Privacy Policy

Fluxly ("we," "us," or "our") operates the Fluxly dating application and website at fluxlydating.com. We are the data controller responsible for your personal information collected through our services.

If you have questions about this Privacy Policy or your data, contact us at: [email protected]

Information you provide directly:

• Account information: name, date of birth, email address, gender, and sexual orientation (optional)
• Profile content: photos, bio, job title, school, height, and relationship intent
• Preferences: discovery filters (age range, distance, gender preference)
• Communications: messages you send to matches through our chat feature
• Support requests: information you provide when contacting our support team

Information collected automatically:

• Device information: device type, operating system, browser type, and unique device identifiers
• Usage data: pages visited, features used, swipe activity (aggregated, not individual decisions), session duration
• Location data: approximate location (city/region level) derived from IP address; precise GPS location only if you explicitly grant permission
• Log data: IP address, access times, referring URLs, and error logs
• Cookies and similar technologies: session cookies for authentication, analytics cookies (see Section 8)

Information from third parties:

• OAuth sign-in providers (e.g., Manus): basic profile information such as name and email address
• Payment processors (Stripe): transaction identifiers and subscription status — we never receive or store your full card number

We use your information for the following purposes, each grounded in a lawful basis under applicable data protection law:

• Providing the service (contract performance): creating and managing your account, showing you potential matches, enabling messaging, processing payments, and enforcing our Active Members Only policy.
• Safety and security (legitimate interest): detecting fraud, abuse, and fake profiles; verifying identity; enforcing our Terms of Service; and protecting other users.
• Improving our product (legitimate interest): analysing aggregated usage patterns to improve matching algorithms, fix bugs, and develop new features.
• Communications (consent or contract): sending transactional emails (match notifications, account alerts) and, where you have opted in, promotional messages about new features or offers.
• Legal compliance: complying with applicable laws, responding to lawful requests from authorities, and resolving disputes.

We do not sell your personal information. We share data only in the following limited circumstances:

• Other users: Your profile (name, age, photos, bio, and other information you choose to share) is visible to other Fluxly users in accordance with your privacy settings.
• Service providers: We share data with trusted third-party vendors who help us operate the service — including cloud hosting (AWS), payment processing (Stripe), analytics, and email delivery. These vendors are contractually bound to use your data only to provide services to us.
• Business transfers: If Fluxly is involved in a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.
• Legal requirements: We may disclose your information if required by law, court order, or governmental authority, or to protect the rights, property, or safety of Fluxly, our users, or the public.

We retain your personal data for as long as your account is active or as needed to provide our services. Specifically:

• Active account data is retained while your account exists.
• If you delete your account, we delete or anonymise your personal data within 30 days, except where we are required to retain it for legal or compliance purposes (e.g., financial records for up to 7 years).
• Messages are deleted from our servers within 30 days of account deletion.
• Aggregated, anonymised analytics data may be retained indefinitely.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete data.
• Deletion ("right to be forgotten"): Request that we delete your personal data. You can also delete your account directly in Settings → Account → Delete Account.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Restriction: Request that we restrict processing of your data in certain circumstances.
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days. EU/UK residents may also lodge a complaint with their local supervisory authority.

California residents (CCPA): You have the right to know what personal information we collect, the right to delete it, the right to opt out of its sale (we do not sell personal information), and the right to non-discrimination for exercising these rights.

We implement industry-standard security measures to protect your data, including:

• TLS/HTTPS encryption for all data in transit
• Encryption at rest for sensitive fields (passwords are hashed using bcrypt)
• Access controls limiting data access to authorised personnel only
• Regular security reviews and penetration testing

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately at [email protected].

We use the following types of cookies:

• Essential cookies: Required for authentication and core app functionality. These cannot be disabled.
• Analytics cookies: We use privacy-friendly analytics (Umami) to understand how users interact with our site. These do not track you across other websites and do not use advertising identifiers.

You can manage your cookie preferences by clicking the "Cookie settings" button in the footer of this page. You can also control cookies through your browser settings, though disabling essential cookies will prevent you from using the app.

Fluxly is intended for users aged 18 and over. We do not knowingly collect personal information from anyone under 18. If we become aware that a user is under 18, we will immediately suspend their account and delete their data. If you believe a minor has created an account, please contact us at [email protected].

Fluxly is based in the United States. If you are located outside the US, your data may be transferred to and processed in the US or other countries. Where required by law (e.g., for EU/UK residents), we rely on Standard Contractual Clauses or other appropriate safeguards to protect your data during international transfers.

Our service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies before providing any personal information.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through a prominent notice in the app at least 30 days before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the service after changes take effect constitutes acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• Email: [email protected]
• Website: fluxlydating.com