Privacy Policy

Last updated: April 25, 2026

1. The promise

ForReaLove is built on the bet that privacy is part of intimacy. We collect the minimum data we need to run the platform, we never sell it, and we delete what you ask us to delete. This document explains exactly what we collect, why, who sees it, and how to control it.

2. What we collect

Account data: email, username, hashed password (we never store the raw password), display name, age, gender, who you’re interested in, location (city-level), profile photo, optional bio.

Verification data (when you opt in to ID verification): a government-issued ID image and a selfie, processed by our verification partner. We store only the result (verified yes/no) and a reference token. The actual ID images are deleted within 24 hours of verification.

Activity data: matches, messages, gauntlet progress, pod memberships, training plans you create, login timestamps.

Payment data: if you subscribe, our payment processor (Stripe) handles all card data. We store only a customer ID and the resulting subscription state — never your card numbers.

Technical data: IP address, browser type, device fingerprint, pages viewed. Used for fraud prevention and aggregate analytics.

What we do NOT collect: we don’t read your other accounts, we don’t access your contacts, we don’t track you across other websites, we don’t share data with advertising networks.

3. How we use it

4. Who sees what

Other users: see your display name, age, gender, bio, photo, location (city-level), founding-member tier (if you have one). They never see your email, real name, exact location, payment info, IP address, or verification status details.

Our staff: see what’s needed to support you. Access is logged. We do not browse user accounts for entertainment.

Third parties we share with (only what’s strictly necessary):

We do not share with advertisers, data brokers, or anyone whose business model is monetizing your attention.

5. Your rights

At any time, while logged in, you can:

If you’re an EU/UK resident, you have GDPR rights including the right to lodge a complaint with your local data protection authority. If you’re a California resident, you have CCPA rights including the right to know, delete, and opt-out of "sale" (we don’t sell, but the right exists).

6. Retention

Active accounts: data is kept while your account is active.

Deleted accounts: PII is anonymized immediately on request. Aggregate, non-identifying records (e.g., "a user joined a pod on this date") may persist for product analytics.

Verification documents (ID images): deleted within 24 hours of the verification result.

Backups: rolling 30-day window. Residual data ages out automatically.

Legal holds: if law requires us to retain data (e.g., a subpoena), we retain only what’s required, only as long as required.

7. Children

ForReaLove is for adults 18 and over. We do not knowingly collect data from anyone under 18. If you believe we’ve inadvertently collected data on a minor, email privacy@forrealove.com and we’ll delete it within 24 hours.

8. International transfers

Our servers are in the United States. If you access ForReaLove from outside the US, your data is transferred to the US. We use Standard Contractual Clauses (SCCs) where required by EU/UK law.

9. Security

Passwords are bcrypt-hashed (cost factor 12). All traffic is HTTPS with HSTS preload. Tokens have short expirations. Database and cache are not exposed to the public internet. We follow OWASP Top 10 practices and run regular security reviews. No system is perfectly secure. If you spot a vulnerability, email security@forrealove.com — we have a coordinated disclosure policy and reward responsible reports.

10. Changes to this policy

If we make material changes, we email all active users at least 30 days before the change takes effect. Non-material changes (typos, clarifications) are posted with the updated date at the top.

11. How to reach us

Privacy questions: privacy@forrealove.com Security disclosures: security@forrealove.com General support: hello@forrealove.com

ForReaLove is operated by a limited liability company registered in the United States. Our registered business name and mailing address are available on request — email legal@forrealove.com.

This privacy policy is provided in good faith and reflects our actual practices. It is not a substitute for legal advice. Where this policy conflicts with applicable law, the law governs.