Skip to content
lockie
LegalSafety center
  • Terms
  • Privacy
  • Community Standards
  • Anti-solicitation
  • Cookies

On this page

  1. 1Who we are
  2. 2What we collect
  3. 3Sensitive information
  4. 4How we use your information
  5. 5What other members see
  6. 6Who we share it with
  7. 7What goes on-chain — and what never does
  8. 8How long we keep it
  9. 9Your choices and rights
  10. 10When you delete your account
  11. 11Security
  12. 12Adults only
  13. 13International transfers
  14. 14Changes to this policy
  15. 15Contact

Legal

Beta draft

Privacy Policy

What Flockie collects, why, who helps us process it, what goes on-chain (nothing personal), how long we keep it, and how to export or delete it.

Version
2026-10-12
Last updated
12 October 2026
Reading time
12 min read
!

Beta draft — under legal review.

Flockie is in a private beta on a test network. This document is a working draft that is being reviewed by legal counsel and may change before public launch. Details marked “to be confirmed” are still being finalised. It isn’t legal advice.

In short. We collect what we need to introduce you to people, keep conversations safe and settle payments — and no more. Your profile is shown only to the people in your Drops. Your chats are stored by our chat provider and never put on-chain. On-chain records contain only wallet addresses, amounts and random identifiers. You can download your data or delete your account at any time from Settings.

On this page · 15 sections
  1. 1Who we are
  2. 2What we collect
  3. 3Sensitive information
  4. 4How we use your information
  5. 5What other members see
  6. 6Who we share it with
  7. 7What goes on-chain — and what never does
  8. 8How long we keep it
  9. 9Your choices and rights
  10. 10When you delete your account
  11. 11Security
  12. 12Adults only
  13. 13International transfers
  14. 14Changes to this policy
  15. 15Contact

01Who we are#

Flockie is operated by the Flockie team (“Flockie”, “we”, “us”). We are not yet publishing a registered entity or address; those details remain to be confirmed with counsel before public launch. We are the controller of the personal data described in this policy. For privacy questions or requests, write to hello@findflockie.com. Data protection officer and EU/UK representative, if required (to be confirmed)

This policy covers findflockie.com, the Flockie web app and its installable (PWA) version. It should be read with our Terms of Service and our Cookie and Storage Notice.

02What we collect#

From X, when you connect it. Through Privy, we receive your X user ID, handle, display name and profile picture URL. We never receive or store your X password, and we don’t read your posts, followers or messages on X.

Email sign-in. Privy sends a one-time passcode to the email address you use to sign in. The API may receive a Privy-signed identity token during sign-in, but Flockie does not use or store your email address in its own account records.

Account and sign-in. Your Privy user ID, the address of your embedded wallet, account status, sign-in times, and the policy versions you accepted.

Your profile. Display name, optional pronouns, gender, date of birth (others only ever see your age), city or region and country, bio, interests, and up to six photos. We re-encode photos to strip camera metadata, including GPS location, before storing them.

Preferences and availability. The modes you use (Dating, Friends), the genders you’d like to meet in Dating mode, your preferred age range, region and language, how many Drops you’re available for at once, and whether you’ve paused.

Drops and connections. The Drops you open or appear in, who you were introduced to and when, extension requests and responses, your Keep choices, and reward allocations.

Conversations. Messages you send and receive are delivered and stored by our chat provider, Stream. Our own database stores no chat text. The only exception: when our safety screening holds back or blocks a message before delivery, we keep a short excerpt (up to 500 characters) for moderators to review.

Payments and wallet. Wallet addresses, amounts, transaction hashes, the random on-chain identifiers of your Drops and extensions, and payment status. We don’t see or store any private keys.

Safety and moderation. Reports you make or that concern you (the reason, any details you add, and the IDs of any messages attached as evidence), blocks, moderation actions, appeals, and the automated screening results for messages (which rules matched and a score, without the text).

Device, security and risk signals. IP address and basic request information in our security logs and rate limits. To prevent fraud, ban evasion and fake accounts, we record salted, one-way hashes of device, network and wallet identifiers. We never keep the raw values of these signals.

Notifications. If you turn on notifications, the push subscription your browser gives us (a delivery endpoint and encryption keys) and your notification preferences. Message previews are off by default.

Events. If you register for an Event: the Event, your registration details (display name, company, role, what you’re building, what you’re looking for, interests, whether you’re open to meetings), and the free times you share. Calendar contents are never collected. If you book or receive a professional meeting at an Event: its time, length, agenda, status, amount and payment records, and any no-show or problem report.

Activity signals. Counts and times derived from how you use Flockie (for example whether and how quickly conversations get replies, how many messages were exchanged, Keeps, reward allocations received, extensions, event meetings, and reports, blocks or moderation outcomes). Not message text.

Support. Anything you send us when you contact support.

