Privacy Policy

Who we are

Loloma is a dating app for iPhone and Android. In this policy, "Loloma," "we," "us" and "our" mean the operator of the Loloma apps and this website. "You" means anyone who uses them.

This policy covers the Loloma iPhone and Android apps, the web pages Loloma opens for checkout, Spotify connection and video calls, and this website. It should be read together with our Terms of Service. Loloma is offered in the United States.

Information you give us

Account and sign-in

• Phone number. Every account verifies a mobile number by text message (SMS) code. We use it to sign you in, to keep to one account per person, and to make banned accounts harder to recreate. It is never shown to other members.
• Sign-in account. You can start with Sign in with Apple, Google, or an email address and password. We receive the email address and, if you allow it, the name that the provider shares. Passwords are handled by our sign-in provider (Firebase Authentication), and we never see them in plain text.

Your profile

• Basics: first name, birthday (we show only your age), gender, who you want to see, and what you're looking for (for example marriage, long-term, dating, hookups, or open to see).
• About you: a short bio, written prompt answers, interests, height, languages, pets, zodiac sign, love language, hometown, job title, company, school and education level.
• Compatibility answers: whether you want or have kids, religion, politics, how often you drink, smoke and exercise, your values, lifestyle, and whether you're open to long distance.
• Ethnicity, if you choose to give it. It is used only for search filters and is never displayed on your profile or anywhere else in the app.
• Profile layout choices, such as the order of sections and whether to show your religion or politics.

Photos, video and voice

• Profile photos (up to six, and at least three before your profile is shown), an optional chat picture, and optional photos on prompts.
• A video intro of up to about 15 seconds, if you record one. It includes your face and voice.
• Voice prompts, if you answer a prompt out loud.
• The liveness selfie. See Verification and face data.

Likes, matches, messages and calls

• Likes, super likes and passes, including any short note you add to a like, and undo actions.
• Messages in your chats: text, photos, voice messages, GIFs, replies and emoji reactions, plus read receipts and typing indicators (you can turn read receipts off).
• "We met" confirmations and goodbye notes when you end a match.
• Video calls. We keep a record of each call (who called whom, when it rang, was answered and ended) to enforce the five-minutes-a-day limit. Calls are not recorded. The live audio and video pass through our video provider, Daily, only while the call is happening.

Handles, double dates and meetups

• Your @handle, if you create one, and a count of how many handles you search each day (searches are limited to stop guessing).
• Double dates: the friends you invite or pair with, your invitations, and your likes and passes on other pairs.
• Meetups: your RSVPs, whether you chose to appear on the guest list, and any event ideas you suggest.

Safety tools, settings and feedback

• Reports and blocks: who you reported or blocked, the reason, and any details you add.
• Appeals you send about a decision on your account.
• Trusted contact: the name and phone number you save for "Share my date." Loloma doesn't contact this person. The app prepares a message, and you choose how to send it with your phone's share sheet.
• Settings and filters: age range, distance, deep filters, notification choices, read receipts, and Plus settings such as travel mode and incognito.
• Feedback you send us in the app, such as suggesting an option that's missing from a list.

Spotify (optional)

If you connect Spotify, you sign in on Spotify's site and allow read access to your top artists only. We save your top ten artists (name, picture and Spotify link) on your profile and keep a Spotify access token so we can refresh the list weekly. Disconnecting removes the artists and the token.

Purchases

If you subscribe to Loloma Plus, we store your plan, its status, renewal date and where you bought it. Card and bank details go directly to Stripe (on the web) or to Google Play or the App Store. We never receive your full card number. On the web, Stripe also receives the name on your Loloma profile and an internal account ID.

Verification and face data

Before you can see anyone, Loloma asks for a short live selfie. This section explains exactly what happens, because a face template is biometric information under several state laws.

