Privacy Policy

Passport is optional and off by default. Approved adult members may choose a home city or add destination cities and trip dates. Residents and travelers must opt in; new trips start hidden. No accommodation, exact address, GPS or live whereabouts is requested. The default disclosure is city only; members can approve month-level timing or exact trip dates. Travel dates are checked privately for overlap and are not sent as input to matchmaking AI.

Members can edit, hide or delete trips and opt out of Passport at any time. Changes withdraw pending travel interest and future travel discovery; existing mutual conversations remain unless blocked or the account is restricted or deleted. Ended trips leave discovery immediately. The proposed removal of live trip records within 30 days requires legal review and scheduled cleanup before launch; cleanup currently also runs when Passport is used. Account deletion removes travel settings, trips, interests and visibility records. Previously copied information cannot be recalled. Provider backup/log retention and legal review of this retention policy remain required before launch.

F8 is an application-based matchmaking service for adults. This draft describes the current service, including limited daily Discover profiles and human-curated introductions. It replaces earlier placeholder copy; profiles may be shown to eligible members in Discover, not only to people personally introduced by a matchmaker.

To confirm before launch: the legal entity operating F8, its business address, country of establishment, privacy contact, applicable jurisdictions and effective date. These details are not yet supplied.

Account and application information includes your email, authentication information, date of birth, name, phone number, application answers, single-status confirmation and review status. Depending on what you provide, your profile may contain gender, orientation, city, neighborhood, hometown, occupation, employer, education, school, height, languages, Instagram handle, photographs and biography.

Matching answers may include relationship goals, marriage and children intentions and timelines, existing children or previous marriage, lifestyle, smoking, drinking, exercise, recreational drug answers, pets, interests, traits, values, passions, ideal weekend, relationship reflections, ideal-partner descriptions, non-negotiables, strong preferences, attraction notes and past relationship patterns. Some answers may reveal sensitive information, including religion or political views. Avoid putting unnecessary sensitive information or other people’s personal information in free text.

We also store likes and passes, viewed daily profiles, introductions and responses, mutual matches, messages, feedback, membership tier requests, blocks, reports, moderation records, private matchmaker notes and matching assessments. Operational services may process IP addresses, device/browser information, timestamps, security logs and authentication storage. To confirm: the full operational log, cookie and analytics inventory, and which fields are optional.

We use information to authenticate you, review applications, enforce adult eligibility, maintain your profile, evaluate two-sided compatibility, select daily profiles, support introductions and mutual-match messaging, handle feedback, administer tier requests, investigate safety issues and secure the service. A submitted birth date is an eligibility declaration, not an identity-document or background check.

To confirm with counsel: the legal basis for each purpose in the countries served, any required consent for sensitive information or AI processing, how consent is recorded and withdrawn, and whether any optional analytics or marketing requires a separate choice. This draft does not assume that registration alone supplies every legally required consent.

F8 compares both members’ saved answers, goals, values, lifestyle and preferences. Confirmed non-negotiables are checked before recommendations; soft preferences are not automatic exclusions. Unknown answers remain unknown. Religion and politics do not add to compatibility scores and are used only as filters where explicitly chosen as non-negotiable. Sensitive traits must not be used to rank members.

Selected, minimized text dossiers are sent server-side through the Lovable AI service for compatibility assessment. The structured dossiers omit contact details, surnames, photographs and designated sensitive fields. Free-text answers can still reveal identifying or sensitive information; minimization does not make them anonymous. Feedback may inform later assessments. The current matching pipeline does not send chat message bodies as matchmaking input.

F8 stores versioned assessments, evidence, uncertainty and request records and reuses cached results. Private scores, concerns and evaluations are administrator-only. Member-facing explanations are constrained to provided profile facts; AI can still be inaccurate and recommendations do not guarantee compatibility. Discover selection is automated within eligibility rules; personal matchmaker introductions require administrator approval.

To confirm before launch: AI subprocessors and models, processing countries, provider retention, contractual safeguards, whether provider training is disabled, and any legally required explanation, objection or human-review process. We do not promise that providers never retain data or train on it without verified agreements.

Your selected profile details and private photographs may be visible to eligible approved members through Discover or introductions. Mutual matches unlock chat. The other member does not receive your private preferences, application narrative, matchmaker notes, compatibility scores or concerns. F8 conceals the other side’s private pass response. Blocking restricts profile, photograph, introduction and chat access, but cannot undo information someone already viewed, copied or shared.

