Coming Soon
Chrome Web Store & AMO Compliant

Privacy Policy

Last updated: October 16, 2026 • Effective Date: October 16, 2026

1. 100% Client-Side (Zero-Knowledge) Architecture

At MatchPilot (operated by Freq, accessible at matchpilot.date), protecting your privacy is our primary engineering requirement. The MatchPilot browser extension operates on a strict Zero-Knowledge client-side architecture.

No personal conversation messages, match profiles, dating activity, or user photos are ever transmitted to, logged on, or stored on MatchPilot servers. MatchPilot does not maintain any backend database storing your dating or messaging data. All computation, indexing, and match tracking occur entirely inside your browser's isolated client memory.

2. Data Stored Locally on Your Device

MatchPilot uses your browser's native sandboxed storage (chrome.storage.local) exclusively on your local machine to persist:

  • User Interface Preferences: Theme settings, custom persona tones, and auto-swipe pacing delays.
  • Local Match & CRM Cache: Cached match profiles (names, ages, photos, match timestamps, and last message snippet) to render your dashboard instantly without repeated API queries.
  • Lost Connections & Unmatch History: Local tracking of unmatches and deleted profiles (retained strictly on your device) to inform you when a contact leaves your match list.
  • Swiping Counters & History: Local list of liked profile IDs (to prevent duplicate likes) and daily usage quota counters.
  • Location Changer Coordinates: The selected latitude, longitude, and city name when using the GPS Location Changer.
  • API Credentials: Your encrypted personal AI provider API key (if you choose to bring your own key).
  • License Verification Token: Encrypted activation status received from our payment merchant.

This local data never leaves your browser and is inaccessible to any website other than the extension's internal background service worker.

3. AI Generation & Third-Party Service Providers

When you request an AI icebreaker, photo analysis, or reply suggestion, the generation prompt is transmitted directly from your browser client to the third-party AI provider configured by you:

These requests are made via direct HTTPS endpoints. MatchPilot acts as a client orchestrator and does not proxy, inspect, or intercept these AI transmissions on any intermediary server.

4. Chrome Extension Permissions & Host Access

In accordance with Google Chrome Web Store Developer Program Policies, MatchPilot strictly requests only the minimal permissions required for its core functionality:

storage & unlimitedStorage

Required to save your local UI preferences, custom keyword filters, and local match/CRM cache locally in your browser.

Host Permissions (tinder.com, web.whatsapp.com, instagram.com)

Strictly used to inject the floating AI widget and CRM overlay directly into the DOM of the active chat tabs. No other domains are monitored.

nominatim.openstreetmap.org

Used strictly for reverse geocoding city names when using the GPS Location Changer utility.

5. Chrome Web Store Limited Use & Data Selling Prohibitions

MatchPilot strictly adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements:

  • No Data Sale: We do not sell, rent, or monetize personal user data to any third parties, brokers, or advertisers under any circumstances.
  • No Advertising: We do not use or transfer user data for serving personalized, targeted, or retargeted advertising.
  • No Credit Scoring: We do not use or transfer user data to evaluate creditworthiness or for any lending purposes.
  • Single Purpose: All data accessed via browser permissions is strictly utilized to provide and improve the user-facing features of the MatchPilot extension.

6. Billing & License Verification

All payments, transactions, and license key issuances are processed securely by Lemon Squeezy (Merchant of Record). MatchPilot never receives, processes, or stores your credit card numbers, billing addresses, or banking credentials.

When verifying a Pro license key, the extension makes an encrypted HTTPS call to api.lemonsqueezy.com solely to confirm the validity and tier of your license key.

7. Data Retention & Your Right to Immediate Deletion

Because all your data resides in your browser's local sandbox, you maintain 100% total control over your data at all times:

  • 1-Click Instant Erasure: Right-click the MatchPilot extension icon in Chrome/Brave/Edge and select "Remove from Chrome". This immediately and permanently deletes 100% of your stored data, local preferences, and cached keys.
  • GDPR & CCPA Compliance: As we do not hold your personal data on remote servers, no data subject access request (DSAR) is needed to erase your records.

8. Contact & Publisher Inquiries

If you have any questions about this Privacy Policy or MatchPilot's data protection practices, please contact:

Entity: Freq

Product: MatchPilot (matchpilot.date)

Privacy Email: contact@matchpilot.date