Privacy Policy

Version: v1-2026-11-11

Ninth Degree Ltd operates LoveTrust and is responsible for the personal information it uses to provide the service. Ninth Degree Ltd is registered in England and Wales (company number 17349571). Its registered office is 195, Suite Ra01 Wood Street, London, United Kingdom, E17 3NU. Contact admin@lovetrust.co.uk for privacy requests and questions. LoveTrust is for adults aged 18 and over.

Information we use

Some information is necessary to create a secure adult account and operate the service: your sign-in email, password handled through Firebase Authentication, age/date of birth, and required onboarding verification details. Without these, we cannot create or provide an eligible account. A general discovery area may be required for location-based matching, but precise device GPS, phone number, optional profile answers, photographs beyond any applicable eligibility requirements, ethnicity, sexual orientation and optional diagnosis declaration have their own feature-specific requirements. The app explains these when requested. You do not need to supply optional data to maintain account and privacy controls.

Information also comes to us from other members when they like, message, block or report you; from Apple, Google and RevenueCat when they report purchases, refunds or membership status; and from your device and service providers when they supply technical, notification and security signals. We do not obtain your clinical records to verify your self-reported HSV diagnosis.

We receive your account details, including your name, email, date of birth and any phone number you choose to provide. Firebase Authentication handles sign-in and account verification. Your profile may include photos, a biography, dating preferences and a general area. You can choose an area without using GPS. If you enable device location, we use location to support nearby discovery. Other members see eligible profile details and general area rather than your precise coordinates.

We handle likes, matches, messages, blocks and reports. A camera-based liveness check uses your device camera and records verification outcomes and related security details. We also process app and device information, notification tokens, technical diagnostics and security logs where needed. Apple or Google handles payment at checkout. We use purchase, subscription, receipt and account identifiers from the stores and RevenueCat to check access, handle refunds and prevent duplicate or incorrect credits.

Why we use it

For ordinary account, profile, messaging, discovery and purchase-access administration, we rely on necessity for the contract with you where appropriate (UK GDPR Article 6(1)(b)). For protecting members, investigating abuse, preventing fraudulent payments, maintaining security and reliable operations, and handling complaints, we rely where appropriate on our legitimate interests (Article 6(1)(f)), assessed against your interests and rights. We process information to meet applicable legal obligations (Article 6(1)(c)), including qualifying accounting and lawful disclosure obligations. Optional device-location processing is based on your permission and the applicable lawful basis for the specific feature. Where we rely on consent, you may withdraw it. For HSV-related health information, a self-reported professional diagnosis, ethnicity and sexual orientation, we also require a separate Article 9 condition, ordinarily your purpose-specific explicit consent, in addition to the relevant Article 6 basis. We do not treat general acceptance of the Terms or reading this Privacy Policy as consent to process or publish special-category information. Billing, account deletion and essential safety operations do not depend on your permission to display sensitive details.

We ask for explicit consent before processing HSV type, whether it is oral or genital, and HSV-related matching preferences for the purposes described in the separate notice. You can withdraw in Account Settings. Withdrawal removes the active health information covered by the notice and stops HSV-based matching. Public HSV display is a separate choice and is off by default. Do not include sensitive information in free-text fields if you do not want eligible members or moderators handling a report to see it. You can separately choose whether to record that a healthcare professional diagnosed your HSV. This is your declaration. LoveTrust does not check medical records or verify the diagnosis. We ask for explicit consent to record it and a separate explicit choice before showing it to eligible members. Visibility starts off. You can turn visibility off without removing the private declaration, or withdraw processing consent and clear the active declaration. Ethnicity and sexual orientation are optional, self-described profile details. We ask for explicit consent to process them and separately ask whether to show ethnicity and whether to show sexual orientation to eligible members. Each display choice starts off. In this release they are for profile completion and optional display only, not compatibility scoring or matching. You can use LoveTrust without providing these details. You can hide either field, or withdraw processing consent and remove both active fields through Account Settings.

How profiles and matching work

Eligible members can discover profiles using age, area, dating preferences, mutual interest and relevant HSV-compatibility choices, subject to the member's settings and access rules. Optional ethnicity and sexual orientation are not matching or compatibility factors in this release. Some eligibility checks (including verified account status, paid access and consent) are performed automatically. Ask us to review a disputed access or moderation decision. We do not claim that identity or safety checks prove any member is medically verified or safe to meet.

Who receives information

Eligible members can see information shared through profiles, likes, matches and conversations. They may save information they have already seen. We use service providers for authentication, cloud hosting, storage, notifications, payment verification and support. These include Google Firebase and Google Cloud, platform notification providers, and RevenueCat. Apple and Google separately handle their store accounts and purchases. Squarespace hosts our website. Staff and authorised reviewers have access where their work requires it. We may disclose information where required by law or necessary for a properly assessed safety or legal purpose. We do not disclose another member's sensitive profile details merely because a user has accepted these Terms; visibility requires the relevant independent choices.

International processing and retention

Some providers or their support teams can access or process data outside the UK, including in the United States. Where UK data transfer rules apply, we assess the recipient and use an appropriate legal transfer mechanism where required (for example, an applicable adequacy regulation or an appropriate contractual safeguard). Contact admin@lovetrust.co.uk for information about the safeguards relevant to your data and how to request a copy. We will not rely on this statement as a substitute for verifying actual processor terms, regional configurations and transfer risks. We keep active profile, health and location information while needed for the account and remove it through verified account deletion or the applicable consent-withdrawal process. Ordinary diagnostics, closed moderation reports and limited payment evidence have separate review periods determined by their purpose, incident severity and relevant law. UK company-tax supporting accounting records generally need to be preserved for six years from the end of the relevant financial year, sometimes longer. For deleted-account Commitment Deposit restoration, where recovery is enabled, we may retain a protected match derived from a verified email and limited store-transaction evidence for up to 24 months (730 days) after account deletion, unless erased sooner where required. This email-based recovery match expires after that window; we do not promise lifetime automatic restoration after account deletion. A past purchase may still be reviewed using independently verifiable store evidence via admin@lovetrust.co.uk, but successful restoration cannot be guaranteed. Our separate payment, security and accounting records may follow distinct purpose-based retention rules and do not prolong the expired email match. We use these records to match and verify a returning purchase, reconcile refunds and prevent duplicate or fraudulent credits. They remain personal data and are subject to purpose-specific retention limits and erasure controls. The Account Deletion and Data Retention information explains how we handle live account data, shared records and provider records. We review retained records, restrict access and delete or anonymise them when the documented purpose ends, subject to holds and provider backup cycles. Ask admin@lovetrust.co.uk for the current applicable retention criteria.

Your choices and rights

For processing based on legitimate interests, you can object to processing and profiling on grounds relating to your situation, subject to lawful exceptions. You can also object at any time to any direct marketing; we must stop processing your information for that purpose. If we make a decision with legally or similarly significant effects based solely on automated processing, additional information and safeguards may be available under applicable law. Contact admin@lovetrust.co.uk if you need explanation, correction or human review of an access or safety decision.

Use Account Settings to manage sensitive consent, visibility and account deletion. Device settings control optional permissions. Depending on your location and circumstances you may have rights of access, correction, erasure, restriction, objection or portability and the right to complain to a supervisory authority. In the UK you can complain to the Information Commissioner’s Office at ico.org.uk. Contact us to exercise a right. We may need to verify your identity. Withdrawing consent affects future processing based on consent.

We do not use acceptance of this notice as agreement to non-essential website cookies. The website’s cookie information and any applicable choices are separate from your LoveTrust app agreement. We will identify material changes and seek a fresh choice where required.