Privacy

Privacy policy

This policy explains how Unblurred Ltd handles your personal data when you use the Unblurred app or this website: what we collect, why, who sees it, how long we keep it, and your rights.

Last updated 29 October 2026

Who we are

Unblurred Ltd (“Unblurred”, “we”, “us”) is the controller of your personal data. We are registered in Ireland under company number 767837, at Unit 3D North Point House, North Point Business Park, New Mallow Road, Cork, T23 AT2P, Ireland.

  • Privacy questions and requests: privacy@unblurred.app
  • Data Protection Officer: dpo@unblurred.app
  • Our lead supervisory authority is the Data Protection Commission (Ireland).
  • If you are in the United Kingdom, the UK GDPR and the Data Protection Act 2018 also protect you. We will appoint a UK representative under Article 27 UK GDPR before we offer the app in the UK, and name them here. UK residents can contact the representative about anything in this policy. In the UK, our supervisory authority is the Information Commissioner’s Office (ICO).

This policy covers the Unblurred app, the website unblurred.app and the services behind them. It explains what we collect, why, who sees it, how long we keep it, and your rights. It applies alongside our Terms and Conditions.

The short version

  • We never sell your data and never share it with advertisers.
  • To run Unblurred, we handle sensitive information: who you are interested in, your conversations, and a scan of your ID and face to check your age. We ask for your explicit consent to handle it, separately and in plain words.
  • AI reads your conversations to work out how a connection is growing and when your photos should clear. AI also powers the Connection Coach. No person at Unblurred reads your messages to do this.
  • A person on our safety team reads messages only when there is a report, as the “How we use your data, and our legal basis” section explains.
  • Our AI providers are bound by contract. They may not use your data to train their models.
  • We measure how the app is used to improve matching and fix problems, using pseudonymous data wherever we can. Product analytics and marketing messages are off unless you opt in.
  • We keep your data while you have an account. When you delete your account, we erase it, with narrow exceptions for safety and the law (the “How long we keep data” section).
  • You can see, correct, download and delete your data, and withdraw consent. Write to privacy@unblurred.app.

What we collect

Most of what we hold, you give us. The rest comes from how you use the app, from our AI, or from our verification provider.

  • Account. Email address, sign-in times, the versions of our Terms, Privacy Policy and consents you accepted or withdrew, and when. Source: You; our sign-in service.
  • Profile. Profile name (your first name or a nickname), birth date, gender, who you are interested in, relationship goal, bio, profile question, hobbies, values, traits, dealbreakers, Stay blurred setting (Premium). Source: You, often through the coach.
  • Photos. Your profile photos and the blurred versions we make of them. Source: You.
  • Location. Your device’s precise location while the app is open, used to find people nearby. Other members see only an approximate distance (rounded, at least 1 km), never your location. Source: Your device, with your permission.
  • Activity. Likes, passes, matches, unmatches, blocks, answers to profile questions, daily like and answer limits used, chat limits used. Source: Your use of the app.
  • Messages. The text of your messages with matches, with timestamps and delivery status. Source: You and your matches.
  • AI-derived data. Progression scores and relationship-stage estimates for each conversation, safety flags from screening of messages and profile text, compatibility insights, your weekly report (Premium), match percentages, profile embeddings (number codes that summarise a profile for matching), and notes the coach keeps about you. Source: Our AI processing (the “AI and automated decisions” section).
  • Coach conversations. What you write to the Connection Coach and its replies. Source: You; our AI.
  • Identity verification. Your full name (to match your ID; never shown to other members), verification outcome, attempt count, failure reason, your consent and when you gave it, and the birth date on your document (kept only while a mismatch is open). Your ID image and selfie go to our verification provider. We do not keep them. Source: You; AlfaTrust (TrustX by Daon).
  • Safety. Reports you make or that are made about you, the messages copied into a report, moderation decisions, bans and their reasons. Source: You; other members; our safety team.
  • Purchases. Your plan, subscription status, purchase history including sneak peeks, store transaction IDs. We never see your card details. Source: Apple, Google and RevenueCat.
  • Device and technical. Push-notification token, app installation ID, platform, app version, crash reports, diagnostic logs. Source: Your device.
  • Usage analytics (only if you opt in). Pseudonymous events such as screens opened and features used. Source: Your use of the app.
  • Support. What you send us when you contact us. Source: You.
  • Waitlist. Your email address, the country and, if you give it, the city you are waiting for, and when you signed up. Source: You, on our website or in the app.

