Privacy Policy

Last updated: October 28, 2026

This version of the policy took effect on the date above.

Luvenue is a dating app, so the information you give us is about the most personal parts of your life: who you are, who you are hoping to meet, and where you are. This policy explains, in plain language, what we collect, why, who sees it, how long we keep it, and the choices you have. It is written to be true of the app as it actually works. If you find a sentence that is not, tell us at privacy@luvenue.com.

Who we are. Luvenue is operated by Mocha Innovations LLC, a Delaware limited liability company, 169 Madison Ave, STE 11564, New York, NY 10016, USA. We are the “business” or “controller” for the personal information described here.

Scope. This policy covers the Luvenue mobile app (on iPhone and on Android), the luvenue.com website (including its support, appeals and account-deletion pages), and our emails, texts and notifications. Our website’s cookies are described separately in the Cookie Policy at luvenue.com/cookies, and our use of face analysis is described in more detail in our Biometric Data Notice, which you can open from the app’s Settings and from our website. Luvenue is offered in the United States (not yet in Minnesota, Mississippi, Nebraska or Tennessee; see Section 3.13) and is for adults 18 and older.

The short version

We collect what you give us to build your profile (name, date of birth, gender, the genders you are interested in, photos, bio), your phone number to sign you in, and your location, which your phone rounds to an area about 2 miles (3 km) across before it reaches us, to show you events and people near you.
We don’t sell your personal information or share it for advertising, and we don’t show ads from ad networks. If we show content presented by a business we choose, it is labelled, and we don’t give that business information about you (Section 3.15). We do not collect, use, or sell your personal information to train AI models, including large language models. Some of our service providers’ terms let them use what they process for us to improve their own services, and one of our texting providers, Twilio, may use your phone number to train its own fraud-prevention models (Section 5.2).
Other members can see your first name, age, photos, profile text, and the neighborhood or city name on your profile. They never see your exact location, your last name, or your date of birth, and they don’t see your phone number unless you and a connection both choose to share numbers.
Video calls are live. Audio is never recorded. Still frames are captured at regular intervals during a call and checked automatically for safety; frames our checks don’t flag are deleted after 30 days. We don’t create a faceprint or try to recognize who you are.
Your profile photos, profile text, and the text of your messages are checked by automated tools, some of them run by our service providers, for scams, harassment, child-safety violations and other rule-breaking. A person reviews the reports you file.
You decide what you agree to in the app, and you can change your mind in Settings › Privacy › Your consents.
You can download a copy of your data and delete your account from Settings. Deletion is immediate.

1. Information we collect

1.1 Information you give us

What	Details
Phone number	Used to sign you in with a one-time code; it is how we tell one account from another. Other members don’t see it unless you choose to share it with a connection (Section 3.6).
Name and date of birth	First and last name; your date of birth to check that you are 18 or older (Section 3.13) and to show your age (in years) to other members. You can’t change your date of birth in the app once it is set.
Gender, and the gender(s) you are interested in	Used to run events, build your Explore feed, and keep rooms balanced. The genders you are interested in can reveal your sexual orientation, and describing yourself as non-binary reveals your gender identity. See Section 4 (Sensitive information).
Profile	Headline, bio, hometown, work, education, interests, and the “vibe” you pick (intentions and energies), your preferred language, your age range and distance preferences, and whether you want us to widen your search when your Explore deck comes back empty.
Photos	Your profile photos, and any photos you send in a conversation.
Messages	The messages you send to other members after you connect.
Event registrations and choices	Which events you register for, whether you allow other members to see that you are going, your event-visibility setting, and cancellations.
Likes and the reason for a like	Who you liked or passed on, and, if you choose to say, why you liked someone (a photo, their bio, or one word from a closed list). The reason is shown once to you and never to the person you liked.
Reports and safety requests	What you tell us when you report a member, block a member, or ask us to remove an intimate image (including your typed signature and good-faith statement for the latter), and whether you asked to hear the outcome of a report. A report can include information about a crime against you; Section 4 explains how we use it.
Support, appeals and deletion requests	What you write to us in the app’s support form (which collects no email), or on the website’s support and appeals forms (which collect an email address and, on the support form if you give it, the phone number on your account; a request to delete an account always needs that number), and any screenshot you attach. Requests made in the app also carry the app’s platform (iPhone or Android), version, build and language. A request on our website to delete your account includes the phone number on the account (Section 8).
Consents and settings	Your acceptance of the Terms; your choices on the consent screens (Section 4), including the safety-screening consent; the safety notices you were shown; your consent to receive purchase documents electronically, given before your first purchase; if you are in New York, the written consent New York’s dating-service law requires before your first purchase; and your notification choices. We record each with the date and the version of the text you saw.
Dates you plan	The video dates and Date Rooms you plan with a connection: who invited whom, when, the room you chose, whether the other person accepted, and whether the room was free or used a date credit. See Section 3.7.
Sharing your phone number	If you choose to share the phone number on your account with someone you have connected with, we hold that choice, encrypted, until they choose to share theirs; then both numbers are posted together in your conversation. See Section 3.6.
Cancelling a purchase	If you cancel a purchase: your notice (when, and how you sent it), the state whose rules applied, and how you were refunded. If we refund you directly, the address or payment account you give us for that refund. We use it to process your cancellation and to keep the records the law requires.
Postal address	When you ask us for a paper copy of a purchase document, or write to us by mail, the postal address you give us. We use it to send what you asked for or to reply, and keep it with the record of your request (Section 7).

1.2 Information we collect automatically

What	Details
Location	You set the location on your profile by choosing a spot on the map or, if you tap “Use current location” and allow it, from your phone’s location. Before it is sent, your phone rounds it to a grid of squares about 2 miles (3 km) across, so we receive the rounded point and never your exact position. The app keeps your exact spot on your phone, where it uses it to check whether you’re inside a city where Luvenue is open (it tells us the answer, not the spot), and deletes it when you sign out or delete your account. To name the area shown on your profile, the app looks up the neighborhood or city name from the rounded point. We use your location to show you events and people within your chosen distance, to decide whether we have opened in your area (and to hold your place on a waitlist if not), to check event eligibility, and to work out which state’s rules apply when you buy something (Section 3.14). Other members don’t see your location; they see the place name on your profile.
Your state, before you sign up	Before you create an account, the app checks which US state you’re in. It doesn’t use your phone’s location for this: our server works out the state your internet connection’s IP address points to, and if it can’t tell, the app asks you. We keep the state and whether it came from your connection or your answer, not the IP address itself. To work out the state, our server looks the address up in a copy of DB-IP’s free IP-to-location data that we keep ourselves, so your IP address isn’t sent to DB-IP (IP Geolocation by DB-IP). We use the result to tell whether Luvenue is available where you are, and which state’s version of our Terms you see (Section 3.13).
Events map	When you look at the events map, the app sends us the area on your screen, widened to the same grid, so we can show you the events in it. We use it for that request and don’t keep it.
Video-call frames	During a live video call, still images of your video are captured at regular intervals and analyzed for safety. Audio is never recorded or analyzed. See Section 3.2.
Call and event activity	When your calls started and ended, how each ended, which events you entered, and a short summary of how each event went for you.
Explore activity	Which profiles were shown to you and to whom your profile was shown, and the ranking signals used at the time (Section 3.4).
Device and app information	Your push-notification token, app version, operating-system version, device model, and language; a random ID the app creates when it’s installed (not an advertising ID), which we keep only in a scrambled form, to recognize the phones your account has been used on, as a security check (on iPhone it stays on the phone if you reinstall the app); and crash and performance reports, unless you turn them off (Section 3.12).
IP address	Our servers, and our hosting and sign-in provider (Google), receive your IP address whenever the app or our website connects to them. Our own server logs, which can include it, are kept for 30 days; Google keeps its logs of sign-ins for a few weeks, and of website and app traffic for a few months. We keep the IP address on a website support request for 90 days, and on each submission to our website forms, including the account-deletion page, for a day, to limit abuse. We do not store your IP address in your account.
Invitations	If you invite someone with a link, the link carries an encrypted token so that we can credit your Pass when they join their first event. The token reaches the app when they open the link or, on Android, through Google Play when they install from it. We keep a record of who invited whom, and we delete your invitation records when you delete your account.