Authorized administrators can review applications and profiles, matching evidence, feedback, reports and matchmaker notes to operate the service. Chat rows are limited by current access rules; do not assume all administrators can read all messages. The staff access and safety-investigation procedure must be confirmed.

Lovable Cloud supplies authentication, database and private photo storage; hosting and AI services process data to provide F8. Connected agent integrations query using the authorized user’s access rules. Disclosure may also be necessary to comply with law, protect safety, or in a business transfer, subject to applicable safeguards. To confirm: the complete recipient/subprocessor list and any sale, advertising, tracking, marketing or business-transfer arrangements. No blanket ‘never shared’ claim is made.

Member records are stored in access-controlled database tables. Photographs are kept in private storage and served using temporary signed access links. Access rules limit member records and separate administrator-only material; secure server checks protect adult eligibility and member actions. No online service can guarantee absolute security, and recipients may take screenshots.

To confirm: hosting and storage regions, cross-border transfers and their legal safeguards, encryption and backup arrangements, security incident procedures and any notification duties. Authentication-related browser storage is used to maintain sign-in; an inventory of any other cookies or tracking remains outstanding.

While an account is live, F8 stores applications, member records, messages, photos, matching caches, feedback and safety records. Confirmed self-service deletion removes live personal records and queues private-photo and authentication cleanup. A restricted account identifier and cleanup status remain to prevent restoration and safely retry failures; non-content daily-slot markers may remain for other members. No legally mandatory retention period has been established.

To confirm before launch: retention periods and deletion triggers for rejected or withdrawn applications, active and inactive accounts, messages and photos, AI assessments and provider logs, reports and moderation evidence, operational logs and backups. Consider purpose, safety, dispute handling and legal duties separately. Any necessary exceptions must be explained and limited; backups may require a defined expiry rather than immediate erasure.

You can review your profile and update available preference fields, block or report members, and provide feedback. Ordinary members cannot change a saved date of birth; verified corrections require administrator help. Rights may include access, correction, deletion, portability, restriction, objection or withdrawal of consent depending on applicable law. Some records may need to be retained for legal or safety reasons, and withdrawal does not undo prior lawful processing.

To confirm: rights request contact and process, identity-verification steps, legally applicable response deadlines, appeals, supervisory-authority details and AI review options. Do not send passwords or unnecessary identity documents with a request.

Open your profile Settings and choose Delete Account. Read the consequences and retention notice, verify ownership with your current password, and type DELETE before final confirmation. Confirmation is time-limited and attempt-limited; an open sign-in session alone cannot authorize deletion. Google members or anyone without a remembered password can request a secure password recovery link first. Opening the option, requesting recovery or cancelling does not delete your account.

Once verified deletion begins, your account loses access immediately and is removed from Discover, matching and messaging. F8 removes personal profile and application information, preferences, likes, feedback, private notes, stored AI assessments and related local records. Private photos, including orphaned uploads in your account folder, and sign-in credentials are cleaned up through their services. If external cleanup fails, the account remains inaccessible and cleanup retries on server traffic rather than restoring your account.

Introductions and their conversations, including the other member’s messages in those conversations, are deleted for both participants. Other members’ accounts and unrelated conversations are not deleted. Reports identifying the departing account are removed rather than retained indefinitely without an established lawful purpose. The restricted deletion identifier contains no profile content and prevents accidental restoration; any later deliberate registration creates a new account.

Infrastructure backups, security logs and previously processed AI-provider records may persist under provider policies; F8 cannot remotely erase screenshots, downloaded photographs or messages copied elsewhere. To confirm before beta: provider retention and expiry, contractual deletion options, a bounded purpose and period for any identifiable safety retention, operational cleanup monitoring and a monitored privacy contact for broader rights requests. No provider erasure API or legally required retention duration is promised without verification.

F8 is exclusively for adults aged 18 and older. Valid adult birth dates are required for new registration; server checks restrict applications, activation, Discover and messaging. If you suspect an underage account, report it through an available member report control. A process for reviewing and removing or lawfully retaining suspected underage data must be finalized.

Material policy changes should be dated and communicated before they take effect where required. To confirm: the notice channel and effective date after legal review. This document remains a draft until then.