Privacy Policy

Effective Date: March 4, 2026 · Version 1.0

1. Overview

hey30plus ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By using hey30plus, you consent to the practices described in this Policy.

We comply with applicable data protection laws including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2. Information We Collect

Information You Provide

Registration data: Name, email address, date of birth, and password.
Profile data: Photos, bio, location (city/region), preferences, and interests.
Communications: Messages sent to other members via our platform.
Payment information: If you upgrade to a paid plan, payment data is processed by our payment provider (Stripe). We do not store your full card details.

Information Collected Automatically

Usage data: Pages visited, features used, time spent, clicks, and interactions.
Device data: IP address, browser type, operating system, device identifiers.
Location data: General location derived from IP address. We never access your precise GPS location without explicit permission.
Cookies and tracking: See our Cookie Policy for full details.

3. How We Use Your Information

We use your data to:

Create and manage your account and profile.
Suggest compatible matches using our algorithm.
Facilitate communication between members.
Send service-related emails (account verification, security alerts, notifications).
Send marketing emails with your consent — you can unsubscribe at any time.
Detect, prevent, and address fraud, abuse, and safety issues.
Improve, personalize, and develop our Service.
Comply with legal obligations.

We process your data under the following legal bases: contract performance (account operation), legitimate interests (safety and improvement), consent (marketing, optional features), and legal obligation.

We do not sell your personal data. We may share it only in the following limited circumstances:

Other members: Your public profile (name, photos, bio, age, city) is visible to other logged-in members.
Service providers: Trusted third parties that help us operate the Service (e.g., cloud hosting, email delivery, payment processing) under strict data processing agreements.
Legal requirements: When required by law, court order, or to protect the safety of our users or the public.
Business transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before this occurs.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal compliance (e.g., financial records for up to 7 years).

Messages exchanged between members may be retained for up to 90 days after account deletion for safety and abuse investigation purposes.

6. Security

We implement industry-standard security measures including:

TLS/SSL encryption for all data in transit.
AES-256 encryption for sensitive data at rest.
Regular security audits and penetration testing.
Two-factor authentication (optional, recommended).
Strict internal access controls — only authorized staff can access your data.

No system is 100% secure. In the event of a data breach affecting your rights, we will notify you within 72 hours as required by GDPR.

7. Your Rights

Depending on your location, you have the following rights regarding your personal data:

Access Request a copy of the personal data we hold about you.

Correction Ask us to correct inaccurate or incomplete data.

Deletion Request that we erase your personal data ("right to be forgotten").

Portability Receive your data in a structured, machine-readable format.

Objection Object to processing based on legitimate interests.

Restriction Request that we limit how we process your data.

To exercise any of these rights, email us at privacy@hey30plus.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

8. Cookies

We use cookies and similar tracking technologies to enhance your experience. For full details on what cookies we use and how to manage them, please read our Cookie Policy.

9. Children's Privacy

hey30plus is strictly for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we learn that we have collected data from a minor, we will delete it immediately. If you believe we have inadvertently collected data from a minor, please contact us at privacy@hey30plus.com.

10. International Data Transfers

Our servers are located in the United States. If you access the Service from the European Economic Area (EEA), UK, or other regions, your data may be transferred to and processed in the US. We rely on Standard Contractual Clauses (SCCs) approved by the European Commission to safeguard such transfers.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or a prominent notice on the Service at least 14 days before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision.

12. Contact & Data Controller

hey30plus Inc. is the data controller for personal data collected through the Service.

Email: privacy@hey30plus.com
Address: hey30plus Inc., 1234 Main Street, Suite 100, Wilmington, DE 19801, USA
EU Representative: [EU Rep Name], [EU Address] — eu-rep@hey30plus.com