Privacy

Last updated: 2026-09-25

This privacy policy applies to the processing of personal data by Joyride GmbH in the context of the app and the online offering at https://www.getfinally.com (together, the "Services").

"Personal data" is defined in Art. 4 No. 1 GDPR as any information relating to an identified or identifiable natural person.

Below, in accordance with Art. 13 and 14 GDPR, we inform you about which personal data we process when you use our Services, on what legal basis, with whom we share data, and which rights you have. As the processing may differ between the web and the app, the respective processing activities are presented in separate sections.

Controller

The controller responsible for the processing of personal data within the meaning of the GDPR is:

Joyride GmbH Bartenbacher Str. 4, 73033 Göppingen, Deutschland Email: privacy@getfinally.com

Data Protection Officer

For any data-protection-related inquiries you may reach our data protection officer at:

Florian Klytta DS Compliance GmbH, Carlsplatz 24, 40213 Düsseldorf Email: f.klytta@wecomply.de

Supervisory authority

The data-protection supervisory authority competent for Joyride GmbH is Landesbeauftragter für Datenschutz und Informationsfreiheit Baden-Württemberg, reachable at https://www.baden-wuerttemberg.datenschutz.de/ and by email at poststelle@lfdi.bwl.de.

You have the right under Art. 77 GDPR to lodge a complaint with this or another supervisory authority if you believe that the processing of your personal data violates the GDPR.

Processing via our online offering (Web)

The following processing activities relate to the use of our online offering. Each describes the purpose, the legal basis, and the categories of personal data. Recipients and retention are set out in the "Recipients (Web)" section and in the "Retention period" section.

Website contact

Purpose: Handling enquiries received via the website contact form or email.
Legal basis: Art. 6(1)(f) GDPR — legitimate interests
Categories of personal data: IP address, Email address, Access date & duration, Name, Contact message content (website)

Recipients (Web)

In the context of our online offering we share your personal data only with carefully selected recipients, and only where this is necessary for the stated purposes or you have consented. Where we engage external service providers to process data on our behalf, we have entered into data processing agreements with them pursuant to Art. 28 GDPR.

International data transfers (Web)

Where we transfer personal data in the context of our online offering to countries outside the scope of the GDPR ("third countries"), we do so in accordance with Art. 44 et seq. GDPR. In the absence of an adequacy decision of the EU Commission, we secure the level of data protection by appropriate safeguards under Art. 46 GDPR, in particular standard contractual clauses (SCCs).

Processing in our app

The following processing activities relate to the use of our app. Each describes the purpose, the legal basis, and the categories of personal data. Recipients and retention are set out in the "Recipients (App)" section and in the "Retention period" section.

Apple Send Consumption Information API

Purpose: Send consumption information about an in-app purchase to the App Store after receiving a consumption request notification (e.g. refund decisioning).
Legal basis: Art. 6(1)(a) GDPR — consent
Categories of personal data: In-app purchases (products acquired)

Authentication data storage

Purpose: User login to the app
Legal basis: Art. 6(1)(b) GDPR — contract
Categories of personal data: Email address, Password, Account ID (Apple / Google SSO)

Campaign measurement (Google Analytics)

Purpose: Measuring advertising performance
Legal basis: Art. 6(1)(a) GDPR — consent
Profiling: This processing includes profiling within the meaning of Art. 4 No. 4 GDPR. It is used solely for the purpose stated above.
Categories of personal data: IP address, Device data (model, OS, device ID), User interactions (registration date, first message, first match, purchases), Advertising IDs, In-app purchases (products acquired)

Campaign measurement (Singular)

Purpose: Measuring advertising performance and install attribution.
Legal basis: Art. 6(1)(a) GDPR — consent
Profiling: This processing includes profiling within the meaning of Art. 4 No. 4 GDPR. It is used solely for the purpose stated above.
Categories of personal data: IP address, Device data (model, OS, device ID), User interactions (registration date, first message, first match, purchases), Advertising IDs, Gender, Age / age range

Consent management (Usercentrics CMP)

Purpose: Collect, store and document end-user consent decisions as proof of consent, via the Usercentrics Consent Management Platform.
Legal basis: Art. 6(1)(c) GDPR — legal obligation
Categories of personal data: IP address, Consent decisions / preferences, Consent ID (unique identifier), Consent metadata (timestamp, policy version, language)

Crash reporting

Purpose: Product improvement through crash analysis
Legal basis: Art. 6(1)(a) GDPR — consent
Categories of personal data: Crash report data (Crashlytics UUID, minidump, timestamps, app/device metadata)

