Privacy Policy

This website is operated by Corisse. We follow the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth). We treat the Privacy Act as applying to us in full, and we don't rely on any small-business exemption. Privacy questions: hello@corisse.com.

The short version

• We collect what we need to run safe, verified evenings and, later, introductions.
• We never receive or store your ID images, your selfie or your document number. ID checks may be processed outside Australia, including in the European Union.
• Video dates are never recorded. Chats are deleted on a timer.
• We never sell your information, and we don't use advertising trackers.
• Some decisions are made by computer programs, such as who you're paired with and whether an evening goes ahead. We explain them below.
• You can download or delete your data in Account → Privacy & data, or email us.

What we collect

When you join a list

• Waitlist: your email, first name, area of Melbourne, age range, gender, who you'd like to meet (optional), what you're interested in, whether you'd like marketing emails, your confirmation that you're 18 or older, and the campaign or referral link that brought you to us (if any).
• AI Matchmaker founding list: your email, first name, area and age range, and whether you'd like update emails. We never ask for your gender or who you'd like to meet here.

When you have an account

• Account: your email address and the technical records needed to sign you in securely (for example, when you last signed in).
• Corisse Live profile: your first name, area of Melbourne, date of birth, gender and who you'd like to meet (both only with your consent, see below), what you're looking for (from marriage and family-minded to casual dating, or not sure yet), your preferred age range and, if you choose, “a few words about you”. Only your first name is shown to the people you meet.
• Home area (if you add it): a suburb or postcode you choose from a list, its published centre point, how far you're happy to travel to meet, and whether you're open to people from other cities. Never a street address and never your device's exact location.
• Verification result: whether your ID and selfie check passed, the date, the provider, a reference number and whether you're confirmed 18 or older. Never the images, your document number or the date of birth read from your ID.
• Activity: bookings and orders, the evenings you attend, who you were paired with, your private decisions, mutual matches, chats, feedback, reports and blocks.
• Payments: our ticketing provider takes Corisse Live payments at its checkout and shares your order with us (your name, email, ticket type, amount and order status). We never see or store your card details.
• Technical information: the essential cookies that keep you signed in, your device's notification subscription if you turn on notifications, error codes when something breaks (never what you typed), and the dates (not times) you used the app, for counting active members.

You can look around corisse.com without telling us who you are. To book an evening we need to know who you are, because every guest must be a verified adult.

Sensitive information and consent

Some information is “sensitive information” under the Privacy Act. Your gender and who you'd like to meet can reveal your sexual orientation, and the face match in your ID check uses biometric information. We only collect sensitive information with your consent, and only what we need.

• Your gender, who you'd like to meet and your date of birth are kept in a separate, restricted part of our database. We only use your gender and who you'd like to meet if you tick a separate consent box (it starts unticked). If you don't, we save your gender as “Prefer not to say”, leave who you'd like to meet empty, and ask again before your first evening.
• Before your ID check we ask for your explicit consent to the biometric face match, and we keep a record of that consent.
• Sensitive information is never written to logs, never sent to analytics and never sold. You can withdraw consent or ask us to delete it at any time by emailing hello@corisse.com.

Identity verification

• We use a trusted ID verification provider to check your ID and that you're a real person. Its automated systems check that your photo ID is genuine, that you're present at the camera (liveness), that your face matches the ID, and that you're 18 or older. The provider acts as our data processor.
• Corisse itself never stores your ID images, selfie, address or document numbers — we keep only whether your check passed and the date. (We also keep the provider's name, a reference number and the 18+ confirmation.) Our own AI never sees your ID or selfie. When the provider deletes your check, you stay verified at Corisse: we keep the result and its date, and you don't need to check again.
• Our provider keeps verification data only for a short period and then deletes it. It may be processed outside Australia, including in the European Union.
• Keeping banned people out, without face matching: when your check finishes, our server turns the name and date of birth on your ID into a scrambled, one-way code (a keyed fingerprint) and compares it only with the codes of people who are banned from Corisse; then it's thrown away. We store a code only for someone who is banned, and delete it if the ban is lifted. If there's a match, or our ID provider warns that the document may already have been used, a person from Corisse reviews the account before it can book. We don't use face searches or face blocklists.