Information from others. Reports other members make about you, and the evidence attached to them.

We don’t collect precise location, contacts, or your activity on other websites, and we don’t buy data about you.

03Sensitive information#

Some of what you tell us may reveal sensitive information, such as your sexual orientation (for example, the genders you’d like to meet in Dating mode). We use it only to find mutually compatible introductions, we never show your preferences to other members, and we never put them on-chain. You can change your preferences or switch to Friends mode at any time. Legal basis for special-category data, e.g. explicit consent under the GDPR (to be confirmed)

04How we use your information#

PurposeWhat we useLegal basis (to be confirmed)
Create and secure your accountX basics, Privy ID, wallet addressContract
Keep Flockie adults-onlyDate of birthContract; legal obligation
Make mutually eligible introductionsProfile, preferences, availability, block historyContract; consent for sensitive preferences
Decide who is likelier to be introduced among eligible peopleEngagement, reliability and reputation signals from your activity (see below)Legitimate interests; contract
Run Events, Event Packs and professional event meetingsRegistration details, free times, meeting and payment recordsContract
Run conversations, timers, extensions and KeepsDrop, connection and conversation dataContract
Process payments and settle reward poolsWallet addresses, amounts, on-chain IDsContract; legal obligation
Screen for solicitation, abuse and scams, and review reportsMessages at send time, reports, evidence, screening resultsLegitimate interests (safety); legal obligation
Prevent fraud, collusion and ban evasionHashed risk signals, account historyLegitimate interests
Send the notifications you choosePush subscription, preferencesConsent; contract
Answer support requests and legal requestsWhat you send us; relevant recordsContract; legal obligation
Improve reliability and safetyAggregated, de-identified metricsLegitimate interests

Create and secure your account

What we use
X basics, Privy ID, wallet address
Legal basis (to be confirmed)
Contract

Keep Flockie adults-only

What we use
Date of birth
Legal basis (to be confirmed)
Contract; legal obligation

Make mutually eligible introductions

What we use
Profile, preferences, availability, block history
Legal basis (to be confirmed)
Contract; consent for sensitive preferences

Decide who is likelier to be introduced among eligible people

What we use
Engagement, reliability and reputation signals from your activity (see below)
Legal basis (to be confirmed)
Legitimate interests; contract

Run Events, Event Packs and professional event meetings

What we use
Registration details, free times, meeting and payment records
Legal basis (to be confirmed)
Contract

Run conversations, timers, extensions and Keeps

What we use
Drop, connection and conversation data
Legal basis (to be confirmed)
Contract

Process payments and settle reward pools

What we use
Wallet addresses, amounts, on-chain IDs
Legal basis (to be confirmed)
Contract; legal obligation

Screen for solicitation, abuse and scams, and review reports

What we use
Messages at send time, reports, evidence, screening results
Legal basis (to be confirmed)
Legitimate interests (safety); legal obligation

Prevent fraud, collusion and ban evasion

What we use
Hashed risk signals, account history
Legal basis (to be confirmed)
Legitimate interests

Send the notifications you choose

What we use
Push subscription, preferences
Legal basis (to be confirmed)
Consent; contract

Answer support requests and legal requests

What we use
What you send us; relevant records
Legal basis (to be confirmed)
Contract; legal obligation

Improve reliability and safety

What we use
Aggregated, de-identified metrics
Legal basis (to be confirmed)
Legitimate interests

How matching uses activity signals. Beyond mutual eligibility, matching uses engagement, reliability and reputation signals from your activity on Flockie (such as conversation follow-through, Keeps, reward allocations received, event meetings, and safety history) to weigh who is likelier to be introduced. These signals are internal: we never show them to you or to other members, they only make an introduction more or less likely, they never override anyone’s preferences or safety rules, and they never decide anything about your account on their own.

We don’t sell your personal information, we don’t share it for cross-context behavioural advertising, and we don’t use private chat content to profile you for growth or marketing. Automated screening can hold or block a message, or briefly pause an account pending review, but serious and lasting decisions — such as a ban — are always made by a person, and you can appeal them.

05What other members see#

  • People in your Drops see your connection card: display name, age, city, approved photos, bio and interests. If you connected X, your handle and profile link stay hidden until you and the other person Keep each other permanently. There is no public profile and no way to browse members.
  • The other person in a conversation sees the messages you send them.
  • Your Keep is private. No one is ever told whether you kept them unless you kept each other.
  • Reward allocations aren’t shown to participants while a Drop is running. After settlement, each participant can see what they received.
  • At an Event, your registration details are shown only to the people you’re connected with through that Event’s Event Packs; there is no attendee list. Your free times are never shown as such: the Event Pack opener you’re connected with only sees start times you’re free for. A professional meeting is visible only to its two people.
  • We never show your date of birth, your preferences, your wallet balance, or any score or value attached to you.

