Privacy Policy

Last updated: October 22, 2026

1. What We Collect

• Account info: email, password (stored as a salted hash, never in plain text), first name, date of birth
• Profile info: photos you upload, your prompt answers, city, gender, and who you're interested in meeting
• Verification photos: if you choose to get a Verified badge, a selfie with a pose prompt — stored separately from your profile photos, seen only by our moderation team, and never shown publicly
• Government ID photo: if you choose to get ID Verified (our strongest trust badge, optional and separate from the Verified badge above), a photo of a passport, driver's license, or national ID card — stored separately, seen only by our moderation team, never shown publicly or to other members, and deleted from our systems if you submit a new one to replace a rejected attempt
• Display name and legal name: the name other members see is the display name or nickname you choose. Your legal name is optional, is asked for only if you choose to verify your ID, is shown only to our moderation team, and is never shown to other members.
• Voice intro (optional): if you record one, a short audio clip of your voice, played back on your profile card to other members you're shown to. You can remove it at any time.
• Emergency contact (optional): if you choose to add one, the name and WhatsApp number and/or email of someone you trust. We store this about them without their own account or consent to our Service, because it's you asking us to be able to reach them, not them signing up — we never contact them unless you trigger an alert (a Safety Check-In you don't confirm, or a report where you choose to notify them) or use it yourself to prefill a message. Removing your emergency contact deletes this from our systems.
• Location: if you grant permission, your device's location — powers "near me" discovery. We round it to roughly a 1km/0.6mi area before it's ever saved, specifically so it can't pinpoint your exact address, and it's never shown to other members (only an approximate "X km away" on your profile once both of you have shared location). Declining this doesn't block you from using the Service — you're just shown to everyone rather than sorted by distance. Tyluna+ members can additionally set a "Passport" location to browse a different city; this only overrides what you're shown, not your real saved location.
• Live check-in location (optional, separate from the above): if you turn on live location sharing for a specific Safety Check-In, your device's exact, unrounded position is recorded periodically while that check-in stays active and the app is open, and is visible — via a private, unguessable link, no account needed — to the one emergency contact you named for that check-in. This is off by default and only ever applies to the single check-in you enable it for. These location points are automatically deleted a few days after that check-in ends (whether you confirmed you were safe, cancelled it, or it went unanswered).
• Reports: when you report a member, we keep a copy of the recent conversation between you and the item you reported (a photo, a board post or a prompt answer) with the report, so our moderation team can review it even if it is later deleted. The report and its copy are seen only by our staff, and the person you report is not told who reported them.
• Activity: who you swipe on and message, reports you file or receive, and — private to you, never shown to the other person — whether you confirmed meeting a match and how it went, used only to occasionally check in with you about it
• Payment info: if you buy an event ticket or subscribe to Tyluna+, Stripe processes your payment details directly — we receive confirmation that you paid, not your card number
• Event tickets and receipts: for an event ticket we keep the event, the number of tickets, the amount, and the card brand and last four digits that Stripe reports (so we can show you a receipt), and, if you refund or transfer a ticket, a record of that. If you transfer a ticket to a match, they see your first name on the offer and, once accepted, the ticket is theirs.
• Music (optional): if you connect Spotify, your top artists; if you pick an anthem, the song you chose. You can disconnect at any time.
• Read receipts and reactions: when you open a message we note that it was read, and show "Seen" to the sender if both of you have read receipts on. Emoji reactions are visible to the two people in the chat.
• Technical: IP address (used for login rate-limiting/security), timestamps of activity, and, if you turn on push notifications, a device/browser subscription address used only to deliver those notifications

2. How We Use It

To show you to compatible members and show them to you, to operate matching and messaging, to process payments, to enforce our Terms (including investigating reports), and to send account-related emails (verification, password resets, receipts) and a small number of reminder emails (for example, finishing your profile or likes waiting for you), which you can switch off in your Profile or with the link in each email. We do not sell your personal data.

3. Who Can See What

Other members can see your first name, age, photos, prompt answers, and city. Your email, exact birthdate, verification photos, and message history are never shown to other members. Messages are only visible to the two people in that conversation (or, in a Double Date group chat, its four participants) and to our moderation team when reviewing a report. If you use chat translation (see section 4), the text of the message being translated is also sent to our AI provider. If you choose to share your WhatsApp number with a match, that number leaves our systems at that point and WhatsApp's own privacy policy governs it from there — sharing it is always your choice, never automatic. We also record when your profile is shown to another member on Discover or Standouts, so that member's "Who's Viewed You" list can show that you looked at their profile — this stops once you match with them.

4. Third-Party Services

A full list of the outside services we use, what each one receives and when, is at tyluna.com/services.php.

