How we use your data

This test is operated by [legal entity name and registered address — to confirm]. For anything about your data, write to [contact address — to confirm].

• Your answers. The 37 statements you rate, and the four scores and archetype they produce.
• Your account. First name, mobile number, and a password we store only as a scrypt hash — we cannot read it. An email address if you give one; it is optional.
• Comparisons. When you invite a partner, the link between your two results.
• Usage. Which steps you reach, on a random session identifier that is not linked to you until you make an account.
• How you found us. The campaign tags on the link you arrived through, and the website that sent you, kept as the site's name only and never the full address of the page. We remember it for the rest of your visit so we can tell which adverts and posts actually bring people here.
• Your country. The two letter country code our host works out from your connection, so we can see where people are finding us. Nothing finer: not a region, not a town, and we never ask your browser for your location. If it cannot be worked out, nothing is stored.

We do not verify your mobile number and we never send messages to it.

They see your archetype, your four dimension scores, and the comparison built from them. They do not see how you answered any individual statement. That is enforced in the code, not by policy: the server never returns item-level answers to the other person in a pair.

We advertise on Google and YouTube, Snapchat, and Spotify. To measure whether those adverts work, we can send those platforms a record that a sign-up or a purchase happened, together with a SHA-256 hash of your email address or mobile number so they can match it to an account of their own.

We want to be plain about what hashing does and does not mean. It stops the platform reading your address directly. It does not make the data anonymous — anyone holding the same address can produce the same hash, which is precisely how the matching works. Under UK GDPR it is still your personal data, and sending it is still sharing it.

None of this happens unless you agree to it. Your answers, your scores and your archetype are never sent to an advertising platform in any form. Only the fact of a sign-up or a purchase, and the hashed identifier, ever would be.

At the bottom of a paid compatibility report we ask four optional questions about your relationship — how long you have been together, how happy you are, and how aligned you are on values and on handling conflict. Nothing is withheld if you skip them and nothing is offered if you answer.

We store those answers next to what the model predicted for you, so we can check the two against each other and improve it. They are never shown to your partner. If we ever publish anything from this it will be aggregate figures only, never anything that identifies a person or a couple. [Retention for research data — to confirm.]

Supabase hosts the database and Vercel hosts the site. Stripe processes payments when payments are enabled, and receives the billing details you give it directly. [Locations and transfer safeguards — to confirm]

[Retention periods — to confirm.] Ask us to delete your account and we will remove it and the results attached to it.

You can ask for a copy of your data, ask us to correct or delete it, withdraw consent for advertising measurement at any time, or object to how we use it. If you think we have got it wrong you can complain to the Information Commissioner's Office at ico.org.uk.