1.3 Information we create

What	Details
Ranking signals	Derived counts and rates about your activity, such as how often you like, how many events you attended, and no-shows, used to order Explore (Section 3.4).
Moderation records	Automated classification scores for your profile photos, call frames, profile text, and the text of your messages; strikes, call pauses and suspensions; and decisions on reports about you or by you.
Hashes	A one-way hash of your phone number, and a fingerprint of each of your photos (a short code computed from the whole image, not from your face), used to recognize a returning removed account or a removed intimate image. We also keep a scrambled form of your phone number if you delete your account while it is suspended or under review, or if a member has blocked you, so that a suspension or block still applies if you sign up again (Section 7). A photo’s fingerprint can’t be turned back into the photo.
AI-generated content for you	Icebreakers, event themes, and prompts generated for a conversation or a room, using details from both members’ profiles (Section 5.2).

1.4 Information we receive from others

From	What
The app store and RevenueCat	Records of your Pass and date-credit purchases and any refunds: the product, price, date, and the store’s transaction and order identifiers, linked to your Luvenue account. RevenueCat’s software in the app also records your device type, operating-system version, when the app last checked in, and the store’s receipt or purchase token. We never see your card details.
Your app store (age check)	When you install the app on a phone, before you sign up, the app may ask Apple or Google for the age range they hold for your store account. In some states the law requires your app store to provide it. The app uses the age range, and how the store established it, on your phone to decide whether you can sign up, and then deletes them; they are not sent to us. What reaches us, once you’re signed in, is the result of the check (passed or not) and when. We don’t record which kind of check decided it for your account; we count how many checks of each kind pass, with no link to anyone. We don’t sell or share it, and we don’t use it for ranking, advertising or analytics.
A phone-number lookup provider	When we use this check, at sign-up: the type of line your phone number is on (for example mobile, landline, or internet-based). We keep that type and when we checked. See Section 6.
Other members	Reports and blocks that involve you, likes, and the messages they send you.
Social media	If you follow, message, comment on or tag our accounts on a social network, we see what you send us and what you post publicly there, and we use it to reply to you and to keep our accounts safe. The social network’s own terms and privacy policy cover your use of it. Anything presented by Luvenue on social media that is made with AI is labelled.

1.5 What we do not collect

We don’t ask for your email address or postal address when you sign up; we receive an email address if you write to us by email, use a form on our website, or appeal a decision, and a postal address when you give us one (Section 1.1). We do not collect payment card details, your contacts, the contents of your calendar (the app adds an event to it when you ask, and reads nothing from it), medical records, or your location in the background. We do not create a faceprint or any other template of your face (Section 3.2 and our Biometric Data Notice). We do not read your clipboard: when you paste an invite link, the app checks whether a link may be there without reading it, and the paste itself is your action. We do not collect your device’s advertising identifier, on iPhone or Android, and we don’t show ads from ad networks.

2. Why we use your information

We use your information to:

Run the Services: create your account and sign you in; check your age and the state you’re in before you sign up; build and show your profile; find events and people near you; run event rooms, video calls, and Date Rooms; open conversations after both people tap Keep in touch; pass phone numbers between two members who both chose to share them; generate icebreakers and room prompts; deliver messages; credit and spend Passes and date credits; and keep your settings.
Keep the community safe: screen profile photos, video frames, profile text, and the text of messages for the violations in our Community Guidelines; end calls that show graphic injuries, blood or weapons; act on reports and tell you the outcome when you ask; enforce blocks, strikes, call pauses, suspensions, and removals; recognize returning removed accounts and deter fake ones; remove nonconsensual intimate images; and meet our child-safety reporting duties.
Support you: answer support requests and appeals, and send you the notifications you have chosen.
Meet legal obligations: keep records the law requires; respond to lawful requests; deliver the safety notices some states require; and work out which state’s rules apply to you: whether Luvenue is available where you are, which version of our Terms you see, and which notices, purchase options and cancellation rights apply when you buy something.
Improve the Services: understand how features are used, fix bugs (using crash reports, Section 3.12), measure whether rooms and events work, and understand how people find Luvenue, using counts and aggregates.

We limit our use of each category of information to what is reasonably necessary and proportionate to the purposes described in this policy. How you give us the sensitive information described in Section 4, and consent to its use, is explained there.

3. How specific features work

3.1 Your profile and Explore

Other members can see your first name, age, photos, profile text, interests, vibe, and the neighborhood or city name on your profile. They don’t see your gender or the genders you want to date, though Explore and the rings in event rooms are based on them (Section 4). Members can join events from other cities, so someone farther away with a large discovery radius may see your profile. Who can see that you’re going to an event is your choice, in Settings › Who can see you’re going (the app asks the first time you register): “Anyone I could match with” (members the event is for can see it once they have liked you in Explore, on your profile and on the event), “Only people I’ve liked back”, or “No one”. It is never shown to anyone you have passed on or blocked. Until you choose, the first option applies in the app, and nobody is notified. Once you have chosen, members you’ve liked back who can see it may get one notification when you register, and members who can see it and have turned on room invitations may get a reminder while the event still has room, without your name (Section 3.5). Members can switch these notifications off for themselves. Inside an event room you have joined, the people in it can see you there. Outside a room, we don’t show other members whether you’re online. In a conversation, the other person can see when you are typing. We don’t show them when their messages reach your phone, or whether you have read them.

3.2 Video calls and safety screening

Every video call on Luvenue, whether in an event room, in a follow-up to a call the event cut short, on a video date, or in a Date Room, is live and is not recorded. To keep calls safe, still frames of your video are captured at regular intervals and sent to our moderation provider (Sightengine, operated by Kozelo SAS, France), which returns classification scores for nudity; weapons, alcohol, and drugs; graphic violence; and the apparent presence of a minor. The minor check uses automated face detection and age estimation for safety moderation. We do not use it to identify you, and we do not create or keep a faceprint, a facial template, or any other record of your facial features: the provider sends us back scores, not measurements of your face. Our Biometric Data Notice explains this analysis in more detail. The provider processes the images for us under a data-processing agreement, returns scores, and deletes the images right after processing; it doesn’t create or keep face templates or other biometric identifiers, and doesn’t identify anyone. Frames that trip no threshold are deleted from our storage after 30 days. Frames that trip a threshold are copied to a restricted evidence store and kept for 365 days for review, appeals, and legal reporting. A frame that appears to show someone under 18, without sexual content, is not kept as evidence: we remove the account, keep the scores, and the frame is deleted on the 30-day schedule. If you report someone during or after a call, the still frames of their video from that call are preserved with your report. Before you add a photo or start a call, the app asks for your consent to this screening, and it won’t let you add profile photos or start a call until you have agreed.

Starting a call in an event room. When you walk up to someone in an event room, they see a card with your photo, first name, age and vibe, and choose Accept or Not now. No camera or microphone turns on until they accept. While a card is open, you both show as on a call to others in the room. We record who approached whom, when, and the answer. We keep these records linked to both accounts for 24 hours, to look into unwanted approaches, and after that only as counts with no account attached. If you report someone from an approach, the record is kept with your report. We never tell anyone that you chose Not now, and we don’t use these answers to order Explore or to suggest people.