Cross-app profile visibility

Purpose: Make the user's profile visible and discoverable in other dating apps of the network, to increase match chances.
Legal basis: Art. 6(1)(a) GDPR — consent
Categories of personal data: Consent decisions / preferences

Data storage for reporting, monitoring and debugging

Purpose: Internal analysis and performance measurement
Legal basis: Art. 6(1)(f) GDPR — legitimate interests
Categories of personal data: Session, profile and interaction data (aggregated for reporting)

Email activity notifications

Purpose: Send activity-related email notifications (e.g. new message, new match) to users who have opted in.
Legal basis: Art. 6(1)(a) GDPR — consent
Categories of personal data: Email address

Fraud & abuse prevention (verification & biometric fake detection)

Purpose: Detect and prevent fake profiles, fraud and abuse, verify the authenticity of accounts, protect users and enforce the terms of use.
Legal basis: Art. 6(1)(f) GDPR — legitimate interests
Special categories of personal data (Art. 9 GDPR): Facial features (biometric data)
Legal basis for the processing of special categories: Art. 9(2)(a) — explicit consent
Profiling: This processing includes profiling within the meaning of Art. 4 No. 4 GDPR. It is used solely for the purpose stated above.
Automated decision-making (Art. 22 GDPR): This processing includes automated decision-making in individual cases, including profiling. Information on the logic involved and on the consequences is available in our help center at https://www.getfinally.com/help.
Categories of personal data: Facial features (biometric data), Fraud and abuse signals

Group message moderation

Purpose: Ensuring compliance with terms of use (preventing fraud, insults, harassment, etc.)
Legal basis: Art. 6(1)(f) GDPR — legitimate interests
Special categories of personal data (Art. 9 GDPR): Message content (text, voice, images)
Legal basis for the processing of special categories: Art. 9(2)(a) — explicit consent
Categories of personal data: Message content (text, voice, images)

Group messaging

Purpose: Message communication between multiple users
Legal basis: Art. 6(1)(b) GDPR — contract
Special categories of personal data (Art. 9 GDPR): Community participation (public groups), Message content (text, voice, images)
Legal basis for the processing of special categories: Art. 9(2)(a) — explicit consent
Categories of personal data: Community participation (public groups), Message content (text, voice, images)

In-app purchases

Purpose: Unlocking extended paid features
Legal basis: Art. 6(1)(b) GDPR — contract
Categories of personal data: Virtual currency transactions, In-app purchases (products acquired)

Location-based search (radius)

Purpose: Determine the user's approximate location to power proximity/radius search and the approximate-distance display between users.
Legal basis: Art. 6(1)(a) GDPR — consent
Categories of personal data: Location

PayPal transaction data

Purpose: Unlocking extended paid features; retention for statutory tax and commercial obligations
Legal basis: Art. 6(1)(c) GDPR — legal obligation
Categories of personal data: PayPal-provided customer data (name, email)

Personalised advertising

Purpose: Displaying personalised ads
Legal basis: Art. 6(1)(a) GDPR — consent
Profiling: This processing includes profiling within the meaning of Art. 4 No. 4 GDPR. It is used solely for the purpose stated above.
Categories of personal data: IP address, Device data (model, OS, device ID), Advertising IDs

Privacy & communication preferences

Purpose: Store and honour the user's own privacy and communication choices — e.g. location display, who may send messages or calls, incognito/blocking, and email-notification preferences.
Legal basis: Art. 6(1)(b) GDPR — contract
Categories of personal data: Privacy settings (profile visibility, contact options)

Private messaging

Purpose: Message communication between two users
Legal basis: Art. 6(1)(b) GDPR — contract
Special categories of personal data (Art. 9 GDPR): Message content (text, voice, images)
Legal basis for the processing of special categories: Art. 9(2)(a) — explicit consent
Categories of personal data: Message content (text, voice, images)

Profile data storage

Purpose: Data required for matching
Legal basis: Art. 6(1)(b) GDPR — contract
Special categories of personal data (Art. 9 GDPR): Gender identity, Preferred match gender
Legal basis for the processing of special categories: Art. 9(2)(a) — explicit consent
Categories of personal data: Date of birth, Username, Gender identity, City of residence (no exact address), Preferred match gender, Profile photo(s), Usage preference (friendship or dating)

Push notifications

Purpose: Send transactional/functional notifications. Per-channel opt-out in the app.
Legal basis: Art. 6(1)(f) GDPR — legitimate interests
Categories of personal data: Device data (model, OS, device ID), Push token / device registration

