Privacy
Privacy notice
Beta version · November 2026. This describes what the Romantira beta actually does today.
Who runs Romantira
Romantira is operated by Bobi Varvaroiu, a sole trader in the United Kingdom, who decides how your data is used (the data controller). Contact: hello.romantira@gmail.com. Romantira is not yet registered with the Information Commissioner's Office (ICO). We do not claim any certification or compliance accreditation.
Pre-launch waitlist
We store your email, UK town/city, optional “I am” choice (used only to balance the launch), your 18+ confirmation, and the time and wording version of your launch-email consent. We use these on the lawful basis of consent to email you once when Romantira opens in your area. Joining does not create a member account. Only the administrator can view this list.
Waitlist entries are deleted 30 days after the launch email is sent, or on request. To withdraw consent or be removed, email hello.romantira@gmail.com. No launch emails are being sent yet. Salted hashes of IP addresses and emails enforce abuse limits; raw IP addresses are not stored, and those hashes are deleted after 24 hours, with cleanup checked every minute.
What we collect
- Account: email address and password (stored only in hashed form by our authentication provider). Your email must be confirmed before you can create a profile.
- Profile: display name, date of birth, city (chosen from a list — we never use GPS or exact location), bio, relationship intention, interests, age preferences and up to 6 photos.
- Activity: likes, passes, matches, blocks, the messages you send and receive, and a count of messages you have sent.
- Safety & support: reports you file and messages you send through the support form.
- Abuse prevention: a timestamped record of likes, reports and support messages per account, used only to apply daily limits.
We do not ask for nationality, ethnicity, religion, sexual orientation or payment details, and we do not use advertising trackers.
Sensitive information and consent
A dating profile can reveal information about your sex life or relationships, which is special-category data under UK GDPR. We rely on your explicit consent, given when you create a profile, to process it. You can withdraw that consent at any time from Account; doing so immediately removes your profile.
Why we use your data (lawful bases)
- To run the service you signed up for — showing your profile, matching and messaging (contract, plus explicit consent for profile content).
- To keep members safe — moderating reports, enforcing limits and suspending accounts that break the rules (legitimate interests).
Who can see what
- Other signed-in members with an active profile see your display name, age (never your date of birth), city, bio, intention, interests and photos — unless either of you has blocked the other.
- Your email, date of birth and age preferences are never shown to other members.
- Messages are visible only to the two matched members (and to the administrator if a message is reported).
- Photos are stored privately and shown only through short-lived links to eligible signed-in members. Profiles are not public or listed in search engines.
- The administrator can read reports, reported messages and support messages.
Where data is stored
Data is hosted by Lovable Cloud, our hosting and database provider, which acts as our processor. Its infrastructure may store data outside the UK; where that happens, we rely on the provider's contractual safeguards.
How long we keep it
- Profile, photos, likes, matches and messages: until you withdraw consent, unmatch/block (for that conversation), or delete your account.
- Account deletion removes your profile, photos, likes, passes, blocks, matches and their messages, message count, support messages, rate-limit records and sign-in account straight away.
- Safety reports (including a copy of any reported message) are kept while both accounts exist so moderation can happen. When either the reporting or the reported member deletes their account, the report is kept for 90 more days — so abuse can still be acted on — and is then automatically and permanently erased by a daily cleanup. Dismissed reports about you are erased immediately when you delete your account.
Your rights
You can access and download your data, correct your profile, withdraw consent and delete your account yourself from Account. You can also ask us about objection, restriction or anything else by emailing hello.romantira@gmail.com or via the support form. You have the right to complain to the Information Commissioner's Office (ico.org.uk).
Visitor analytics
Lovable collects analytics for us without cookies, storing nothing on your device, keeping no IP addresses and not identifying visitors. For every visitor it records pages visited, referral source, country, browser, operating system, device type, time on site, page speed, errors and clicks. Detailed data is kept for 90 days and daily summaries for a year. Lovable’s privacy policy explains how it handles this data.
Emails
Account emails include confirmation and password reset. The waitlist records your consent for one future local launch email; no launch-email sending is enabled yet.