06Who we share it with#

We use carefully chosen service providers (“processors”) who handle data on our instructions and under contract. Data processing agreements with each processor (to be confirmed)

ProviderWhat they do for FlockieData involved
PrivyEmail or X sign-in; creates and secures your embedded walletPrivy ID, wallet address, sign-in metadata, and X basics if you connect X
StreamDelivers and stores conversations; supports moderation toolsMessages, the internal ID of your account, display name and photo shown in chat
CloudflareHosting, content delivery, DDoS and bot protection (including Turnstile); object storage for photos and data exportsRequest data such as IP address; photos and export files
SupabaseManaged PostgreSQL database for accounts, profiles, Drops and recordsAccount, profile, preference, Drop, payment and safety records
UpstashManaged Redis for rate limiting, timers and job queuesShort-lived keys such as account IDs and IP-based counters
Browser push services (Apple, Google, Mozilla, Microsoft)Deliver notifications to your devicesThe notification text; previews only if you turn them on

Privy

What they do for Flockie
Email or X sign-in; creates and secures your embedded wallet
Data involved
Privy ID, wallet address, sign-in metadata, and X basics if you connect X

Stream

What they do for Flockie
Delivers and stores conversations; supports moderation tools
Data involved
Messages, the internal ID of your account, display name and photo shown in chat

Cloudflare

What they do for Flockie
Hosting, content delivery, DDoS and bot protection (including Turnstile); object storage for photos and data exports
Data involved
Request data such as IP address; photos and export files

Supabase

What they do for Flockie
Managed PostgreSQL database for accounts, profiles, Drops and records
Data involved
Account, profile, preference, Drop, payment and safety records

Upstash

What they do for Flockie
Managed Redis for rate limiting, timers and job queues
Data involved
Short-lived keys such as account IDs and IP-based counters

Browser push services (Apple, Google, Mozilla, Microsoft)

What they do for Flockie
Deliver notifications to your devices
Data involved
The notification text; previews only if you turn them on

Other disclosures.

  • The Base network is a public blockchain, not a processor. What we write there is public (see section 7).
  • X remains the controller of your X account; its own privacy policy applies.
  • Legal and safety. We may disclose information when the law requires it, to respond to valid legal process, or when we believe in good faith that it’s necessary to prevent death or serious harm, to protect a child, or to report suspected child sexual exploitation to the National Center for Missing & Exploited Children (NCMEC) or the relevant authority. Requests from authorities go to hello@findflockie.com and are reviewed by our safety lead and counsel.
  • Business transfers. If Flockie is involved in a merger, acquisition or sale of assets, your information may transfer as part of it, under the same protections.

07What goes on-chain — and what never does#

Drop payments, extensions, reward settlements and event meeting payments are recorded on the Base network. Those records contain only: wallet addresses, amounts, random 32-byte identifiers for Drops, extensions, Events and meetings, timestamps (including a meeting’s scheduled start and end), and events such as “settled”, “released” or “refunded”.

Never on-chain: your name, X handle, photos, profile, gender, preferences, messages, Keep choices, reports, Event registration details or free times, meeting agendas, or anything that says who was introduced to whom. An event meeting payment does show the two wallet addresses involved, like any payment between two wallets.

Blockchain records are public and permanent. Nobody — including us — can delete or change them, even after you delete your account. Anyone who already knows your wallet address could link it to Flockie transactions, so treat your wallet address like other personal details and share it thoughtfully.

08How long we keep it#

DataHow long
Profile, photos, preferences, availabilityUntil you delete them or your account
Event registrations and free timesUntil you withdraw, edit them or delete your account (withdrawing deletes your free times)
Internal activity signals used for matchingRecomputed regularly from the records above; deleted when you delete your account
Conversations that ended without a Mutual KeepReadable (read-only) for 30 days, then hidden; deleted from our chat provider after 90 days
Permanent conversations (Mutual Keep)For as long as the conversation stays open. If it is closed (either person deletes their account or blocks the other, or it is closed for safety), it becomes read-only and is deleted 90 days after it closed, unless a report holds it
Held or blocked message excerptsDeleted 30 days after review, and never kept more than 90 days, unless a legal hold applies
Data export filesDownload links expire after 72 hours
Reports, moderation actions and appealsRetention period (to be confirmed)
Payment and settlement recordsAs long as needed for accounting, tax and legal obligations period (to be confirmed)
Hashed risk signalsRetention period (to be confirmed)
Security and audit logsAppend-only; retention period (to be confirmed)
On-chain recordsPermanent; they can’t be deleted by anyone

Profile, photos, preferences, availability

How long
Until you delete them or your account

Event registrations and free times

How long
Until you withdraw, edit them or delete your account (withdrawing deletes your free times)

Internal activity signals used for matching

How long
Recomputed regularly from the records above; deleted when you delete your account

