Privacy Policy

To provide personalized matchmaking and maintain a safe dating environment, FIVE & ONE LOVE collects specific categories of information provided directly by you, generated through your usage, or received via secure third-party integrations:

• Account Data: Essential registration details including your verified email address, mobile phone number, and verified date of birth.
• Profile Data: Media uploads (photos and videos), self-authored biography, personal passions, interests, languages spoken, lifestyle preferences, and stated relationship intentions.
• The Five Answers: Responses provided to our proprietary core questionnaire ("The Five"), treated as foundational matching data used to calculate compatibility scores.
• Usage & Telemetry Data: In-app interactions, discovery swiping events, messaging metadata (timestamps and message status, excluding message body access unless flagged for safety violations), device identifiers, operating system specifications, IP addresses, and crash telemetry.
• Location Data: Precise or coarse geographical location (collected only when permissions are explicitly granted) to calculate distance thresholds and present local match discovery.
• Payment & Subscription Data: In-app purchase and subscription transactions. To ensure bank-grade security, payment credentials are processed directly by certified third-party merchants-of-record (e.g., Apple App Store, Google Play Store, or authorized payment gateways). FIVE & ONE LOVE does not store raw payment card numbers on its servers.

We process your personal information strictly for intentional and lawful objectives designed to enhance your dating journey:

• Intelligent Matchmaking: To power algorithmic compatibility calculations and curated recommendations rooted in "The Five" responses and mutual partner criteria.
• Trust & Safety Architecture: To enforce community safety systems, including automated photo screening, bot and scam pattern detection, impersonation prevention, and suspicious account behavioral analysis.
• Account Management & Communications: To transmit essential transactional notices, account security verifications, system service announcements, and—only with your separate affirmative opt-in consent—curated product updates and newsletters.

For members residing in regions with comprehensive data protection regimes (such as the European Economic Area, United Kingdom, and comparable international jurisdictions), our processing is grounded upon the following legal bases:

• Contractual Necessity: Processing required to establish your account, perform matchmaking computations, deliver in-app features, and honor our binding Terms of Service.
• Explicit Consent: Where you have voluntarily opted in, such as optional biometric verification scans, precise background geolocation tracking, or promotional marketing channels.
• Legitimate Interests: Operating platform fraud prevention, defending against predatory abuse, enhancing algorithmic stability, and defending legal claims—in every case balanced meticulously against your fundamental rights and personal privacy.

We respect the confidentiality of your romantic pursuit. We disclose member information only under deliberate and controlled circumstances:

• Visible to Other Members: Profile photos, bio descriptions, approximate proximity, and "The Five" answers are shared with potential matches solely in alignment with your granular profile visibility configurations.
• Vetted Service Providers: Trusted enterprise vendors assisting our core infrastructure, including secure cloud hosting, customer assistance tooling, merchant-of-record billing, and automated moderation filters. All partners operate under strict Data Processing Agreements (DPAs) requiring adherence to global privacy regulations.
• Law Enforcement & Legal Authorities: Disclosed solely when strictly compelled by valid, binding legal subpoenas, search warrants, or court orders, managed under our formal Trust & Safety compliance protocol.
• Strict Prohibition on Data Sales: FIVE & ONE LOVE has never sold, and will never sell, lease, or monetize your personal data, questionnaires, or communication records to third-party advertisers or data brokers.

Because FIVE & ONE LOVE operates globally across initial Wave 1 markets (including the United States, Canada, and Australia) and forthcoming Wave 2 markets:

• European Union & United Kingdom Transfers: When personal data originating within the EEA or UK is transferred internationally, we implement Standard Contractual Clauses (SCCs) approved by the European Commission, reinforced by technical encryption and security safeguards.
• Brazil (LGPD Compliance): Cross-border data flows comply with the requirements of the Lei Geral de Proteção de Dados (LGPD) ahead of Wave 2 expansion.

We retain your personal data only for as long as necessary to fulfill the services requested or satisfy legitimate business and legal obligations:

• Active Accounts: We preserve profile records, "The Five" questionnaire submissions, and interaction history for the active duration of your membership.
• Deleted Accounts: Upon submitting an account deletion request through the app, your personal identity and profile information are permanently removed or irreversibly anonymized within thirty (30) days.
• Safety & Anti-Recidivism Records: Certain cryptographic hashes (such as obfuscated telephone numbers or device tokens) and moderation enforcement logs are preserved for an extended period strictly to prevent previously expelled or banned bad actors from circumventing safety prohibitions.

Regardless of your geographic location, we provide comprehensive rights over your personal footprint:

• Right of Access & Portability: You may request an export of your personal profile data and matching history in an accessible, machine-readable format.
• Right of Rectification: You can edit and update outdated profile details directly within account preferences at any time.
• Right of Erasure ("Right to Be Forgotten"): You hold the right to demand complete deletion of your profile and data records.
• Right to Restrict or Object: You may restrict specific data processing avenues or withdraw previously granted permissions (such as location services) directly in your mobile device settings.
• LGPD & Regional Protections: Dedicated rights exercising mechanisms are active for Brazilian members and international jurisdictions.

To exercise any of these privileges, submit a formal request to our Data Protection Officer at dpo@fiveonelove.com.

Our web portal and administrative interfaces employ limited tracking technologies categorized as follows:

• Strictly Essential Cookies: Indispensable for session persistence, CSRF security verification, and secure account authentication.
• Performance & Analytics Cookies: Anonymized metrics to assess page performance, load velocity, and navigation friction.
• Consent Management: Cookie preference controls allow you to accept, decline, or customize optional analytical cookies in adherence to local cookie directives.

If we discover or receive notification that an account has been registered by a minor under 18, our moderation team will immediately terminate the account and permanently delete all associated profile data from our active databases.

We maintain modern administrative, physical, and technical safeguards engineered to protect your personal information against unauthorized disclosure, interception, or loss:

• Encryption Standards: All external and internal communications are secured using Transport Layer Security (TLS 1.3). Data at rest is encrypted using AES-256 standard encryption.
• Restricted Access & RBAC: Internal access to user data is governed by zero-trust, role-based access controls (RBAC) and mandatory multi-factor authentication (MFA).
• Audits & Vulnerability Testing: Regular security audits, dependency vulnerability patching, and third-party penetration assessments.

We may modify or revise this Privacy Policy periodically to accommodate product evolution, feature launches, or legal statutory adjustments. In the event of material modifications, we will notify you at least fourteen (14) days prior to their implementation via clear in-app alerts, push notifications, or registered email communications.

If you have questions, inquiries, or grievances regarding our privacy philosophy, data practices, or wish to exercise your legal member rights, our compliance office is at your disposal: