English · Deutsch
ChatMeet — last updated: September 6, 2026
ChatMeet is a brand of and operated by URSCHILD UG (haftungsbeschränkt), Nordstrandweg 2, 22047 Hamburg, Germany ("ChatMeet", "we", "us"). We are the data controller for the personal data processed in the ChatMeet app and on chatmeet.app. Contact for all privacy matters: privacy@chatmeet.app. Our full provider details are in the Legal notice (Impressum).
ChatMeet is a live social-networking app for meeting the people around you in real life. It shows you who nearby is open to a conversation right now and lets you send a short message request; once the other person accepts, you can chat and, if you both like, meet. People use ChatMeet in very different ways: to talk to someone on the same train or at the same café, to find a study partner in the library, to get to know their neighbours, to connect with other visitors at a concert, festival or conference, to find company for sport, a walk or a trip, to practise a language, to make friends in a new city, to network professionally — or to date. ChatMeet does not decide what kind of connection you are looking for; it simply makes the first real conversation possible. The service is intended exclusively for adults (18+) — see section 10.
You can create and access your account with an e-mail address and password, with a phone number (one-time codes), with your Google account, with Telegram ("Continue with Telegram"), or — once set up — with a passkey. We process the identifiers you use (e-mail address, phone number, Google account ID, Telegram user ID, name and username as supplied by that provider), your password only as a cryptographic hash, and session data (tokens, device identifier). Telegram never shares your phone number with us; if you sign in with Telegram, you can add and verify a phone number yourself. A phone number belongs to one person: if you verify a phone number that is already registered to another ChatMeet account, we treat both accounts as yours — the account you are signed in to stays active, the earlier account is deactivated, and its chats, message requests, sign-in methods and profile details are carried over to your current account where it does not already have them (face or ID verification is never carried over). We keep a record of the merge (the two account IDs and the phone number) to answer support requests, and we send a notice to the e-mail address of the earlier account. You can disconnect Telegram from your account at any time in Edit Profile, as long as another sign-in method remains. Passkeys use the public-key credential stored by your device; the fingerprint or face check that unlocks a passkey happens only on your device and is never transmitted to us. Legal basis: performance of the contract (Art. 6(1)(b) GDPR) and our legitimate interest in account security (Art. 6(1)(f) GDPR).
We record the time at which you accepted the Terms of Service and this Privacy Policy (Art. 6(1)(c) and 7(1) GDPR — accountability).
Your profile consists of a nickname, your name, a profile photo, gender (including a free-text gender if you choose), birth month and year, your star sign, and optionally a short bio (checked automatically for offensive language), your profession (chosen from a fixed list), up to eight languages you speak, your relationship status (single, in a relationship, married — "prefer not to say" is never shown to others) and a link to your LinkedIn profile (with its own visibility switch). The month and year you joined ChatMeet ("Since September 2026") are shown on your card to discourage throw-away accounts; you can hide this, and you can hide your birth month, in Edit Profile — your age is always shown. Your birth year cannot be changed after registration; if you later complete ID verification and the document shows a different birth date, we correct the stored date to the document. This is the point of the service: presenting you to the people around you. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).
ChatMeet uses a privacy-first visibility model: people who have not yet accepted a conversation with you see only your nickname, photo, age, gender, languages, profession, bio, the "since" month if you show it, and an approximate distance. Your name becomes visible to a person only after you and they have accepted a conversation. Your exact position is never shown to anyone. Your birth date is used to verify that you are 18 or older; other users see only your age.
Discovery works with your precise GPS position, but only if you explicitly enable "people nearby" in the app. You choose the discovery radius (100 m by default; a 50 m option is reserved for subscribers). While you use the app, your position is transmitted to our server to find users around you; other users see only an approximate distance. After you leave the app, sharing continues for at most 10 minutes (Android shows a persistent "location sharing" notification during that time) and then stops by itself; the server also ends any session that has been silent for 10 minutes. When sharing stops, your last position is deleted from our server — we never keep a movement history. You can switch location sharing off at any time in Settings → Location sharing; while it is off, you are invisible to people nearby and no position is sent. Legal basis: your consent (Art. 6(1)(a) GDPR), revocable at any time in the app — without it, discovery simply stays off.