We use Stripe to process payments — see Stripe's privacy policy for how they handle payment data. If you choose "Continue with Google" to sign up or sign in, Google shares your name, email, and profile photo with us to create or match your account — see Google's privacy policy for how they handle that on their end. If a live Safety Check-In location is viewed, the map is drawn using free OpenStreetMap map tiles — loading them sends the viewer's IP address to OpenStreetMap's servers, standard for any site using their tiles; see OpenStreetMap Foundation's privacy policy. If you connect Spotify or view someone's anthem, Spotify's own player is loaded, which tells Spotify your IP address; see Spotify's privacy policy. On Android, push notifications are delivered through Firebase Cloud Messaging (Google), which receives a device token and the notification text. We do not use third-party advertising or analytics trackers.

Photo Coach (optional). If you tick the box and tap "Get photo tips" or "Get tips on my answers" on your profile, we send your profile photos (shrunk to a small size) or the written answers to your profile prompts to Anthropic, an AI provider, so it can suggest ways to improve them. This only happens when you ask for it, after you have agreed, and you can use the site fully without it. We keep the resulting tips on your account so you can see them again, and delete them if you delete your account. The photos are not used to identify anyone, and your prompt answers are not linked to your name or email when sent. See Anthropic's privacy policy for how they handle data sent to them.

Event Translation. If you view Events in a language other than English, the title, description, and location of each event are sent to Anthropic to be translated, the first time anyone views that event in that language; the result is cached and reused for every member after that. This is event listing text an organizer wrote, not anything personal to you as a viewer.

Member Content Translation. When this feature is switched on and you use Tyluna in a language other than English, the Board posts, profile prompt answers and like notes shown to you are sent to Anthropic to be translated into your language, automatically and in one batch when the page loads. Each translation is marked "Machine translation". Chat messages are handled more carefully: a message you received is sent to Anthropic only when you tap the translate button on that message, or, if you turn on "Translate messages from other members automatically" in your Profile (it is off by default), for each incoming message shown to you in a conversation. Only what you receive is translated, never what you write, and the other person is not told. You can turn automatic chat translation off at any time. Translations are stored by a fingerprint of the exact text and language so the same words are only translated once; the stored translation is not linked to who wrote it or who asked for it. For a chat message this means its translated text is kept in that store, without names. There is a daily limit on how many translations each member can request. We do not use any of this for advertising.

Chemistry. If Standouts picks a "Most Compatible" match for you, or Likes You highlights your top-scoring liker, your prompt answers and profile vitals (what you're looking for, job, education, religion, drinking, smoking, family plans, and your Compatibility Quiz results if you've taken it) and that member's are sent to Anthropic together so it can write a short note explaining why you might get along. The result is cached for that pair and reused until either of you changes those answers, so it is not re-sent every time the pick repeats. It is not shared with the other member or shown to anyone but you.

Compatibility Quiz (optional). If you take the Compatibility Quiz, we store your 5 resulting personality scores (not your individual question answers) on your account. These scores are never shown to other members and never appear on your profile — they are only used to calculate your Compatibility % with other members and, if Chemistry is on, as input to the AI note described above.

Face Check, when enabled by us (part of Get Verified). If this feature is turned on, getting a Verified badge involves capturing a selfie live from your camera and sending it to Anthropic along with your existing profile photos, so it can give our moderation team a head start comparing them and checking the pose we asked for was followed. This is a pre-screen only, never an automatic decision — a real person on our team always makes the final call on your Verified badge, exactly as before this feature existed. The captured photo is stored the same way your existing verification selfie is: never shown on your public profile, seen only by our moderation team.

5. Cookies

We use a session cookie to keep you signed in, and small cookies that remember your language choice (and, if you decline a suggested language, that you declined). We don't use tracking or advertising cookies.

6. Data Retention

We keep your data while your account is active. Deactivating your account hides your profile from other members. You can permanently delete your account and data at any time from Profile, Account, Delete my account, or from the web page tyluna.com/delete-account.php (which also works if you can no longer sign in). Deletion removes your profile, photos, messages and matches. Backups are overwritten on a rolling schedule, and records of payments may be kept where the law requires.

7. Your Choices

You can edit or delete your profile info and photos at any time from your Profile page, block or report other members, and deactivate your account. To request a copy of your data or full deletion, contact us at support@tyluna.com — we'll respond within 30 days.

8. Security

Passwords are hashed, not stored in plain text. Uploaded photos are stored in a directory that cannot execute code. We use rate-limiting to slow down automated login attempts. No system is perfectly secure — report any suspected vulnerability to support@tyluna.com.

9. Children

The Service is not intended for anyone under 18. We do not knowingly collect data from minors.

10. International Users

[Placeholder — jurisdiction of incorporation is still open (Canada, US, Asia, or Middle East). Once decided, this section needs cross-border data transfer disclosures and the specific region-based rights that apply (e.g. GDPR-style access/erasure/portability rights for EU/UK members, PIPEDA for Canada, CCPA for California), finalized with legal counsel based on where you actually operate and where your members are.]

11. Changes to This Policy

We may update this Policy from time to time; continued use of the Service after a change constitutes acceptance.

12. Contact

Privacy questions: support@tyluna.com.