Privacy Policy

Your privacy is the whole point. Colors of Love is for people living with HSV, so we treat your health status as the sensitive information it is. We collect only what we need to run the Service, we never sell your data, and we never share your HSV status with advertisers. You choose where your information appears, you can withdraw consent at any time, and you can delete your account whenever you want.

You give us:

• Account details — email address, password (stored only as a secure hash), and date of birth to confirm you're 18+.
• Profile information — your name or nickname, photos, bio, preferences, and the details you choose to add.
• Health status (HSV) — provided with your explicit consent, and treated as special-category / sensitive personal data (see section 2).
• Location — an approximate area you set, used for discovery and events. We show only approximate location to people you haven't connected with.
• Messages & activity — messages you send, likes, matches, events you join, and reports you file.
• Payment information — handled by our payment processors (for example, Stripe, Apple, or Google). We do not store your full card number.

We also collect limited technical data automatically — device and browser type, app version, and basic logs (including a request identifier) needed to operate, secure, and debug the Service.

Information about your health, including HSV status, is "special-category" data under the GDPR and "sensitive personal information" under laws like the California privacy laws. We handle it with extra care:

• We process it only on the basis of your explicit consent, which we ask for during onboarding.
• We use it solely to provide the Service — to connect you with a community that shares your experience.
• We never sell it, never use it for advertising, and never share it with third parties for their own purposes.
• You can withdraw consent at any time in your profile settings. Withdrawing consent pauses your access to discovery until you consent again, and you can delete this data by deleting your account.

• To create and operate your account and profile.
• To power discovery, matching, messaging, and events.
• To process payments and manage your membership.
• To keep the community safe — verification, moderation, and enforcing our Terms.
• To send service messages you'd expect, like verification, security, and renewal reminders.
• To meet legal obligations and respond to lawful requests.

Depending on where you live, the legal bases we rely on include your consent (for HSV data and optional communications), performing our contract with you (to provide the Service), our legitimate interests (to keep the platform safe and working), and compliance with legal obligations.

With other members: only what you choose to show — your profile, and the messages you send to people you connect with. People you haven't connected with see only approximate location, never your exact address.

With service providers: vetted vendors who help us run the Service (hosting, storage and content delivery, payment processing, email delivery, and content-safety review). They may process data only on our instructions and may not use it for their own purposes.

For legal & safety reasons: when required by law, to enforce our Terms, or to protect the safety of our members or the public.

We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising as those terms are defined under California law.

We use encryption in transit, secure password hashing, access controls, and signed, time-limited links for private media so photos aren't publicly guessable. Internal access is limited to staff who need it, and enforcement actions are recorded in an audit log. No system is perfectly secure, but we work hard to protect what you share and will notify you and the appropriate authorities of a breach as required by law.

We keep your information for as long as your account is active. When you delete your account, we remove or de-identify your personal data, including your HSV status, except for limited information we must retain for legal, security, fraud-prevention, or backup reasons — which we hold only for as long as necessary and then delete.

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal data; to withdraw consent; to object to or restrict certain processing; and to appeal a decision. You will never be discriminated against for exercising these rights. You can manage most of this in the app — update your profile, withdraw HSV-data consent, or delete your account — or contact us at privacy@colorsoflove.app. We will verify your request and respond within the timeframe required by law.

Colors of Love may process and store data in countries other than where you live, including the United States. Where required, we use appropriate safeguards for international transfers. By using the Service, you understand your information may be processed in these locations.

Colors of Love is only for adults 18 and older. We do not knowingly collect data from anyone under 18. If we learn that we have, we will delete it.

If we make a material change to this policy, we'll update the date above and notify you in the app or by email. Where a change affects how we use your HSV data, we'll ask for your consent again before it takes effect.

For any privacy question or to exercise your rights, email privacy@colorsoflove.app. For general support, use support@colorsoflove.app.