Information about other people. When you chat with a match, both of you contribute to the conversation. The coach and our analysis process their messages too, as they process yours. Every member agrees to this when they join. Do not share other people’s private details in chat.

On our website. The website unblurred.app sets no cookies and has no analytics, advertising or tracking tools. To stop automated waitlist signups, it keeps a one-way (hashed) code of the network address a signup came from and deletes it automatically after one hour. Our web hosting provider keeps standard server logs, including network addresses, for a short time for security. We do both on our legitimate interest in keeping the site safe (Article 6(1)(f)).

AI and automated decisions

Which AI we use. Our AI runs on Microsoft’s Azure OpenAI Service and Azure AI Foundry, hosted in the EU (Microsoft’s West Europe and North Europe regions). We use OpenAI models (GPT family) through Microsoft, on generally available terms, not preview terms. We do not send your data to OpenAI’s own consumer services. Microsoft processes it as our processor, under a contract that forbids using it to train models.

What the AI does:

  • Conversation analysis. The messages in a conversation with timestamps, plus both members’ profile name, age, gender, bio, hobbies, relationship goal and what they are looking for. What it produces: Signals about how the connection is going, used to place the conversation in one of five stages; safety flags.
  • Matching. Your profile details (what you told us when you set up your profile). What it produces: A profile embedding, used to estimate fit and the match percentage.
  • Connection Coach. On Membership, only while you set up your profile; on Premium, at any time. What you write to it and your profile, including who you are interested in; on Premium, with your separate consent, up to the last 30 messages of the match chat you ask about and its scores. What it produces: Advice, insights, suggested profile edits (applied only if you confirm), and notes it keeps about you (the “How long we keep data” section says for how long).
  • Weekly report (Premium). Your activity, and the stages and scores of your conversations. What it produces: A weekly summary and analysis shown only to you; it does not show anyone’s messages and is not used to make decisions about you.

We do not send your photos, email address, legal name or ID to the AI models.

Decisions made by software. Some results come from automated processing without a person in the loop:

  • Photo reveal. The stage the analysis gives a conversation decides when your photos clear for each other. At the final stage they clear automatically, with no action from either of you, and they stay clear. You agree to this when you join, and you can unmatch at any point before.
  • Who you see. Embeddings, match percentages and your dealbreakers decide which profiles appear, and in what order.
  • Verification. Our provider’s checks, plus our own check of your name and age, decide whether verification passes. A document showing you are under 18 closes the account. You can sign up again once you turn 18.

We do not believe the photo reveal or the ranking has a legal or similarly significant effect on you, in the sense of Article 22 GDPR, because both members chose to talk to each other, each can unmatch at any time, and the reveal happens only between two people who are already matched. Even so, we are open about them, and you can ask a person to review any result at privacy@unblurred.app. Verification cases that are not clear-cut go to a reviewer at our verification provider; you can contest a verification result at support@unblurred.app and a person will look at it. Every suspension and ban is decided by a person. Nobody is banned automatically. If you are in the UK, the same safeguards apply under Articles 22A to 22D UK GDPR: you can give us your views, ask for a person to step in and contest the result.

AI can be wrong. A score is a model’s estimate, not a judgement about you or anyone else. The Terms explain the limits.

Who we share data with

Other members see your profile, your photos (blurred until your conversation reaches its final stage) and your answers. Your matches see your messages. A match whose conversation with you has reached the third stage may buy a 15-second view of your clear photo, unless you are on Premium and have switched on Stay blurred (the “Paid features” section of our Terms); we tell you that someone viewed it, but not who. Your exact location, email address, full legal name from your ID and birth date are never shown. Only your age is shown.

Service providers (processors) handle data only on our instructions, under contracts that meet Article 28 GDPR.