What happens during the check

1. On your phone. The app asks you to center your face, blink, and turn your head. Your phone tracks those movements on the device itself (Apple's Vision framework on iPhone, Google's on-device ML Kit on Android). A log of the movements (timing, blink count, head-turn angles and frame counts) and one straight-on photo are sent to our servers. No video of the challenge is uploaded.
2. On our servers. Our own software, an open-source face-recognition model that runs inside our Google Cloud servers, finds the face in the selfie and turns it into a face template: a list of 128 numbers that describes the face. It does the same for each of your profile photos and compares them. To pass, the selfie must match at least one of your photos (two, if three or more show a face).
3. Banned-account check. Your template is compared with the templates of accounts banned for breaking our rules. A close match stops the sign-up and sends it to a person for review.
4. The selfie is deleted. The selfie photo is deleted as soon as the check finishes, whether you pass or fail. It is never shown to anyone, including other members.

No outside face-recognition or identity-verification company receives your selfie or your template. The software and the comparison run on our own servers, hosted by Google Cloud.

Ongoing checks

We keep your face template so we can check, without a new selfie, that your profile still shows you. Whenever you add or remove photos or change your video intro, our servers compare the faces in them with your template. For video intros, Google Cloud Video Intelligence detects where faces appear in the video and returns small face crops, and our own software compares those crops with your template. If your photos or video no longer match, your profile is hidden and messaging pauses until you fix it or verify again. We store the outcome of each comparison (for example "face found, matched"), not templates of your photos.

How long we keep face data

• Selfie photo: deleted immediately after the check.
• Your face template: kept while your account exists and deleted when you delete your account.
• If your account is banned: a copy of the template is kept so the same person can't verify a new account, for as long as the ban stands. If you appeal and the ban is overturned, it is deleted.
• Verification attempt records (pass or fail, the reason, a match score, the time) contain no image or template.

What we never do with face data

We never sell, lease, trade or otherwise profit from face data. We don't use it for advertising, we don't use it to find you in other people's photos, and we don't share it with other members or outside companies, except our hosting provider (Google Cloud) acting on our instructions, or where the law requires it.

Information collected automatically

Location

Loloma needs your location to show people near you. With your permission, the app reads your phone's position when you set up your profile and again when you open the app. It doesn't track you in the background.

• Exact coordinates are stored privately and used only by our servers to measure distance for matching. Other members never see them.
• Your area (a city and state, such as "Austin, TX") and a coarse location code covering an area roughly 5 km (about 3 miles) across are stored with your profile. The city is what other members see.
• To turn coordinates into a city name, the app uses your phone's built-in map service (Apple on iPhone, Google on Android).
• If you use travel mode (Plus), we store the area you chose to browse from.
• The app refuses simulated or "mock" locations.

Device and app integrity

To stop fake apps, bots and scripted sign-ups, Loloma uses Firebase App Check with Apple App Attest on iPhone and Google Play Integrity on Android. Your device sends Apple or Google a signal that the request comes from a genuine copy of the app on a genuine device, and our servers check the result. We don't receive your device's hardware identifiers from this.

Push notifications

If you allow notifications, we store a push token for your device (Firebase Cloud Messaging, which uses Apple Push Notification service on iPhone) so we can tell you about matches, messages, likes, calls, and changes to your account. The Android app also checks our servers for app updates when it opens. That check sends the app's version, not information about you.

Activity in the app

• When you were last active, when your account was created, and how many times your profile was shown to others today (so nobody is shown too much or too little).
• A reliability score calculated weekly from how you use Loloma: whether you reply within your matches, "We met" confirmations, politely closing chats, and any upheld rule violations. We also calculate the share of profiles you like, so mass-liking counts for less.

GIF search

GIFs, stickers and clips in chat come from GIPHY, through GIPHY's own picker in the app. When you use it, GIPHY receives your search words, which items you view and send, and technical details such as your device type and an anonymous ID its software creates. We don't send GIPHY your name, phone number or Loloma account ID. GIPHY handles that information under its own privacy policy.

Logs

Our servers keep technical logs, such as errors and request records with an internal account ID, to run and debug the service.

No advertising or analytics trackers

The Loloma apps contain no advertising SDKs and no third-party analytics or tracking SDKs. This website uses no cookies, analytics or trackers. It loads fonts from Google Fonts and Fontshare, which receive your IP address when they send the font files.

