Private beta: profiles you see are fictional demo data. Don't share real personal details with demo profiles.
TrulyFlirt

Privacy policy

Last updated:

Draft pending legal review. TrulyFlirt is in private beta. We will name the legal entity that operates TrulyFlirt before public launch.

About this policy

This policy explains how TrulyFlirt handles personal data when you use the website at https://trulyflirt.com or the TrulyFlirt plugin in ChatGPT.

This is a draft pending legal review. Before public launch we will name the legal entity that operates TrulyFlirt (the data controller, or data fiduciary under Indian law) and publish its address here.

Until then, send any privacy question or request to privacy@trulyflirt.com.

Adults 18+ only

TrulyFlirt is only for adults aged 18 or over. We do not knowingly collect personal data from anyone under 18.

During onboarding you enter your birth date and confirm that you are 18 or over. If the birth date shows you are under 18, we do not store it. We keep only a record that the age check failed, linked to your sign-in account, so that the same account cannot try again. If that account is later deleted, we keep a one-way coded form of its email address (not the address itself, and nothing else), so the same email address cannot sign up and try again.

If you think someone under 18 is using TrulyFlirt, report them with the reason "underage" or email us.

Private beta and demo profiles

TrulyFlirt is in private beta. In the current beta environment, the profiles you can browse are fictional demo profiles. Each one is labeled "Demo". No real person is behind a demo profile.

Fictional demo profiles will never be added to the production service.

Personal data we collect

  • Account data: your email address and sign-in history (for example, when you last signed in), held by our sign-in provider. If you choose Google sign-in, Google shares your name, email address and profile picture link with our sign-in provider. We do not show your Google name or picture to other members.
  • Age and consent records: your birth date (used to work out your age), your confirmation that you are 18 or over, and the date, time and version of each consent you give.
  • Sensitive data, collected only on our onboarding page and only with your explicit consent: your gender and the genders of people you want to meet. Together these can reveal your sexual orientation.
  • Profile data: display name, city, region and country, how widely to search (your city, region or country), the age range you want to meet, bio, interests, prompt answers and relationship goal.
  • Activity data: the profiles you like and pass on, your matches, the messages you send and receive, the members you block, and reports you file or that are filed about you (the reason and any details).
  • Safety labels: short labels that our automatic checks attach to messages, for example that a message may be asking for money.
  • Technical data: our hosting and sign-in providers record technical information such as IP address, browser type and the time of each request in their logs.
  • Cookies: only the cookies needed to keep you signed in to the website. We do not use advertising or analytics cookies.

What we do not collect

  • Photos. This version of TrulyFlirt has no photos; each profile shows generated initials instead.
  • Precise location. We store only the city, region and country you enter. ChatGPT may send an approximate location with each request; we do not store it.
  • Your ChatGPT conversations. Our tools receive only the specific request ChatGPT makes for you, such as "find matches" or the text of a message you approved. They never ask for your chat history.
  • Payment details. TrulyFlirt is free and does not take payments.

How we use your data

  • To create and secure your account, sign you in, and link your account to ChatGPT when you ask us to.
  • To check that you are 18 or over.
  • To suggest matches using only preferences you state: both people's gender preferences and age ranges must match, you must be in each other's search area, and we favor shared interests and compatible relationship goals. We never guess traits you have not told us.
  • To show your profile to other members and deliver messages between matched members.
  • To keep members safe: scanning messages for common scam patterns, checking text for harmful content, limiting how fast accounts can act, and handling blocks and reports.
  • To answer support, privacy and grievance requests.
  • To meet our legal obligations.

What we never do with your data

  • We do not sell your personal data.
  • We do not share it for targeted advertising.
  • We do not use it to train AI models. How OpenAI uses ChatGPT conversations, including TrulyFlirt results shown in them, is set by OpenAI's policies and your ChatGPT data controls.
  • We do not guess or infer sensitive traits such as sexual orientation, ethnicity, religion or health.