  • Supabase. Database, sign-in, real-time messaging. Data involved: All account, profile, message and safety data. Where: EU (Frankfurt).
  • Microsoft Azure. Hosting our servers; Azure OpenAI and AI Foundry for AI features; Application Insights for diagnostics. Data involved: Data needed by each feature (the sections “How we use your data, and our legal basis” and “AI and automated decisions”). Where: EU (West and North Europe).
  • Cloudflare R2. Storing photos. Data involved: Photos and blurred versions. Where: EU jurisdiction (EU-only storage).
  • AlfaTrust Certification S.A. (Romania), using TrustX by Daon as its sub-processor. Identity and age verification; keeping a one-way code of banned members’ ID document numbers. Data involved: Name, ID document image, selfie, liveness check; hashed document reference for permanent bans. Where: EU.
  • Google Firebase Cloud Messaging. Delivering push notifications (Android, and to Apple’s service for iOS). Data involved: Device token, generic notification text. Where: US and EU; EU–US Data Privacy Framework / SCCs.
  • Apple. Push notifications on iOS; App Store purchases. Data involved: Device token; purchase records. Where: US and EU; DPF / SCCs.
  • Google Play. Play Store purchases. Data involved: Purchase records. Where: US and EU; DPF / SCCs.
  • Sentry. Crash reporting, with no screenshots or logs. Data involved: Crash reports linked to your installation ID, device model, app version. Where: Germany (EU); Sentry is a US company: DPF / SCCs.
  • RevenueCat. Managing subscriptions across stores. Data involved: Pseudonymous user ID, purchase records. Where: US; SCCs.
  • PostHog (only if you opt in). Product analytics. Data involved: Pseudonymous usage events. Where: EU; PostHog is a US company: DPF / SCCs.
  • [Web hosting provider]. Hosting our website and the waitlist. Data involved: Waitlist entries; short-lived server logs. Where: [Country; transfer safeguard if outside the EU].
  • Google Workspace (our email provider). Sending sign-in codes, account notices, waitlist emails and, if you opt in, marketing email; our support and privacy mailboxes. Data involved: Email address, plan, what you write to us. Where: EU and US; DPF / SCCs.

Abuse monitoring by Microsoft. Microsoft may keep the text sent to Azure OpenAI for up to 30 days. Only automated systems and authorised Microsoft staff can see it, and only to detect abuse of the service. It is not used for training. We have applied for Microsoft’s modified abuse monitoring, which switches this storage off; we will update this section when it is approved.

Others, only when needed:

  • Authorities. Police, regulators or courts, when the law requires it or when needed to protect someone’s life or safety.
  • Advisers. Lawyers, auditors, our Data Protection Officer and insurers, under confidentiality.
  • A buyer. A company that takes over Unblurred, which must respect this policy.

Apple and Google also process data as independent controllers when you use their stores, under their own privacy policies.

International transfers

We store and process your data in the European Economic Area wherever we can. Some providers in the “Who we share data with” section may access data from outside the EEA, mainly in the US. These include Google, Apple and RevenueCat, and Sentry and PostHog, which are US companies even where our data is stored in the EU.

When data leaves the EEA, we protect it with one of these:

  • an EU adequacy decision, including the EU–US Data Privacy Framework where the provider is certified;
  • the European Commission’s Standard Contractual Clauses, with the UK International Data Transfer Addendum where UK data is involved, and extra safeguards where our transfer assessment calls for them;
  • for data about people in the UK, UK adequacy regulations, which cover the EEA and US companies certified under the UK Extension to the Data Privacy Framework.

You can ask for a copy of the relevant safeguards at privacy@unblurred.app.

How long we keep data

We keep your data while your account is open. When you delete your account, we erase it from our live systems straight away, and always within 30 days. Copies in encrypted backups are overwritten within 90 days. The exceptions are in the table.

