Privacy policy

This document is being drafted and will be completed before the service opens.

We process your personal data in accordance with the General Data Protection Regulation (GDPR). This page explains what data we collect, why, how long we keep it and how to exercise your rights.

Who is responsible for your data

Loves Infinity is operated by DG Technology SRL, Brussels, Belgium (company number 0824.504.453), the controller of your personal data.
For any question about your data or to exercise your rights, write to privacy@lovesinfinity.com. We answer within one month.

The data we process

Account: your email address and password (stored only in encrypted, hashed form by our provider Supabase), the dates you signed up and last logged in.
Profile: first name or nickname, date of birth (other members only see your age), gender, who you are interested in, what you are looking for, city and country, height, weight, description, interests, languages and photos.
Activity: likes and favourites, conversations and messages, blocks and reports, the last time you were active, the site language you use and your email preferences.
Premium: the plan you have, its start and end dates and, if you pay online, the status of your subscription (your card details are handled by the payment provider, never by us).
Technical data: IP address and browser information in our providers’ security logs, and the cookies described in the cookie policy.
Who you are interested in can reveal your sexual orientation, which is sensitive data: we only process it with the explicit consent you give when you create your profile (GDPR art. 9(2)(a)). You can withdraw it by deleting your account.

Why we use it, and on what legal basis

To provide the service you signed up for: your account, your profile, search, favourites, messages and Premium (performance of the contract, GDPR art. 6(1)(b)).
To keep members safe: photo review, reports, suspensions, detection of messages that look like scams, and limits on the number of messages (our legitimate interest in a safe service, art. 6(1)(f)).
To send you the emails the service needs (confirming your address, logging in, resetting your password), and emails about new messages while you are away, which you can turn off at any time (contract and legitimate interest).
To meet our legal obligations, for example answering a request from the authorities (art. 6(1)(c)).
We never sell your data, show no advertising and do not use your data to build advertising profiles.

Identity verification (selfie)

Verification is optional. If you ask for it, you send a selfie of yourself copying a pose shown on screen.
Purpose: to show other members, with the verified badge, that the person in your profile photos is really you, and to fight fake profiles. Legal basis: your consent, given by sending the selfie (GDPR art. 6(1)(a)). You can withdraw it at any time by asking us to remove the badge.
No automated facial recognition is used: a member of our moderation team compares your selfie with your profile photos by eye.
If the automatic pre-check is turned on, your selfie is first checked by an artificial intelligence model provided by Anthropic PBC (United States), our processor: only that the pose is the one asked, that one face is clearly visible and that it is a real selfie. It never compares your face with your photos and never tries to identify you. A selfie that clearly fails is refused at once with the reason, without being stored, and you can try again; you can ask for a person to review that decision by contacting us. Anthropic does not use your selfie to train its models.
Your selfie is never shown on your profile or to other members. Only authorised members of our team can see it, through temporary links.
It is stored in private storage at our hosting provider Supabase, in the European Union (Ireland), after its hidden information (such as location) has been removed.
It is deleted as soon as a decision is made, or when you delete your account if no decision was made yet. We only keep the result (verified or not, the date and, if refused, the reason) for as long as your account exists.

Automatic check of profile photos

New profile photos can be checked automatically by an artificial intelligence model, to detect nudity, contact details or advertising, the absence of a face, or a photo that is too blurry or dark.
Purpose: to keep the community safe and publish compliant photos quickly. Legal basis: our legitimate interest in moderating the service (GDPR art. 6(1)(f)).
The model never tries to identify the people in the photos.
Clearly compliant photos are published, clear breaches are refused with the reason, and any doubtful photo is reviewed by a member of our team. You can ask for a person to review any automatic decision by contacting us.
The model is provided by Anthropic PBC (United States), acting as our processor. The photo is sent to it only to be checked, under contractual safeguards for transfers outside the European Union, and Anthropic does not use it to train its models.

Matching: what you are looking for

When you sign up, and later in My account, What I’m looking for, you tell us why you are here (for example a coffee, travel, friendship, a relationship or something casual), the age you are looking for, your answers to a few optional questions and, if you wish, a sentence in your own words.
We use this, with your profile, to suggest matches: people who want what you want and who are looking for someone like you, ranked by how well you fit. Legal basis: the service you signed up for and, because what you are looking for can reveal your sex life or orientation, your explicit consent given at sign-up.
Matching only suggests people: it never decides anything about you, and you can always browse all members yourself. Other members do not see your answers, your own words or your tags; they see why you are here on your profile.
If the optional automatic assistance is turned on, your answers during sign-up (why you are here, your age, where you live and the answers you choose) and what you wrote in your own words are sent to Anthropic PBC (United States), our processor, only to choose the next question and matching tags from a fixed list, under contractual safeguards for transfers outside the European Union; Anthropic does not use them to train its models.
You can change or delete all of this at any time in My account, What I’m looking for.

Who can see your data

Other logged-in members see your profile and approved photos, never your email address or exact date of birth. Members you blocked, or who blocked you, no longer see each other.
Authorised members of our team see what they need to moderate the service (photos, reports, the conversation concerned by a report).
Our processors, bound by contract and only for the service: Supabase (database, files and logins, European Union, Ireland), Vercel (website hosting, servers in Dublin), Resend (sending emails), Anthropic (automatic photo check, and optional reading of what you wrote about what you are looking for) and, if you pay online, Stripe (payments).
Some of these providers are companies based in the United States. Transfers outside the European Union are covered by the European Commission’s standard contractual clauses or by the EU–US Data Privacy Framework.

How long we keep it

Your account and profile are kept until you delete them. Deleting your account (My account, Privacy and data) immediately removes your profile, photos, likes, blocks, verification and conversations (for both sides).
Copies in our providers’ backups disappear within a few weeks.
Reports and the decisions taken on them are kept for as long as needed for the safety of members and our legal obligations, even after the accounts concerned are deleted.
Security logs are kept by our providers for a limited time, usually a few days to a few weeks.

Your rights

You can see and correct your profile at any time in your account, and download all your data in a file (My account, Privacy and data, Download my data).
You can delete your account and data at any time, without having to give a reason.
You can also ask for access, correction, erasure, restriction or portability of your data, object to processing based on our legitimate interest, and withdraw your consent, by writing to privacy@lovesinfinity.com.
You can lodge a complaint with the Belgian Data Protection Authority (www.dataprotectionauthority.be) or the authority of your country.

Adults only

Loves Infinity is reserved for people aged 18 or over. If we learn that a member is under 18, their account is deleted.

Security

Data travels encrypted (HTTPS), passwords are never stored in readable form, identity selfies are kept in private storage, and only authorised team members can access moderation tools.

Changes to this policy

If we change this policy in an important way, we will tell you on the site or by email before the change applies.