Session data storage

Purpose: Adapting app behaviour to the device in use; fraud prevention
Legal basis: Art. 6(1)(b) GDPR — contract
Categories of personal data: IP address, Device data (model, OS, device ID)

Support chatbot

Purpose: Responding to user enquiries via automated chatbot
Legal basis: Art. 6(1)(b) GDPR — contract
Special categories of personal data (Art. 9 GDPR): Message content (text, voice, images)
Legal basis for the processing of special categories: Art. 9(2)(a) — explicit consent
Categories of personal data: Message content (text, voice, images)

User interactions for matching

Purpose: Search and contact initiation between users
Legal basis: Art. 6(1)(b) GDPR — contract
Special categories of personal data (Art. 9 GDPR): Search filter settings
Legal basis for the processing of special categories: Art. 9(2)(a) — explicit consent
Categories of personal data: Reference point of a profile visit, Reference point of a like, Reference point of a match (mutual like), Blocked profiles, Search filter settings, Reported profiles

Voluntary profile information

Purpose: Improving match quality
Legal basis: Art. 6(1)(a) GDPR — consent
Special categories of personal data (Art. 9 GDPR): Smoking status, Religion, Ethnicity, Political opinion, About me (free text), Alcohol consumption, Drug use, Personality questions (free text), Diet (vegetarian, vegan, kosher, …), Relationship type sought
Legal basis for the processing of special categories: Art. 9(2)(a) — explicit consent
Categories of personal data: Education level, Smoking status, Religion, Nationality, Personality type (introvert/extrovert), Ethnicity, Political opinion, Occupation / profession, About me (free text), Languages spoken, Favourite music, Whether user has children, Pets, Sports activity, Tattoos, Body type / physique, Alcohol consumption, Drug use, Party behaviour, Personality questions (free text), Privacy settings (profile visibility, contact options), Height, Diet (vegetarian, vegan, kosher, …), Relationship type sought, Location

Recipients (App)

In the context of our app we share your personal data only with carefully selected recipients, and only where this is necessary for the stated purposes or you have consented. Where we engage external service providers to process data on our behalf, we have entered into data processing agreements with them pursuant to Art. 28 GDPR.

We share data with the following recipients or categories of recipients:

Apple (United States)
AppLovin (United States)
Firebase (Ireland)
Google Ads (Ireland)
Google Analytics (Ireland)
Google Cloud BigQuery (Ireland)
Google Cloud Gemini (Ireland)
Liftoff (United States)
Meta (Ireland)
Mintegral (Singapore)
Moloco (United States)
Pangle (Singapore)
Singular (United States)
Usercentrics (Germany)
Zurkuhl (Germany)

With the following recipients we act as joint controllers within the meaning of Art. 26 GDPR for the respective processing; the essence of the arrangement is made available on request:

Pangle

International data transfers (App)

Where we transfer personal data in the context of our app to countries outside the scope of the GDPR ("third countries"), we do so in accordance with Art. 44 et seq. GDPR. In the absence of an adequacy decision of the EU Commission, we secure the level of data protection by appropriate safeguards under Art. 46 GDPR, in particular standard contractual clauses (SCCs).

The following safeguards apply:

adequacy decision (Art. 45)
EU–US Data Privacy Framework
Standard Contractual Clauses (SCC)

Cross-app display of your profile within the Jaumo network

If you have registered for one of our apps and created a profile within that app, we will ask for your consent after registration to display your profile in other apps of our Jaumo network as well. By doing this, we aim to maximize your chances of connecting with users of our other apps who have similar interests.

In which other apps from the Jaumo network your profile is displayed if you give your consent depends on the specific search criteria you have set within your profile:

If you have not set any search criteria in your profile that match the apps Finally, Disco, Spicy, and/or CSL and you give us your consent, your profile will be displayed within the apps Jaumo, Lovely, and Bloom. For better understanding:

Example 1: If you have registered for the Jaumo app and consented to the cross-app display of your profile, we will also show your profile to users of the Lovely and Bloom apps.
Example 2: If you have registered for the Spicy app and consented to the cross-app display of your profile, we will also show your profile to users of the Jaumo, Lovely, and Bloom apps.

