Privacy Policy

Who is responsible

SabiLove is operated in the United Kingdom by SabiLove Team. The operator is responsible for how SabiLove uses your personal information.

For privacy questions, access requests, corrections, consent withdrawal or deletion requests, email admin@sabilove.com. Identify the email connected to your account. Do not send passwords, sign-in links, payment-card details or identity documents in your initial email.

Information we collect and why

• Sign-in security: Supabase Auth processes your email and password to authenticate you and stores a password hash rather than your readable password. We do not store passwords in profile fields or make them available to administrators.
• Account and profile: email address, account identifier, names, date of birth, phone number, profile photograph, gender, sexual orientation if disclosed, dating preferences, selected country and city, profession, relationship goals and profile text. We use these to register and identify your account, provide your profile and the features you choose, and apply age and room-access rules. You can select “Prefer not to say” for sexual orientation.
• Identity verification: Stripe Identity collects the identity document, selfie and related information requested in its verification process. SabiLove receives verification results and references, and uses verified names and dates of birth for private administration, age checks and duplicate-account review. SabiLove does not display your identity documents or verified legal-name record to other members.
• Optional professional or student verification: supporting documents, work or student email, institution or employer, professional references, review notes, consent records and badge decisions. These support the verification you request. Country-review evidence and explanations may also be collected when a connection-country check cannot be completed.
• Communications and content: room posts, direct messages, photographs, voice notes, replies, edits, delivery/read information and uploaded music. We store and deliver this content to the appropriate members. Online presence, last activity, blocking choices and conversation identifiers support messaging and member controls.
• Calls: participant identifiers, call type, start/end times, status and usage allowance. Agora processes live microphone and camera streams to connect calls. SabiLove does not provide call recording; sent voice notes are stored recordings and are separate from live calls.
• Access and subscriptions: room permissions, subscription status and expiry dates, complimentary-access grants and administrative decisions. These determine which rooms you may enter. The current app does not collect payment-card numbers in profile or chat forms.
• Connections: friend requests you send or receive, whether you accept or decline them, and your accepted connections. Private messages and calls between ordinary members require an accepted request. Conversations with the SabiLove administrator do not require a friend request. Calls still require the recipient to answer, and blocking controls still apply.
• Support and safety: complaints, feedback, screenshots, report references, relevant conversation evidence and moderation decisions. When a member reports a specific private message, we preserve that message and up to three nearby messages on either side for Admin review. A reported room post or TGIF video may be retained as evidence after it is removed from the room. Report evidence is accessible only to authorised administrators and is deleted under our report-retention schedule.
• Technical information: network address, device/browser information, requests, error and security logs, and connection-country information handled by our service providers. We compare the connection country with your selected country to help prevent misleading registrations; this is not GPS tracking.

Information comes from you, your device, verification and service providers, and other members who communicate with you or submit reports. Account details and identity checks are needed for verified access. Professional or student evidence is needed only when you request the corresponding verification.

Purposes and choices

We use information to deliver the service you request, maintain your account, connect members, manage subscriptions and room permissions, respond to support requests, investigate misuse and meet applicable legal obligations. We rely on providing our service, legitimate interests in operating and securing it, legal obligations where applicable, and consent where we request it, including optional verification-document processing.

Sexual orientation and some information you choose to share are sensitive. Avoid putting unnecessary sensitive details in profiles, chats or uploaded documents. You can change your sexual-orientation selection to “Prefer not to say” in My profile and contact us to request removal of previously supplied information.

Age, verification status, subscription or complimentary access, country checks and approved badges are used to allow or block entry. A possible duplicate can be held for manual review. If a result appears incorrect, contact us to request administrator review.

Who receives your information

Other members see the profile information made available in the app, such as your profile name, photo, country, profile details and applicable badges. Room posts are visible to members with access to that room. Direct messages and calls are shared with the relevant participants. Recipients may keep their own copies of content you share.

Authorised SabiLove administrators can access account and verification information to operate the service, review access and handle reports. Supporting verification documents are private to the submitting member and authorised administrators. Private messages are not a public feed, but relevant evidence may be accessed for safety, support or legal reasons.

Service providers process information needed for their roles:

• OpenAI Sites and Cloudflare: website hosting, delivery, server processing, database and file storage, and connection/security information.
• Supabase: account authentication, profile and messaging data, presence and related database services.
• Resend: delivery of account and sign-in emails, including email addresses and delivery information.
• Stripe Identity: identity verification, documents, selfies, verification results and fraud-prevention information. Stripe explains its own processing in its privacy policy and verification notices.
• Agora: live voice and video calls, participant information, connection data and call streams.
• CountriesNow and software delivery services: country/city choices and delivery of calling software. Requests expose normal connection information; the city lookup sends the selected country.

