Privacy

What we collect

• Your account. Whatever your sign-in provider tells us — an email address, and an account identifier from Google or Apple.
• Your orientation answers. Which group you are in, your city, your age range and what you are hoping for.
• Your profile. First name, London borough, anything you write about yourself, and your photo.
• The result of your ID check. Pass or fail, and a reference number from Stripe. Not your document, and not the images of it.
• Your activity here. Introductions, who said hello, your conversations, reports and blocks.
• Membership. Whether you have one and when it renews. Stripe holds the card; we never see it.
• Product analytics. Counts and categories, never free text, photos, or anything precise enough to place you at an address.

Sensitive data, treated as such

Being on a dating service implies things about you that data-protection law treats as special category data, including who you are attracted to. We ask for your explicit consent when you join, we keep as little of it as the product can work with, and it is encrypted at rest. Your profile is never public and never visible to search engines.

Why we are allowed to hold it

• To give you the service you asked for — your profile, your introductions and your conversations.
• Because you explicitly consented — for the parts that count as special category data.
• Because the law requires it — records of payments, and of reports that led to action.
• Because we have a genuine interest in keeping people safe — verification, moderation and blocking abuse. We think you would expect exactly this from a product that promises it.

Who else processes it

• Supabase — the database, files and authentication, hosted in London.
• Stripe — the ID check and the payments. Stripe holds your document images and your card; we receive only the result.
• Cloudflare — serving this site and the app.
• PostHog — product analytics, on European servers, with no personal detail in the events.

Nobody buys this data. We do not sell it, we do not share it with advertisers, and there is no advertising here to share it with.

How long we keep it

While your account exists. When you delete your account we remove your profile, photos, messages and orientation answers, and the deletion carries through to backups within thirty days. We keep the minimum record of payments that the law requires, and a record of any report that led to someone being removed, so that they cannot simply come back.

Your rights

You can see, correct, export or delete what we hold, withdraw consent, or object to how we use it. Deletion is in the app under your profile and takes effect immediately; you do not have to ask us. For anything else, write to us at the address that will be published here before launch. You can also complain to the Information Commissioner's Office.

If something goes wrong

We hold verified identities, private messages and photographs for people who often have real reasons not to be seen. If there is ever a breach affecting you, we will tell you and the regulator, quickly and plainly, and we will say what we actually know rather than what sounds reassuring.