Message requests and chat messages (text and voice messages) are delivered through and stored on our server so your conversations work across devices and sessions. Legal basis: performance of the contract. You can delete individual messages; deleting a conversation removes it for both participants; deleting your account deletes your conversations. Message requests are limited per person (currently 5 open requests, 8 with face verification, 15 with ID verification) to discourage spam — this uses your verification status.
Translate button: you can translate any individual message into the language your app is set to with one tap. Translation runs on a translation engine that we operate ourselves on our own server; the text of your messages is not sent to Google, DeepL or any other third-party translation provider, and translations are not stored.
Online status, notifications and blocking: people you chat with see whether you are online. You count as online while the app is open and for up to ten minutes after you leave it; afterwards they see when you were last seen. Events that concern you — new messages and message requests, accepted or rejected requests, verification results, photo-moderation results and account changes — are listed in your in-app notification centre and deleted with your account. If you reject a request or block someone, the two of you no longer appear to each other in "people nearby"; a block also closes the chat between you. Blocks are visible only to you (Profile → Blocked users) and are never shown to the other person.
Support assistant: the Support section starts with an automated assistant that answers common questions. When an AI provider is enabled, the questions you type there (and the assistant's answers, but no other account data) are sent to Anthropic, PBC (USA) to generate the answer under standard contractual clauses; Anthropic does not use API data to train its models. Please don't put sensitive information into the assistant. When you hand a conversation to the support team, it is saved in your "ChatMeet Support" chat in Messages and sent by e-mail to our support mailbox so the team can answer. Legal basis: performance of the contract (Art. 6(1)(b) GDPR) and our legitimate interest in efficient support (Art. 6(1)(f) GDPR).
Every profile photo you upload is screened automatically before anyone else can see it ("Waiting for acceptance"): our software checks that the photo contains no nudity or sexual content, that it shows exactly one face, and — if your profile is face-verified — that the face is yours. Approved photos go live; rejected photos are discarded and you see the reason. This is an automated decision (Art. 22 GDPR) that only concerns whether a picture is shown; if you believe a photo was rejected wrongly, write to us and a person will review it. Legal basis: performance of the contract and our legitimate interest in a safe service (Art. 6(1)(b), (f) GDPR).
You can, but do not have to, verify your profile with a face scan. Profiles without a verification simply show no badge. The scan works like this: the app asks you to perform short liveness challenges (e.g. turn your head, blink) in front of your camera to make sure a real, present person is scanning. Only after you review the captured frame and tap "Verify" is that single image sent to our server. There, software computes a face template — a mathematical representation of the geometry of your face — and stores this template; the image itself is analysed in memory and not kept. We use the template to (a) mark your profile as verified, (b) check that profile photos you upload show your own face, and (c) enforce "one person, one account" by comparing new verifications against existing templates. A face template is biometric data under Art. 9 GDPR. We process it exclusively on the basis of your explicit consent (Art. 9(2)(a) GDPR), which you give by tapping "Verify" after reading the notice shown there; you can withdraw it at any time by deleting your account, which deletes the template immediately and permanently. Face verification is never required to use ChatMeet.
ID verification is announced in the app as "coming soon" and is not active. No ID document data is collected today. Before it launches, we will update this policy and ask for your explicit consent.
The bio you write is checked automatically against a list of offensive and abusive words in the app's languages, and refused if it contains them. Nothing is stored from a refused bio. Legal basis: our legitimate interest in a respectful community (Art. 6(1)(f) GDPR).
Device model, operating-system and app version, a device identifier, your push-notification token, and your IP address as part of normal network traffic are processed to deliver push notifications, secure sessions and keep the service working. Server logs are kept for 30 days. Legal basis: performance of the contract and our legitimate interest in the security of the service (Art. 6(1)(b), (f) GDPR).
If you subscribe to ChatMeet Plus, the purchase is made through the app store of your device — on Android through Google Play. We never receive your payment details. Google sends us a purchase token, the order number, the plan you chose (monthly or yearly), the country of your Google account, and the subscription's status and renewal/expiry date; the app attaches a hashed (irreversibly encoded) version of your ChatMeet account id to the purchase so that Google can detect abuse and we can match a Google Play order to your account when you contact support. We use this data to verify the purchase, switch Plus on and off in step with renewals, cancellations, refunds and payment failures, and answer billing questions. We keep the subscription record while your account exists (section 5); Google keeps its own purchase records under its privacy policy. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).
