Cedar Dating App.

You can contact us about this policy at hello@cedardating.com or about safety concerns at safety@cedardating.com.

This Privacy Policy describes how Hiikoni Holdings, LLC (“Cedar,” “we,” “us,” or “our”) collects, uses, and shares information when you use the Cedar Dating mobile application (the “App”). By using the App, you agree to the practices described here.

Cedar is for adults 18 years of age or older. We verify your age at signup based on your date of birth and do not knowingly collect personal information from anyone under 18. If we learn that we have collected information from a person under 18, we will delete it promptly. If you believe a minor is using the App, please contact us at safety@cedardating.com.

Information you give us directly

• Account information: email address, password (stored only as a one-way BCrypt hash — we never see or store your actual password)
• Profile information: display name, date of birth, gender, pronouns, sexual orientation, what you’re looking for (relationship type), dating preferences (gender you want to be shown), preferred age range, hometown, and the interests you select
• Videos: up to four short videos you record or upload (a 20-second introduction video plus up to three 10-second standard videos, each tagged with an interest category)
• Profile photo: one photo you upload as your profile image
• Messages: the content of messages you send to users you’ve matched with
• In-app actions: the profile likes, dislikes, defers, video hearts, blocks, and reports you take

Information collected automatically

• Location data: with your permission, we collect approximate GPS location to support location-based features. You can disable this at any time in your device settings; the App will continue to function with the hometown you’ve selected.
• Device information: device type, operating system version, and unique identifiers used to authenticate your sessions
• Usage information: when you log in, when you last opened key parts of the app (for unread badge counts), error events (via our error-monitoring service)

Information from third parties

• Apple / Google: when you install the App from the App Store or Google Play, we receive standard information from those platforms (your in-app purchase receipts if applicable, app-install identifiers).

We do not collect data from social-media login providers, advertising networks, or data brokers.

We use your information to:

• Create and manage your account
• Match you with other users based on your preferences, location, and the choices both parties make in the App
• Host and stream your video content to other users
• Display your profile to other users who match your preferences
• Send you transactional emails (verification codes, account notifications, safety responses)
• Process reports of objectionable content or behavior and take enforcement action including content removal, account suspension, or account termination
• Detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms
• Comply with our legal obligations including responses to lawful requests from law enforcement and required reporting under the U.S. PROTECT Act (18 U.S.C. § 2258A) for suspected child sexual abuse material
• Monitor and improve the App’s performance and reliability

Lawful basis (for users in the EU/EEA/UK)

We process your personal information on the following lawful bases under GDPR:

• Contract (Article 6(1)(b)) — processing necessary to provide the service you signed up for (matching, messaging, profile hosting)
• Legitimate interests (Article 6(1)(f)) — fraud prevention, security, App improvement, and enforcing our Terms
• Legal obligation (Article 6(1)(c)) — responding to lawful law-enforcement requests and required safety reporting
• Consent (Article 6(1)(a)) — for optional features like GPS location, which you can revoke at any time

For special category data under Article 9 (which includes sexual orientation), we rely on your explicit consent to process this data for the purpose of matching you with compatible users. You provide this consent during onboarding and can withdraw it by deleting your account.

We share information with:

Other users

The information visible to other Cedar users includes: your display name, age, gender, pronouns, orientation (if you choose to display it), hometown, profile photo, profile videos, and the interests you’ve tagged your content with. Your email address, exact GPS coordinates, and password hash are never shared with other users.

Service providers

We use the following third-party processors. Each is bound by data-processing terms that limit what they can do with your data and require them to maintain security safeguards.

• Mux Inc. (United States) — hosts, transcodes, and streams your videos. mux.com/privacy
• Cloudinary Ltd. (Israel/United States) — hosts your profile photos. cloudinary.com/privacy
• Resend (United States) — sends our transactional emails (verification codes, safety responses). resend.com/legal/privacy-policy
• Sentry (Functional Software, Inc., United States) — monitors application errors. We have configured Sentry to scrub personal information from error reports; we do not send Sentry your email address, password, tokens, or message content. sentry.io/privacy
• Apple Inc. / Google LLC — distribute the App and process device-level identifiers required to operate as a mobile app

Law enforcement and legal compliance

We may disclose information when we believe in good faith that disclosure is required by law, court order, or to protect the safety of our users or others. For suspected child sexual abuse material, we are required by U.S. federal law (18 U.S.C. § 2258A) to report to the National Center for Missing & Exploited Children (NCMEC).

