Trust & Security

Your safety, by design.

Meeting new people should feel exciting, not risky. Here's how 2NIGHT protects you and your data.

Where your data lives

2NIGHT is a one-night dating app for iPhone that shows who is out near you tonight, so you can match and meet the same evening instead of chatting for days. Almost everything you put into it — account, status, photos, plans, messages — is stored in Supabase, our database, authentication and file-storage provider, processed primarily within the European Union. Apple handles Sign in with Apple, subscription billing and push notifications; a push says that something happened and who it involves, never the contents of a message. The complete list of providers, with what each one sees, is in the Privacy Policy.

There is no analytics, advertising, attribution or crash-reporting service in the app. There is no tracking SDK. We do not sell personal data and we do not share it for behavioural advertising.

Location

Your location is read at roughly kilometre accuracy, only while you are live, and only to centre the Tonight Feed and rank people by distance. Other members receive a rounded distance in kilometres from the server; your coordinates are never sent to anyone. If you have not gone live for about 30 days, a routine on our database snaps your stored position to the centre of your city. Going offline in the app, or turning location off in iOS settings, stops sharing immediately.

Who you want to see

Choosing to see women, men or non-binary people can reveal your sexual orientation, which the GDPR treats as special-category data. So 2NIGHT stores that choice only if you tick a separate, explicit consent box; choosing “Everyone” stores nothing. The choice is never shown to any member and is deleted the moment you withdraw consent, from Settings → Tonight → Who you see. Declining costs you nothing: your feed is not restricted and you are not hidden.

Chats and calls

Nobody at 2NIGHT reads your messages, and the app does not scan them for abusive language. The one automatic check on messages looks for phone numbers, social handles, emails and links — a membership rule about when contact details can be exchanged, not a safety filter. Messages are kept while your account exists and deleted with it, immediately. Video and voice calls run peer-to-peer over WebRTC directly between the two phones; we never hold the call. Your device asks a Google STUN server how it is reachable (Google sees your IP address in that step), and, as on any peer-to-peer call, the other person can see your IP address and you can see theirs.

Reports are confidential by design

When you report someone, the report lands in a queue only our safety reviewer can read. No member can read a report — including the person who wrote it — which is enforced in the database, not just promised here: if you could read your own report, someone who harasses several people could work out which of them filed. The person you report is never told who did, and never sees that a report exists until something happens to their account. Reports closed without action are deleted after 90 days; acted-on reports lose their evidence after 12 months and are deleted after 24. Blocks are equally quiet: nobody is told they have been blocked.

Your rights and controls

From Settings you can export a copy of your data (the export is produced by a function that can only ever return the caller's own data) and delete your account. Deletion removes your profile, photos and messages; reports other people filed about you stay for the periods above, so a record cannot be wiped by deleting and re-registering. You can withdraw location consent, withdraw the “who you want to see” consent, and unblock anyone you have blocked, all from inside the app. For anything else, email support@2night.co; EEA and UK users can also complain to the CNIL, the French data protection authority.

What we do not claim

We do not verify identities, photos or ages beyond the age you declare (the selector starts at 18). We do not run background checks and there is no verification badge. The two-minute video call, meeting in public and telling a friend are the honest substitutes, and our Safety page explains how to use them.