  • Account, profile, photos, matches, embeddings: Until you delete the item or your account. Erased from live systems within 30 days of deletion.
  • Notes the coach suggested while you set up your profile and you did not confirm: 30 days, then erased
  • Notes the coach keeps from your later chats with it: 90 days, or sooner if you tap Clear coach memory in Settings or delete your account
  • Messages: While the conversation is active. After an unmatch or block, 30 days, then erased. If the conversation was reported, 12 months. When you delete your account, your messages are removed from your matches’ chats too.
  • Progress stages and AI analysis: As long as the conversation they belong to
  • Weekly reports (Premium): While your account is open
  • Safety flags from screening: As long as the conversation; 12 months if attached to a report. Flags on profile text: until a person has decided, then as long as the decision record
  • Precise location: Only your latest location is kept. It is replaced each time it updates.
  • Backups: Overwritten within 90 days
  • Identity verification at our provider (ID image, selfie, biometric template): Deleted by the provider within 7 days of the check
  • Our verification record (outcome, consent, attempts): While your account is open. The document birth date is kept only while a mismatch is being resolved.
  • **Banned accounts: We keep a minimal record so you cannot sign up again: a one-way code of your email address, the ban, its reason and date, and, for a permanent ban, a one-way code of your ID document number held by our verification provider. For a temporary ban we erase it when the ban ends. For a permanent ban we erase it after 2 years**. Everything else is erased when you delete your account.
  • A ban that has been lifted: 90 days after it is lifted
  • **Accounts with an open report:** If you delete your account while a report against you is under review, we keep what the review needs until it ends. If the report is upheld, the banned-account rule applies. If it is dismissed, the data is erased.
  • Reports you make, and moderation decisions: 12 months after the case closes, or longer if needed for a legal claim
  • Messages copied into a report: 90 days after the report is dismissed; 2 years after a suspension or ban
  • A record that verification showed someone under 18: A one-way code of the email address and the date the person turns 18, kept until that date
  • Purchase records: 6 years, as tax and accounting law requires
  • Push notification queue: 30 days
  • Crash reports and diagnostic logs: 90 days
  • Record of the Terms, Privacy Policy and consents you accepted or withdrew: While your account is open, and 3 years after, to prove consent if challenged
  • Support emails: 2 years after the conversation ends
  • Waitlist: Until you join the app or unsubscribe; if you have not joined, 6 months after Unblurred opens in your area
  • Marketing consent and unsubscribe records: While you are subscribed, and 3 years after you unsubscribe
  • An account whose subscription has lapsed: 6 months after the last paid period, then deleted after a warning
  • An account nobody has signed into: 12 months, then deleted after a warning by push and email

Your rights

Under the GDPR you have the right to:

  • access the data we hold about you and get a copy;
  • correct data that is wrong or incomplete. You can edit most of your profile in the app;
  • delete your data. Delete your account in Settings, or ask us. The “How long we keep data” section lists what we must keep;
  • restrict how we use your data while a complaint is being looked at;
  • port data you gave us, in a machine-readable format. At launch we send it to you by email within one month; an in-app download will follow;
  • object to processing based on legitimate interests. We will stop unless we have compelling grounds, such as keeping members safe;
  • withdraw consent at any time (the “Sensitive data and your explicit consent” section), including marketing consent through the unsubscribe link or Settings;
  • ask a person to review an automated result and give your view (the “AI and automated decisions” section);
  • see and clear what the coach keeps about you. Tap Clear coach memory in Settings at any time. To see the notes, write to privacy@unblurred.app and we reply within one month; a screen in Settings will follow.

How to ask. Write to privacy@unblurred.app from the app’s Help screen, or by email. We may ask you to confirm your identity, usually with a code to your registered email address. Never send us your ID by email unless we ask. We reply within one month. We can extend this by two more months for complex requests, and if we do, we tell you why. Requests are free, unless they are clearly unfounded or excessive.

Some rights have limits. For example, we cannot give you another member’s messages beyond the conversations you were part of, and we cannot erase a ban record while the ban runs.

Security, children, changes and complaints

Security. We protect your data with these measures:

  • encryption in transit (TLS) and at rest on our servers;
  • access controls, so each person sees only what their job needs, with logging of every access to reported conversations;
  • opaque IDs instead of personal details in links;
  • time-limited links for photos;
  • blocking screenshots in the app where the device allows it;
  • keeping message content, email addresses and names out of production logs;
  • an independent penetration test before launch and after major changes.

No system is perfectly secure. If a breach puts your rights at high risk, we will tell you and the regulator as the law requires. Keep your phone locked. Chats are stored on your device so the app works quickly; protect your device with a passcode.

Children. Unblurred is for adults only. We do not knowingly collect data from anyone under 18. Verification checks age. If we learn that a user is under 18, we close the account, refund any payment and erase their data, keeping only what the “How long we keep data” section describes to stop them signing up again before they turn 18. If you think a minor is using Unblurred, report it in the app or write to safety@unblurred.app.

Changes to this policy. We will update this policy when our processing changes. For a material change, we will tell you in the app at least 30 days before it takes effect. Where a change needs your consent, we will ask for it. The date at the top shows the current version.

Complaints. Please contact us first at privacy@unblurred.app. We would like the chance to put things right. You also have the right to complain to a data protection authority. Ours is the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland, dataprotection.ie. You may instead complain to the authority where you live or work, or where you think the breach happened; in the United Kingdom that is the Information Commissioner’s Office, ico.org.uk.

If you are in the UK, you also have the right to complain to us first about how we use your data. Write to privacy@unblurred.app or use the app’s Help screen. We acknowledge your complaint within 30 days, look into it without undue delay, and tell you the outcome. You can still complain to the ICO at any time.