Legal
Privacy Policy
This is a pre-launch version; these terms will be reviewed by counsel before public launch.
actual.love asks you to share something personal: who you are and who you hope to meet. This policy explains, plainly, what we collect, why, who helps us process it, how long we keep it and how you stay in control.
The essentials.
- We do not record or store the audio or video of your calls with Valeria. We store the text transcript of your conversation, encrypted.
- actual.love has no in-app chat. When you and a match both say yes, each of you sees only the contact details the other chose to share; we do not see, track or keep your messages or calls after that.
- During a call, your audio and camera video are transmitted in real time to Google, as our service provider, so Valeria can hear and see you. Google does not use them for training.
- If you are eligible for introductions in the Los Angeles area, and only with your separate consent, a few still frames are analysed once to produce a private visual compatibility estimate. The frames are discarded immediately, we do not create face templates or use facial recognition, and the estimate is never shown to other members. It is included in your own data export.
- We do not sell your data, share it for advertising, or show ads.
- You can download your data or delete your account instantly under Account → Privacy.
1. Who we are#
actual.love is operated by Volumatrix LLC, a Wyoming limited liability company ("Volumatrix", "we", "us"). Volumatrix is the controller (in US terms, the "business") responsible for your personal information. For any privacy question or request, contact privacy@actual.love.
The Service is only for adults aged 18 and over. It is a matchmaking service for people seeking a committed, lifelong relationship; it introduces members of any gender who are looking for each other, currently in the Los Angeles area, as explained in our Terms.
2. What we collect#
| Category | What it includes | Where it comes from |
|---|---|---|
| Guest call details | First name, your gender and who you are seeking, your confirmations (18+, AI video-call notice, Terms and Privacy) and the transcript of your call | You, before a call without an account. Attached to your account if you create one; otherwise deleted after 7 days. |
| Account | Email, first name, password (stored only as a scrypt hash), date of birth, your gender and who you are seeking, city and approximate coordinates, and your marketing-email choice | You, at signup. Coordinates come from looking up your city with OpenStreetMap Nominatim. |
| Consent records | What you agreed to (including, if you buy a membership, your separate consent to automatic renewal and the plan), the version, when, and a hashed (not raw) IP address | Generated when you give or withdraw consent |
| Interview transcript | The text of your conversation with Valeria (speech converted to text), encrypted | Your interview |
| Matchmaking profile | Values, interests, lifestyle, intent, dealbreakers, preferences, a summary and your follow-up survey feedback, encrypted | Built by AI from your transcript and your survey answers; you can edit it |
| Visual compatibility estimate | A single numeric estimate, encrypted | Produced by AI from a few still frames, only with your consent and only if you are eligible for introductions in the Los Angeles area |
| Match photos (optional) | A photo you upload for a specific introduction, and whether you chose to share it | You |
| Contact details for exchange | The phone number, WhatsApp number and/or email you choose to share when you say yes, encrypted; remembered to prefill your next yes | You |
| Introductions | Who you were introduced to, whether each of you said yes, and when the introduction expired or closed | Our matching system and your choices |
| Reports | Reports you make or that are made about you, and our decisions | Members and our staff |
| Billing status | Stripe customer ID, plan and subscription status. Not your card number. | Stripe |
| Security logs | Sign-in and security events with a hashed IP address | Your use of the Service |
| Crisis-referral counts | A count of how many times Valeria referred someone to crisis services. No transcript content, names or other personal details are included. | Our systems, for annual reporting (see Valeria and your wellbeing) |
Sensitive information. Some of this is sensitive by nature. Who you are seeking can reveal your sexual orientation. Your transcript may contain things you choose to tell Valeria, such as your religion, beliefs, racial or ethnic origin, health or family plans. Your email and password are account log-in credentials. The visual compatibility estimate is derived from images of you. We use sensitive information only to provide the Service you asked for, as described below.
3. Your interview with Valeria#
Valeria is an AI matchmaker, not a person. She is an AI-generated avatar rendered by Moholo avatar technology. She does not replace professional help; how she responds if you mention suicide or self-harm is explained in Valeria and your wellbeing.
- Starting without an account. You can start a call before creating an account, after giving your first name, your gender and who you would like to meet, and confirming you are 18+, the AI video-call notice and our Terms and this policy. After 3 minutes, continuing requires a free account; your transcript so far is then attached to it. Guest data that never becomes an account is deleted after 7 days.