Graphic content on a call. If our screening finds what appear to be real graphic injuries, blood, or a weapon on a video call, the call ends for both people, and both see a card with 911 and the 988 Suicide & Crisis Lifeline. The member whose video showed it can’t make or join calls for 24 hours; the pause lifts by itself. If it happens twice within 30 days, that member’s account is suspended for 7 days, and three times within 30 days means removal from Luvenue. These steps are automatic, and each can be appealed at luvenue.com/appeals, where a person reviews the appeal. A person also reviews any report about the call. If the other person reports a threat, we suspend the reported member at once while we review it, and a confirmed threat means a ban.

3.3 Photos, profile text, and messages

Profile photos are screened at upload by the same provider, which may also check for text written into a photo, such as a phone number, a handle, or a link, and new profile photos are checked against the fingerprints of images we have removed (Section 6). Photos you send in a conversation are checked against the same fingerprints. On iPhone, if you’ve turned on Apple’s Sensitive Content Warning (or a parent has turned on Communication Safety), Luvenue uses Apple’s on-device check to cover photos you receive that may contain nudity. The check runs on your phone, and we don’t receive its result. Your profile text is screened when you save it, first for contact information (phone numbers, emails, links, handles), then by an automated classifier (Google’s Gemini models, on Google Cloud) for hate speech, sexual solicitation, and harassment. The text of messages is screened by automated tools run by our service providers for scams, attempts to move the conversation off Luvenue, sexual harassment, hate speech, personal information, child-safety violations, and threats. A message that trips a rule may be blocked, removed, or flagged, and flagged items go to a person for review. Photos sent in a conversation aren’t screened automatically when they’re sent, but you can report one. The app asks your permission before sending what you write and share to these tools (Section 4). We never use your messages, photos, or frames for advertising, and we do not use them to train AI models, including large language models. Some of our service providers’ terms let them use what they process for us to improve their own services (Section 5.2).

3.4 How Explore is ordered

Explore is ordered by an automated ranking that combines how recently a member was active, how selectively they like, how many events they have attended and whether they have no-shows, shared event registrations, your distance and age preferences (and theirs), and whether they have already liked you. It does not use your messages or your photos’ content, and it makes no decision with legal or similarly significant effects on you. When your deck is empty we tell you why in aggregate terms (for example, “outside your age range”), never by naming anyone. From January 1, 2027, if you’re in California, the ranked Explore deck appears once your phone’s operating system or your app store has told the app that you’re 18 or older; until it has, you won’t see the Explore deck, and you can still join events. You can ask the app to check again; if your phone or app store then says you’re under 18, we suspend your account, as when you reinstall (Section 3.13).

3.5 Rooms, events, and room invitations

Some events have a set number of places for each gender, so that rooms stay balanced; when the places for your gender are full, you can’t register for that event. If you turn on room invitations (they are off unless you choose them; Section 4), we may send you a reminder when someone you’ve liked or matched with is going to an event that still has room, if their choice in Section 3.1 lets you know. We decide who gets a reminder from likes and matches, among the members the event is for; we don’t use reminders to fill one gender’s places. A reminder doesn’t name anyone, and we send you at most one for each event. We keep a record of which events we reminded you about for 90 days after the event. If you are a California resident and ask us to limit our use of your sensitive personal information, we won’t send you these reminders, even if you have turned them on (Section 10).

3.6 Sharing your phone number

After you connect with someone, you can choose to share the phone number on your account with them. It is the number you sign in with; you can’t type in a different one. Your choice is stored encrypted and is not shown to them. When both of you have chosen to share, the two numbers are posted together, as a message in your conversation; the encrypted copies are then deleted, and the numbers stay in the conversation like any other message (Section 7). A choice the other person doesn’t match within 7 days lapses without telling anyone; a block cancels it. A number that has been shared can’t be taken back, because the other person has it. Two weeks after you share numbers, we may send you one notification asking how it’s going.

3.7 Video dates and Date Rooms

When you and a connection plan a video date (right away or at a time you choose) or a Date Room, we store the session: who invited whom, when it is scheduled, whether it was accepted, the room chosen, the conversation prompts generated for the two of you, the event where you first met, and how long you talked. Which rooms are offered depends on the city on your profile. Your first Date Room with a connection may be free; after that, the person who books it uses a date credit. The other person isn’t shown whether a room was free or who paid for it. After a Date Room, each of you can see a keepsake of those facts: the room, how long you talked, the question you started with, and where you first met. Nothing from the call itself is kept beyond the safety frames described in Section 3.2.

3.8 After an event

After an event we record how it went for you (how many calls, the longest call, and whether you connected) and may send you a recap the next morning. If one of your calls ran out of time when the event ended, we may offer you both a follow-up call to pick up where you left off. If a room did not work for you, we may add a free Pass to your balance.

3.9 People you have met

For 30 days after a call, you can see the first name and main photo of the people you called, which the call already showed you, so that you can report someone after the room has ended. A person who has since left Luvenue or blocked you shows without a name or photo, and the list does not say which.

3.10 No AI profiles

Luvenue doesn’t create or show AI-generated profiles. Every profile you see on Luvenue is one a member made.

3.11 Notifications and texts

Texts. We send text messages for these reasons:

your sign-in code, when you ask for one;
a one-time code to confirm it’s you, when you ask on our website to delete your account, or when you ask us by email for a copy of your data, to delete your account, or to act on another privacy request (Sections 8 and 9.3);
the safety notice described in Section 5.3, if a member you were in contact with is banned for fraud or false identity; and
our reply, when you text us (for example, to confirm that we’ve received a notice cancelling a purchase).

Sign-in codes come from our sign-in provider (Google), and codes for the account-deletion page on our website, when it offers them, come through Twilio. The other texts come from our company phone line, +1 646-504-0011, which runs on Google Workspace Voice (Section 5.2).

Push notifications. We send push notifications about your event and date plans, your matches and connections, room invitations, messages, recaps, safety notices, policy updates, replies to your support requests, the outcome of a report you asked to hear about, your data export, and notices about your account, such as a change to its name or phone number, or a copyright notice about something you posted. In Settings you can turn off event plans, matches, room invitations, and messages. Safety notices, policy updates, notices about your account, and notifications about a request or report you made, including your own data export, are always delivered because they are about your account.

3.12 Analytics and crash reporting

No app usage analytics. The app doesn’t include an analytics library, on iPhone or on Android, and apart from the campaign report described below, it doesn’t send us usage events.

Measuring our own ads. On iPhone, if you installed Luvenue after seeing one of our ads, the app tells Apple, through Apple’s privacy-preserving ad measurement (AdAttributionKit and SKAdNetwork), which of these steps you have reached: finishing sign-up, registering for a first event, entering a first room, and buying Passes for the first time, and roughly on how many days you have entered a room (1, 2 to 3, or 4 or more). Apple decides whether the install came from an ad and later sends the ad network a delayed summary with no identifier for you or your phone; if the install didn’t come from an ad, nothing is sent. The app does this only after the age check (Section 3.13), and it doesn’t use your device’s advertising identifier.

On Android, if you installed Luvenue from a link in one of our own campaigns, Google Play tells the app the campaign’s source, medium and name. This includes invite links that carry one of our campaign labels. Once you have finished signing up, the app sends us those three labels, once. We add one to that campaign’s count for the week and keep the count, not the report, for 24 months; it isn’t stored with your account, and the app sends nothing if you didn’t come from one of our links. Our campaign labels never describe who someone is or who they want to meet.

