Privacy policy

The short version

We collect what we need to run a dating service and protect the people on it. We do not sell member data, we do not share it with data brokers, and we do not run advertising against your messages. You can export or permanently delete everything from Settings.

What we collect

• Account data — email address, a hashed password, and your date of birth for age verification
• Profile data — photos, the answers you write, and the preferences you set
• Verification data — the live selfie used to confirm your photos, deleted once matched
• Activity data — matches, messages and the interactions that inform recommendations
• Technical data — device type, app version, approximate location and IP address
• Support data — the contents of any report or message you send our team

Why we use it

To operate your account and show you relevant matches, on the basis of performing our contract with you. To keep the community safe and detect fraud, on the basis of our legitimate interests. To meet legal obligations where they apply. Anything that requires your consent — such as optional analytics cookies — is asked for separately and can be withdrawn at any time.

Who we share it with

Service providers who host our infrastructure, process payments, deliver email and support our moderation tooling. Each is bound by contract to process data only on our instructions.

Law enforcement, where we are legally required to respond or where there is a genuine risk to someone’s life. We publish the number of such requests we receive each year.

We do not sell personal data, and we do not share it for cross-context behavioural advertising.

How long we keep it

Active account data is kept while your account exists. After deletion, profile and message content is removed within 30 days, and backups age out within 90 days. A minimal record of removed accounts is retained to stop banned members returning, and billing records are kept for as long as tax law requires.

Your rights

Export and deletion are self-service in Settings. Anything else goes to dpo@brad1012.example and we respond within 30 days. You also have the right to complain to your local data protection authority.

• Access — get a copy of everything we hold about you
• Correction — fix anything that is wrong
• Deletion — permanently remove your account and its content
• Portability — export your data in a machine-readable format
• Objection and restriction — tell us to stop a particular use
• Withdraw consent — for anything you previously opted into

Security

Messages and photos are encrypted in transit and at rest. Passwords are stored as salted PBKDF2-SHA256 digests and are never recoverable in plain text. Access to production data is limited, logged and reviewed, and support staff cannot read your conversations.

International transfers

Data is primarily processed in the UK and the European Economic Area. Where a provider processes data elsewhere, transfers rely on adequacy decisions or standard contractual clauses with additional safeguards.

Children

The service is for adults. We do not knowingly collect data from anyone under 18, and any account we find belonging to a minor is removed immediately along with its data.