- Permissions. Your browser asks for your microphone (required for the call) and camera (required for the video interview). You can mute or turn off your camera at any time; the call ends when you leave.
- Real-time processing. During the call, your audio and camera video (about one frame per second) are transmitted in real time to Google's Gemini API so Valeria can hear, see and respond. Google LLC receives your call audio and camera video in real time as Volumatrix's service provider, under a data processing agreement. We use Google's paid Gemini API tier, under which Google does not use this data to train its models or improve its products.
- No recordings. We do not record or store the audio or video of the call.
- Transcript. We store a text transcript of the conversation, linked to your account and encrypted at rest (AES-256-GCM).
- Call time. Free calls are limited to 20 minutes in total; members can call for up to 45 minutes per call and 90 minutes per day.
- The avatar. Valeria's avatar is loaded in a frame from moholo.ai and rendered on your device. The audio of Valeria's voice is passed to it locally in your browser so she can speak.
4. Your matchmaking profile#
From your transcript, an AI builds a private matchmaking profile: your values, interests, lifestyle, intent, dealbreakers, preferences and a summary. Your follow-up survey answers are added to it. It is stored encrypted. You can view it, correct it and delete it at any time.
5. Visual compatibility#
Attraction matters in lasting relationships, and it works best when it is mutual. With your express consent, given through a separate checkbox at signup, we take a few still frames from your interview and an AI model analyses them to produce an internal presentation estimate. We do this only for members who are eligible for introductions in the Los Angeles area. It never runs for people on the waitlist, whether they live outside our area or are waitlisted for another reason. We use this estimate only to suggest introductions between people who are likely to find each other mutually attractive, so people are matched within a similar range.
- Never shown to other members. No other member ever sees it, and it is never sold. You can see it yourself: it is included in your data export (Account → Privacy → Download my data).
- Not identification. It is not used to identify anyone. We do not create face templates or use facial recognition. An AI model reviews the frames once and returns only a number.
- Frames are not kept. The frames are discarded immediately after analysis.
- The estimate. The resulting number is stored encrypted and deleted with your account.
- Your choice. You can withdraw this consent at any time in Settings. Withdrawing deletes the estimate immediately. Because matching depends on it, new introductions are paused while consent is withdrawn.
6. Match photos#
There are no public photos on actual.love. Once an introduction is made, each person may upload a photo for that introduction and choose whether to share it. Photos are shown only if both people choose to share. A photo is stored on our servers, served only to the two people in the introduction (and to our staff for safety review), and deleted with your account.
If an intimate image of you has been shared on actual.love without your consent, you can ask us to remove it through our image removal form. We remove it within 48 hours of a valid request.
7. Automated matching and your rights#
Introductions are made by an automated system. Under the GDPR and UK GDPR (Article 22) and similar laws, you have the right to know how this works and to ask for human involvement.
- The logic. The system compares members' matchmaking profiles for compatibility: values, intent, lifestyle, dealbreakers, location and age preferences. It also uses visual compatibility so that introductions are likely to be mutually attractive. It only considers people of the gender you are seeking who are seeking someone of your gender, and currently only in the Los Angeles area. It makes one introduction at a time, and only for a good match (an internal score of 70 out of 100 or more). Your follow-up survey feedback is used to improve your future matches.
- What it means for you. The system decides whom you are introduced to and whom you are not. It does not decide anything else about you, such as your price or your access to other services. Both people must say yes, within 24 hours, before any contact details are exchanged.
- Your rights. You can ask for a human to review a matching decision, express your point of view and contest it by writing to privacy@actual.love. You can correct your profile at any time, and you can withdraw visual compatibility consent (which pauses new introductions).
- Legal basis. Automated matching is necessary for the contract you enter into with us (it is the service), and it relies on your explicit consent for the sensitive parts.
8. Contact exchange, follow-up survey and reports#
- Contact exchange. To say yes to an introduction, you choose at least one contact detail to share (phone number, WhatsApp number and/or email). Only when both people say yes does each see the details the other chose. We store these details encrypted and remember them to prefill your next yes.
- No messages. actual.love has no in-app chat and no video dates. We do not see, track or keep any messages or calls between members after the exchange.