Corisse Live evenings

• Never recorded: video dates are never recorded, and we never store audio or video. Each video room is private to the two people on the date.
• Your decisions are private: nobody ever sees who said no, or how many people said yes to them. Only mutual matches are revealed, at 9am the day after.
• Tickets: we never send our ticketing provider your profile, ID check, gender, intentions or date of birth.
• Private date notes: notes you write during a date are visible only to you. They're never shown to anyone else, never sent to our AI and never used for matching. They're deleted automatically 7 days after the evening, unless you turn on "Keep my date notes"; then they stay until you delete them or your account.
• Your side for an evening is stored only by Corisse, with your consent, to balance seats and choose your dates.
• Private date feedback is optional and never shown to the person it's about. “I felt uncomfortable” and Leave & report go to our safety team, never to the AI.
• Blocks: if you block someone, you're never paired again and never appear in each other's results. They aren't told.
• Lobby extras: the camera and sound check runs only on your device. Lobby polls and “would you rather” votes are stored once per guest and shown to others only as percentages. Notes you write while sitting a date out stay on your device. We note which versions of Cora's lines you've heard (line names only).

Corisse facilitators

Trained Corisse facilitators (helpers) may assist at an evening. During an evening they may see guests' first names and live safety reports, so they can help quickly. They work under a confidentiality agreement, see only what they need for that evening, and never see ID images or anyone's yes or no decisions.

Cora, our AI host

• Cora is an AI, not a person, and always says so. During an evening she receives only first names and counts (for example how many people are in the lobby), never your surname, email, phone number, date of birth, ID check or anyone's choices. She never joins or listens to private dates.
• “Ask Cora”: your questions and Cora's answers are kept for 30 days, then deleted. Cora only answers from our approved list of questions.
• Cora's voice: Cora is our AI host. Her lines are pre-recorded, captions are always available, and we never record your voice.

Chatting with a mutual match

• Each mutual match gets a private chat on Corisse for 48 hours from the results (you can both agree to extend it), to say hello and arrange to meet in person. Then it's read-only for 7 days, then the messages are deleted automatically. Voice notes follow the same timer.
• Only the two of you can read it. The AI never reads chats. The Corisse team only sees a message if one of you reports it; a reported message is kept with the safety report.
• Optional extras: “Get ideas” conversation openers are written by Cora (an AI) only from the matching cards of people who agreed to AI matching, never from your messages. “Was this conversation worthwhile?” stores only 👍 or 👎.

AI matching (optional)

If you agree (it's off unless you tick the box), our AI writes a short matching card about you and uses it to help choose who you meet, and to write a line or two about what you have in common when you and a match both say yes. You can read your card and turn this off at any time on your account page, under “What Cora knows about you”; turning it off deletes the card.

• It uses: your age band (for example “mid 30s”, never your date of birth), what you're looking for, your area, “a few words about you” if you wrote any, and, only if you agreed to share them, your gender and who you'd like to meet.
• It never uses: your ID check or documents, your exact date of birth, your email, phone number or surname, or anything you didn't agree to share. Every message to the AI passes an automatic privacy check first.

Your home area and travel distance

If you add a home area, we keep only the suburb or postcode you chose, its published centre point (from the Australian Bureau of Statistics) and how far you're happy to travel. We use it for one thing: so you're only paired with people within your distance who are also happy to travel to you. It's never shown to other guests, and we never ask for your street address. “Use my location once” sends your position to our server once, finds the nearest suburb and forgets the position straight away. The map on your profile is drawn from our own copy of OpenStreetMap, so nothing about you goes to a map company.

Checking profile text, and the profile coach

Before “a few words about you” can be shown to anyone, it's checked for things that aren't allowed (sexual content, harassment or hate, self-harm, violence and scam signs such as asking for money, links, phone numbers or email addresses). Everyone's text is checked by simple rules; if you agreed to AI matching, our AI also checks it. The optional profile coach (“Help me write this”) is available once you're signed in and your ID check is done; it sends the notes you type to Cora to suggest wording in your own words, and your notes aren't stored.

Why we collect, use and share it

• to sign you in and keep your account secure
• to check you're a real person and 18 or older
• to plan and run Corisse Live evenings, choose your dates and show your results
• to plan where to open next, and later to suggest AI Matchmaker introductions
• to keep people safe, handle reports and enforce our rules
• to take payments, issue credits and handle refunds
• to find and fix faults, and protect Corisse from abuse
• to send you news and invitations, only if you've agreed
• to meet our legal obligations, including requests from the police or regulators

We share information only with the providers below (to run Corisse), with the other person when you both choose to (for example a mutual match), or where the law requires or allows it, such as to prevent a serious threat to someone's life or safety.