How we use information

• To run Loloma: create your account, show your profile, build your Discover list, deliver likes, matches, messages and calls, and send notifications.
• To match and rank. Discover is ordered by how likely you and each person are to like each other. That estimate uses your compatibility answers (including religion, when both people have answered), shared interests and languages, intent, age difference, distance, whether a profile has a video intro or voice prompt, recent activity, reliability, and whether the person already liked you. Your filters and theirs are applied both ways. Plus status is not a ranking input. Ethnicity is used only as a filter, never in the score.
• To keep people safe and real: run verification and face matching, check content, look for scams, review reports, and enforce our rules. See below.
• To handle payments: turn Plus on and off, send a reminder three days before each renewal, and process refunds.
• To support you: answer questions, appeals and requests.
• To improve Loloma: fix bugs and tune matching. "We met" confirmations help us learn which matches work.
• To meet legal obligations and protect the rights and safety of members and others.

Automated safety checks

Some decisions start automatically, and a person reviews them on request:

• Profile content. Every time you save your profile, your photos, video intro, voice prompts and text are checked. Images are checked with Google Cloud Vision SafeSearch. Video is checked with Google Cloud Video Intelligence, and what you say in it is transcribed. Voice prompts are transcribed with Google Cloud Speech-to-Text. Text is checked with Google Cloud Natural Language and our own word rules. While the check runs, and if something isn't allowed, your profile is hidden from Discover and you're told what to change.
• Chat photos and voice messages get the same checks. They are still delivered, but a flagged photo arrives blurred and a flagged voice message carries a warning, which only the recipient sees.
• Scam signals. The first three messages you send in each chat, and notes on likes, are scanned for patterns common in scams (requests for money, gift cards, crypto, links, or moving to another app). A flagged message shows the recipient a warning and goes to a person for review. Sending the same opening message to many people is also flagged.
• Reports. If an account receives three or more reports for scams, harassment, or looking under 18 within seven days, its messaging is paused for up to seven days while a person reviews it.
• Identity holds. If your photos or video intro stop matching your verified face, your profile is hidden until it's fixed.

You can see any warning, restriction or ban on your account in Settings under Account standing, with the rule and the content involved, and you can appeal it to a person.

What other members can see

Shown on your profile to other members

• Your first name, age, photos, chat picture, video intro, voice prompts, prompts, bio and interests
• What you're looking for, and a compatibility score with the viewer
• Basics you fill in: height, work, school, education, languages, pets, zodiac, love language and hometown
• Compatibility answers such as kids, drinking and smoking, and your religion and politics unless you hide them
• Your city or area (never your exact location or distance)
• Your verified badge, and your Spotify top artists if you connected Spotify

Shown in specific places

• Likes You: when you like someone, they see your profile and any note you wrote.
• Chats: your matches see your messages, reactions, read receipts (if on) and typing indicator, and your name and photo during video calls.
• Double dates: your friend sees the pairing, and other pairs see both of your profiles together. Group chats are shared with all four people.
• Meetups: other members can see that you're going, if you choose to appear on the guest list.

Never shown to other members

• Your phone number, email address, exact location and exact birthday
• Your ethnicity, and religion or politics you chose to hide
• Your @handle. People who already know it can search for it, but it never appears on your profile.
• Your selfie and face template, your filters, your block list, your trusted contact, and your reliability score
• Who reported you. People you report are not told who reported them.

Anything you send to another member, such as messages, photos or voice notes, is in their hands too. They could save or screenshot it, so share with care.

Who we share it with

We share personal information only with the service providers that run parts of Loloma for us, under contracts that limit what they can do with it, and in the legal and safety situations listed below.

The video call screen loads Daily's calling software from the unpkg content delivery network, which receives your device's IP address when it serves those files.

Other situations

• Legal and safety. We may disclose information when we believe in good faith that the law requires it, for example in response to a valid subpoena or court order, or when it's needed to prevent fraud or protect someone from serious harm.
• Business changes. If Loloma is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that deal, and this policy, or one at least as protective, will continue to apply to it.
• With your direction. For example, when you use "Share my date" or share your data export.

No sale, no targeted advertising

We do not sell personal information, we do not "share" it for cross-context behavioral advertising (as California law uses those words), and we don't show ads. We have not done so in the past 12 months.

