TEN

Privacy Notice

Effective October 10, 2026

Ten is operated by Josh Baptiste. This notice explains how the dating app uses information about adults who visit or create an account. Questions, privacy requests, and photo removal requests can be sent to tendatingapp@gmail.com.

Information we collect

When you sign in with ChatGPT, Ten receives a Site-specific account identifier, email address and, if available, your name. Ten does not receive your ChatGPT conversations or password. When you sign in or sign up through Clerk, Ten receives your Clerk account identifier, verified email address if available, and name if you provided one. Clerk handles the sign-in process, including any social connection or phone verification you choose; Ten does not receive your password or your Facebook credentials. We use these identifiers to recognize and administer your account. Registration collects your name, birth date, phone number, sex, race, dating interests, current city and region, approximate coordinates and a main photo. You can add profile details such as appearance, children, religion, politics, occupation, hobbies, talents, personality, income and body count. Some of these details can be sensitive. Ten also stores partner preferences, uploaded photos and verification selfies, attraction votes and score history, date-interest choices, matches, proposed and confirmed call times, blocks, reports, notification settings and service activity used to prevent abuse.

How we use information

We use profile and preference data to show candidates, give more weight to people who fit your stated preferences, calculate compatibility, enable reciprocal matches and arrange calls. Pairwise votes update a real member's public attraction score after five independent voters have rated their profile. We keep a record of which members have already rated a candidate so repeat votes do not count as new independent ratings. We use account and activity data for verification, moderation, fraud prevention, support and operation of the service. We do not sell member profiles or use this information for targeted advertising.

Location

When you choose Detect my location, your browser sends latitude and longitude rounded to two decimal places to BigDataCloud for a city and region lookup. Ten stores those rounded coordinates to calculate distance and help prioritize people who fit distance preferences. Members see your city and region and an approximate distance when viewing your full profile, not your coordinates. Your browser requires your permission before accessing location.

Incomplete signup

While you create a profile, Ten saves your entered information and signup step privately under your signed-in account so you can resume. Unuploaded photos and Terms acceptance are not saved in the draft. Drafts expire after seven days without a save and are removed during later signup activity, after activation, or when you delete your Ten account.

What other members can see

Eligible signed-in members who receive your profile in a comparison, appear with you on the leaderboard, or have matched with you may see your photos, name, age, race, city, profile information, approximate distance and, after five independent ratings, your attraction score. Your full profile may show sensitive details you choose to reveal. Income, body count, penis size, breast size and butt size are hidden from other members by default; use the eye icon in Edit Profile to control each one. Hidden details can still affect compatibility calculations. Individual votes, personality slider answers, private partner preferences and verification selfies are not shown to other members. A matched call proposer receives the other member’s phone number only after that member confirms a call time; the proposer can then export it in a calendar event. A recipient may keep a screenshot or exported copy of information already shared with them.

Phone alerts

If you turn on phone alerts, Ten stores your device’s push subscription endpoint and encryption keys to send alerts for new matches and phone calls through your browser’s push service. Lock Screen alerts show general event messages, not a person’s name, profile photo, phone number, or call time. You can turn off alerts for that device in Settings or your device settings.

Abuse prevention

Ten uses Cloudflare Turnstile during account creation to distinguish people from automated traffic. Cloudflare processes technical browser and network signals and returns a short-lived challenge token, which Ten validates and does not store. Ten also stores keyed hashes of account and network identifiers in rate-limit counters; the rate-limit table does not store raw network addresses, and expired counters are periodically deleted.

Safety and administration

The Ten administrator can review profile content, verification selfies, reports, voting reliability signals and relevant account activity to investigate abuse, manipulation, safety concerns and violations of the Terms. Photo verification is a likeness review, not a government ID or background check. Blocking removes mutual interests and matches and prevents the two members from appearing to one another in comparisons.

Service providers and storage

OpenAI provides Sites hosting, ChatGPT account sign-in, data storage and operational services for Ten. Clerk provides account sign-in when you choose its phone, email or connected social options; the social provider may process your information under its own terms. Cloudflare provides the Turnstile security check, and BigDataCloud processes approximate coordinates for location lookup. If you enable phone alerts, your browser’s push service helps deliver notifications. These providers process information as needed for those functions. We may also disclose information when required by law or to protect people and the service. Sites does not offer a commitment to store data in a specific country; information may be processed where these services operate.