Google Play, the Apple App Store and your browser or device provider separately process information about downloads, updates, permissions or platform services under their own privacy policies. We may disclose information when necessary to respond to a lawful request, protect people or establish, exercise or defend legal claims.

Device permissions and local storage

Microphone permission is used for voice notes and calls; camera permission is used for video calls or a verification flow you start. File or photo access lets you select material to upload. You can revoke device permissions in your browser or phone settings, although the related feature may then stop working.

SabiLove uses device storage for authentication sessions, interface preferences, listening settings and offline app assets. Sign out on shared devices. The current app does not include an advertising SDK or an advertising-tracking feature.

Security and international processing

We use HTTPS, account authentication and access controls to restrict account information, private documents and administrative functions. Keep your password, verification codes and account email links private. No online service can guarantee that information will never be accessed without permission, and SabiLove cannot prevent another person from copying content shown on their device.

Our providers operate internationally, so information may be processed outside the United Kingdom, including in the United States and other countries where they operate. Applicable provider data-processing terms and transfer arrangements govern that processing. Contact us for information about the arrangements relevant to your data.

How long information is kept

• TGIF member images and videos: access expires 24 hours after upload. Expired files are removed from storage by the recurring cleanup job, normally within five minutes; failed deletions are retried. Uploaders and Admin can remove posts earlier. Report evidence may be retained separately.
• Accounts and normal activity: profile, messages, media, call history and access records are kept while needed to operate your account and chosen features, unless you delete eligible content or your account. Archiving hides and pauses an account but keeps its information for reactivation.
• Professional and student verification evidence: documents and verification-only work/student emails are kept during review, then scheduled for automatic deletion 48 hours after approval or rejection. Cleanup runs every five minutes; temporary service failures are retried, so removal may take longer during an outage or backlog. Document access ends at the deletion deadline. Verification decisions, badges, consent records and essential review information can remain after the evidence is removed. Your normal account login email is retained while your account is active. You can request earlier deletion; doing so before review may prevent verification.
• Country-review evidence: supporting information is retained to resolve and document the country check, unless replaced, deleted with your account or removed following a valid request.
• Feedback, complaints, suggestions and appeals: these are private between the submitting member and SabiLove Admin. They remain available while awaiting an Admin reply. Once an Admin reply is sent, the submission and its replies are scheduled for automatic deletion from both sides 48 hours later. The member or an authorised administrator can delete the full item sooner.
• Safety and legal records: reported material and relevant original content or changes may be retained separately after a message or account is deleted when needed to investigate a report, prevent fraud or meet legal obligations. Retention depends on the unresolved issue, applicable obligations and time limits for claims.
• Provider records: security logs, backups, email-delivery records and Stripe verification information may have separate retention periods under the provider’s terms. Deleting a SabiLove account does not automatically erase every provider-held record or copies already kept by recipients.

Delete your account or request data deletion

In the app: open My profile → Account controls → Delete, then follow the confirmation steps. This removes your sign-in and starts removal of your profile and associated active content. Limited safety or legally required records described above may remain. If the app reports incomplete cleanup, contact us.

Without the app: email admin@sabilove.com with the subject “Delete my SabiLove account”, preferably from the account’s registered address. You can request deletion of specific information instead. We may need to verify account ownership before acting and will explain any information that must be retained. You do not need to reinstall the app to make this request.

Uninstalling the app does not delete your account. Archiving is reversible and is not account deletion. For Stripe-held verification data, contact us so the request can be handled with Stripe as appropriate.

Your privacy rights

Depending on the law that applies, you can request access to your information, correction, deletion, restriction of processing or a portable copy. Where processing relies on consent, you can withdraw it without affecting processing already carried out lawfully. You can also ask for human review of an access decision.

Right to object: you can object to processing based on legitimate interests. Explain your request to admin@sabilove.com so we can assess it and respond.

You can complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint, or the relevant data-protection authority where you live. We encourage you to contact us first so we can try to resolve your concern.

Children and changes to this policy

SabiLove does not permit accounts for people under 18. If you believe an underage person has registered, contact us so we can investigate and take appropriate action.

We will update this page when the service or its data handling changes. The date above identifies the current policy. Material changes will be brought to members’ attention where required.