← Back to REVdating

Privacy Policy

Last updated: 13 August 2026

1. Who we are

Heimdell Tech AI Ltd, trading as REVdating is the data controller for personal information collected through the REVdating website and mobile application.

Heimdell Tech AI Ltd is registered in England and Wales under company number 16478408. ICO registration: ZC079121.

Privacy and data-protection contact: andrew@heimdell-tech-ai.co.uk

2. Legal bases

  • Contract — to create your account and provide matching, messaging, safety, and account-management features.
  • Legitimate interests — to secure the service, prevent fraud and abuse, moderate content, and improve reliability.
  • Legal obligation — to respond to lawful requests and meet applicable safety, tax, and data-protection duties.
  • Consent — for optional analytics, marketing, notifications, and special-category profile information where required. You may withdraw consent at any time.

3. Information we collect

  • Account data: email address, hashed password, display name, date of birth, and account status.
  • Profile and dating data: gender, who you want to meet, relationship intentions, biography, photos, bike details, interests, and other information you choose to provide.
  • Location data: coordinates or city information used to calculate approximate distance between members.
  • Activity and communications: swipes, likes, matches, messages, reports, blocks, ride dates, and safety check-ins.
  • Verification and moderation data: selfie-verification images, content-review results, reports, enforcement decisions, and audit records.
  • Technical data: IP address, device/browser details, session timestamps, security events, diagnostics, analytics identifiers, and push-notification tokens.
  • Payment and subscription records when paid features are enabled. Card details are handled by the payment provider and are not stored by REVdating.

Some profile choices may reveal or allow inferences about sexual orientation or other special-category information. Providing this information is optional. Where required, we ask for explicit consent and you may withdraw it by changing your profile or contacting us.

4. How we use information

  • Provide accounts, discovery, matching, messaging, verification, and safety features.
  • Calculate approximate distance without showing your precise coordinates to other members.
  • Moderate photos and messages, investigate reports, enforce our rules, and protect users.
  • Deliver essential service messages and optional notifications.
  • Operate optional AI helpers requested by the user, such as profile suggestions, icebreakers, message-safety guidance, and ride planning.
  • Measure service performance, diagnose faults, and prevent fraud or misuse.
  • Process and administer payments when paid features are enabled.

5. Location, photos, messages, and AI

Precise coordinates are used server-side to calculate distance and are not displayed to other members. Users see only approximate distance or location information selected for display.

Uploaded photos may be checked by automated moderation services. Pending, flagged or appealed photos may also be reviewed by an authorised human moderator. Messages may be analysed for safety when the message-safety feature is used.

Optional AI features send only the information needed to produce the requested result to the configured AI provider. AI suggestions are not sent to another user automatically. Do not include unnecessary sensitive information in an AI request.

6. Service providers and sharing

We do not sell personal data. Depending on which features are enabled, data may be processed by:

  • Supabase — authentication, database, realtime messaging, and private file storage.
  • Netlify — website hosting, delivery, server functions, and security logs.
  • Sightengine — automated image moderation.
  • OpenAI — optional AI helpers and safety analysis.
  • PostHog — optional product analytics, configured without session recording or automatic form capture.
  • Sentry — error monitoring and diagnostics.
  • Google Maps — location search and map features.
  • Tenor — GIF search and selection.
  • Resend and Web Push/VAPID services — email and push notifications.
  • Stripe or Google Play — payment processing when paid features are enabled.
  • Professional advisers, regulators, courts, or law enforcement where legally required.

Some providers may process information outside the UK. Where required, we use recognised safeguards such as adequacy regulations or approved contractual protections.

7. Retention

  • Active account data is kept while the account remains open and as needed to provide the service.
  • Account data scheduled for deletion is normally removed within 30 days, subject to fraud, safety, dispute, or legal-retention requirements.
  • Moderation and safety records may be retained where necessary to prevent repeat abuse, establish legal claims, or meet legal duties.
  • Payment and tax records may be retained for up to seven years where legally required.
  • Provider logs and backups expire according to documented security and retention schedules.

8. Security

We use access controls, row-level database security, private storage, signed media access, transport encryption, audit records, rate limiting, and restricted administrative access. No online service can guarantee absolute security, so users should use a unique password and report suspicious activity promptly.

9. Your UK GDPR rights

You may ask us for access, correction, deletion, restriction, portability, or to object to certain processing. You may also withdraw consent where processing is consent-based.

REVdating provides profile editing, data export, and in-app account deletion controls. You can also contact andrew@heimdell-tech-ai.co.uk. We normally respond within one month.

You may complain to the Information Commissioner's Office at ico.org.uk.

10. Age restriction

REVdating is an adults-only dating service. Users must be at least 18. We collect date of birth to enforce this rule and remove accounts credibly identified as belonging to minors.

11. Account deletion

You can delete your account from Settings → Delete account. Instructions are also available on our public account-deletion page. Deletion does not remove records that we must retain by law or narrowly retained safety records justified under applicable law.

12. Changes and contact

We may update this policy when the service, providers, or legal requirements change. Material changes will be communicated through the service or by email where appropriate.

Questions can be sent to andrew@heimdell-tech-ai.co.uk.