Sensitive information

Some of what you give a dating app is sensitive. That includes the face template from your selfie, your ethnicity, religion and politics, your precise location, the contents of your messages, and your gender together with who you want to see, which can reveal your sexual orientation.

• All of these are optional except your gender, who you want to see, and your location, which are needed for matching, and verification, which every member completes.
• We use sensitive information only to provide Loloma: matching, filtering, verification, and safety. We don't use it to infer things about you for advertising, and we don't sell or share it.
• Ethnicity is never displayed. You can hide religion and politics from your profile and still use them for filters and compatibility.
• Your messages are read by our systems only for the automated checks described above, and by our staff only when a message is reported or flagged, or to investigate a safety issue or legal request.

How long we keep it, and deletion

We keep your information while your account exists. Matches don't expire. Quiet chats become inactive but aren't deleted. We don't automatically delete inactive accounts.

Deleting your account

You can delete your account in Settings at any time. Deletion takes effect immediately, with no waiting period, and it removes:

• Your profile, private settings, location, filters, block list, trusted contact and push token
• Your photos, video intro, voice prompts, any selfie left over from verification, and your face template
• Your likes (given and received), one-on-one matches and every message in them, including photos and voice messages. The other person loses that chat too.
• Your @handle, which is freed so someone else can claim it
• Your Spotify connection and tokens, your double-date pairings, invitations and votes, and your meetup RSVPs
• Reports you made, warnings and restrictions on your account, and items about you in our review queue
• Your sign-in account, including your phone number and email

A Plus subscription bought on our website through Stripe is cancelled at the same moment. A subscription bought through the App Store or Google Play is controlled by Apple or Google, so cancel it there as well, or it will keep renewing.

What is kept after deletion

• Banned accounts: if your account was banned, the face template from your selfie is kept so you can't verify a new account. It is deleted if the ban is overturned.
• Double-date group chats: you're removed from the chat, but messages you sent there stay visible to the other members.
• Reports others made about you, so we can act on patterns of harmful behavior.
• Safety and verification records: records of automated content checks on files you uploaded (the verdict, and for voice and video, the transcript used for the check) and records of verification attempts (pass or fail, the reason and the time). These are tied to an internal account ID, not your name or phone number.
• Payment records held by us, Stripe, Apple, Google or RevenueCat as required for accounting, tax and fraud prevention.
• Feedback and meetup ideas you sent us.
• Server logs and backups, which roll over and are deleted on their normal schedule.

Your choices and controls

• Export your data: Settings, then Export my data, builds a file (JSON) with your profile, private settings, likes sent and received, matches, messages and meetup RSVPs that you can save or share.
• Edit or remove profile details at any time. Most fields are optional.
• Hide religion or politics from your profile.
• Turn off read receipts, and choose which notifications you get. The renewal reminder can't be turned off while you're subscribed.
• Remove your @handle or disconnect Spotify.
• Phone permissions: you can turn off camera, microphone, photo, location or notification access in your phone's settings. Some features stop working without them, and Loloma's matching needs location.
• Block or report anyone from their profile or your chat.
• Delete your account from Settings.

US state privacy rights

Depending on where you live, including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon and other states with similar laws, you may have the rights below. We honor these requests for every member, wherever you live in the US.

• Know and access: the categories and specific pieces of personal information we hold about you, where it came from, why we use it, and who we disclose it to.
• Portability: a copy in a portable format. The in-app export covers most of it, and you can ask us for the rest.
• Correct inaccurate information.
• Delete your information, subject to the legal exceptions described above.
• Opt out of sale, sharing for targeted advertising, and profiling with legal or similarly significant effects. We don't sell or share personal information or use it for targeted advertising, and our ranking doesn't make decisions with legal or similarly significant effects.
• Limit the use of sensitive personal information. We use it only for the purposes the law allows without a request, such as providing the service you asked for and keeping it safe.
• No discrimination for using any of these rights.

