Privacy policy

Juan [surname], trading as Regulars is the data controller for Regulars. This explains what we collect, why, and your rights under UK GDPR.

What we collect

• Account: email, first name, mobile number, date of birth, photo, optional social links.
• Questionnaire: your answers about your gender, availability, life stage, personality, values, humour and interests. We don't ask about health, religion, politics or ethnicity.
• LGBTQ+ (optional): if you choose to tell us you're part of the LGBTQ+ community, and ask us to match you with other LGBTQ+ members, we use that only to form groups, with your explicit consent. It's never shown to your group. You can remove it any time by editing your answers.
• Activity: bookings, groups, private votes and ratings, reports, and messages in your group chat.
• Payments: handled by Stripe. We never see your full card details.
• ID check: done by Didit. We never receive or store images of your ID or your selfie, only the result and the name and date of birth needed to confirm it's you.

Why we use it

• To run the service you've asked for: matching you, organising your group and sending service messages (contract).
• To keep members safe: ID checks, reports, preventing people being matched again (legitimate interests, and your explicit consent for the biometric selfie check). If the sex shown on your ID differs from the groups you chose, or you've told us you're non-binary or LGBTQ+, our founder may personally review your account to make sure you're placed in a group that suits you. This is never automatic rejection.
• If you report someone for making you feel unsafe, you can leave the group and we'll offer you a free new group.
• To improve matching, using ratings and votes (legitimate interests).
• To meet legal and accounting duties (legal obligation).

We only send service messages about your bookings and groups. We don't send marketing unless you've opted in, and we never sell your data.

Who sees what

• Your group sees your first name, photo, your "ask me about" line and any links you add, from 12 hours before your first meet. They never see your answers, age, email, phone or votes.
• The things-in-common card only shows counts, like "3 of you love hiking", never who said what.
• Service providers who process data for us: Supabase (database and storage), Vercel (hosting), Stripe (payments), Didit (ID checks), Resend (email) and Twilio (text messages).

How long we keep it

• Account and questionnaire: while your account is open, then deleted within 30 days of you asking.
• Group chats: deleted 3 months after a season ends.
• Payment records: 6 years, because the law requires it.
• Safety reports and blocks: kept for as long as needed to keep members safe.
• ID check data at Didit: deleted automatically after 30 days.

Your rights

You can ask to see, correct, delete or download your data, or object to how we use it. Email hello@the-regulars.app. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.