Draft for legal review. Last updated 27 October 2026.

Privacy Policy

Tinted is run by Tinted ("we"). We are the controller of your personal data under UK GDPR. Contact us at hello@playtinted.com.

What we collect

• Account: your email address, used to send sign-in codes.
• Profile: first name, date of birth, gender, who you want to see, town or city, bio, up to six "reveal" facts, and up to six photos.
• Activity: who you were paired with, your keep-going and pass choices, messages, duel scores and shots, which reveals were unlocked, blocks and reports.
• Device: a push notification token, if you allow notifications.
• Subscription: if you buy Plus, whether it's active, which plan, and when it renews or ends. Google Play handles your payment details; we never see your card.

We do not collect your precise location, contacts or payment details.

Why we use it

• To run the service you signed up for: showing profiles, making matches, running duels and chat (contract).
• To keep people safe: checking photos, reviewing reports, enforcing the 18+ rule, preventing fake scores (legitimate interests and legal obligation).
• To send notifications you allowed (consent, which you can withdraw in your phone's settings).

Who sees what

A new match sees your first name, age, town, your one line and a heavily blurred copy of your first photo. As they play duels with you, they unlock your reveal facts one at a time and progressively less-blurred copies of the photo. Your clear photos and bio are shown only once you've both chosen to keep going twice. To do this, your phone uploads three blurred copies of each photo alongside the original. Messages are visible only to you and that match. Blocking hides everything between you and the other person.

Service providers

• Supabase (database, sign-in, file storage, servers).
• Google Firebase Cloud Messaging (push notifications).
• Sightengine (automated photo checks), if enabled.
• Google Play (taking subscription payments) and RevenueCat (keeping track of who's subscribed).

Some providers may process data outside the UK. Where they do, we rely on UK adequacy regulations or the International Data Transfer Agreement or Addendum.

How long we keep it

We keep your data while your account is open. When you delete your account, your profile, photos, matches, messages and duel history are deleted straight away. Reports you made or that were made about you may be kept for up to 12 months to protect other users. Backups roll off within 30 days.

Your rights

You can access, correct, export or delete your data, and object to or restrict some uses. Email hello@playtinted.com. You can also complain to the Information Commissioner's Office at ico.org.uk.

Adults only

Tinted is for people aged 18 and over. We delete accounts we find belong to anyone younger.

Delete your account

In the app, go to Me → Delete my account, or see how to delete your account.