On iPhone, links to our App Store page from our own campaigns carry a campaign label, and Apple shows us only totals of how many people viewed or installed Luvenue from each one; nothing in them identifies you.

We may add a measurement partner that works for us as a service provider, to count in aggregate how many people install and start using Luvenue from our own ads and campaigns. It would use Apple’s and Google’s privacy-preserving measurement (on iPhone, Apple’s SKAdNetwork and AdAttributionKit; on Android, Google Play’s install referrer), without your device’s advertising identifier and without tracking you across other companies’ apps or websites, and we will name it in Section 5.2 before it starts. Any other usage analytics we add will stay off until you agree in the app, you will be able to turn it off in Settings, and we will update this policy first.

Counts from our servers. Our servers send Google Analytics a small number of counts of what happens on Luvenue, such as that a photo was declined, with a general category (for example, nudity). Each count carries a random identifier of its own: it is not tagged with your account identifier, name, profile, messages, or location, and nothing about child safety or anyone’s health is sent. Ad-personalization signals are disabled, we have no advertising accounts linked, and Google Signals is off.

Crash reports. When the app or our servers hit an error, a crash or performance report goes to Sentry, our error-monitoring provider. A report can include your device model, operating-system and app version, a random identifier for your installation of the app, and the screens and network requests that led up to the problem. We have set Sentry up so that reports leave out what you send us, such as your profile or messages, and leave out your account identifier and phone number. You can turn off crash reports from the app in Settings › Privacy › Share crash reports. The app doesn’t start crash reporting, our purchase software (RevenueCat), or push notifications until you have passed the age check (Section 3.13).

3.13 Age checks, and where Luvenue is available

When you install Luvenue on a phone, the app checks your age before you can sign up.

Your app store and your date of birth. First the app may ask your app store for the age range it holds for you; then it asks for your date of birth. If either shows you’re under 18, the app tells you that you can’t join, and no account is created.
Where you are. Before you sign up, the app also checks which state you’re in, without using your exact location (Section 1.2). Luvenue isn’t available yet in Minnesota, Mississippi, Nebraska or Tennessee, so you can’t sign up there.
If you’re refused. The app remembers a refusal on that phone for up to 30 days (on iPhone, in the phone’s keychain, which stays even if you delete the app). If you had already signed in when the app refused you, it also deletes the account you had started; if it can’t, it tells you so, and you can ask us to delete it (Section 8). We also record the refusal on our servers against the phone’s scrambled install ID (Section 1.1), for 30 days, so that reinstalling the app doesn’t undo it; if you had started an account, that record stays for the 30 days after the account is deleted, without your account identifier.
If you reinstall, or signed up before these checks. If you reinstall the app on a phone where you’re still signed in, the app asks your app store again, and if the store says you’re under 18, the app tells us and we suspend your account (Section 11). If you have been signed in since before the app began checking ages, it asks your app store once. If an age appeal found that you’re 18 or older, we remember that on your account, so a later answer from your app store doesn’t suspend you again; a person looks at it instead.
A parent’s consent, on iPhone. We keep the App Store’s identifier for your download of Luvenue with your account, so that if Apple tells us a parent has withdrawn consent for the app, which can only concern someone under 18, a person can find the account and check it. We use it for nothing else, and we delete it with your account.
What we keep. If you pass, the app keeps your date of birth on the phone until you finish signing up, then sends it with your profile. We keep the result of the check (passed or not) and when, and, if an age appeal found that you’re 18 or older, that and when. We don’t record which kind of check decided it for your account, except that if you’re in California we record that your phone or app store has told us you’re 18 or older, and when, so we can show you the Explore deck (Section 3.4); that record is deleted when you delete your account, or within 15 days if you withdraw the consent for your gender, who you want to date, and your location (Section 4). We keep no age range or other age information from your app store. We don’t use the result for ranking, advertising, or analytics.

3.14 Purchases and your state

Purchases aren’t open in the app yet. When they open, they work as this section describes.
Before your first purchase, the app asks you to agree to receive the purchase contract, notices, and receipts electronically. When you ask, we mail you a paper copy free of charge, to the postal address you give us (Section 1.1).
Before you pay, the app shows the notice your state’s law requires. To pick the right one, we use the location on your profile and, if you have allowed location access, where your phone is at that moment, without receiving your exact position. If they point to different states, or you’re close to a state line, we show the notice of each state that applies; if we can’t tell, we ask you.
Each purchase has a receipt in Settings › Purchases, with its contract and your state’s notice, which you can save.
We use your state to decide which purchases we can offer you and to apply limits some states set. For now, purchases are switched off if the location on your profile, or where your phone is when you try to buy, is in Iowa, Minnesota, North Carolina, or Ohio, while you’re on a waitlist, and while your account is paused (Terms of Service, Section 5).
If you cancel a purchase under a right your state’s law gives you, we keep the records described in Section 1.1. Refunds for App Store purchases are handled by Apple.

3.15 Content presented by a business

Some rooms, recaps or offers may be presented by a business we choose, for example a brand that pays for a room so it’s free to join. Anything presented this way is labelled. We choose where it appears by the room or event, not by tracking you, and we don’t give the business information about you; it may receive totals, such as how many people saw an offer. If you use its offer, you deal with that business directly, under its own terms and privacy policy, and it can tell the offer came from Luvenue.

4. Sensitive information, and your consent

Some of what we hold is treated as sensitive under state privacy laws:

the gender(s) you are interested in, which can reveal your sexual orientation;
your gender, if you describe yourself as non-binary, which reveals your gender identity;
your location: the exact location the app uses on your phone, which we receive rounded (Section 1.2);
information about a crime against you that you give us in a report or an intimate-image removal request (Section 6);
the contents of your messages, which California law treats as sensitive (Section 10); and
your photos and video frames, which are analyzed for safety, including by face detection and age estimation (Section 3.2).

How we use it. We use sensitive information to run the service you ask for and to keep it safe: to show you people and events that fit who you want to meet and where you are; to decide whether Luvenue is open in your area, and to hold your place on a waitlist if it isn’t; to check which events you can join; to keep rooms balanced (Section 3.5); to work out which state’s rules apply to you (Sections 3.13 and 3.14); to check age; to screen profile photos, frames, profile text, and the text of messages for safety; to act on reports; and to count, in aggregate, how many members are in each city. We do not sell sensitive information, share it for advertising, or use it to train AI models.

How we ask for your consent. We ask for the consents a state’s law requires of us there. If you sign up in Connecticut, or your profile or phone places you there, then before you tell us your gender and who you want to meet, the app asks for your consent on a screen of its own, “Before we introduce you”. It says what each choice covers and who receives the information: our service providers, who work for us (Section 5.2), and other members, who see the neighborhood or city name on your profile, never your exact location, and don’t see your gender or the genders you want to date. On it you can agree, or not, to:

our use of your gender, who you want to date, and your location to run Luvenue as this section describes. You can agree to all three at once, or tap “Choose separately” to decide on each. Luvenue can’t introduce you to anyone without them;
room invitations (Section 3.5), which are off unless you turn them on; and
our sending some of what you write and share to automated tools run by other companies: Google (its Gemini models check what you write and suggest conversation starters), Sightengine (it checks photos and video frames), and Stream (it carries and checks messages). This permission has its own tap.

Everywhere else, the Welcome screen asks for item 3’s permission with a box of its own, next to the box for our Terms. Luvenue can’t work without that permission, because we use these tools to check photos, profiles, chat and calls for safety, so you can’t sign up without it. Room invitations are off unless you turn them on in the app. If your version of the app doesn’t show these screens yet, update it: until you agree, the features that need these consents stay off for you.

