DateGuard.AI
Security & Trust
Last updated: August 5, 2026
DateGuard.AI exists to make dating safer. That mission demands the highest standards for how we handle your data. This page explains our security practices, infrastructure, and commitments in plain language.
Our Security Principles
🔐 Encryption Everywhere
All data transmitted between your device and our servers is encrypted using TLS 1.3 — the strongest transport encryption standard available. Your biometric verification data is encrypted both in transit and at rest.
🏛 SOC 2 Certified Infrastructure
DateGuard is built entirely on SOC 2 Type II certified infrastructure providers. Our hosting (Netlify), database (Supabase), and authentication systems all maintain independent SOC 2 certifications, meaning they have passed rigorous third-party audits for security, availability, and confidentiality controls.
📱 Minimal Data Collection
We collect only what is necessary to verify identity. We do not store raw photos or video from liveness checks. We do not sell, rent, or share your personal data with advertisers — ever.
🗑 Your Right to Delete
You can request complete deletion of your account and all associated data at any time through our account deletion page. Deletion requests are processed promptly and permanently.
Infrastructure & Vendor Security
| Component | Provider | Certification |
|---|---|---|
| Web Hosting & CDN | Netlify | SOC 2 Type II |
| Database & Auth | Supabase | SOC 2 Type II |
| Identity Verification | Facia.ai | ISO 27001 / iBeta Level 1 & 2 |
| DNS & DDoS Protection | Cloudflare | SOC 2 Type II, ISO 27001 |
| Payment Processing | Stripe | PCI DSS Level 1 |
Biometric Data Handling
DateGuard uses advanced liveness detection to confirm that the person creating a profile is real — not a bot, catfish, or stolen photo. Here is how we handle that sensitive data:
- Purpose-limited: Biometric data is used solely for identity liveness verification. It is never used for advertising, tracking, or sold to third parties.
- Processed by certified partners: Liveness checks are performed by Facia.ai, which holds iBeta Level 1 and Level 2 anti-spoofing certifications — the gold standard for biometric presentation attack detection.
- Retention limits: We retain verification results (pass/fail status and confidence scores) but do not permanently store raw biometric imagery.
- Consent-first: You are always informed before any biometric data is captured, and you must explicitly consent to proceed.
Application Security
- Automated monitoring: Our systems continuously monitor application health, uptime, and integrity around the clock.
- Secure authentication: User accounts are protected with industry-standard authentication via Supabase Auth, including bcrypt password hashing and secure session management.
- Security headers: Our web application enforces security headers including X-Content-Type-Options, X-Frame-Options, and Referrer-Policy to protect against common web attacks.
- HTTPS only: All HTTP traffic is automatically redirected to HTTPS. HSTS headers ensure browsers always use encrypted connections.
- Regular updates: Dependencies and infrastructure are kept current to address known vulnerabilities.
Responsible Disclosure
If you discover a security vulnerability in DateGuard, we want to hear about it. Please report it to [email protected] with the subject line "Security Report" and we will respond within 48 hours. We ask that you give us reasonable time to address the issue before public disclosure.
Questions?
For security-related questions, contact us at [email protected]. For general support, visit our support page.