Security and Data Flow

Couple Clicks is built so core matching stays between partners. This page explains what stays on your devices and what is processed by the service.

What stays on your devices

Swipe choices and mutual matches are synchronized peer-to-peer.
The app does not store your swipe history or vault matches in its server database.
No account is required to use the core matching flow.

What is processed server-side

A lightweight visit counter stores only aggregate counts (no per-user profile rows).
Peer signaling and TURN relay handle connection metadata required to connect devices.
Free AI usage is rate-limited by IP to prevent abuse (daily cap).

Optional AI (free)

AI suggestions are free and optional. If you use AI features, the prompt content is sent to NVIDIA-hosted model infrastructure to generate responses. If you do not use AI, no AI request is sent.

Security controls

HTTPS and strict transport security headers in production.
Input validation on server APIs.
Report-only CSP configured to monitor frontend policy violations.

For legal details, read Privacy or Datenschutz.