What other members can work out. Other members don’t see your gender or the genders you want to date on your profile. But Explore and the rings around people in an event room are based on them. Explore shows you to people who are looking for someone of your gender and whose gender you’re looking for. In a room, a ring around you tells someone your gender is one they’re looking for, and a double ring, labelled “Looking for each other”, tells them you’re looking for theirs too.

Before the app asks your phone for your location, it tells you what we use it for, and you decide through your phone’s permission prompt, or choose a spot on the map instead. If you sign up in Illinois, Texas, Washington or Colorado, or your profile or phone places you there, the app also asks separately whether you agree to safety screening, including face detection and age estimation (Section 3.2 and our Biometric Data Notice), before you add a photo. When you report someone, the app tells you, above the send button, how we use what you tell us, including anything about a crime against you, and sending the report is your agreement to that use. We keep a record of each choice and of the text you saw.

Withdrawing your consent. You can withdraw any consent you have given at any time, as easily as you gave it: in the app at Settings › Privacy › Your consents, where each has its own switch, or by writing to privacy@luvenue.com. We stop the processing you withdrew as soon as we can, and within 15 days. What happens next depends on the consent:

Your gender, who you want to date, and your location. Luvenue can’t introduce you to anyone without knowing who you want to meet, or show you events near you without your location, so withdrawing this consent pauses your account (you are hidden from Explore and event rooms, as when you pause it yourself), and within 15 days we delete your gender, the genders you want to date, and your location, and the records we built from them: the state you signed up from, the California Explore record (Section 3.13), and the record of room invitations and event notifications we sent you. Your likes and matches stay, unused while your account is paused. If you want to use Luvenue again later, you give your consent again and enter them again.
Room invitations. We stop sending them.
Automated tools. We stop sending your information to those tools. Luvenue can’t work without them, because profile photos, profiles, chat and video calls are checked with them, so withdrawing this permission pauses your account: you are hidden from Explore and event rooms, and your upcoming event registrations and planned dates are cancelled, with their Passes and date credits returned to you. Nothing is deleted because of it, and the pause lifts when you agree again.
Safety screening. You can’t add profile photos or join calls until you agree again.

Withdrawing consent does not delete your account. If you also want us to delete your information, you can delete your account at any time (Section 8).

5. Who we share your information with

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We have not done either in the past twelve months. We share personal information as follows.

5.1 Other members. As described in Section 3: your profile as members see it, your live video in a call, your messages to the people you connect with, your presence in a room, and your phone number if you and a connection both choose to share numbers.

5.2 Service providers that work for us. These companies process personal information on our behalf to provide their services to us, and we give each one what its job needs. They work under written terms with us. Some of them may also use limited information for purposes of their own that their terms allow, such as keeping their services secure, preventing fraud and abuse, and improving their services.

Provider	What they do for us	What they receive	Where
Google LLC (Firebase, Google Cloud, Gemini models, Google Analytics, reCAPTCHA)	Sign-in, database, storage, real-time presence, push delivery, and server hosting; the Gemini models that screen what members write and help write icebreakers, video-date prompts and event content; counts from our servers in Google Analytics (Section 3.12) and, on our website, Google Analytics if you accept analytics cookies (Section 14); and reCAPTCHA on our website forms	Substantially all account data; what members write, for screening; and profile details (such as age, hometown, interests, headline and bio) to write icebreakers and video-date prompts. If Google’s automated checks flag text sent to its AI models as possible misuse of its services, Google may keep that text for up to 90 days, and its authorised staff may review it; its terms don’t let it train AI models on that text	Our database and storage, and requests to Google’s AI models, are in the United States. Some other Google services we use (for example, the network that carries website and app traffic, push delivery, and Google Analytics) aren’t tied to one country
Sightengine (Kozelo SAS)	Photo and video-frame safety classification, including face detection and age estimation	Photos and call frames	France
Agora, Inc.	Real-time video and audio transport, and capturing the still frames for screening	Your live video and audio (audio is not stored), and call details such as account identifiers and device information. It holds the 30-second stills briefly on their way to our storage (up to 7 days if an upload fails)	North America (the United States and Canada)
Stream.io, Inc.	Chat delivery and storage, push notifications for messages, and filters that stop links and contact details being sent in messages	Your messages, first name, photo address, member identifier, and chat push token	United States: our chat is hosted in Stream’s US East region
RevenueCat, Inc.	Purchase management for App Store and Google Play purchases	Your Luvenue member ID, purchase and refund events, the store’s transaction identifiers and receipt or purchase token, and your device type and operating-system version	United States
Twilio Inc.	The phone-line type check at sign-up, when we use it (Section 6), and the one-time codes that confirm a request to delete your account on our website (Section 8) or to move your account to a new phone number (Section 9.3)	Your phone number. Twilio may also use it for purposes of its own under its own terms: keeping its services secure, preventing fraud and abuse (including training its own tools and models for that), analytics, and developing its products	United States; a code may be delivered through Google’s RCS messaging, which can process it in other countries
Google LLC (Google Workspace)	Our mailboxes (support@, privacy@, safety@, legal@ and our other team addresses), with Google’s AI features in Gmail, which help us sort, summarize and answer emails; and our company phone line, +1 646-504-0011, on Google Workspace Voice: the one-time codes for requests made by email, fraud notices, and our replies to your texts; and the calls, voicemails, and texts you send us	Emails people send us, with their contents and attachments, and our team’s alerts about new support requests and appeals (a reference, the category, a link to our dashboard and, so that we can reply, the email address typed into the request); your phone number, and what we and you say in those texts, calls, and voicemails. Google’s terms for these services don’t let it train AI models on our emails	Google’s services aren’t tied to one country (Section 13)
Sentry (Functional Software, Inc.)	Crash and error monitoring	Crash and performance reports (Section 3.12)	United States; Sentry’s affiliates in other countries may access them to support its service
Resend (Plus Five Five, Inc.)	Sending our emails: alerts to our team about new support requests and appeals, replies to appeals and intimate-image requests, and emails about changes to our policies	Email addresses; for alerts to our team, a reference, the category, a link to our dashboard and the email address typed into the request; for emails to you, what the email says; and records of each email sent, which Resend also uses to run its own service	United States
Slack (Salesforce)	Internal alerts to our team	A reference, the alert’s category and a link to our dashboard; for feedback from the app, also the app’s platform, version and language; for a child-safety alert before a case number exists, the account identifier; never what anyone wrote, phone numbers, email addresses, photos or video	United States

Anyone outside Luvenue who helps us review safety reports does so under a written confidentiality commitment.

App stores and your phone’s own services. Apple (App Store) and Google (Google Play) distribute the app and process your payments under their own terms and privacy policies, and tell us about your purchases and refunds and, on iPhone, if a parent withdraws consent for the app (Section 3.13); for that they are not our service providers. When the app asks for your age range (Section 3.13), your app store answers under its own terms. The maps in the app are drawn by Apple Maps on iPhone and by Google Maps on Android, which load the area of the map on your screen; if you center the map on yourself, that area is around where you are. On Android, Google’s maps software also sends Google your IP address, details of your device and the app, an identifier for the maps software, crash data, and how you use the map, which Google uses to run and improve its services. To name the area shown on your profile, the app sends the rounded point (Section 1.2), never your exact location, to Apple’s place-name service on iPhone or to your Android phone’s, which is usually provided by Google. Apple and Google handle all of this under their own privacy terms. Push notifications reach your phone through Apple’s and Google’s notification services; each carries a coded reference to the account it is for, so the app shows it only when that account is signed in. If you translate a member’s bio, your phone does the translation with Apple’s translation service on iPhone or Google’s on-device translation (ML Kit) on Android, under their terms; we never receive the text or the translation, and on Android, ML Kit sends Google information about its use, such as the languages involved and diagnostic data, but not the text.

