Privacy
What we hold, who can reach it, and how long it stays. This page is deliberately specific: you cannot consent to a retention period you were never told.
Your identity and your profile are kept apart
Your legal name, date of birth and phone number are stored in a different table from the profile a match can ever see, with different access rules. Nothing that identifies you directly is part of what is shown to another member.
No member can look you up
Access is enforced in the database, not only in the interface. A member reading their own record is permitted; a member reading another member's record is refused by the database itself, and that refusal is covered by automated tests that run on every change.
We never hold your identity document
Verification is performed by a third-party provider. Your document and photograph go to them and never to us. There is no field anywhere in our system that could store them.
What the AI never receives
Compatibility analysis runs on your answers, referenced by a pseudonymous code. It never receives your legal name, email address, phone number, exact address, identity documents, or the content of your private messages.
How long we keep things
Six periods, each enforced by a scheduled process rather than by intention.
| What we hold | How long we keep it |
|---|---|
| Verification media we hold | Deleted immediately at the final outcome. No grace period. |
| Raw AI prompts | Never stored. Only the structured result and its version metadata. |
| Record that an account was deleted | 12 months, then purged. |
| Messages | 90 days after the introduction closes. |
| Evidence attached to a report | 24 months after the case is resolved. |
| Your private photographs after deletion | Removed within 24 hours. |
One limitation, stated plainly: the immediate deletion of verification media binds the copies we hold. The verification provider holds the images under their own policy.