Privacy Policy

This policy explains what we collect, why we collect it, who we share it with and what you can do about it. We have tried to write it in plain language rather than legal boilerplate.

1. Who is responsible for your data

TrueHearts Technologies LLC is the controller of your personal data (the "business" that collects it, in the language of the California Consumer Privacy Act).

Registered office: 1201 N Market Street, Suite 1100, Wilmington, DE 19801, United States.
Privacy contact: privacy@truehearts.example.
Responsible team: Privacy & Trust Team.

2. What we collect

Information you give us

• Sign-up details: first name, email address, date of birth, gender, who you want to meet, your city, and what you are looking for.
• Profile content: photos, bio, interests, and anything else you choose to add.
• Verification: the selfie you submit for photo verification. It is compared with your profile photos and then deleted; it is never shown to other members.
• Messages: the content of messages you exchange with matches.
• Support and reports: what you write to us, and reports you make about other members.
• Payment information: handled by our payment processor. We receive a token, the last four digits, the card brand and the outcome - never the full card number.

Information collected automatically

• Device and connection: IP address, browser type, operating system, and approximate location derived from the IP address.
• Usage: pages viewed, features used, and timestamps.
• Cookies and similar technologies: described in our Cookie Policy.
• Advertising identifiers: if you arrive from an ad, the click identifier in the link (for example Google's gclid or Meta's fbclid) and any campaign parameters, so we can tell which campaigns work.

Sensitive personal data

Information about your sex life or sexual orientation can be inferred from a dating profile, and is treated as sensitive personal information under the CCPA/CPRA and as a special category of data under the GDPR. We process it only on the basis of your explicit consent, given when you create your profile, and you can withdraw that consent by deleting your account. We do not use or disclose it for any purpose other than running the service, and we do not "sell" or "share" it as those terms are defined by California law. We do not ask for, and you should not post, information about your health, religion, political opinions or biometric identity.

3. Why we use it, and our legal basis

4. Advertising, analytics and Consent Mode

We advertise on Google and on Meta platforms, and we use Google Analytics 4 to understand how the site is used. These tools set cookies and can share limited data with Google LLC and Meta Platforms, Inc. respectively.

Nothing loads until you allow it. Specifically:

• We implement Google Consent Mode v2. Before you choose, ad_storage, ad_user_data, ad_personalization and analytics_storage are all set to denied.
• The Meta Pixel is initialised with consent revoked, and is only granted consent if you accept advertising cookies.
• Rejecting non-essential cookies means no analytics or advertising identifiers are stored on your device. The site works exactly the same.
• You can change your decision at any time using Cookie preferences in the footer.

We record the date, time and content of your consent choice so we can demonstrate it was given. We do not use these tools to build advertising audiences based on sensitive characteristics, and Google and Meta both prohibit advertisers from sharing data that reveals sexual orientation for ad targeting - we do not do so.

5. Who we share data with

We do not sell or rent personal data. We share it only with:

• Other members - the parts of your profile you choose to make visible. Your email address, date of birth and precise location are never shown.
• Hosting and infrastructure providers - to run the website and store data securely.
• Payment processor - to take payment and handle refunds and chargebacks.
• Email provider - to send confirmations, receipts and, if you opted in, marketing.
• Analytics and advertising partners (Google, Meta) - only where you have consented.
• Moderation and fraud-prevention tools - to screen content and detect abuse.
• Professional advisers, law enforcement and regulators - where we are legally required, or where it is necessary to investigate a serious safety concern.

Every provider is bound by a written contract to process data only on our instructions and to keep it secure.

6. International transfers

We are based in the United States, and some providers operate elsewhere, including in the European Economic Area. Where data is transferred internationally we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, together with technical measures including encryption in transit and at rest.

7. How long we keep it

8. Your rights

Depending on where you live, you have the right to:

• Access a copy of the personal data we hold about you.
• Correct data that is wrong or incomplete.
• Delete your data ("right to be forgotten").
• Object to or restrict certain processing, including direct marketing.
• Portability - receive your data in a machine-readable format.
• Withdraw consent at any time, without affecting processing already carried out.
• Opt out of any "sale" or "sharing" of personal information, and of targeted advertising. We do not sell personal information, and you can switch off advertising cookies at any time from the footer.
• Non-discrimination - we will never give you a worse service or price for exercising a privacy right.
• Complain to a regulator - in the US, your state Attorney General or the California Privacy Protection Agency; in the EEA or UK, your national data protection authority.

The fastest route is Settings in your account, or our data request page. You can also email privacy@truehearts.example. We respond within 30 days and never charge for a first request. We may ask you to confirm your identity before we act, so that nobody else can request your data.

9. How we protect your data

• Encryption in transit (HTTPS/TLS) across the whole site.
• Passwords stored using a modern one-way hashing algorithm - we cannot read them.
• Access to member data restricted to staff who need it, with logging.
• Regular patching, backups and restoration testing.
• If a breach is likely to result in a risk to you, we will notify you and the relevant regulator without undue delay.

10. Children

TrueHearts is strictly for adults aged 18 and over. We do not knowingly collect data from children. If we learn that an account belongs to a minor we delete it and the associated data immediately. If you believe a child is using the service, contact privacy@truehearts.example.

11. Changes to this policy

We will post any update here and change the "last updated" date. If a change materially affects your rights, we will tell you by email at least 30 days beforehand.

12. How to contact us

Privacy questions and requests: privacy@truehearts.example
General support: support@truehearts.example
Post: TrueHearts Technologies LLC, 1201 N Market Street, Suite 1100, Wilmington, DE 19801, United States
Responsible team: Privacy & Trust Team