| Decide why and how member data is used | You | Your lawful basis, privacy notice and terms. We follow your written instructions. |
| Ask members for consent | Both | You decide what you ask for; we build the screens and record the answers, including consent for device storage (TDDDG §25) and for any face check. |
| Check members are adults | Both | You set the policy for your app. We run the checks, with face and ID checks available from 30 November 2026. |
| Moderation decisions and reasons | Both | You set the rules. Our trust and safety team applies them, reviews reports and records the reasons. |
| DSA transparency reports and database submissions | You | You are the provider under the DSA. We supply the data. |
| Tell regulators and members about a breach | You | We tell you within 12 hours and give you the facts each notice needs. |
| Data protection impact assessment | You | We give you the inputs: data flows, risks and the measures in place. |
| Member requests to see, correct or delete data | Both | Members ask through your app; we do the work and complete it within 30 days at most. |
| Security of the platform | Us | Every control on the Security page. |
| Choosing and checking sub-processors | Us | Reviewed before use and every year, with at least 30 days’ notice of changes. |
| International transfers | Both | The standard contractual clauses in our DPA cover transfers we make for you. |
| Provider details (Impressum) and consumer terms | You | Your app, your name. We build the screens to your text. |
| Card payments | You | Handled by PCI DSS Level 1 payment providers. We never see or store full card numbers. |