First-party campaign measurement

Ten measures browser sessions, completed profile registration, returning members, mutual matches and mutually confirmed phone calls to understand which campaigns help people join and connect. It stores random browser/session identifiers and limited campaign labels (source, medium, campaign and content) in first-party browser storage, with first-touch attribution lasting up to 30 days before registration. A session restarts after 30 minutes without activity. Attribution is linked to your account when you register and is not overwritten by later campaigns. To count a matched pair only once, Ten also stores both members’ account identifiers and the time of their first measured mutual match. Reports distinguish unique matched pairs from distinct matched members, with each member attributed to their own original campaign. We do not send these measurements to advertising or external analytics services, and they do not include profile answers, photos, messages or phone numbers. Administrator reports contain aggregate counts, with small groups rolled up or suppressed, and do not expose member or pair identifiers. A mutual match or confirmed call does not establish that a call or actual date took place.

Ten respects browser Do Not Track and Global Privacy Control signals for browser session measurement; unavailable or cleared browser storage can prevent campaign attribution. These browser choices do not disable server-side registration, mutual-match or confirmed-call measurement, which may be counted with unknown campaign attribution. Account-linked attribution, session and call measurement records are removed on account deletion. A mutual-match measurement record remains until either member deletes their account, even if the pair unmatches or matches again, so the pair is not counted twice. Session and call-event detail otherwise becomes eligible for removal after 366 days during maintenance; this time limit does not apply to mutual-match deduplication records. Private aggregate report snapshots refresh on measured visits or administrator report reads, at most every 15 minutes, and can decrease after deletion. Detail eligible for removal and snapshots can remain longer while there is no activity. You can also disable campaign browser measurement for the current tab by opening Ten without browser campaign measurement.

Cookies and device permissions

Sign-in and site operation may use necessary cookies or similar browser storage. Location, notification and camera or photo access require your device or browser permission when requested. Ten does not run its own advertising trackers. You can withdraw a device permission in its settings; disabling location may prevent account setup or location-dependent features.

Retention and your choices

We keep account details, your profile and photos, preferences, votes, matches, call arrangements, and verification selfies (including approved or rejected submissions) while your account is active so Ten can operate. Push subscriptions remain until disabled on that device or account deletion. You can edit your profile and visibility choices, turn off alerts, block or report members, or permanently delete your account in Settings. Account deletion removes your profile and associated app records, uploaded profile photos, verification selfies, records of which members you rated, and push subscriptions from the live app; for Clerk sign-in, it also requests deletion of that Clerk sign-in account. If that request fails, Ten asks you to retry or contact us. Other members' existing aggregate attraction scores may still reflect the effects of your past votes after the individual vote records are removed. A minimal account identifier may be retained to enforce a suspension or another member’s block after deletion.

Safety reports are restricted to the administrator and remain after either member deletes an account so Ten can investigate the report and prevent repeat abuse. A retained report contains the participants’ opaque account identifiers, the reviewer’s identifier, the reason, member-submitted description, decision notes and dates. It does not keep deleted profile fields or images as separate report fields, although submitted descriptions and notes may mention people or contain details a member chose to include. Open reports remain until reviewed. Resolved and dismissed reports become eligible for deletion one year after review and are pruned during later dashboard visits or report submissions, at most once per day. They can remain longer while no such activity occurs.

Abuse-prevention rate-limit counters older than seven days are pruned on later rate-limited actions, at most once per day; they may remain longer when activity pauses. Operational logs or backups controlled by our service providers may remain for their normal retention periods, and we cannot remove copies already exported or saved by other members. Some data may be retained where required by law or for legitimate safety disputes.

Privacy requests and changes

Depending on where you live, you may have rights to access, correct, delete, receive a copy of or restrict processing of your personal information, and to withdraw consent where applicable. Contact tendatingapp@gmail.com with a request; we may need to confirm that you own the account before sharing or changing its information. For removal of an intimate image, see our public photo removal process; you do not need an account. You may also have the right to complain to your local privacy authority. If Ten changes its data practices, we will update this notice and its effective date and provide additional notice when appropriate.