5.3 Safety and legal. We disclose information when we reasonably believe it is necessary to: comply with a law, regulation, subpoena, court order, or other lawful request; report apparent child sexual abuse material or other reportable child exploitation to the National Center for Missing & Exploited Children (NCMEC) as federal law requires; protect the safety of any person; investigate fraud, abuse, or security incidents; or enforce our Terms. If we ban a member for fraud or false identity, we notify the members who exchanged messages with them, had a video call with them, or received an invitation from them. The notice includes the banned member’s first name and profile identifier, when you were last in contact with them, the reason for the ban, and advice on avoiding scams, and nothing else about them.

5.4 Business transfers. If Mocha Innovations LLC is involved in a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction, subject to this policy.

5.5 With your direction. When you ask us to, for example to add an event to your calendar.

6. Safety, moderation, and child safety

Automated actions. Automated systems can reject a photo, block or remove a message, end a call, pause your calls for 24 hours, add a strike to your account, suspend you for a period, or, for the most severe violations (such as explicit nudity on video or the apparent presence of a minor), remove your account, without a person looking first. How we handle graphic injuries, blood, or weapons on a call is described in Section 3.2. You can appeal a restriction at luvenue.com/appeals, and appeals are read by a person.

Support, always in reach. The app shows the 988 Suicide & Crisis Lifeline (call or text 988) and other support resources in Settings and in the menu during a call, and they are listed on our Safety Policy page. If you’re worried about someone you’ve met, the app shows you ways to help, such as calling 911 if they are in immediate danger and you know where they are, or sharing 988 with them; that screen stays on your phone and sends nothing to us. We don’t use automated tools to look for signs that someone may harm themselves.

Reports. When you report someone, we preserve what was reported at that moment (their profile as it stood, the still frames of their video from a call you report, or the message you name) so that the report survives anything the other person does afterwards. Reports go to a person for review. If what you tell us includes information about a crime against you, we use it to review your report, to act against the account responsible, and, where the law requires it or someone’s safety is at risk, to share it as Section 5.3 describes. Reporting is not visible to the person reported. You can see a short status for each report you filed, in the app: received, reviewed, and whether we took action. If you asked to hear back when you reported, we also send you one notification when our review is done. We never tell you anything else about the other person’s account.

Fake and duplicate accounts. To make fake and duplicate accounts harder to create, we may check what type of line the phone number you sign up with is on (for example mobile, landline, or internet-based), using a phone-number lookup provider (Twilio, Section 5.2). We keep the line type, when we checked, and, if our team reviews the account, the outcome of that review; we don’t keep the provider’s full answer. An account that uses an internet-based number may be reviewed by our team. No other member sees any of this.

Child safety. Luvenue is for adults 18 and older. We use automated tools and human review to detect apparent child sexual abuse material and other child exploitation. When we obtain actual knowledge of apparent child sexual abuse material or other reportable child exploitation — including apparent sex trafficking or enticement involving a minor — we report it to the National Center for Missing & Exploited Children (NCMEC) and preserve the related content and records as required by federal law (18 U.S.C. §2258A). These safety records are retained even if the associated account is deleted. If we learn that an account belongs to someone under 18, we handle it as Section 11 describes.

Nonconsensual intimate images. Anyone, member or not, can ask us to remove an intimate image of them shared without consent, in the app (Report → “Intimate image shared without my consent”) or by email to safety@luvenue.com. We keep a record of each request (your signature, your statement, where the content was, what we removed, and when) as evidence that the request was received and acted on, for the period in Section 7. We keep a fingerprint of each removed image and check new profile photos against it. Details are on our Intimate Image Removal page.

Copyright notices. If someone sends us a copyright notice about your Content, we may tell you their name and which work it concerns. If you send us a counter-notice, the law requires us to send a copy of it, including your name, address, and telephone number, to the person who sent the notice. We keep records of notices, counter-notices, and the copyright strikes they lead to, to run our repeat-infringer policy (Terms of Service, Section 15).

Returning removed accounts. When we remove an account for a violation, we keep a one-way hash of its phone number and fingerprints of its photos, linked to an internal account number rather than to your profile, so that the same person cannot simply register again. If New York’s dating-service law applies to the account’s purchases, we delete them instead when the account is closed (Section 8).

7. How long we keep your information

We keep personal information for as long as we need it for the purpose we collected it for, and then we delete or anonymize it. The table below sets out the periods we apply.

Information	How long
Your profile, photos, preferences, and settings	Until you delete your account
Your location	The rounded point: until you update it or delete your account. The exact spot kept on your phone: until you set a new one, sign out, or delete your account
Messages	While the conversation is active. Conversations with no activity for 12 months are automatically and permanently deleted. When either participant deletes their Luvenue account, all of that person’s conversations, including the other participant’s copy, are permanently deleted. Phone numbers you and a connection both chose to share are a message in your conversation, kept and deleted with it.
Unflagged video-call frames	30 days
Flagged moderation and report evidence (frames, photo copies, a reported message)	365 days
Removed intimate-image copies	365 days; the image fingerprint indefinitely, so that we can recognize the image if it is uploaded again
Intimate-image removal requests (the signature, statement, email address, where the content was, and what we did)	5 years after the request is closed; then we delete the requester’s name, email address, and statement, and keep the reference, dates, outcome, and image fingerprint
Child-safety evidence	At least one year after a report is filed, as federal law requires, and for as long as any investigation needs
Call history, event history, event recaps, finished video dates and Date Rooms (and the keepsake drawn from them), and the record that you shared numbers	12 months
Event-room approaches (who approached whom, when, and the answer)	Linked to both accounts for 24 hours, then kept only as counts with no account attached. An approach that is part of a report is kept with the report
Explore impressions and ranking signals	90 days (impressions); signals are recomputed continuously and deleted with your account
Room invitations, match-event pushes, registration cancellations	90 days after the event ends
The scrambled install IDs of the phones your account has been used on	13 months after a phone was last used with your account, or until you delete your account
A refused age check’s record against a phone’s scrambled install ID	30 days, including after an account started on that phone is deleted (without the account identifier)
The App Store identifier for your download of Luvenue (iPhone)	Until you delete your account
Like reasons	Until shown to you, and at most 12 months
Notices about your account (such as a name change)	12 months; the new name in the notice until you read it. A notice that we removed something you posted after a copyright notice is kept with our copyright records (below)
A choice to share your number that the other person hasn’t matched (encrypted)	Until they match it, one of you blocks the other, or 7 days pass
Your phone line type and its review state	Until you delete your account
Age checks: the result (passed or not) and when; for members in California, when the phone or app store said 18 or older (Section 3.13)	Until you delete your account. Apart from that California record, we don’t record which kind of check decided it for your account, and we keep no age range or other age information from your app store
Purchase records, receipts, cancellation notices, refunds, and the Pass and date-credit ledgers	7 years, as financial records. After account deletion they stay linked only to an internal account number, not to your name, phone number or profile
Our purchase provider’s record of your purchases	Kept by RevenueCat, linked to your member ID, until you delete your account. We then have RevenueCat delete it, which it completes on its own schedule
Invitation records (who invited whom)	Until you delete your account
Support requests and appeals	The email address and phone number typed into a website support request or appeal: 12 months from filing (and when you delete your account, we also remove them from website requests and appeals that carry your number). Screenshots: 12 months from filing. The request or appeal itself, with our replies and its status changes: 24 months from filing. The IP address on a website support request: 90 days
Requests to delete an account made on our website or carried out by our team (the channel, outcome, times, the account’s identifier and, for a deletion our team carried out, the support request’s reference; no phone number or IP address)	24 months, as the record that the request was received and carried out; a website request confirmed by code but never completed, about a day
Attempts on our website forms and account-deletion page (the form, the IP address, and the time)	1 day
Consent and notice receipts	While you have an account, and for 10 years after you delete it, with the exact text you accepted, as evidence of consent
Copyright notices, counter-notices, and copyright strikes	3 years after the matter is closed, the period for bringing a copyright claim
Fraud notices we sent (who received one, when, and the text)	3 years, kept after account deletion, as evidence that we gave the notices the law requires
Moderation records, strikes, reports about you, ban-evasion hashes	Kept after account deletion, linked to an internal account number rather than to your profile, for as long as needed to enforce removals and defend claims (for New York purchasers, see Section 8)
If you delete your account while it is suspended or while a report about you is under review: a scrambled form of your phone number	Until the suspension would have ended (30 days for a suspension with no end date) or the review is closed, and never more than 45 days. If the review ends in a ban, it is kept as a ban-evasion hash
Blocks: a scrambled form of the blocked person’s phone number, with the account of the member who blocked them	While the member who placed the block keeps their account, so a block still applies if the blocked person signs up again
Your data-export bundle	Downloadable for 7 days; deleted with your account
Counts from our servers in Google Analytics	Up to 14 months, under our Google Analytics settings
Crash and performance reports	Kept by Sentry for 30 days, and in its backups for up to 90 days after they are made
Server logs	Our own: 30 days. Google’s logs of website and app traffic: a few months; of sign-ins: a few weeks
Copies held by some service providers	Alerts in our team’s messaging tool (Slack): kept in our workspace until deleted; we’re setting them to delete after 90 days. Records of the emails we send (Resend): 30 days. Emails in our mailboxes (Google Workspace): as long as we need them to answer you and keep a record of what we did; when we delete one, Google removes it within 180 days. Texts, calls, and voicemails on our company phone line (Google Workspace Voice): as long as we need them to answer you and keep a record of what we did. Twilio keeps its records of the codes it sends and the numbers it checks under its own retention rules. Deleting your account doesn’t remove these copies early
Backups and recovery copies	Our database backups and our storage’s recovery copies of deleted files roll over within 8 days, so information you delete, or that a period above deletes, can remain in them for up to 8 days. Our service providers finish deleting on their own schedules, which can take longer: Google, for example, allows itself up to 180 days to remove deleted data from its systems
Website analytics (cookies)	See the Cookie Policy