Who can see your data

  • Other members: your display name, age (not your birth date), city, bio, interests, prompt answers, relationship goal and generated initials. They never see your email address, birth date, gender, the genders you want to meet, or your region or country.
  • Because we only show two people to each other when their stated preferences match both ways, being shown to someone means you fit what they are looking for and they fit what you are looking for.
  • Your matches: the messages you send them.
  • ChatGPT and OpenAI: when someone uses TrulyFlirt in ChatGPT, the results of TrulyFlirt tools are sent to ChatGPT so it can answer them. That includes your own profile when you use it, and your public profile and the messages you send when your matches or other members use it. OpenAI handles this data under its own terms and privacy policy (https://openai.com/policies/privacy-policy/). We ask for your separate consent to this during onboarding.
  • Service providers that process data for us: Supabase (database and sign-in, servers in the United States), Vercel (website and plugin hosting, servers in the United States), the email service that delivers sign-in codes, and Google if you choose Google sign-in.
  • OpenAI moderation (when enabled): OpenAI's moderation service checks bios and messages for harmful content. It receives only the text being checked.
  • Authorities and others when the law requires it, or when we believe in good faith that disclosure is needed to protect someone's safety.

International transfers

Our database and servers are in the United States. If you use TrulyFlirt from another country, including India, the UK or a country in the EEA, your data is transferred to and stored in the United States.

For users in the EEA and the UK we will rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses offered by our providers. Our legal review will confirm the safeguards before public launch.

How long we keep data

  • Account, profile and consent records: until you delete your account.
  • Messages: shown only while the match is active. After an unmatch, block or report, neither member can see the conversation, but it stays stored until either member deletes their account. We are reviewing this period before public launch.
  • Likes, passes, blocks and reports: until either member deletes their account. If we start keeping a minimal record of serious safety reports after deletion (for example, that an account was removed for scams), we will update this policy first.
  • Failed age checks: the sign-in account and the failed-check record are kept so the account cannot try again, until you ask us to delete them at privacy@trulyflirt.com. When such an account is deleted, we keep only a one-way coded form of its email address, with no other data, so the same address cannot sign up again.
  • Sign-in code requests: a one-way coded form of the email address and of the IP address behind each request, for 24 hours, to limit how many codes can be requested and stop abuse.
  • Logs: our providers keep technical logs for a short period, usually a few days.
  • Backups: deleted data can remain in our providers' backups for a limited period, usually up to 7 days, until it is overwritten.

Your choices and rights

  • See and update your profile: ask TrulyFlirt in ChatGPT to show or update your profile, or visit https://trulyflirt.com/account. You can change your birth date, gender and the genders you want to meet on https://trulyflirt.com/onboarding once after setting up your profile, then again after 30 days. To correct them sooner, or to correct your location, email support@trulyflirt.com.
  • Delete your account: on https://trulyflirt.com/account, or ask TrulyFlirt in ChatGPT to delete your account. Deletion is immediate and permanent. It removes your profile, likes, passes, matches, messages, blocks and reports, and your sign-in account.
  • Disconnect ChatGPT: remove TrulyFlirt in ChatGPT's settings. This stops ChatGPT from using your TrulyFlirt account but does not delete it.
  • Access, copy, correction, objection, restriction and portability: email privacy@trulyflirt.com. We may ask you to write from your account email so we can confirm it is you.
  • Nominate someone (India): you can nominate a person to exercise your rights if you die or become unable to act. Email privacy@trulyflirt.com.
  • United States: depending on your state, you may have the right to know, access, correct and delete your data, and to limit the use of sensitive personal information. We use sensitive personal information only to provide the service, and we do not sell or share personal data for cross-context behavioral advertising.
  • Complain: contact our grievance contact first (see below). You can also complain to a data protection authority, for example the Data Protection Board of India, your EEA supervisory authority or the UK Information Commissioner's Office.
  • We respond to privacy requests within 30 days, or sooner where the law requires.

India: Digital Personal Data Protection Act, 2023

For users in India, TrulyFlirt acts as a data fiduciary. We process your personal data on the basis of the consent you give during onboarding and for other uses the Act permits. You can withdraw consent as easily as you gave it, by deleting your account.

Grievance contact: grievance@trulyflirt.com. We will name our grievance officer here before public launch. We respond to grievances within 30 days. If you are not satisfied with our response, you can complain to the Data Protection Board of India.

Security

All connections to TrulyFlirt use HTTPS. Our database provider encrypts data at rest. Our database tables are not reachable through any public API; only our own server code can read them. Access tokens from ChatGPT are checked on every request, and actions are rate limited.

No system is perfectly secure. If a personal data breach affects you, we will tell you and the relevant authorities as the law requires.

Changes to this policy

We will post any change on this page with a new "last updated" date. If a change materially affects how we use your data, we will tell you by email or on the website before it takes effect and, where the law requires, ask for your consent again.

Contact