HelloDate is a small, invitation-only platform for adults who want long-form, serious connections. We hold your data carefully because the entire product asks you to be honest about yourself.
What we collect
- Account identity: email, display name, hashed password (bcrypt), and an email-verification timestamp.
- Profile: gender, who you're looking for, birth date (used to compute age, never shown as a full date), city, time zone, your four confessions, and your portrait.
- Activity: which profile each nightly letter came from, invitations you've sent/received, conversations and their messages, photos you upload.
- Technical logs: request IPs and user agents for security (kept ≤ 30 days) and transactional email delivery status.
What we do not collect
- No precise location tracking. We do not use GPS, Bluetooth, or any location SDK.
- No third-party advertising cookies, no Google Analytics, no Meta Pixel, no TikTok Pixel.
- No automated personality or preference scoring that is then sold or shared.
How we use it
- To let you sign in, write, browse, and receive letters.
- To select one profile per night to send you, based only on gender match and simple deduplication.
- To run human moderation on profiles and portraits.
- To email you essentials (verification, nightly letters, invitation responses).
Who sees what
- Your four confessions, portrait, display name, age and city are visible to other approved HelloDate users who match your settings.
- Your email, birth date (the full date), password hash, IP, and internal logs are never shown to other users.
- We do not sell, rent, or share your data with advertisers or marketers.
Where it lives
Account and profile data is stored in a PostgreSQL database hosted in Hong Kong. Photos are stored in Tencent Cloud Object Storage (COS), Hong Kong region, with public-read URLs (required for rendering profile pictures). Email goes through Resend. No data is stored in the United States for Beta users based in Asia.
How long we keep it
- Active accounts: for as long as the account exists.
- Deleted accounts: we permanently remove your profile, confessions, portrait files within 30 days. Letters you sent to others are kept (they belong to those conversations), but detached from your name.
- Graduated accounts (Graduation Story): only the consented public portion is kept; private data is purged.
Your rights
Email privacy@hellodate.com to:
- Download a copy of everything we hold about you.
- Correct anything that is wrong.
- Delete your account and associated data.
- Withdraw consent for non-essential emails (essentials, like account verification, will continue while your account is active).
Legal compliance
HelloDate honors the Hong Kong Personal Data (Privacy) Ordinance (PDPO), the EU General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA). For data-transfer requests or legal notices, write to legal@hellodate.com.
Contact
HelloDate is run by a small team in Hong Kong. For anything in this policy, write to hello@hellodate.com.