Hosting: Hetzner Online GmbH (Gunzenhausen, Germany) operates our server in a German data centre under a data-processing agreement. All ChatMeet data — accounts, profiles, photos, messages, face templates and the translation engine — is stored and processed there, in the EU.
Google (Firebase): Google Ireland Ltd. / Google LLC (USA) provides push notifications (Cloud Messaging), "Sign in with Google" and the delivery of account-verification e-mail links. Transfers to the USA are covered by the EU–US Data Privacy Framework and standard contractual clauses. Google receives no message content and no face data.
Google Play (subscriptions): Google Ireland Ltd. is the seller of ChatMeet Plus subscriptions and processes your payment as an independent controller under the Google Play Terms of Service and Google's privacy policy. We exchange only the purchase and subscription-status data described in section 3.9 with Google.
Telegram: if you choose "Continue with Telegram", Telegram (Telegram Messenger Inc., BVI / Telegram FZ-LLC, Dubai) confirms your identity to us and shares your Telegram ID, name, username and profile-photo link — never your phone number. If you verify a phone number, we may deliver the one-time code as a Telegram message through Telegram's Gateway service, which processes your phone number for that purpose.
SMS delivery: where a code cannot be delivered via Telegram, Brevo (Sendinblue SAS, Paris, France) sends it as an SMS and processes your phone number for that purpose.
AI support assistant: Anthropic, PBC (San Francisco, USA) processes the text of your in-app support-assistant conversation to generate answers, as described in section 3.4 — only when this feature is enabled, and never your profile, location or chat data.
Other users: your profile information is visible to users you can discover or chat with, as described in section 3.2 — that is the service. We never sell your data, we show no advertising, and we do not share your data with data brokers.
Your data is kept while your account exists. When you delete your account (Settings → Delete account) your profile, photos, face template, messages, requests, location data, sign-in identifiers (including the Telegram link and passkeys) and sessions are deleted or irreversibly anonymised immediately, and disappear from routine server backups within 30 days at the latest. Someone who deletes their account and signs up again is treated as a completely new user, including verification. One-time codes expire within minutes; server logs are deleted after 30 days. Some minimal records may be retained longer where the law requires it.
You have the right to access your data (Art. 15 GDPR), to correct it (Art. 16 — largely possible directly in the app), to delete it (Art. 17 — the in-app account deletion, or write to us), to restrict processing (Art. 18), to data portability (Art. 20), and to object to processing based on legitimate interest (Art. 21). Where processing rests on consent — location, face verification — you can withdraw it at any time with effect for the future. Where a decision about you is automated (sections 3.5 to 3.7), you can ask for a human review. You also have the right to complain to a data-protection supervisory authority; the authority responsible for us is Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Hamburg, but you may also contact the authority of your own place of residence.
To exercise any right, e-mail privacy@chatmeet.app. We answer within one month.
All traffic between the app and our server is TLS-encrypted. Session credentials on your device are stored encrypted, with the key protected in your phone's secure keystore, and are excluded from cloud backups. Passwords are stored only as salted hashes; one-time codes are stored hashed and expire within minutes. Face templates are stored only as numeric vectors, never as images. Access to server data is restricted and logged.
ChatMeet uses software, not people, to screen photos (section 3.5), to match your face with your photos and with other verifications (section 3.6), and to check bios for offensive language (section 3.7). None of these decisions has legal effect on you; the strongest consequence is that a photo or a text is not published, or that a second account is refused for a face that is already verified. You can always ask us to have a person review such a decision.
ChatMeet is not directed at persons under 18 and may not be used by them. See section 10 for why we set the age limit at 18. Registration requires a birth month and year indicating 18 or older; our server refuses to complete any profile below that age, and face verification helps us keep one real, adult person per account. If we learn that a minor uses the service, we delete the account.
Under Art. 8 GDPR, a young person can consent to an online service on their own from the age of 16 in Germany, and younger children only with their parents' consent. We deliberately set ChatMeet's minimum age higher, at 18, for the following reasons:
18+ is therefore both the legally safe and the responsible choice for a service like ChatMeet.
We will update this policy when the service changes (for example, when ID verification launches) and inform you in the app of significant changes.