Automated decisions

Some decisions at Corisse are made by computer programs, or a program does something that is substantially and directly related to a decision. Here are the kinds of decisions, the kinds of personal information used, and how they work in plain English. If you have concerns about any of them, email hello@corisse.com and a person will review it.

Who you're paired with at Corisse Live

• Information used: your age and age preferences, what you're looking for, your area, your home area and travel distance (if you added them), your side for the evening, blocks and safety reports, and who you've met before. If you agreed to AI matching, also your matching card.
• How it works: the program first applies firm rules (for example both people's age preferences and compatible intentions, each person within the other's travel distance, and never someone you've blocked). It then shortlists likely pairs with a rules-based score. With AI matching, an AI model compares the two matching cards for each shortlisted pair, in both directions. Finally a scheduling program shares out dates fairly so everyone gets as many as possible.
• Made solely by computer programs. A person from Corisse can check and re-run the plan. Who you see again is always your own decision.
• After a mutual match: you see a short label (Strong, Great or Good match) from the same program, and two or three “why you two” reasons written by our AI from what you both shared. It's a guide, not a guarantee, and we never show a score or percentage.

Whether you can book an evening

• Information used: your verification result and 18+ confirmation, your age and what you're looking for (against the evening's age band and group), seats left on your side, any booking pause, any ban, and whether your account is waiting for a person to review it (for example after a possible match with a banned person).
• Made solely by computer programs, using the rules shown on the booking page. Our ID provider's automated checks do something substantially and directly related: they produce the pass or fail result we rely on.

Whether an evening goes ahead, and postponements

• Information used: how many guests on each side have completed their booking (ticket, profile, ID check and consent).
• How it works: 48 hours before the start, the program checks the numbers against fixed rules. If there are too few, it postpones the evening and emails everyone booked to choose a free move or a full refund; with no choice by the original start time, a full refund. Borderline cases go to a person.
• Made solely by computer programs (borderline cases decided by a person).

Ticket credits and booking pauses

• Credits: issued automatically, using your booking and results, when you cancel later than 48 hours before, when you choose to move from a postponed evening, or under the First-match promise when you attend and have no mutual match. Made solely by computer programs.
• Booking pauses: a person from Corisse confirms who attended; the program then applies a 30-day booking pause to anyone who didn't attend without telling us (and asks for a quick chat after a second time). The program does something substantially and directly related to this decision. There are never fines.

Holding profile text for review

• Information used: the words you write about yourself.
• How it works: rules (and, if you agreed to AI matching, an AI check) look for content that isn't allowed. Anything flagged, or anything the AI couldn't check, is held as “under review”.
• Holding is made solely by computer programs; approving or declining is always done by a person.

When a chat closes

• Information used: when your results were revealed, any extension you both agreed to, and blocks or unmatches.
• Made solely by computer programs: the chat closes at the end of its time, becomes read-only for 7 days, and its messages are then deleted.

Rate limits and abuse protection

• Information used: your account or your connection's internet address, and how many times an action was tried recently.
• Made solely by computer programs: if something is tried too often (for example sign-in codes), it's paused for a few minutes.

Marketing emails

• Information used: your email choices, the date you last used Corisse and when we last emailed you.
• Made solely by computer programs: whether you're sent an occasional email about the next evening, only if you agreed to receive them.

Error monitoring (Watchdog)

Our Watchdog collects error codes, the page where something went wrong and the type of browser, so we can find and fix faults. It makes no decisions about you, never collects what you typed, and a person decides what to fix.

Where your data is stored, and how we protect it

Our database is hosted in Sydney, Australia. Information is encrypted in transit, access is restricted to the people and systems that need it, the most sensitive parts sit in separate restricted tables, and private files use short-lived links.

Service providers

We use trusted service providers to run Corisse — for example for hosting, email, video calls, payments and ID checks. They only use your information to provide their service to us. Some of them may store or process information outside Australia, including in the United States and the European Union.

