OkCupid Shared 3 Million Users’ Photos With a Facial Recognition Firm — And Hid It for 12 Years

OkCupid quietly handed nearly three million users’ photos, location data, and personal details to a facial recognition company in 2014 — not because it was a business partner, but because OkCupid’s own founders were personal investors in that firm. The FTC spent years investigating, OkCupid spent years denying it, and on March 30, 2026, the agency announced a settlement. The settlement includes no monetary penalty — but it permanently bars the companies from ever misrepresenting their data practices again, with future violations carrying financial consequences.

Field	Detail
Case Name	FTC v. Match Group Americas, LLC and Humor Rainbow, Inc. d/b/a OkCupid
Court	U.S. District Court, Northern District of Texas
Defendants	Match Group Americas, LLC; Humor Rainbow, Inc. (OkCupid)
Data Exposed	~3 million user photos, location data, demographic information
Third Party Recipient	Clarifai (facial recognition company)
Data Shared Since	September 2014
Settlement Type	FTC Consent Decree — no monetary fine
Commission Vote	2–0
Settlement Filed	March 30, 2026
Compliance Reporting	Required for 10 years

Your Photos Were Sent to a Facial Recognition Startup — Because OkCupid’s Founders Owned a Piece of It

The data sharing occurred in 2014, when Clarifai’s founder asked OkCupid for the dataset in September of that year. The connection was personal rather than commercial: OkCupid’s founders were financial investors in Clarifai, and the firm requested the data on that basis. One of OkCupid’s founders allegedly supplied the photos via his personal email account.

OkCupid provided the third party with access to nearly three million user photos as well as location and other information without placing any formal or contractual restrictions on how the information could be used. Clarifai is an artificial intelligence company that builds computer vision and facial recognition technology — the kind that trains on large image datasets to identify and classify faces.

OkCupid had represented that it only shared personal information in limited scenarios — such as with service providers, business partners, or affiliated companies, or after notifying users and offering an opt-out. Despite those statements, the company shared sensitive user data with an unrelated third party. That third party was not a vendor, partner, or affiliate, and users were not informed or given any opportunity to opt out.

In plain terms: OkCupid’s privacy policy said one thing, and OkCupid did another — for reasons that had nothing to do with running its dating platform.

Then They Spent 12 Years Covering It Up

The data sharing is one problem. What OkCupid and Match did after it became public is a separate, arguably more serious one.

Since September 2014, Match and OkCupid took extensive steps to conceal — including through trying to obstruct the FTC’s investigation — and deny that OkCupid shared users’ personal information with the data recipient. When a news story revealed that the third party had obtained large OkCupid datasets, OkCupid claimed to the media and OkCupid users that it was not involved with the third party.

Regulators accused OkCupid of obstructing an FTC investigation by trying to hide evidence of data sharing. The FTC ultimately had to enforce its Civil Investigative Demand — essentially a subpoena — in federal court before OkCupid turned over the information the agency requested. That is an unusual and aggressive step that signals OkCupid resisted the investigation at every turn.

The FTC further alleged that OkCupid and Match took extensive steps since 2014 to conceal this data sharing, including attempts to obstruct the agency’s investigation and publicly denying involvement with the third party after a news report surfaced the datasets.

Twelve years passed between the initial data transfer and the settlement announcement.

Related article: Hayward Told Investors Its Pool Business Was Booming — Then the Stock Collapsed. Now There’s a $19.85M Settlement Deadline, June 19, 2026

No Fine. No Cash for Users. Here’s What the Settlement Actually Does

This is where many OkCupid users will feel the settlement falls short — and that frustration has merit.

An OkCupid spokesperson said the company already settled the matter with the FTC without admitting any wrongdoing. The settlement included no monetary penalty and resolved an issue from 2014.

What the settlement does instead is structural and forward-looking:

Under the proposed settlement, approved 2–0 by the Commission, OkCupid and Match are permanently prohibited from misrepresenting how they collect, use, disclose, or protect personal information, as well as the purpose of that data processing and the function of any privacy controls offered to consumers. Future violations could carry monetary penalties.

The consent decree permanently bars Match Group and its subsidiary OkCupid from misrepresenting their data practices and requires ten years of compliance reporting.

In practical terms: OkCupid must now accurately describe what it actually does with your data. If it violates the order — a single misrepresentation about data collection or sharing — that triggers civil penalties. The FTC is betting that the threat of future fines, combined with a decade of mandatory reporting, does more long-term work than a one-time fine would have.

The FTC order also prohibits the companies from misrepresenting how they collect and disclose personal data, including photos and demographic and geolocation data.

