Privacy Policy

Last updated: August 21, 2026

1. What We Collect

• Account info: email, password (stored as a salted hash, never in plain text), first name, date of birth
• Profile info: photos you upload, your prompt answers, city, gender, and who you're interested in meeting
• Verification photos: if you choose to get a Verified badge, a selfie with a pose prompt — stored separately from your profile photos, seen only by our moderation team, and never shown publicly
• Activity: who you swipe on and message, reports you file or receive
• Payment info: if you buy an event ticket or subscribe to Tyluna+, Stripe processes your payment details directly — we receive confirmation that you paid, not your card number
• Technical: IP address (used for login rate-limiting/security), timestamps of activity

2. How We Use It

To show you to compatible members and show them to you, to operate matching and messaging, to process payments, to enforce our Terms (including investigating reports), and to send account-related emails (verification, password resets, receipts). We do not sell your personal data.

3. Who Can See What

Other members can see your first name, age, photos, prompt answers, and city. Your email, exact birthdate, verification photos, and message history are never shown to other members. Messages are only visible to the two people in that conversation (or, in a Double Date group chat, its four participants) and to our moderation team when reviewing a report. If you choose to share your WhatsApp number with a match, that number leaves our systems at that point and WhatsApp's own privacy policy governs it from there — sharing it is always your choice, never automatic.

4. Third-Party Services

We use Stripe to process payments — see Stripe's privacy policy for how they handle payment data. We do not use third-party advertising or analytics trackers.

5. Cookies

We use a single session cookie to keep you signed in. We don't use tracking or advertising cookies.

6. Data Retention

We keep your data while your account is active. Deactivating your account hides your profile from other members; contact us to request full deletion of your data.

7. Your Choices

You can edit or delete your profile info and photos at any time from your Profile page, block or report other members, and deactivate your account. To request a copy of your data or full deletion, contact us at support@tyluna.com — we'll respond within 30 days.

8. Security

Passwords are hashed, not stored in plain text. Uploaded photos are stored in a directory that cannot execute code. We use rate-limiting to slow down automated login attempts. No system is perfectly secure — report any suspected vulnerability to support@tyluna.com.

9. Children

The Service is not intended for anyone under 18. We do not knowingly collect data from minors.

10. International Users

[Placeholder — jurisdiction of incorporation is still open (Canada, US, Asia, or Middle East). Once decided, this section needs cross-border data transfer disclosures and the specific region-based rights that apply (e.g. GDPR-style access/erasure/portability rights for EU/UK members, PIPEDA for Canada, CCPA for California), finalized with legal counsel based on where you actually operate and where your members are.]

11. Changes to This Policy

We may update this Policy from time to time; continued use of the Service after a change constitutes acceptance.

12. Contact

Privacy questions: support@tyluna.com.