Business transfers

If Cedar is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any such change.

What we do NOT do

We do not sell your personal information to advertisers or data brokers. We do not share your information with advertising networks for targeted advertising. We do not use your messages for advertising or any purpose other than delivering them to your match and responding to safety concerns.

We retain your account information for as long as your account is active.

When you delete your account from inside the App:

• Your account is immediately marked deleted and you are signed out
• Within approximately 30 seconds, a background process permanently deletes your account, profile, videos (from Mux), profile photo (from Cloudinary), matches, messages, and all related records
• Some information may persist briefly in encrypted backups, which are rotated and overwritten on a regular schedule

We may retain limited information longer when required by law (for example, fraud or safety records, or information subject to a legal hold).

All users

You can at any time:

• Access the information we have about you by viewing your profile or contacting us
• Correct your profile information directly in the App via “Edit Profile”
• Delete your account from Settings → Delete Account (data is purged as described above)
• Block any user from Settings → Blocked Users or from their profile
• Report any user or content from their profile or chat. Reports are reviewed by our safety team within 24 hours and may result in content removal or account termination.
• Opt out of GPS location collection in your device’s Settings → Cedar → Location

Users in the European Economic Area, United Kingdom, and Switzerland

Under the GDPR you also have the right to:

• Object to processing based on legitimate interests
• Restrict processing in certain circumstances
• Data portability — receive a machine-readable copy of the personal information you provided
• Withdraw consent at any time (for processing based on consent)
• Lodge a complaint with your local supervisory authority

To exercise these rights, contact us at hello@cedardating.com. We will respond within 30 days.

Users in California

Under the CCPA/CPRA you have the right to:

• Know what categories and specific pieces of personal information we have collected
• Know whether we sell or share your information (we do not)
• Delete your personal information (use in-app account deletion or contact us)
• Correct inaccurate information
• Limit our use of sensitive personal information (we already minimize this — sensitive data is used only for matching)
• Non-discrimination for exercising any of these rights

To exercise these rights, contact us at hello@cedardating.com with subject “CCPA Request.”

Users in other jurisdictions

If your jurisdiction grants you additional rights (such as Virginia’s CDPA, Colorado’s CPA, Quebec’s Law 25, Brazil’s LGPD, or others), you may exercise those rights by contacting us at the address above. We will respond as required by your local law.

Cedar is operated from the United States, where our servers and corporate offices are located. Our service providers may process your information in other countries including the United States and Israel.

Cedar Dating is currently marketed only in the United States. If you access the App from outside the United States, your information will be transferred to and processed in the United States, which may have different data protection rules than your country of residence. When we receive a transfer of personal information from the European Economic Area, United Kingdom, or Switzerland, we rely on Standard Contractual Clauses approved by the European Commission or other lawful transfer mechanisms.

We use industry-standard safeguards to protect your information, including:

• Transport-layer encryption (TLS/HTTPS) for all traffic between the App and our servers
• BCrypt password hashing — we never store your password in plaintext
• Token-based authentication with cryptographic signatures; tokens are stored in your device’s secure keychain (iOS Keychain or Android Keystore) and hashed before being stored on our servers
• Rate limiting and abuse detection on authentication and sensitive endpoints
• Regular security review of our infrastructure and code

No security measure is perfect. If you suspect your account has been compromised, contact us immediately at safety@cedardating.com.

Cedar is a service for adults to meet other adults. To keep the community safe, we:

• Provide in-app tools to block and report any user
• Review all reports within 24 hours and take action ranging from content removal to permanent account termination
• Cooperate with law enforcement when required by law
• Are required to report suspected child sexual abuse material to NCMEC under 18 U.S.C. § 2258A

You can reach our safety team at safety@cedardating.com.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you in the App and update the “Last updated” date at the top of this policy. Your continued use of the App after the effective date of any update constitutes your acceptance of the updated policy.