Privacy Policy
Effective date: 5 October 2026 | Version 2026-10-05
This policy says what Leora collects about you, why, who else sees it, how long we keep it, and what you can ask us to do. It is written to match what the app actually does. Where we keep something after you leave, we say so and we say why.
1. Who we are
Leora Group Ltd ("Leora", "we", "us") is the controller of your personal data. We are a company registered in England and Wales, company number 16932206, registered office 2 Meadow Sweet Drive, Moreton-in-Marsh, GL56 9PX. We are registered with the Information Commissioner's Office (ICO) under reference ZC111184.
Our Data Protection Officer is Kelly Jones. Write to her at kelly@leoradating.co.uk about anything in this policy or any request about your data. General enquiries go to contact@leoradating.co.uk.
2. What we collect
2.1 Your account
Your email address and a password, or the fact that you signed in with Google or Apple. If you came to Leora through a member's referral link, the referral code.
2.2 Identity verification
Before you can use the app we ask for a photo of your UK driving licence and a selfie. Trained members of our team compare the two and confirm that you are a real person, that you are who you say you are, and that you are 18 or over. We do not use facial recognition software and we do not create a biometric template of your face.
From the licence we read and keep your legal name, date of birth, licence number, and address. The licence images themselves are stored encrypted, in the UK, with every access logged, and are deleted as soon as the decision is made (and in any case within 90 days of upload). The details we read from them stay on your account until you delete it, so that we can show which identity the account was verified against. Your licence number is never shown to anyone, including our own team, after verification.
Your selfie becomes your first profile photo, visible to other members once approved.
2.3 Your profile
The name you want to be known by, your photos, your bio, the prompts and picks you answer, your interests, your traits, what you are looking for in a partner, your gender, and, if you choose to give it, your religion. You can also record a short voice introduction; we store the recording and a transcript of it.
2.4 Location
For dating search we hold your position rounded to about one kilometre, and up to three saved locations at the same resolution. Other members see a distance band (under 2 km, 2 to 10 km, over 10 km) and a town name, never a number or a coordinate.
Serendipity is the opt-in part of the app that introduces you to verified members nearby. While it is switched on, the app sends your precise location, in the background too, which is why it asks for the "Allow all the time" (Android) or "Always" (iOS) permission. We keep one fix at a time, overwritten by the next, and remove it when you switch Serendipity off or when it is more than 24 hours old. Nobody is shown your coordinates, your distance, or when you were last seen; matching happens on our servers and the result is an introduction or nothing. We keep a record of each introduction and any meeting you both arrange for 90 days.
2.5 Messages and Lumi
The text and voice messages you send and receive, when they were sent, read, edited, or unsent, and the earlier versions of an edited message. Each message is checked as it is sent against a list of phrases linked to abuse; if one matches, the recipient is asked whether the message bothered them and can hide it before reading. Their answer is stored.
Lumi is the in-app dating coach. Your conversations with Lumi are stored on your account. See section 5 for what Lumi sends to the AI provider.
2.6 Subscriptions
Subscriptions are bought through the Apple App Store or Google Play. We never see your card. We hold the transaction and subscription identifiers the store sends us, what you bought, and when it renews or ends.
2.7 Safety and moderation
Reports you make and reports made about you, including the reason and any description, blocks and hides, and the notes and decisions our team records when reviewing them. When your identity is verified we also keep a matching signature (your normalised name, date of birth and postcode, and a keyed hash of your licence number) that lets us recognise a banned or removed person trying to come back under a new account.
2.8 Your device and how you use the app
- A push token so we can send you notifications, and which platform you use.
- Crash and error reports (Firebase Crashlytics in the app, Sentry on the web) with your device model, operating system, app version, a member identifier and, in the app, the screens and steps you went through before the crash. The apps run no analytics service.
- On the website and the web app, page views through Umami, which sets no cookie and does not store your IP address.
- Server logs of requests to our systems, which hold your member identifier but not your name or email.
None of this is used for advertising, and we do not run advertising.
2.9 Before launch
If you joined the waiting list, we hold the email address you gave us until 11 March 2027 so that we can tell you once about launch. Unsubscribe at any time from the email, or ask us to remove you.
3. Why we use it, and our lawful basis
| What we do | Lawful basis |
|---|---|
| Run your account, show your profile to other members, deliver messages, introductions and Lumi | Contract (our Terms) |
| Verify your identity and age before you can use the app | Contract, and our legitimate interest in keeping members safe and keeping under-18s out |
| Keep the identity signature after you leave, so a removed person cannot come back under a new account | Legitimate interest in preventing fraud and repeat abuse |
| Check messages for abusive phrases, act on reports, suspend or ban accounts | Legitimate interest in keeping members safe; legal obligations where they apply |
| Process your religion, where you choose to add it | Your explicit consent. You can remove it at any time in your profile |
| Serendipity proximity introductions | Contract (it is the feature you switched on); your device permission controls it |
| Send you emails and push notifications about activity on your account | Contract; emails can be turned off in settings and notifications on your device |
| Manage subscriptions and reconcile refunds and disputes with the stores | Contract; legitimate interest in defending claims |
| Fix crashes, understand which parts of the app are used, keep our systems running | Legitimate interest in running a reliable service |
| Keep records of moderation decisions and of your acceptance of these documents | Legitimate interest in being able to show what we decided and what you agreed to |
We do not process criminal-record data and we do not run background checks. We do not make decisions about you by automated means alone: the phrase check flags a message, a person decides what happens to an account.
4. What you agreed to
When you accept this policy and our Terms in the app, we record which version you accepted and when, so that we can show what you agreed to. The version number at the top of this page is the date the current text took effect.