If, on the other hand, you have set special search criteria in your profile that match our other apps Finally, Disco, Spicy, and/or CSL, and you have given your consent, your profile will be displayed not only in the apps Jaumo, Lovely, and Bloom, but also within Finally, Disco, Spicy, and/or CSL, provided these apps correspond to your search criteria. For better understanding:

Example 1: You have registered for the Jaumo app and consented to the cross-app display of your profile. Your profile will also be shown to users of the Lovely and Bloom apps (see above). In addition, you have specified in your search criteria that you are interested in dates with singles over 50. In this case, your profile will also be shown to users of the Finally app.
Example 2: You have registered for the Jaumo app and consented to the cross-app display of your profile. Your profile will also be shown to users of the Lovely and Bloom apps (see above). In addition, you have specified in your search criteria that you are looking for LGBTQ dates. In this case, your profile will also be shown to users of the Spicy app.

Please note that regardless of whether you have consented to the cross-app display of your profile, you will also be shown the profiles of users within the app you are using who have themselves consented to the cross-app display of their profiles. The above explanations and examples apply to these users accordingly.

The cross-app profile display described here only occurs if you have given us your consent via the provided consent banner. The legal basis is therefore always consent pursuant to Art. 6(1)(a) GDPR.

You can revoke your consent at any time by going to the profile tab of the app and deactivating the cross-app profile display in your privacy settings, thereby withdrawing your consent.

App permissions

To use certain functions of our apps, it is necessary to grant specific permissions to the app you are using. If you do not wish to grant these permissions, you will not be able to use the corresponding functions.

If you only want to see people in your vicinity, you must share your location.
You can allow the app to send you notifications, for example, to inform you about new messages.
You can allow the app to access your smartphone's microphone to record voice messages or join a live voice chat.
It is also necessary to allow the app to access your smartphone's camera if you want to take a profile picture, or to access your smartphone's image gallery if you want to select an existing picture as your profile picture.

Legal basis: the processing of personal data following these permissions is in each case the performance of a contract pursuant to Art. 6(1)(b) GDPR. The legal basis for subsequent access to, and storage of, information on your end device following the granting of permission is § 25(2) No. 2 TDDDG.

You are free to grant and revoke the corresponding permissions at any time. Merely granting the permissions does not result in the permanent storage of additional personal data; what is decisive is your use of the respective functions.

Ad funding and Pur-Abo

Our apps are generally free to use. However, since our free service is financed by advertising revenue, using the full range of functions requires you to give us consent for personalized advertising. Otherwise, you have the choice of either using only basic account management functions (changing the password and deleting the account) or purchasing a paid subscription (“Pur-Abo”).

If you have a Pur-Abo, no further consents are required to use the respective app. However, even with an existing Pur-Abo, you can voluntarily give us additional consents, for example, for functions that improve the user experience.

If you grant consent for personalized advertising, we and the advertising partners we engage process personal data for this purpose and access or store information on your end device. The recipients involved are listed in the processing activities above. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG.

You can grant, adjust the scope of, and revoke your advertising consent at any time via the consent banner in the app (profile tab under “Privacy”).

Retention period

We retain your personal data only for as long as necessary to fulfil the respective processing purpose. Thereafter the data is deleted, unless we still need it to comply with statutory retention obligations (in particular under commercial and tax law) or to establish, exercise or defend legal claims. The specific retention period is determined by these criteria and by the legal basis of the respective processing; data we process on the basis of your consent is deleted once you withdraw it, unless another legal basis applies.

Your rights

You have the following rights regarding the personal data we process about you:

Access (Art. 15 GDPR)
Rectification (Art. 16 GDPR)
Erasure (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Objection to processing (Art. 21 GDPR), in particular against processing for direct-marketing purposes
Withdrawal of consent with effect for the future (Art. 7 (3) GDPR)
Complaint to a supervisory authority (Art. 77 GDPR)

To exercise your rights, contact us at privacy@getfinally.com or our data protection officer at f.klytta@wecomply.de.

Obligation to provide data

Where we ask you to provide personal data, this is either required by law or contract, or necessary for entering into a contract. Without such data, the corresponding functions of our Services are generally not available.

Profiling and automated decision-making

We engage in automated decision-making in individual cases within the meaning of Art. 22 GDPR. The affected processing activities are flagged accordingly in the processing sections above.

Profiling within the meaning of Art. 4 No. 4 GDPR is used for the purposes flagged in the processing sections above, in particular to display relevant content and advertising. You have the right to object to such processing at any time pursuant to Art. 21 GDPR.

Changes to this privacy policy

We reserve the right to amend this privacy policy where this is necessary due to changes in the law, case law, or our Services. The most recent version is always available at https://www.getfinally.com/privacy.

Contact

For any questions relating to data protection and the processing of your personal data, please contact us at privacy@getfinally.com. General inquiries should be directed to help@getfinally.com.