Legal holds. We keep information longer where a law, a litigation hold, or a lawful preservation request requires it.

8. Deleting your account

You can delete your account in Settings at any time, including while it is suspended. Deletion is immediate: there is no grace period and no way to undo it. When you delete your account we: delete your conversations at our chat provider (including the other participant’s copy); delete your photos; erase your name, date of birth, gender, orientation, bio, hometown, work, education, interests, location, phone line type, and push token; delete your likes, registrations, Explore history, event and call history, video dates and Date Rooms, number-sharing choices, invitation records, age-check record, and data-export requests; have our purchase provider, RevenueCat, delete its record of your purchases; sign out your devices, and the app deletes the exact location it kept on your phone; and delete your phone number from our sign-in provider (if that provider is temporarily unavailable, we retry every six hours until it succeeds; your access is revoked immediately either way). Any Passes or date credits are forfeited.

If you no longer have the app, you don’t need to reinstall it. Go to luvenue.com/delete-account:

With a code, when the page offers it. Enter the US phone number on your account. If it belongs to an account that can be deleted, we text a one-time code to it (through Twilio, Section 5.2). Enter the code and confirm, and the account is deleted at once, exactly as if you had deleted it in the app. The page answers the same way whether or not the number has an account.
By request. Or use our website’s support form and choose Delete my account, or email privacy@luvenue.com, giving the phone number on your account. We confirm the request is yours by matching at least two details we hold for the account, at least one of which other members never see (such as your last name or your full date of birth). If we can’t, or the account has been used in the last 30 days, we’ll point you to our website’s deletion page, where a one-time code texted to the number on the account confirms it. We never ask for ID or a selfie to confirm a request. If the account has been used in the last 30 days, we won’t delete it on matched details alone; we’ll ask you to use a code or the app instead.

We tell you when it is done: on the page, or in reply to your request. The deletion is the same as deleting in the app, and the same records survive (Section 7). We keep a log of each request made on our website or carried out by our team for 24 months.

What survives deletion, and why, is listed in Section 7: purchase records, receipts, and ledgers (financial records); consent receipts (evidence of consent); moderation records, ban-evasion hashes, and the scrambled phone numbers kept for a suspension, a review or a block (enforcement); intimate-image request records (evidence that we handled each request) and child-safety records (a legal duty to preserve); support and appeal records; account-deletion request logs; fraud-notice records; and copyright records, each for the period stated there.

New York purchasers. If New York’s dating-service law applies to your purchases, then when your account is deleted or closed, for any reason, we also delete the records we would otherwise keep after deletion and that no law or court order requires us to keep, including ban-evasion hashes, and we send you confirmation that we have done so.

9. Your rights and choices

9.1 In the app, without asking us

Download your data: Settings → Privacy → Download your data. We build a copy of the information you have given us and your activity on Luvenue (your profile, photos, messages, activity, purchases, consents, and the reports and requests you filed, with other people’s identities removed) and notify you when it is ready to download. Some records aren’t in it, such as reports other members made about you and our safety and moderation records; you can ask us for those, and for what we have inferred about you, by writing to us (Section 9.2). One export at a time, once every 24 hours.
Correct your information: edit your profile, photos, location, and preferences at any time. Your date of birth cannot be changed in the app; contact us if it is wrong.
Delete your account: Settings → Delete Account. Without the app, go to luvenue.com/delete-account or see Section 8; you never need to reinstall the app to delete your account.
Your consents: Settings → Privacy → Your consents, a switch for each consent described in Section 4.
Crash reports: Settings → Privacy → Share crash reports (Section 3.12).
Location: you can change the location on your profile at any time by choosing a spot on the map, without giving the app location permission. If you have allowed location access, you can withdraw it in your phone’s settings (on iPhone, Settings → Privacy & Security → Location Services; on Android, the app’s permissions in Settings); the location you already set stays until you change it.
Notifications: Settings → Notifications in the app, or your phone’s settings.
Block and report: from any profile, conversation, call, or the list of people you have met.

9.2 By writing to us. You can also exercise the following rights by emailing privacy@luvenue.com or writing to the address above:

to confirm whether we process your personal information and to access it, including what we have inferred about you;
to correct inaccurate information;
to delete your personal information;
to receive a portable copy of the information you gave us;
to opt out of the sale or sharing of personal information, targeted advertising, and profiling in furtherance of decisions that produce legal or similarly significant effects (we do none of these, so there is nothing to opt out of, but we will confirm that);
to withdraw consent you have given us, including for sensitive information (Section 4);
to get a list of the specific third parties, other than individuals, to which we have disclosed your personal information (or, where we can’t produce one for you alone, a list of those to which we have disclosed anyone’s);
if you are a California resident, to limit our use of your sensitive personal information (Section 10 says what changes when you do);
to appeal a decision we make about your request; and
not to be discriminated against for exercising any of these rights.

