The Federal Trade Commission reached a settlement with OkCupid and Match Group Americas (NASDAQ: MTCH) over allegations that the dating app shared users' personal information with an unauthorized third party, violating its privacy policies.

According to the FTC complaint filed in U.S. District Court for the Northern District of Texas, OkCupid provided nearly three million user photos along with location and other personal data to a third party that had no business relationship with the company. The sharing occurred because OkCupid's founders were financial investors in the recipient company.

The FTC alleged that OkCupid's privacy policy stated it would not share personal information except with service providers, business partners, affiliated companies, or when users were informed and given the opportunity to opt out. The agency claimed OkCupid violated these promises by sharing data without user notification or consent options.

"The FTC enforces the privacy promises that companies make," said Christopher Mufarrige, Director of the FTC's Bureau of Consumer Protection. "We will investigate, and where appropriate, take action against companies that promise to safeguard your data but fail to follow through."

The complaint also alleged that since September 2014, Match Group and OkCupid attempted to conceal the data sharing and obstructed the FTC's investigation. When media reports revealed the data sharing, OkCupid publicly denied involvement with the third party.

Under the settlement terms, OkCupid, operated by Dallas-based Humor Rainbow Inc., and Match Group Americas are permanently prohibited from misrepresenting their data collection, use, disclosure, and protection practices. The companies also cannot misrepresent the purpose of data collection or the function of privacy controls offered to users.

The settlement allows for monetary penalties if either company violates the agreement in the future. The Commission vote authorizing the action was 2-0.