Privacy Policy
Last updated: 15 September 2026
This policy explains what the ForbiddenFlirt mobile app — published on
Google Play as Taboo: Anlamlı İlişkiler Bulun, package name
com.taboo.date — collects, why, who else can see it, and how to
get it deleted. It covers the app and this website.
Who is responsible
ForbiddenFlirt is operated by the independent developer who publishes it on Google Play. For any privacy question or request, write to privacy@elenchia.online. We answer privacy requests at that address and aim to respond within 30 days.
What we collect
Account information. When you sign up we receive your email address and a Firebase user identifier from Google Firebase Authentication. If you sign in with Google, we receive the identity Google passes to us. We also store a password if you set one, and your phone number if you provide it.
Profile information you enter. Your name, date of birth (used to show your age), gender, photos, and any answers you give to the optional profile questions and preference settings.
Location. If you enable location, we store your latitude and longitude, and derive your country, region and city. This is what powers distance-based browsing. You can turn location off in the app's settings; the app keeps working without it.
Activity in the app. Likes and passes, matches, the messages you send and receive, read receipts, blocks, and reports you submit.
Device and technical data. A Firebase Cloud Messaging token so we can deliver notifications, plus basic device and app information, language and country settings. Our servers receive your IP address as part of normal internet traffic.
Purchases. If you buy a subscription or an in-app item, Google Play processes the payment. We receive the resulting entitlement information through RevenueCat — what you bought and whether it is active. We never receive or store your card details.
Why we use it
- To create your account and let you sign in.
- To show your profile to other users and show you theirs.
- To rank and filter who you see, including by distance if you enabled location.
- To deliver messages and notifications.
- To apply the features your subscription includes.
- To investigate reports, enforce our rules, and keep the service safe.
- To diagnose crashes and errors.
What other users can see
Your profile — your name, age, photos, and the profile details you filled in — is visible to other users of the app. If you enabled location, other users see an approximate distance to you, not your coordinates. Your email address, phone number and exact location are never shown to other users.
Treat anything you put in your profile or send in a chat as something another person can save, screenshot or repeat. We cannot take it back for you.
Who else we share it with
We do not sell your personal data. We share it only with the service providers that make the app work:
- Google Firebase — authentication and push notifications.
- Amazon Web Services — our servers and photo storage, located in the United States (Ohio).
- Cloudflare — DNS, this website, and delivery of profile photos.
- RevenueCat and Google Play — subscription and purchase handling.
- Google AdMob — advertising in the free version of the app. See Advertising below.
We may also disclose data where the law requires it, or where it is necessary to investigate a safety issue or protect someone from harm.
Advertising
The free version of the app is supported by advertising, served by Google AdMob. Our paid plans are ad-free: if you have an active Basic or Premium subscription, the app does not request or show ads to you at all.
What is collected for ads. To serve, cap and measure ads, the app collects your Android advertising ID (AAID) and coarse technical data such as device model, operating system version, language and approximate country, and shares it with Google. You can reset or delete your advertising ID at any time in Android Settings → Privacy → Ads. Deleting it stops personalised advertising on your device.
We never share your location with advertisers. The location you give us is used for matching inside the app only. It is not passed to Google or any other advertising partner.
You can read how Google uses data from apps that use its advertising services here: How Google uses information from sites or apps that use our services.
If you are in the EEA, the UK or Switzerland. Before any ad is requested, the app shows you a consent message and asks whether Google and its advertising partners may use your data for personalised advertising. We rely on your consent as the legal basis, and only for the purposes you agree to. You can change or withdraw your choice at any time in the app under Settings → Ad preferences.
If you are in a US state with a privacy law. You can opt out of the sale or sharing of your personal information for cross-context behavioural advertising using the same in-app entry point, Settings → Ad preferences.
Declining does not remove ads. If you decline personalised advertising, you will still see ads, but they will be non-personalised — chosen from the content of the screen and general context rather than from a profile about you. Non-personalised ads still use limited data for frequency capping, fraud prevention, and aggregated reporting. To remove ads entirely, use a paid plan.
Children. The app is for adults aged 18 and over. Ads in the app are not directed to children and we do not knowingly serve personalised advertising to anyone under 18.
Where your data is stored
Our servers are in the United States. If you use the app from elsewhere — including the European Economic Area or the United Kingdom — your data is transferred to and stored in the United States.
How long we keep it
We keep your account data for as long as your account exists. When you delete your account, we delete your profile, photos and messages from our active systems. Backups are overwritten on a rolling basis and are fully cycled within 30 days. Records we are required to retain — for example, evidence relating to a safety report or a purchase — may be kept longer.
Deleting your account
Write to privacy@elenchia.online from the email address on your account, with the subject Delete my account. You can also ask us to delete only part of your data without closing the account. Full instructions, what gets deleted, and what we have to keep are on our account and data deletion page. Deletion is permanent — your matches, messages and photos cannot be restored afterwards.
Your rights
Depending on where you live, you may have the right to access a copy of your data, correct it, delete it, object to or restrict how we use it, or receive it in a portable format. Write to privacy@elenchia.online and we will act on it. If you are in the EEA or the UK you also have the right to complain to your national data protection authority.
Security — and what we are still fixing
Traffic between the app and our servers is encrypted in transit, and our photo storage is not publicly listable.
We would rather tell you this than not. The optional password stored on our own servers is currently held without hashing. Your actual sign-in is handled by Google Firebase and is not affected, but you should not reuse a password here that you use anywhere else. We are changing this, and this section will be updated when it is done.
Children
ForbiddenFlirt is for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor is using the app, report the profile in the app or write to support@elenchia.online and we will remove the account.
Where we identify child sexual abuse and exploitation, we preserve the related account data, content and logs for as long as necessary to support a report to NCMEC or to law enforcement — even after the account has been deleted. See our Child Safety Standards.
This website
This section is about this website only — it does not describe the app. This website sets no advertising or analytics cookies and loads no third-party trackers. Our hosting provider processes standard request logs. Advertising in the app is covered under Advertising above.
Changes
If we change this policy we will update the date at the top. For changes that meaningfully affect you, we will also tell you in the app.
Contact
Privacy requests: privacy@elenchia.online
Everything else: support@elenchia.online