Privacy policy

Last updated: September 12, 2026

Cante is a slow-dating app. This page explains what we collect, why, how long we keep it, who else sees it, and what you can do about it.

Who is responsible

The controller of your data is Sebastijan Sakač, Croatia. For anything about your data, write to contact@sakac.tech.

What we collect

• Account: your e-mail address (we sign you in with a one-time code), your first name if you give one, the app's language, your time zone, your notification settings and quiet hours.
• Profile: your birthdate and gender, the languages you talk in, a starting point rounded to a grid of a few kilometres with a place name, your radius, the age range you are looking for, your questionnaire answers, a voice introduction and your photos. We remove location and other metadata from photos when you upload them.
• Who you are open to meeting (women, men or everyone) — only if you choose to tell us, and only with your separate, explicit consent, because it can reveal your sexual orientation. You can withdraw it in the app at any time (Settings → Who you are); withdrawing deletes it.
• Verification: a selfie with a gesture we ask for. Only a moderator sees it, to confirm you are a real person, and it is deleted as soon as they decide.
• Your correspondence: written and voice letters, goodbyes, meeting suggestions (a place and a time) and, after meeting, whether you felt safe. Only you and the person you are matched with can read letters. Moderators never see them — not even when you report someone.
• Safety: reports you make or that are made about you, blocks, and the moderator's decision.
• Your device: an install identifier, the push-notification token, the app version and the device's time zone.
• Technical records: the IP address and time when you accept the house rules or give the consent above (as proof of that consent), sign-in sessions per device, and server logs kept for security and fault-finding.
• Usage statistics: internal counts such as joining a generation or the result of a pairing round. They never contain what you wrote, what you look like or where you are. We use no third-party analytics or advertising trackers.

Why, and on what legal basis

• Running Cante — your account, pairing, delivering letters and notifications: performance of our contract with you (Art. 6(1)(b) GDPR).
• Who you are open to meeting — your explicit consent (Art. 9(2)(a) GDPR). It is optional: without it we simply do not filter matches by it. You can withdraw it at any time, which deletes it.
• Safety — moderation, preventing fraud and abuse, keeping reports after an account is deleted, security logs: our legitimate interest in a safe service (Art. 6(1)(f) GDPR).
• Records we must keep — proof of consent and of how we handled your requests: legal obligation (Art. 6(1)(c) GDPR).
• Push notifications only if you allow them on your phone; you can switch them off at any time, and e-mail takes their place.

Pairing is automated: people are matched by radius, conversation language, age, gender and — if you told us — who you are open to meeting, and by questionnaire answers. It has no legal effect on you, and you can always write to us about it.

Who sees what

• The person you are matched with sees your first name or its initial, the approximate distance, your voice, and — from the second phase, one a day — your photos, then your letters. Never your e-mail address, your exact location or your selfie.
• Moderators see reports and the reporter's note, account details, the verification selfie and profile photos. Never your letters.
• Service providers who process data for us: Hostinger (hosting this service and sending its e-mail; servers in Frankfurt, Germany), Apple (delivering notifications to iPhones) and Google (delivering notifications to Android phones). Apple and Google may process data in the United States under the EU–US Data Privacy Framework.
• Hostinger uses sub-processors of its own — among them Amazon Web Services, Google Cloud, Cloudflare and mail relays — and where one of them handles data outside the EEA it does so under the European Commission's standard contractual clauses.
• Cante and its database run on servers we rent from Hostinger in Frankfurt, Germany — inside the EU. We do not sell your data, share it with advertisers or use it for advertising. We disclose data to authorities only where the law requires it.

How long we keep it

• While your account exists.
• When you delete your account, it waits 14 days so you can change your mind. Then your profile, photos, recordings, questionnaire answers and the letters you wrote are erased permanently.
• The verification selfie is deleted as soon as a moderator decides.
• A copy of your data is ready to download for 48 hours, then deleted.
• A report about someone's behaviour stays after that account is deleted — without a name or an address, only with a one-way fingerprint that shows repetition. The right to erasure does not cancel the duty to keep others safe (Art. 17(3) GDPR).
• Letters another person wrote to you stay with them after you leave.
• Letters and recordings inside a thread are deleted 90 days after that thread ends. The thread itself stays as a record that it happened, without a word of what was said.
• A report and what a moderator decided are kept for 730 days after the case is closed. The second report about the same person is the one that matters, and it may be a long way from the first.
• Counting — how many people reached a phase, how long they waited — is kept for 730 days. It never holds anything anybody wrote.
• Used sign-in codes and notifications held back by quiet hours are deleted after 30 days.
• Server logs rotate themselves after 14 days.
• Backups are our hosting provider's, kept away from the server itself: the daily ones for seven days, after which they are deleted automatically, and weekly ones on the provider's own rolling schedule. Nobody can be taken out of a backup one person at a time — the provider does not allow it — so an erasure reaches a backup only when that backup expires. We never restore a deleted account from one.

Your rights

You can ask for access to your data and a copy of it (in the app: Settings → Export my data), correct it (edit your profile), delete it (Settings → Delete my account, or without the app), restrict or object to its processing, take it elsewhere, and withdraw any consent at any time. Write to contact@sakac.tech; we answer within one month.

You can also complain to the Croatian data protection authority, AZOP (Selska cesta 136, 10000 Zagreb, azop.hr), or to the authority where you live.

Security

Connections are encrypted, photos are stripped of metadata, links to photos and recordings expire within minutes, moderators have no access to correspondence, and the hosting account is reachable only by the person who runs it — the machines underneath it are our hosting provider's, who may reach them to keep them running. Under the data processing agreement that comes with their terms, they encrypt stored data at rest and keep backups of it.

Cookies

This website uses only necessary cookies: cante_lang remembers the language you picked (one year), one cookie keeps you signed in to the web app, and one keeps staff signed in to the moderation console. There are no analytics, advertising or tracking cookies, so there is nothing to consent to. The app keeps its settings on your phone for its own use and does no tracking.

Age

Cante is for people aged 18 and over. We do not knowingly collect data from anyone younger; if we learn of it, we delete the account.

Changes

If we change this policy in a way that matters, we tell you in the app before the change takes effect. The date at the top is the current version.