Privacy Policy

Last updated: 17 July 2026

This policy explains how MeetMyPace Ltd ("we", "us", "our") collects, uses, and protects your personal data when you use the MeetMyPace mobile app and website (together, the "Service"). We are the data controller for the purposes of UK GDPR and the Data Protection Act 2018.

1. Who we are

MeetMyPace Ltd
Email: support@meetmypace.co.uk
Website: meetmypace.co.uk

2. Data we collect

We collect the following categories of personal data:

Account information

Name and display name
Email address
Date of birth and age
Gender and gender preference (for matchmaking)
Profile photo
Phone number (for identity verification)

Location data

Your approximate location (latitude and longitude) set during profile setup, used to show nearby events and calculate distances. This is stored at profile level and is not tracked continuously.

Social and matchmaking data

Your stated interest in meeting friends, romantic partners, or both
Age range preferences for matchmaking
Your swipe history (who you have expressed interest in)
Match connections between users who have mutually swiped

Messages

Chat messages sent between matched users and between event hosts and attendees. Messages are encrypted at rest using AES-256-GCM.

Event and ticket data

Events you create (if you are a host)
Tickets you purchase, including attendance status
Wallet balance and transaction history
Discount codes you apply

Device and usage data

Push notification token (to deliver notifications to your device)
Basic request logs (IP address, timestamps, HTTP status codes) retained for up to 30 days for security and diagnostics

Social sign-in data

If you sign in with Google, Apple, or Microsoft, we receive your name and email address from that provider. We do not receive your password or any other data from those providers.

3. Legal basis for processing

We process your data under the following legal bases (UK GDPR Article 6):

Performance of a contract — to create and manage your account, process ticket purchases, and provide the core Service.
Legitimate interests — to send event reminders, improve the Service, detect fraud and abuse, and maintain security. We only rely on legitimate interests where our interests are not overridden by your rights.
Legal obligation — to retain payment records as required by UK law.
Consent — for push notifications. You may withdraw consent at any time in your device settings.

Where we process data relating to your romantic or friendship preferences, we rely on your explicit consent given during profile setup.

4. How we use your data

To provide and operate the MeetMyPace Service
To show you relevant nearby events based on your location
To facilitate matchmaking between event attendees
To send event reminders, booking confirmations, and match notifications
To enable encrypted chat between matched users and between hosts and attendees
To process payments and maintain your wallet balance
To verify your identity via phone number
To protect the safety of users (reports, bans)
To comply with legal and regulatory obligations

5. Data sharing

We do not sell your personal data. We share data only as described below:

Other users

Your name, profile photo, age, and location distance are visible to other users on the platform.
Event hosts can see the names of attendees who have purchased tickets to their events.
Matched users can see each other's profile and exchange messages.

Third-party service providers

Stripe (payment processing) — we pass your payment to Stripe for processing. Stripe is PCI-DSS compliant. We do not store your card details. Stripe's privacy policy: stripe.com/gb/privacy
Microsoft Azure (cloud infrastructure) — our servers, database, and file storage run on Microsoft Azure in the UK West region. Microsoft's privacy policy: privacy.microsoft.com
Google Firebase (Android push notifications only) — we use Firebase Cloud Messaging to deliver push notifications to Android devices. Only your device push token is sent to Google. Google's privacy policy: policies.google.com/privacy
Apple (iOS push notifications only) — we use Apple Push Notification service (APNs) to deliver push notifications to iOS devices. Only your device push token is sent to Apple.
Google Places API (location autocomplete) — when a host creates an event, location suggestions are fetched from the Google Places API. No personal data is sent to Google in this process.
Azure Communication Services (SMS) — we use Microsoft Azure Communication Services to send one-time passcodes for phone number verification.

Legal disclosures

We may disclose your data to law enforcement or other authorities if required by law or to protect the rights, property, or safety of MeetMyPace, our users, or the public.

6. International data transfers

Your personal data is primarily stored on Microsoft Azure servers in the UK West region and does not leave the UK in normal operation.

The following limited transfers occur:

Google (Firebase/Places) — servers in the United States. Google's transfers are covered by Standard Contractual Clauses approved under UK GDPR.
Apple (APNs) — servers in the United States. Apple's transfers are covered by their Data Processing Addendum and Standard Contractual Clauses.
Stripe — operates globally. Stripe's transfers are covered by Standard Contractual Clauses.

7. Data retention

When you delete your account we remove your personal data, but some records are kept because the law requires it or because we may need them to defend a legal claim. Where a record is kept, your identifying details are removed from it unless listed otherwise below.

Account and profile data — retained until you delete your account. You can delete your account at any time in the app under Profile → Settings → Delete Account. On deletion your name, email address, phone number, date of birth, photo, location and profile details are erased.
Payment and ticket records — retained for 6 years after the transaction to meet UK company and tax record-keeping requirements, even after account deletion. These records are kept without your name or contact details attached.
Incident and accident reports — retained for 6 years from the date of the incident, including the name and contact details of the person who reported it. We rely on this to establish, exercise or defend legal claims (Article 6(1)(f) and Article 9(2)(f) UK GDPR). Because of this, the right to erasure does not apply to these records (Article 17(3)(e) UK GDPR). Six years reflects the limitation period for bringing a claim.
Record of deletion — when an account is deleted we keep a dated record that the deletion took place, together with a one-way cryptographic hash of the email address. This lets us confirm to you that your account was deleted and when, if you ever ask. The record does not contain your name, email address or any other readable personal data, and is kept for 6 years.
Chat messages — deleted when you delete a conversation. When you delete your account your messages remain visible to the other participant, shown as sent by a deleted user, because that conversation is also their personal data and their record of it. Your name and profile are removed from it.
Request logs — retained for 30 days for security and diagnostic purposes.
Push notification tokens — deleted when your account is deleted or when you sign out.

8. Your rights

Under UK GDPR you have the following rights:

Access — request a copy of the personal data we hold about you.
Rectification — ask us to correct inaccurate or incomplete data.
Erasure — ask us to delete your data. You can delete your account directly in the app; we will process other erasure requests within one month. Erasure does not extend to the records listed in section 7 that we are required to keep, or that we need in order to defend a legal claim. If we keep anything, we will tell you what and why.
Portability — request your data in a structured, machine-readable format.
Objection — object to processing based on our legitimate interests.
Restriction — ask us to restrict processing in certain circumstances.
Withdraw consent — where processing is based on consent (e.g. push notifications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, email support@meetmypace.co.uk. We will respond within one month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk | 0303 123 1113.

9. Children

MeetMyPace is intended for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a person under 18 has created an account, please contact us at support@meetmypace.co.uk and we will delete the account promptly.

10. Security

We take the security of your personal data seriously. Measures in place include:

All data transmitted over HTTPS (TLS 1.2+)
Chat messages encrypted at rest using AES-256-GCM end-to-end encryption
Database encrypted at rest (Azure SQL Transparent Data Encryption)
Access to infrastructure restricted by network rules and managed identity authentication
Passwords never stored by MeetMyPace — handled by Microsoft Entra

11. Cookies

The MeetMyPace website uses a single session cookie to keep you signed in. We do not use advertising, analytics, or third-party tracking cookies.

12. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or in-app notification.

13. Contact us

For any questions or concerns about this privacy policy or how we handle your data, please contact us at support@meetmypace.co.uk.