Privacy Policy

What we collect

Account

Email address and a password hash. The password itself is never stored — only a bcrypt hash, which cannot be reversed.

Your profile

Name, age, gender, who you want to meet, preferred age range and distance, city (optional), a short bio and interests. Other users can see your profile.

Photos

Photos you pick from your gallery, stored in cloud storage and shown to other users. Photo files are served from addresses that contain a random identifier; anyone who has the address can open the photo without signing in.

Messages

The text of messages you send to your matches. Visible to you and to the person you wrote to.

Activity

Likes, passes and matches — so we do not show you the same person twice and can create a match when two people like each other.

Reports and blocks

Who you reported or blocked, the reason and any details you add.

Location

Your approximate location, only if you allow it, only to calculate distance to other people. If you decline, the app still works.

Device

A device identifier generated by the app, platform, app version, build number, device model, OS version, language and time zone — to support the app and diagnose problems.

Push

A push subscription identifier, only if you allow notifications, to tell you about new matches and messages.

Install attribution

AppsFlyer identifier, advertising ID and install source, to understand where an install came from.

Network

IP address and the country derived from it. The country is stored; the IP address is used to work out the country and to limit abusive requests.

Usage records

App start and error events with a timestamp and the device identifier, to debug problems.

We do not collect your phone number, contacts, payment details or precise location.

Who we share it with

• Other users — your profile (name, age, gender, city, bio, interests and photos) and your distance in kilometres. They never see your location itself.
• Our moderation team — when someone is reported, we review the reported profile and, if the two people matched, the messages between them. The reported person is not told who filed the report.
• AppsFlyer — install attribution.
• OneSignal — delivers push notifications through Google Firebase Cloud Messaging.
• Amazon Web Services — hosting and databases in the EU (Frankfurt).

We do not sell your data.

How long we keep it

Your account and everything in it is kept until you delete it. When you delete your account, your profile, photos, matches, messages, and the reports and blocks you made are removed. Technical records of the app’s decisions may be kept for analytics, but they are stripped of any link to your account at the same time.

If you remove a single photo from your profile, the file is deleted from our storage.

Your choices

• Delete your account — in the app under Profile → Settings → Delete account, or on our account deletion page if you no longer have the app.
• Remove a photo — from your profile at any time.
• Report or block someone — with the “…” button on their profile or in your chat.
• Location — decline or withdraw the permission in your phone’s settings.
• Advertising ID — Android settings let you reset or remove it.
• Ask us anything — write to support@sunroll.online. If you are in the EU or UK, you also have the right to access, correct, port or restrict processing of your data, and to complain to your local data protection authority.

Security

All traffic between the app and our servers runs over HTTPS. Passwords are hashed, and repeated failed sign-in attempts temporarily lock the account. No system is perfectly secure, but we do not store anything we do not need.

Children

Sunroll is for adults only. It is not directed at anyone under 18, and we do not knowingly collect data from anyone under 18. If you believe a minor has an account, report the profile in the app or write to support@sunroll.online and we will remove it. See also our Child Safety Standards.

Changes

If this policy changes, the date at the top of this page changes with it.