Request invite
Privacy Policy

Privacy at Hey Cupid!

Effective date: April 29, 2026

What we collect

  • Account data: email or phone, display name, profile fields you set.
  • Verification artifacts: selfie + liveness payload (and ID document at Tier 2).
  • Trust signals: structured feedback, vouches, spark history, video metadata.
  • Payment data: handled by Stripe; we receive only status and customer ID.
  • Usage analytics, with no PII attached.

How long we keep it

  • Biometric / liveness images: deleted within 24 hours of the verification decision.
  • ID document images: deleted within 7 days of the verification decision.
  • Spark session metadata: 12 months.
  • Structured feedback: 24 months from submission.
  • Audit logs: 36 months.
  • Payment records: 7 years (legal minimum).
  • Account PII: deleted within 30 days of a confirmed deletion request.
  • Vouch playback media: up to 24 months, or sooner if archived by the subject or deleted by recorder request.

Legal basis (GDPR/UK GDPR)

  • Account and core service operations: contract performance.
  • Biometric/liveness verification data: explicit consent.
  • Safety and moderation operations: legitimate interests and legal obligations.
  • Marketing communications: consent (opt-in, with opt-out anytime).

Storage region and cross-border transfers

At MVP, Hey Cupid! infrastructure and vouch media are hosted in the United States. For users in regions with transfer restrictions (including EU/EEA and UK), transfers are handled using contractual safeguards such as Standard Contractual Clauses where required.

What we never do

  • We never sell your data.
  • We never publish free-text reviews about you.
  • We never record video calls — metadata only.
  • We never expose your profile to the public web.
  • We never use biometric data for any purpose other than the verification decision itself.

Your rights

Access, correction, deletion, portability, and the right to object — exercisable from in-app settings or by emailing privacy@heycupid.dating.

Vouches

If you record a vouch for someone, you're an unauthenticated submitter. You consent on a standalone screen before camera access. The recording is hosted and played back to Hey Cupid! users on the subject's profile. You can request deletion any time using the link in your submission confirmation email. See the recorder consent for the full text of what you're agreeing to.

Biometric data

We collect biometric data only for identity verification, with strict retention limits and no use for advertising or matching. See the biometric data notice for the full handling policy and per-state notes.