Privacy Policy

Luma Dating Ltd ("Luma", "we", "us") operates the Luma dating application (the "App"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. Luma is a dating service that emphasizes safety and verification, so some of the data we handle is sensitive — we describe that explicitly below.

By creating an account you confirm you are at least 18 years old and agree to this Policy. If you do not agree, please do not use the App.

1. Information you provide

• Account details: your name, email address, password, and date of birth (used to confirm you are 18+ and to display age).
• Profile content: photos, bio, prompt answers, gender, interests, and preferences you choose to add.
• Verification selfie & facial data: to confirm you are a real person and match your profile photos, we ask for a verification selfie and process facial-geometry data (see Section 4 — Biometric data).
• Phone number (optional / where used): for phone verification and safety SMS features.
• Messages & interactions: the messages you send to matches, likes, matches, reports, and vouches.
• Safety features: trusted-friend connections, emergency contacts, date check-ins, and live-location shares you initiate in Date Safety Mode.

2. Information collected automatically

• Approximate location: to show distance to potential matches. Distance is bucketed (approximate) and never shown as an exact location to other users.
• Live location (only when you turn it on): during Date Safety Mode you can share your live location with trusted friends. This is shared in-app only and stops when you end the share. See Section 6.
• Device & usage data: device type, app version, push-notification token, diagnostic/log data, and how you use features.

3. Contacts (optional)

If you grant contacts permission, Luma lets you invite trusted friends and block people you know from finding you. Access is optional, used only for the feature you initiated, and you can decline or revoke it at any time in your device settings.

4. Biometric / facial data

To keep the community safe, selfie verification compares your verification selfie to your profile photos using a face-comparison service (Amazon Rekognition). This processing generates facial-geometry measurements solely to confirm that you are a real, consistent person.

• We use this data only for verification and anti-impersonation — never to identify you across other apps or to sell.
• Facial-comparison processing is performed by Amazon Web Services (Rekognition CompareFaces), which does not retain the image for its own use, and the underlying biometric data is not retained for advertising or profiling.
• Retention: we keep your verification selfie for the life of your account so we can re-check it if your identity is later questioned and to support manual review; we do not retain it on any shorter schedule. It is permanently deleted when you delete your account (Section 9).
• You can request deletion of your verification data by deleting your account (Section 9) or contacting us.
• Where required by law (e.g., certain U.S. states such as Illinois under BIPA or Texas under CUBI), we obtain your consent before collecting biometric identifiers and honor applicable retention and deletion rules.

5. How we use your information

• To create and operate your account and show you potential matches.
• To verify identity and reduce fake, duplicate, or abusive accounts.
• To power messaging, matching, and safety features you choose to use.
• To detect, review, and act on policy violations, scams, and objectionable content (including automated and human moderation).
• To send service messages and, with your permission, push notifications.
• To comply with law and protect the rights and safety of users.

6. Live location & safety sharing

Real-time safety features are never sold and are available to all users. When you start a live-location share in Date Safety Mode, your location is visible in the App only to the trusted friends you select, via an unguessable private link, for the duration you choose. You can end the share at any time. We do not hand your live location to SMS, third-party messengers, or advertisers.

7. How we share information

• With other users: your profile (name, age, photos, bio, prompts) is shown to people who can discover or match with you. Exact location is never shared — only approximate distance.
• Service providers (processors) acting on our behalf:
  • Google Firebase — authentication, database, file storage, and hosting.
  • Amazon Web Services (Rekognition) — selfie / facial verification.
  • Twilio — phone verification and safety SMS.
  • OpenAI — optional AI safety and assistant features. Where AI processes conversation text, it is identity-stripped and personal identifiers are redacted first.
• For safety & legal reasons: to investigate reports, enforce our Terms, comply with legal requests, or protect users from harm.
• We do not sell your personal information.

8. Data retention

We keep your information while your account is active. When you delete your account, we delete or de-identify your personal data, subject to limited retention required for legal, safety, fraud-prevention, or dispute-resolution purposes (for example, records of a ban to prevent re-entry).

9. Your choices & rights

• Delete your account: you can permanently delete your account and associated data from inside the App (Profile → Delete Account). For step-by-step instructions and exactly what is removed, see Delete Your Account & Data.
• Access / correction: you can review and update most profile information in the App, or contact us for a copy of your data.
• Permissions: you can grant or revoke camera, photos, location, and contacts permissions in your device settings.
• Regional rights: depending on where you live (e.g., EEA/UK GDPR, California CCPA/CPRA), you may have additional rights to access, correct, delete, port, or restrict processing, and to object. Contact us to exercise these.

10. Children

Luma is strictly for adults 18 and older. We do not knowingly collect data from anyone under 18, and we remove such accounts when identified.

11. Security

We use technical and organizational measures to protect your information, including server-side access controls and encrypted transport. No system is perfectly secure, so we cannot guarantee absolute security.

12. International transfers

Your information may be processed in countries other than your own (including the United States) where our service providers operate. We take steps to ensure appropriate safeguards for such transfers.

13. Changes to this Policy

We may update this Policy from time to time. We will revise the "Last updated" date above and, where appropriate, notify you in the App.

14. Contact us

Questions or requests about privacy? Contact Luma Dating Ltd, 7 Laburnum Avenue, Upper Marham, Kings Lynn, PE33 9LY, United Kingdom, at privacy@luma-dating.co.uk.