Privacy Policy

This notice explains what personal information GreatTogether collects, why we use it, who may receive it, how long we retain it and the choices available to you.

Who is responsible for your information

GreatTogether is operated by Mawi Digital. GreatTogether determines why and how personal information is used for the service and acts as the data controller.

Information we collect

Depending on how you use GreatTogether, we process account and contact details; country, region and language choices; profile text, preferences and photographs; identity-verification status and supporting evidence; membership and payment records; likes, contact requests, private messages, blocks and safety reports; device, security and audit information; and the answers, participant identities, addresses, version history and generated documents used by the Contract Builder.

Profiles and contract planning may reveal sensitive information about health, fertility, sexual orientation, family intentions or relationships. We use this information only where you deliberately provide it and where a lawful basis permits us to operate the requested feature.

Why we use information

• To create and secure your account and provide your chosen country community.
• To display profiles, explain compatibility and let eligible members save profiles or request contact.
• To provide private messaging, safety, moderation, blocking and reporting.
• To verify identities and show verification status without publishing identity documents.
• To create, version, approve, purchase and deliver collaborative contracts to their participants.
• To process memberships and contract purchases, prevent duplicate payments and maintain financial records.
• To prevent fraud, abuse and unauthorised access, investigate incidents and defend legal claims.
• To meet legal, tax, accounting and regulatory obligations and improve service reliability.

Lawful bases

We rely on performance of our agreement with you, our legitimate interests in operating a safe and reliable service, compliance with legal obligations, and consent where the law requires it. Where information qualifies as special-category data, we rely on your explicit and voluntary disclosure/consent or another condition available under applicable law. You may withdraw consent for future use, but that does not make earlier lawful processing unlawful.

Who can see or receive information

Your visibility choices and membership determine what other members can see. A contract plan is available only to its authorised participants and administrators who need access for support, safety or legal operations. We use carefully selected hosting, email, analytics, security, identity-verification and payment providers as processors or independent controllers where appropriate. Stripe processes checkout and payment information under its own privacy information. We do not sell personal information.

International transfers

Service providers may process information outside your country. Where required, GreatTogether uses an adequacy decision, approved contractual safeguards or another lawful transfer mechanism and assesses appropriate security measures.

How long we keep information

Account and profile information is retained while your account is active. Paused accounts remain private until reactivated or reviewed for deletion. Routine platform activity is retained only as long as needed for the service, safety and dispute handling. Financial records are retained for applicable tax and accounting periods. Safety, fraud and audit records may be retained longer where necessary to protect members or establish legal claims. Contract answers, approval evidence, payment records and generated contract versions are preserved for the participants and for document integrity; a deletion request may therefore result in restriction or anonymisation rather than removal where a lawful retention need applies.

Your choices and rights

You can edit your profile and visibility, pause your account and download a private account-data copy from My Account. Depending on applicable law, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent. We verify requests before acting and will explain if information must be retained. You may complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority.

Cookies, analytics and security

GreatTogether uses essential cookies for sign-in, security, preferences and checkout. Optional analytics or marketing technologies should be used only after any consent required in your location. We use access controls, encryption in transit, audit records, rate limits and security monitoring, but no online system can be guaranteed completely secure. Contact us promptly if you believe your account or information has been compromised.

Children

GreatTogether accounts are for adults. The service is not directed to children. Adults must avoid publishing unnecessary information about a child and must have an appropriate basis before sharing a child’s photograph or identifying information.

Changes to this notice

We will update this notice when the service or legal requirements materially change. Important changes will be communicated where appropriate.

Effective: 31 August 2026
Notice version: 2026.08.2

Sign-in records and optional platform insights

For account security and to run the service, GreatTogether records when you last signed in and how many times you have signed in. This record is kept with your account, is visible only to administrators, is included in your data export and is deleted with your profile.

If you allow analytics, GreatTogether also records recent activity times, active-day counts and sampled visits to the profile, discovery, messages and account sections. These counters are also visible only to administrators and are included in your data export and profile erasure. Search reporting keeps only recognised topic words, removes other words and does not store the values you select in member filters. Search totals are not linked to an account, IP address or session and expire after 30 days. You can stop this optional collection at any time through Cookie preferences.

GreatTogether also counts visits and page views on its own server, for everyone who is not signed in. This count uses no cookies, stores nothing on your device and keeps no IP address or other identifier. Only daily totals are kept: how many pages were opened and which ones, which website or campaign link a visit came from, the language section of the site, the country and whether a phone, tablet or computer was used. Your IP address is used once, on GreatTogether’s own server, to work out the country and is then discarded. The technical name of your browser is read once to leave out automated traffic and to recognise the type of device, and is not stored. GreatTogether also counts how often certain steps are taken, such as opening the pricing page, starting a contract or completing a sign-up, for signed-in members as well. These are daily totals too and are not linked to you or your account. If you allow analytics in Cookie preferences, GreatTogether also sets one cookie of its own (mawi_a, kept for at most 13 months) so that your page views and steps can be read as one journey, including where you first came from. If you are signed in, that journey is linked to your account, is included in your data export and is deleted with your profile. If you withdraw your permission, the cookie is removed the next time you open a page. These totals are not sent to any other company.

Identity verification

If you choose to verify your identity, Stripe Identity compares a photo of your identity document with a live selfie (biometric data) for GreatTogether. Stripe asks for your consent before capture. GreatTogether receives only the result; it does not store your document, your selfie or your ID details.