Conversations that ended without a Mutual Keep

How long
Readable (read-only) for 30 days, then hidden; deleted from our chat provider after 90 days

Permanent conversations (Mutual Keep)

How long
For as long as the conversation stays open. If it is closed (either person deletes their account or blocks the other, or it is closed for safety), it becomes read-only and is deleted 90 days after it closed, unless a report holds it

Held or blocked message excerpts

How long
Deleted 30 days after review, and never kept more than 90 days, unless a legal hold applies

Data export files

How long
Download links expire after 72 hours

Reports, moderation actions and appeals

How long
Retention period (to be confirmed)

Payment and settlement records

How long
As long as needed for accounting, tax and legal obligations period (to be confirmed)

Hashed risk signals

How long
Retention period (to be confirmed)

Security and audit logs

How long
Append-only; retention period (to be confirmed)

On-chain records

How long
Permanent; they can’t be deleted by anyone

Legal holds. When content is part of a serious report (for example suspected exploitation, trafficking, threats or solicitation), we preserve the relevant evidence beyond these periods for as long as the investigation or the law requires. We don’t claim a message is deleted instantly: backups and safety systems may keep copies for a limited time before they’re overwritten.

09Your choices and rights#

  • Download your data. Settings → Privacy & data → Download your data gives you a JSON copy of your profile, preferences, photos, Drops, connections, payments, reports, Event registrations and free times, and event meetings.
  • Correct it. Edit your profile, photos and preferences at any time.
  • Delete your account. Profile → Delete account (see section 10).
  • Disconnect X. Profile → X connection. You won’t be able to take part in new Drops while X is disconnected.
  • Control notifications. Choose categories, keep message previews off (the default), and opt in or out of marketing. Safety and account notices are always on.
  • Block and report anyone you’ve been introduced to.

Depending on where you live, you may also have the right to access, correct, delete or port your data, to object to or restrict certain processing, to withdraw consent, and to complain to a data-protection authority. We’ll respond to requests within the time the law requires and won’t discriminate against you for making one. Region-specific rights, e.g. GDPR/UK GDPR, US state privacy laws such as the CCPA/CPRA, and verification procedure (to be confirmed)

10When you delete your account#

Deleting your account, which is available in the app at any time:

  • signs you out on every device and removes you from matching straight away;
  • deletes your profile, photos, preferences and availability, withdraws your Event registrations (clearing their details and free times) and deletes the internal activity signals used for matching;
  • cancels your pending event meeting requests (payments are refunded in full); meeting payment records are kept as payment records;
  • unlinks your X account (so you could start a new account with it later, unless your account was banned or blocked for age);
  • closes your conversations and asks our chat provider to erase your chat user;
  • cancels pending notifications and removes your push subscriptions.

What we keep. A minimal account record (an internal ID, status and dates), the policy versions you accepted, payment and settlement records, audit logs, and — if you were involved in a serious report — the evidence under legal hold. If your account was banned or blocked for being under 18, we keep enough to stop the same login from starting over. Retention of X handle and display name in unlinked X records after deletion (to be confirmed) On-chain records can’t be deleted.

11Security#

We encrypt data in transit and at rest with our providers, verify every sign-in token on our servers, keep moderation access separate from support access, record every privileged staff action in an append-only audit log, and store photos privately behind short-lived links. No system is perfectly secure; if we learn of a breach that affects you, we’ll tell you as the law requires. Please report vulnerabilities to hello@findflockie.com.

12Adults only#

Flockie is only for people aged 18 and over. We don’t knowingly collect data from anyone under 18. If we learn that an account belongs to someone under 18, we block it and delete the data we don’t need to keep for safety or legal reasons. If you believe a minor is using Flockie, report it from the app or email hello@findflockie.com.

13International transfers#

Our providers may process data in countries other than yours, including the United States. Transfer mechanisms, e.g. Standard Contractual Clauses or the EU–US Data Privacy Framework, and hosting regions (to be confirmed)

14Changes to this policy#

When we change this policy, we update the version date at the top. If the change is material, we’ll tell you in the app before it takes effect and, where required, ask for your consent again.

15Contact#

  • Privacy questions and requests: hello@findflockie.com
  • Legal and law-enforcement requests: hello@findflockie.com
  • Security: hello@findflockie.com

Privacy Policy · version 2026-10-12

Back to top ↑
lockie

Timed social discovery for adults 18+. People are never for sale, and money is never payment for any reply, date, meeting, or sexual or romantic conduct.

Documents

  • Terms of Service
  • Privacy Policy
  • Community Standards
  • Anti-solicitation Policy
  • Cookie and Storage Notice

Contact

Support and privacy
hello@findflockie.com
Legal and law enforcement
hello@findflockie.com
Security disclosures
hello@findflockie.com