Things we never do

• We never receive or store images of your ID, or your selfie.
• We never record video dates, and never store audio or video.
• We never sell your personal information.
• We never show anyone who said no to them, or how many people said yes.
• We never show your suburb, postcode or distance to other guests.
• We never store IP addresses for counting visits, and use no third-party analytics.

How long we keep it

• Waitlist and founding list: until launch plus 24 months, or earlier if you leave the list or ask us to delete it.
• Corisse Live: event records (orders, registrations, pairings, decisions, private feedback, survey answers, poll votes, reports) for 12 months. “Ask Cora” chats for 30 days. Mutual-match chats: open 48 hours (longer if extended), read-only for 7 days, then deleted (a reported message stays with the report). Your AI matching card until you turn AI matching off or delete your account. Checkout codes only as a scrambled fingerprint (hash).
• Live waitlists and invites: a waitlist place until the evening has passed; your invite link's visit and sign-up counts until you delete your account. Invites never change a price.
• ID checks: our provider keeps verification data only for a short period and then deletes it. Corisse keeps the result and date while you have an account.
• Home area: until you change it or delete your account.
• Emails we send you: a copy (subject and content, never your address) for 30 days, so we can see exactly what was sent if something goes wrong; after that only a record that it was sent.
• Dates you used the app: 400 days. Site visit counts:totals per day only (no personal information).
• Ban fingerprints: only for banned people, until the ban is lifted.
• Your account: when you choose “Delete my account” (Account → Privacy & data), we wait 7 days in case you change your mind (or delete straight away if you choose), then delete your profile, consents, verification result, bookings, decisions, feedback, matches and chats (for both people), voice notes, notification settings, waitlist places and invites. We keep only what the law or safety requires: order records (email, amount and date) for 5 years for tax; safety reports and their evidence, with your account link removed; our audit log, which never holds your name or email; and, only if there is an open safety report about you or a ban, a one-way scrambled copy (hash) of your email so the account can't simply be made again.

Access and correction

You can ask to see the personal information we hold about you, and ask us to correct it or delete it. When you're signed in, Account → Privacy & data lets you download your own data (one file) and delete your account yourself. Or email hello@corisse.com. We'll respond within 30 days, and we may need to confirm it's you first. If we can't do what you ask, we'll tell you why.

Marketing emails

We only send news and invitations if you've agreed, by ticking an unticked box. We keep a record of what you agreed to and when, as the Spam Act 2003 requires. Every marketing email says it's from Corisse, gives our contact address (hello@corisse.com) and has an unsubscribe link that works without signing in. We'll still send essential messages, such as sign-in codes and booking details.

• Occasional emails about new evenings: if you said yes and haven't used Corisse for 14 days, at most one every 30 days, never around a live evening. To know you've been away, we note the date (not the time) you last used the app.
• AI Matchmaker updates: only if you ticked that box when joining the founding list. They're written by Corisse, say only what's true at the time, and every one has a one-click unsubscribe that works without signing in. You can leave the list at any time.

Cookies and counting visits

We only use essential cookies: the ones that keep you signed in, and, if you open a friend's invite link, one that remembers that invite for 30 days so it can be counted. We don't use advertising trackers or third-party analytics, so there's no cookie banner.

To know how many people visit corisse.com and roughly where from, our own server counts page views without cookies and without storing IP addresses. Each visitor is counted once a day using a scrambled code made from a random value that changes every day and is deleted after two days, so visits can't be linked over time or to you. We keep only daily totals by country, state and city (from your connection's approximate location). If your browser sends Do Not Track or Global Privacy Control, your visit isn't counted at all. If you arrive from a link with a campaign name (for example from Instagram), that name is kept in your browser tab only, so a sign-up or booking in the same visit is counted for that campaign, as a number.

Data breaches

If we suspect a data breach, we assess it promptly and within 30 days. If a breach is likely to result in serious harm, we notify the Office of the Australian Information Commissioner (OAIC) and the people affected as soon as practicable, under the Notifiable Data Breaches scheme, and tell you what you can do to protect yourself.

Complaints

If you think we've mishandled your personal information, please contact us first at hello@corisse.com with the subject “Privacy complaint”. We'll acknowledge it and respond within 30 days. If we don't respond within 30 days, or you're not happy with our response, you can lodge a complaint with the OAIC. For safety concerns, see Safety at Corisse.

Changes to this policy

We'll update this policy as Corisse grows, and tell you about significant changes by email before they apply.