This Is the Second FTC Action Against Match Group in Seven Months

This settlement does not stand alone. The settlement is separate from Match Group’s August 2025 $14 million settlement over deceptive subscription and advertising practices. That earlier case involved allegations that Match Group used misleading ads and made it deliberately difficult to cancel subscriptions across its platforms — which include Tinder, Hinge, Plenty of Fish, and Match.com, in addition to OkCupid.

Taken together, two federal enforcement actions in under a year paint a picture of a company with systemic problems in how it treats the people who trust it with some of their most personal information — their photos, their location, their relationship status, their dating preferences.

What OkCupid Users Should Do Right Now

There is no claim form, no compensation fund, and no deadline to file anything in this case. But the settlement has practical implications for anyone currently using OkCupid or Match Group platforms:

Review what data you’ve shared. Log into your OkCupid account and audit the photos, location permissions, and demographic details stored there. Under the new consent decree, OkCupid must accurately disclose how that data is used — so read the updated privacy policy carefully.

Check your privacy settings. OkCupid now faces a legal obligation to make its privacy controls function as described. Use them. Turn off location sharing if you don’t need it for matching. Limit photo visibility to what the platform requires.

Watch for the compliance updates. OkCupid must file compliance reports with the FTC for ten years. If future violations emerge, the FTC now has a much easier path to financial penalties. Monitor FTC.gov for any follow-on enforcement.

Consider what data you give dating apps generally. The Clarifai case is a reminder that photos uploaded to a dating app can end up in places with zero connection to dating — including facial recognition training datasets. That risk exists across the industry, not just at OkCupid.

The Timeline: From a Founder’s Email to a Federal Consent Decree

Milestone	Date
Clarifai founder requests OkCupid data	September 2014
OkCupid founder allegedly transfers photos via personal email	2014
News story reveals Clarifai obtained OkCupid datasets	TBD (post-2014)
OkCupid publicly denies involvement	TBD
FTC opens investigation	TBD
FTC enforces Civil Investigative Demand in court	Prior to March 2026
Match Group $14M subscription deception settlement	August 2025
FTC files complaint and consent decree	March 30, 2026
Commission vote	2–0, March 30, 2026
Compliance reporting period begins	March 30, 2026
Compliance reporting period ends	March 30, 2036

Frequently Asked Questions

Do I need a lawyer to do anything here? 

No. There is no class action claim to file and no compensation fund to access. This is a government enforcement action, not a private settlement. Individual users do not need to take any legal steps.

Is there any money for OkCupid users from this settlement?

 No. The settlement includes no monetary penalty. The FTC’s action results in a permanent conduct prohibition and a decade of compliance reporting — not a fund distributed to affected users. If a private class action lawsuit follows, that would be a separate proceeding.

Was my data actually used to train facial recognition software?

 The FTC’s complaint established that OkCupid provided the third party with access to nearly three million user photos as well as location and other information without placing any formal or contractual restrictions on how the information could be used. Clarifai is an AI computer vision company that builds facial recognition systems. Whether and how it used those specific photos is not addressed in the FTC settlement documents.

Why no fine after 12 years and an attempted cover-up?

 The FTC has not publicly explained the absence of a monetary penalty in detail. The settlement was approved 2–0 by the Commission. Legal observers have noted that the FTC’s authority to seek civil penalties in initial consent decrees is limited under current law — penalties typically attach when a company violates an existing order, which is exactly what the ten-year reporting requirement sets up.

Does this affect Tinder, Hinge, or other Match Group apps?

 The named defendants are Match Group Americas and OkCupid’s operating entity Humor Rainbow, Inc. The consent decree applies to those entities. However, Match Group’s broader portfolio — including Tinder and Hinge — is subject to the August 2025 subscription settlement and the company’s general data governance obligations under applicable privacy law.

Can I sue OkCupid directly for sharing my photos? 

The FTC action does not prevent individual users or a class of users from pursuing private litigation. If a class action attorney determines there is a viable claim — for example, under state privacy laws like the Illinois Biometric Information Privacy Act or the California Consumer Privacy Act — that would be a separate lawsuit. None has been confirmed as of this writing.

Is OkCupid safe to use now? 

OkCupid now operates under a federal consent decree that legally requires it to accurately describe its data practices and prohibits it from misrepresenting what it does with user information. Whether that is sufficient is a judgment individual users must make for themselves.

Sources & References

• FTC Official Press Release — March 30, 2026: ftc.gov
• FTC Case Page — OkCupid/Match: ftc.gov/legal-library/browse/cases-proceedings/okcupidmatch
• Bloomberg Law coverage — March 30, 2026
• ID Tech Wire reporting on Clarifai connection — March 30, 2026

Last Updated: March 31, 2026

Disclaimer: This article is for informational purposes only and does not constitute legal advice. Legal claims and outcomes depend on specific facts and applicable law. For advice regarding a particular situation, consult a qualified attorney.