5. Lumi and AI
Lumi uses OpenAI's models. To answer you, we send OpenAI your profile, your recent Lumi conversation, and, when you ask about someone you are connected with, their profile and up to 100 recent messages between you. Separately, when two members connect we ask OpenAI for a short compatibility note using both members' preferred names, interests and traits, and we send your voice introduction to OpenAI's transcription service to produce the transcript.
OpenAI does not use what we send to train its models, and deletes it within 30 days. Lumi's suggestions are suggestions; nothing Lumi says changes your account or anyone else's.
6. Who else sees your data
We do not sell personal data, and we do not share it with advertisers.
Other members see what you put on your profile, your distance band and town, and your messages to them.
These companies process data for us, under contracts that bind them to our instructions:
- Amazon Web Services: hosts everything, in London (eu-west-2).
- Vercel: hosts this website.
- OpenAI: Lumi, compatibility notes and voice transcription (section 5).
- Google: Firebase Crashlytics in the app, and push delivery on Android.
- Apple: push delivery on iOS.
- Sentry: error monitoring, stored in the EU.
- Umami: website analytics without cookies.
- Esri, through AWS: turns your rounded location into a town name.
The Apple App Store and Google Play handle subscription payments as independent controllers under their own terms. We also share data with the police, a regulator, or a court where the law requires it, and we report child sexual abuse material to the relevant authorities as set out in our Child Safety page.
7. Where your data is kept
Your data is stored and processed in the United Kingdom. OpenAI, Google, Vercel and Sentry are US companies; where data reaches them outside the UK it is covered by their data processing terms, which include the standard contractual clauses with the UK addendum, and, for OpenAI, Google and Vercel, their certification under the UK extension to the EU-US Data Privacy Framework.
8. How long we keep it
| Data | Kept until |
|---|---|
| Licence images | The verification decision, and no later than 90 days after upload |
| Account, profile, verified identity details, Lumi conversations, your side of every chat | You delete your account |
| Precise Serendipity location | The next fix, switching Serendipity off, or 24 hours |
| Serendipity introductions and meetings; who viewed your profile | 90 days; 30 days |
| Messages you sent, as seen by the person you sent them to | Kept after you delete your account, with your name, photos and identity removed, as the other person's record of the conversation. Your voice messages are deleted |
| Reports, and the reasons and notes behind them | Kept after either account is deleted, for safety and to recognise repeat abuse |
| Our team's moderation record about your account | 2 years after you delete your account, with your email removed |
| Identity signature (normalised name, date of birth, postcode, hashed licence number) | 6 years after you delete your account, the limitation period for fraud claims |
| Subscription and transaction records from the stores | Kept after deletion with your account identifier removed, for refund and dispute reconciliation |
| Crash reports, error reports | 90 days |
| Server logs; database backups | 14 days; 35 days |
9. Deleting your account
Delete your account from the settings screen in the app. Your profile disappears from other members at once, your connections end, and our team completes the deletion within one month. We email you when it is done. If you cannot get into the app, use the form at leoradating.co.uk/delete-account; we send you a confirmation link first and store nothing until you open it.
Deletion removes everything in section 8 that is "kept until you delete your account", from every one of our systems, and we keep a record of each system confirming it. What stays is listed in section 8 with the reason.
10. Your rights
You can ask us to:
- give you a copy of the personal data we hold about you
- correct anything that is wrong (most of your profile you can change yourself in the app)
- delete your data (section 9)
- stop or restrict a use you object to, including anything we do under legitimate interests
- withdraw consent, for example by removing your religion from your profile
- give you the data you provided in a machine-readable form
Email kelly@leoradating.co.uk from the address on your account. If we cannot tell it is you, we will ask you to confirm from inside the app. We answer within one month. There is no charge.
You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint. We would rather hear from you first.
11. Cookies and analytics
This website and the web app use Umami for page analytics. It sets no cookie, stores no IP address, and cannot identify you. The web app keeps a few settings in your browser's local storage (your session, your preferences, and whether you have accepted these documents); they are not used to track you.
The iOS and Android apps run no analytics or advertising service and use no advertising identifier. They send crash reports to Firebase Crashlytics, as described in section 2.8.
12. Security
Data is encrypted in transit and at rest. Licence images use a dedicated key and an access log. Our team's access to member data goes through an admin console that records what was viewed and decided. No system is perfectly secure; if a breach affects you we will tell you and the ICO as the law requires.
13. Children
Leora is for adults. Age is checked against a driving licence before anyone can use the app. If we find an account belonging to someone under 18 we remove it and keep only what our Child Safety page says we must.
14. Changes to this policy
The version number above is the date the current text took effect. When the text changes materially we publish a new version, the app asks you to accept it again before you continue, and we record which version you accepted. Earlier versions are summarised here.
- Version 2026-10-05 (5 October 2026)
- Rewritten to meet UK GDPR Article 13 in full: controller and ICO details, a Data Protection Officer, every category of data we hold and why, the companies that process it, where it is kept, how long each kind is kept including what stays after deletion, how to exercise your rights, and a cookies and analytics notice. Google Analytics was removed from the apps on the same day.
- Version 2026-08-26 (26 August 2026)
- Removed the optional social media account linking section and the reference to risk screening using publicly available information. Verification is described as identity verification using the data you provide.
- Version 2026-07-31 (31 July 2026)
- Folded the licence and selfie verification and Serendipity location disclosures into this policy and started recording the version you accept.
15. Contact
Data protection: kelly@leoradating.co.uk
Everything else: contact@leoradating.co.uk
Leora Group Ltd, 2 Meadow Sweet Drive, Moreton-in-Marsh, GL56 9PX