Categories we collect (California notice)

In the past 12 months we collected: identifiers (phone number, email, internal account ID, handle, push token); personal records (name, phone number); characteristics of protected classifications (age, gender, ethnicity if given, religion if given); commercial information (subscription history); biometric information (the face template); internet or other electronic activity (likes, matches, activity times, GIF searches); geolocation (precise coordinates, kept private); audio, electronic and visual information (photos, video intro, voice prompts and messages); professional and education information (job, company, school, education level, if given); inferences (compatibility and reliability scores); and sensitive personal information (account sign-in, precise location, ethnicity, religion, politics, message contents, biometric information, and information about sex life or sexual orientation implied by your preferences). Sources, purposes, providers and retention are described in the sections above. We disclose these categories only to the service providers listed in Who we share it with, for the business purposes described there.

How to make a request

Use the in-app export and delete options, or email support@joinloloma.com. We'll confirm your identity by asking you to send the request from the email or phone number on your account, or through the app while you're signed in. You can use an authorized agent, but we may ask for proof that they're acting for you and confirm your identity directly. We respond within 45 days, and we'll tell you if we need more time as the law allows.

Appeals. If we decline your request, you can appeal by replying to our decision or emailing support@joinloloma.com with "Privacy appeal" in the subject. We'll answer within the time your state's law requires. If you're still not satisfied, you can contact your state attorney general.

California "Shine the Light." We don't disclose personal information to third parties for their own direct marketing.

Biometric notice: Illinois, Texas, Washington

This notice is our public written policy on biometric information under the Illinois Biometric Information Privacy Act (BIPA), the Texas Capture or Use of Biometric Identifier Act, Washington's biometric identifier law (RCW 19.375) and, where it applies, Washington's My Health My Data Act. It applies to members everywhere.

• What we collect: a face template (face geometry, stored as 128 numbers) made from your liveness selfie, and temporary face measurements from your profile photos and video intro used for comparison. We don't collect fingerprints, voiceprints, iris scans or other biometric identifiers. Your voice recordings are transcribed only to check their content, never to identify you by voice.
• Why: only to confirm you are a real, live person, that your photos and video intro show you, and that you aren't someone banned from Loloma. These purposes are the security and fraud-prevention reasons for collecting it.
• Consent: the app explains the check before you start, and taking the selfie is your choice. Without verification you can't see or message other members.
• Who receives it: nobody outside Loloma, except Google Cloud, which hosts our servers and processes data only on our instructions. We will disclose it only if you consent, to complete a transaction you asked for, or if the law or a valid warrant or subpoena requires it.
• No profit: we never sell, lease, trade or otherwise profit from biometric information.
• Retention and destruction: the selfie is deleted right after the check. The face template is permanently deleted when you delete your account. If your account was banned, it is kept for as long as the ban stands and deleted if the ban is overturned. In no case do we keep biometric information longer than the law allows: for Illinois residents, no longer than three years after your last interaction with Loloma, and for Texas residents, no longer than one year after the purpose for collecting it ends.
• Protection: templates are stored in a part of our database that no app or member can read or write. Only our server code can use it, and we protect it with at least the same care as our other most sensitive information.

Security

Data is encrypted in transit and stored with Google Cloud, which encrypts it at rest. Database and storage rules limit each piece of information to the people who should see it. For example, your private settings and location can be read only by you and our servers, chat photos only by the two people in the chat, and selfies by nobody. App Check helps block requests that don't come from the real app. No system is perfectly secure, so please use a strong password and tell us right away at support@joinloloma.com if you think your account has been compromised.

Adults only

Loloma is only for people 18 and older. We ask for your birthday at sign-up, and accounts under 18 can't be created. We don't knowingly collect information from anyone under 18. If you believe a minor is using Loloma, report the profile in the app ("Looks under 18") or email support@joinloloma.com, and we'll remove the account.

Where your data is processed

Loloma is offered in the United States, and our servers run in Google Cloud's United States regions. Some of our providers may process data in other countries under their own safeguards. If you use Loloma from outside the US, your information will be transferred to and processed in the United States.

Changes to this policy

We'll update this page when our practices change and change the effective date at the top. If a change is significant, for example a new use of sensitive information or face data, we'll tell you in the app before it takes effect and ask for your consent where the law requires it.

Contact us

Questions, requests or complaints about privacy: support@joinloloma.com. You can also reach us through Settings in the app.