What we know about you, and what we do with it

Last updated: 18 September 2026

This is a draft policy covering the product as currently built. It will be reviewed by a qualified lawyer before public launch, and updated as features ship.

The short version

• We collect the minimum needed to match you with people and keep the place safe.
• Your email and contact details are never visible to other members.
• Your location is approximate only. No pins, no live tracking.
• Verification selfies are deleted after review.
• We do not sell your data. There are no advertisers here.
• You can export or delete everything, at any time.

What we collect

When you sign in

Google gives us your name, email address and profile picture. We use the email to identify your account and contact you about the service. It is stored in a private record that other members cannot read.

Your profile

Date of birth, gender, pronouns, orientation, relationship status, district and city, what you are looking for, your preferences, languages, and anything you write in your bio. This exists to match you with people, which is the entire point of the app.

Your photos

Profile photos, private album photos, and your verification selfie. Hidden metadata — including GPS coordinates — is stripped from every upload before storage.

Usage and safety data

Approximate location, device and browser information, IP address, and activity such as likes, matches and reports. This keeps the service working and helps us detect fake accounts, scams and abuse.

What we never collect

• Your phone number (unless we later add optional phone verification, which we would ask for separately)
• Your national identity card or passport
• Payment details — there is nothing to pay for
• Your contacts, calendar, or anything else from your Google account beyond name, email and picture
• Precise or continuous GPS location

Who can see what

• Other members see your display name, age, approximate distance, district, status, what you are looking for, your tags, your bio and your public photos.
• Nobody sees your email address, date of birth, exact location, or verification selfie.
• Private album photos are seen only by people you have individually granted access to, and you can revoke that at any time.
• Moderators can access reported content and pending verification submissions, solely to make a decision, with every action logged.

How long we keep things

• Verification selfies — deleted once a decision is made, plus a short grace period for appeals. We keep only the verdict and a one-way fingerprint used to detect duplicate accounts.
• Your profile and photos — until you delete them or delete your account.
• Messages — until you or the other person deletes them, or the account is deleted.
• Safety records — reports and enforcement decisions are kept longer, so that someone removed for harming people cannot simply return.

Your rights

Under Sri Lanka’s Personal Data Protection Act No. 9 of 2022 you can ask us to show you your data, correct it, delete it, or stop certain processing. From your settings you can export your data, pause your profile, or delete your account outright. Deletion removes your profile, photos, messages and login across our systems.

To make a request another way, email hello@slhookups.com.

Where your data lives

The app runs on Google Firebase. Data is processed on Google Cloud infrastructure, which may mean it is stored outside Sri Lanka. Google acts as our processor and is bound by its own security and data protection commitments.

Security

Access is controlled by server-side security rules rather than by the interface, so a determined person poking at the app still cannot read what they should not. Sensitive records are separated from public ones, all traffic is encrypted in transit, and we use bot protection on sign-in, uploads and data access.

No system is perfect. If we ever discover a breach affecting your personal data, we will tell you and the relevant authority promptly and honestly.

Children

This service is strictly for adults aged 18 and over. We do not knowingly collect data from anyone under 18, and any account we believe belongs to a minor is removed and its data deleted.

Changes

If we change this policy materially we will tell you in the app rather than quietly editing this page.

Contact

Privacy questions: hello@slhookups.com. Safety concerns: safety@slhookups.com.