The app claims it uses end-to-end encryption, but spilled its users' dating preferences and granular location data to the open web.