Privacy policy
Last updated: 1 November 2026
This policy explains what personal information the D8 dating app ("D8", "we", "us") collects, why, who we share it with, how long we keep it, and the rights you have. D8 is only for adults aged 18 and over.
1. Who we are
D8 is run by Aidan Kelly, based in the United Kingdom, who is the data controller for your information. For anything about your privacy, email privacy@meetd8.com. For general help, email support@meetd8.com.
2. What we collect
| Information | Examples |
|---|---|
| Account details | Email address and password (stored securely as an encrypted hash; we can't see it). |
| Profile | Display name, date of birth (to confirm you're 18+ and show your age), gender, bio, interests and photos. |
| Discover preferences | Who you'd like to see, the age range and the maximum distance you choose. |
| Location | Your approximate location, only if you allow it. We use it to show people within your search radius. |
| Activity | Likes, passes, matches, messages, hearted messages, D8 date plans and their outcomes. |
| D8 Verified reviews | Scores you give and receive after a confirmed date (Photo Likeness, Profile Accuracy, Respectful Communication). |
| Safety information | Blocks, reports you make or that are made about you, no-show reports and replies, and content our filters flag for review. When a report is made, we save the email address, display name and account ID of both people, and a copy of the last 100 messages between them. |
| Technical information | Basic logs our providers keep to run and secure the service, such as IP address, device type and error logs. |
Sensitive information
Your gender and the genders you choose to see may reveal your sexual orientation, which is "special category" information under UK data protection law. We only use it to show you and others suitable matches. By choosing these settings you give us your explicit consent to use them for this purpose. You can change them at any time in Edit Profile, or withdraw consent by deleting your account.
3. How we use your information, and our legal basis
| Purpose | Legal basis |
|---|---|
| Creating your account, showing your profile, matching, messaging and planning D8s | Contract: to provide the service you signed up for |
| Using your gender and who you'd like to see for matching | Explicit consent |
| Using your location to find people nearby | Consent (you can turn location off in your phone settings) |
| D8 Verified reviews and no-show reports | Legitimate interests: building trust and encouraging respectful behaviour |
| Keeping D8 safe: blocking, reports, content filtering, investigating abuse, suspending accounts | Legitimate interests: protecting our users and the service |
| Keeping safety records after an account is deleted, to deal with serious concerns, establish or defend legal claims, and help the police when the law requires it | Legitimate interests: protecting our users, and legal claims |
| Sending sign-up and password-reset emails | Contract |
| Complying with the law and responding to valid legal requests | Legal obligation |
We do not sell your information, use it for advertising, or make decisions about you based solely on automated processing that have legal or similarly significant effects. Our content filter automatically blocks messages and bios containing banned words, and flags some others for a person to review.
4. What other people can see
- Other D8 users can see your display name, age, gender, bio, interests, photos and combined D8 Verified scores. They see your distance only as a rough figure in miles, never your exact location.
- Your matches can also see the messages you send them and the D8s you plan together.
- Your date of birth, email address, exact location, preferences and individual reviews are never shown to other users.
- Reports are confidential. We don't tell the person who reported them.
- People you've blocked, or who have blocked you, can't see your profile.
5. Who we share information with
We use trusted service providers who process information on our behalf, under contracts that require them to protect it:
| Provider | What they do | Where |
|---|---|---|
| Supabase | Database, sign-in and photo storage | EU (Ireland) |
| Resend | Sending sign-up and password-reset emails | EU (Ireland) |
| Cloudflare | Website hosting, domain and email forwarding | Global network |
| Expo | Building and updating the app | United States |
| Apple and Google | App distribution through their app stores | Global |
We may also share information if the law requires it, to protect someone's safety, or to investigate serious misuse of D8.
International transfers
Your main D8 data is stored in the EU, which the UK recognises as providing adequate protection. Where a provider handles information outside the UK and EU, for example in the United States, we rely on approved safeguards such as the UK Extension to the EU–US Data Privacy Framework or the UK International Data Transfer Addendum.
6. How long we keep information
- While your account is open, we keep your information so D8 works for you.
- When you delete your account, your profile, photos, preferences, location, likes, passes, matches, messages, D8s, reviews, blocks and sign-in details are deleted straight away.
- Safety records (reports, the messages saved with them, and content flagged by our filters) are kept with the email address, display name and account ID of the people involved, for up to 2 years after the reported or flagged account is deleted. This lets us act on serious safety concerns and legal requests, for example if someone deletes an account to avoid a harassment report. Only the D8 team can see these records, and we only share them with others, such as the police, when the law requires it or someone's safety is at risk. After 2 years they are deleted automatically.
- Backups held by our providers are overwritten on their normal schedule.
7. Your rights
Under UK data protection law you can:
- ask for a copy of your information;
- ask us to correct it (most of it you can edit yourself in the app);
- ask us to delete it (you can delete your account in the app);
- object to or ask us to restrict how we use it;
- ask for your information in a portable format;
- withdraw consent at any time, for example by turning off location or deleting your account.
To use any of these rights, email privacy@meetd8.com from the email address on your account. We'll reply within one month.
If you're unhappy with how we've handled your information, you can complain to the UK Information Commissioner's Office at ico.org.uk. We'd appreciate the chance to help first.
8. Security
Your information is encrypted in transit, passwords are stored as secure hashes, and access rules in our database stop users from seeing data that isn't meant for them. No system is completely secure, so please use a strong password that you don't use anywhere else.
9. Age limit
D8 is only for people aged 18 and over. We check your date of birth at sign-up. If we learn that someone under 18 has an account, we will delete it.
10. Changes to this policy
If we make important changes, we'll tell you in the app or by email before they take effect. The date at the top shows when this policy was last updated.
11. Contact
Email privacy@meetd8.com.