9.3 How we confirm a request is yours. You sign in with your phone number and nothing else, so we confirm a request comes from the account holder in one of these ways: in the app, where you are signed in; on our website’s deletion page, with a one-time code texted to the number on the account (Section 8); or, when you write to us, with a one-time code we text to the number on the account from our company phone, or by matching at least two details we hold for the account, at least one of which other members never see. When our team handles a request to delete an account, we match details, and if the account has been used in the last 30 days we ask you to use the deletion page or the app instead. For a request to delete your account we never ask you to reinstall the app. We do not act on a request, or send anyone data, on the strength of an email address or a phone number alone, and we never ask for ID or a selfie to confirm a request. If your account is already deleted, we confirm the request against the number that was on it in the same ways. An authorized agent may make a request for you with a signed authorization from you, and we may still ask you to confirm it directly.

9.4 Timing and appeals. We respond to requests within 45 days of receiving them and will tell you within those 45 days if we need up to 45 more, and why. If we decline a request, we will explain why and how to appeal. You can appeal by replying to our response within 60 days; we will answer your appeal in writing within 45 days. If we still decline, our answer will tell you how to complain to your state attorney general, with a link to its online complaint form where one exists. We do not charge for requests unless they are manifestly unfounded or excessive.

9.5 Global Privacy Control and Do Not Track. Because we do not sell or share personal information, an opt-out preference signal such as Global Privacy Control changes nothing on our side, but we treat it as a valid opt-out request where the law requires, and on our website we treat it as a refusal of analytics cookies (Section 14). Our website does not respond to Do Not Track signals.

10. Notices for residents of particular states

California. The categories of personal information we have collected in the past twelve months, their sources, our purposes, and the categories of third parties we disclose them to are set out in Sections 1, 2, and 5; the retention period for each category is in Section 7. In the terms of the California Consumer Privacy Act, we collect: identifiers (name, phone number, account identifier, device push token, and IP address); personal information described in Cal. Civ. Code § 1798.80(e) (name, phone number, and the education and work details you add to your profile); characteristics of protected classifications (age, gender, and sexual orientation); commercial information (purchases); internet or other electronic network activity (app activity); geolocation data (your location, which we receive rounded); audio, electronic, and visual information (photos; live video and audio, which are transmitted but not recorded; and call frames); professional or employment-related information (the work you list on your profile); inferences (ranking signals); and sensitive personal information (sexual orientation, the contents of your messages, and the exact location your phone uses for its checks, which we receive rounded). We disclose each of these categories to the service providers in Section 5.2 for a business purpose (some providers also use limited information for their own purposes, as Section 5.2 says). We use sensitive personal information to provide the service you ask for, such as showing you people who fit who you want to meet and checking which events you can join; to keep Luvenue safe and secure; and to count members in each city without inferring anything about you. If you are a California resident, you can ask us to limit our use of your sensitive personal information by writing to privacy@luvenue.com. If you do, we won’t send you room invitations (Section 3.5), and we will tell you how we use the rest of it to provide the service you asked for. We do not “sell” or “share” personal information, and we have no actual knowledge of selling or sharing the personal information of consumers under 16; Luvenue is not for anyone under 18. Under Cal. Civ. Code § 1798.83 (“Shine the Light”), we do not disclose personal information to third parties for their direct marketing. You may exercise your rights as described in Section 9; our response times are those in Section 9.4.

Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia (and Oklahoma and Louisiana from January 1, 2027, and Alabama from May 1, 2027). Whether or not your state’s law applies to us, you have the rights in Section 9, including the right to appeal. We process sensitive data with your consent, which the app asks for as described in Section 4, and you can withdraw it at any time. Where the person the information is about can’t be asked, as with a report about another member, we rely on the exceptions these laws make for preventing and responding to harassment, fraud, and illegal activity, and for protecting someone’s life or physical safety. We do not sell personal data, and we do not process it for targeted advertising or for profiling that produces legal or similarly significant effects. Maryland residents: we do not sell sensitive data.

Nevada. We do not sell covered information as defined in Nevada law. You can still tell us not to sell it, at any time, by writing to privacy@luvenue.com, our designated request address; we will respond within 60 days.

Dating-service notices required by Colorado, Connecticut, Illinois, New Jersey, New York, Texas, and Utah are in our Terms of Service and in our Safety Policy at luvenue.com/safety.

11. Children

Luvenue is for adults 18 and older. The app checks age before anyone can sign up (Section 3.13), and if the check shows someone is under 18, no account is created. We do not knowingly collect personal information from anyone under 18. If we learn that an account belongs to someone under 18, we suspend it at once and, within 30 days, delete the information we hold about them and direct our service providers to delete what they hold for us, except what the law requires us to keep (for example, records we must preserve when we report suspected child exploitation). If they are under 13, we delete it without delay. If you believe someone under 18 is using Luvenue, including if you are their parent or guardian, tell us at safety@luvenue.com.

12. Security

We protect your information with encryption in transit and at rest, access controls that restrict who at Luvenue can see what (moderation evidence sits in restricted storage), one-way hashing of the identifiers used for enforcement, and logging. Anyone outside Luvenue who helps us review safety reports does so under a written confidentiality commitment. No system is perfectly secure, and we cannot guarantee the security of your information; if we learn of a breach that affects you, we will notify you as the law requires.

13. Where your information is processed

We store your information mainly in the United States, and most of our service providers process it here. Some processing happens in other countries:

Sightengine analyzes photos and call frames in France.
Some Google services we use (for example, the network that carries website and app traffic, push delivery, Google Analytics, and Google Workspace, which holds our mailboxes and carries our company phone line) aren’t tied to one country.
Live video and audio travel through Agora’s servers in North America, which includes Canada.
Some providers’ staff or affiliates in other countries can access information to support or secure their services; for example, Sentry’s affiliates in Austria, Canada, and the Netherlands.
A code we text through Twilio may be delivered through Google’s RCS messaging, which can process it in other countries.

Each provider handles your information under its terms with us (Section 5.2).

14. Website visitors

If you use luvenue.com:

the site uses cookies described in the Cookie Policy;
Google Analytics doesn’t load on the website unless you accept analytics cookies, and if your browser sends a Global Privacy Control signal, we treat it as a refusal;
the support form collects your email address, the phone number on your account (optional, except for “Delete my account”), topic, message, optional screenshot, and IP address (Section 7 says how long we keep each);
the appeals form collects your email address, phone number, reason, explanation, and optional screenshot;
the account-deletion page collects the phone number on your account (Section 8);
these forms and the deletion page use Google’s reCAPTCHA to tell people from automated abuse; it collects information about your browser and device and sets a cookie, under Google’s terms; and
public invite pages record counts with no identifiers, and draw their QR code in your browser.

If you write to any of our mailboxes we keep your email and its contents to answer you. We don’t allow advertising or tracking companies to collect information about your activity over time and across other websites or apps through Luvenue. On our website, if you accept analytics cookies, Google Analytics collects information about your visits to luvenue.com, as described in the Cookie Policy; in the app, Apple and Google receive the information described in Section 5.2 when you use their maps and other services.

15. Changes to this policy

We may update this policy. We will post the new version at luvenue.com/privacy with a new “Last updated” date, and we will tell you in the app before a material change takes effect. If we want to use information we already hold for a new purpose that is neither reasonably necessary to, nor compatible with, the purposes described in this policy, we will ask for your consent first, and you can say no. Adding or replacing a service provider that does a job this policy already describes, with the same kinds of information, isn’t a material change; we update Section 5.2 before it starts. Each published version is archived, and we keep a record of the version you were shown when you signed up. Changes apply going forward.

16. Contact us

Privacy questions and requests: privacy@luvenue.com Safety and intimate-image removal: safety@luvenue.com Support: support@luvenue.com, or luvenue.com/support Post: Mocha Innovations LLC, Attn: Privacy, 169 Madison Ave, STE 11564, New York, NY 10016, USA

The person responsible for our privacy practices is the Privacy Officer of Mocha Innovations LLC, reachable at privacy@luvenue.com.