Privacy policy

Information collected at signup

When you sign up with email, Triple Hearts collects your email address, password and date of birth. The password is stored as a password hash, separately from the account record. Your date of birth is write-once and is used to enforce the 18+ age gate. Your age is derived when needed and is never stored.

Your profile

Your profile can include your display name, pronouns, occupation, biography, neighbourhood label, prompts, interests, preferences, lifestyle answers, boundaries, sexual orientation and relationship structure.

Sexual orientation and relationship structure are special-category data under GDPR Article 9. They are shown only to the member and used only by the compatibility score. They do not enter analytics, logs, crash reports or third-party payloads.

Location

Location is coarse only and requested only while the app is in the foreground. The service fuzzes the coordinate on receipt to roughly a kilometre before storage. An exact coordinate is never stored. The app shows a neighbourhood label rather than a street or address and does not track location in the background.

Safety records

Triple Hearts keeps reports, blocks, moderation decisions and the audit records needed to investigate safety concerns, explain outcomes and enforce restrictions. A refused age check creates a short-lived record so that the age gate remains a hard stop rather than a form that can simply be retried.

Advertising, sales and processors

No advertising SDK ships in the current build, and Triple Hearts does not sell member data.

No third-party processor currently receives member data. The classifier, chat and identity vendors have not been engaged. This section will change when one is engaged.

Deletion and retention

When deletion is confirmed, your profile stops appearing in Discover, matches close and active sessions are signed out. You then have 30 days to restore the account by signing in. After that, personal data is erased except for:

• Moderation records kept for a safety or legal reason — 2 years.
• Financial records required by tax law — 7 years.
• A record that an age check was refused — 6 months.
• Deleted content in encrypted backups, which may persist for up to 35 days before aging out.

Everything not on that list is deleted. You can start deletion from the app or at the public account deletion page.

Your rights

You can ask for access to the personal data held about you, correction of inaccurate information, or erasure of your data. You may also complain to the data protection authority where you live. To make a request, contact help@triplehearts.app.