Safety

You have to be 18

Your date of birth is asked for at sign-up and the age is checked on our server, not in the app, so it cannot be edited around. A date of birth that puts you under 18 is refused, and the refusal is remembered, so the answer cannot simply be retried.

Nobody is shown your location

Your coordinate is held on our server and is never sent to any phone, including your own. What another person sees is a place name, and never anything finer than a city - the names come from a public list of places with more than fifteen thousand people in them. There is no street, no map, no pin and no address anywhere in the app, so there is nothing for anyone to read a home or a routine off.

Only people who want the same thing see you

Open to is the one answer that works in both directions. Somebody here only to train is never shown to somebody here only to date, and never sees them either. You are not hiding from anybody, you are simply not in a deck you do not belong in.

Blocking is one tap, and silent

Every card, every profile and every conversation carries the same menu behind three dots. Blocking takes effect at once: the conversation ends, you disappear from each other and they leave your deck. They are not told, and there is no notification that would let anybody work out what you did.

Reporting, and what happens next

Report from the same menu. A report reaches us with the account and the conversation attached, which is why it is faster than an email. When three different people have reported an account, or two have and an automated check agrees, that account is restricted for seven days: it leaves the deck and it cannot send messages. A report of somebody being under 18 restricts on a single report, because that is the one case where being wrong in the other direction is unacceptable.

If your own account is ever restricted, a person will review it. Write to support@pull.dating and somebody will look and tell you what they found.

Only the two of you

No other user can read a conversation but the two people in it, and that is enforced in the database rather than by the app: there is no request a phone can make that returns a thread it is not part of. Nobody can write a message in your name, nobody can change the words you sent, and messages travel encrypted between your phone and our server.

We read what you write in exactly two cases, both automated and both on our own server. Every message is checked against a list of patterns before it is saved, and a conversation that gets reported is scored for abuse and for the shape of a scam. Neither sends a word of it to another company. The Privacy Policy sets out both.

Photo verification is optional

You can verify that the person in your photographs is you. It is optional and nothing in the app requires it. The check runs on our own server in Germany, no verification company is involved, the face template exists only in memory for the seconds the comparison takes, and the frame you sent is deleted the moment the verdict is recorded. What survives is the verdict alone.

Leaving takes nothing with it

Deleting a photograph removes the stored file, not just the row pointing at it. Deleting your account removes your sign-in, your profile, your photographs and your messages, immediately and permanently. Both are in Settings and neither needs to go through us.

If somebody is in danger

Contact your local emergency services first. We can act on an account, and we will, but we cannot reach a person.

Anything else: support@pull.dating. How your data is handled is set out in the Privacy Policy.