- Follow-up survey. About 7 days after the exchange, we email you a private, signed link to a short survey (a 1–5 rating, whether you met, whether you want to keep seeing each other, what you liked or what wasn't right, and what we could do better). Your answers are stored in your encrypted matchmaking profile and used only to improve your future matches and the Service. They are not shown to the other person.
- Reports. You can report an introduction or member from the introduction card. Our staff review the report and relevant information (such as the introduction and any match photos) and may suspend accounts.
9. How we use your information and our legal bases#
For people in the EU, EEA and UK, the law requires us to state a legal basis for each use.
| Purpose | Legal basis |
|---|---|
| Creating and running your account; confirming you are 18+ | Contract; legal obligation (age) |
| The interview with Valeria, your transcript and profile | Contract; your explicit consent for sensitive information you choose to share |
| Visual compatibility estimate | Your explicit consent (withdrawable at any time) |
| Matching and introductions, including information that reveals sexual orientation | Contract; your explicit consent |
| Match photos | Your consent (it is optional) |
| Exchanging the contact details you choose when both people say yes | Contract |
| Follow-up survey and using your feedback to improve your matches and the Service | Contract; our legitimate interest in improving the Service |
| Reports, moderation and suspensions | Legitimate interest in safety; legal obligation where applicable |
| Billing through Stripe | Contract; legal obligation (tax and accounting) |
| Security logs, rate limiting and fraud prevention | Legitimate interest in protecting the Service and members |
| Service emails (for example, follow-up surveys, renewal reminders and policy changes) | Contract; legal obligation |
| Marketing emails | Your consent (optional, withdrawable at any time) |
We do not use your information for advertising, and we do not show ads.
10. Who we share it with#
- The person you are introduced to sees your introduction card (your first name, age, area, Valeria's reason for the match and a summary), your match photo only if you both chose to share photos, and, only if you both say yes, the contact details you chose to share. They never see your transcript, survey answers, date of birth, exact coordinates, visual compatibility estimate, or any contact detail you did not choose.
- Google LLC, as our service provider (processor): the Gemini API receives your call audio and camera video in real time, the frames used for the visual compatibility estimate, and text used to build your profile and make matches. Google LLC receives your call audio and camera video in real time as Volumatrix's service provider, under a data processing agreement. We use Google's paid Gemini API tier, under which Google does not use this data to train its models or improve its products.
- Stripe, as our payment processor, for checkout, subscriptions and the billing portal. Stripe handles your card details; we never see or store your card number.
- Moholo avatar technology (moholo.ai), which serves the avatar that renders on your device.
- OpenStreetMap Nominatim, which receives the name of your city to return approximate coordinates.
- Authorities and others, where the law requires it, to respond to valid legal process, or where needed to protect someone's safety or enforce our Terms.
- A successor, if Volumatrix is involved in a merger, acquisition or sale of assets, under this policy.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
11. International transfers#
Volumatrix and our main processors (Google and Stripe) are in the United States. When we transfer personal information from the EU, EEA, UK or Switzerland, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum) with appropriate safeguards. You can ask for more information at privacy@actual.love.
12. How long we keep it#
| Data | How long |
|---|---|
| Call audio and video | Never stored |
| Guest call data that never becomes an account | Deleted after 7 days |
| Still frames for visual compatibility (members eligible for introductions only) | Discarded immediately after analysis |
| Account, transcript, profile (including survey feedback), visual compatibility estimate, contact details for exchange, match photos, introductions | While your account is active. On deletion, removed immediately from the live database; backups roll off within 30 days. The estimate is also deleted immediately if you withdraw consent. |
| Reports | Up to 3 years, for safety and legal reasons |
| Auto-renewal consent records (members) | At least 3 years, as required by automatic-renewal law, even if you delete your account |
| Crisis-referral counts | Aggregate counts only, with no personal information, kept for annual reporting |
| Security logs (hashed IP) | 90 days |
| Inactive accounts | Deleted after 24 months of inactivity, after we notify you |
13. How we protect it#
- All connections use TLS encryption.
- Passwords are hashed with scrypt; we never store them in readable form.
- Transcripts, profiles (including survey feedback), visual compatibility estimates and contact details for exchange are encrypted at rest with AES-256-GCM.
- Match photos are served only to the two people in the introduction and to staff for safety review. Survey links are signed and private to you.
- Staff access is least-privilege: only authorised administrators, only what they need.
- Rate limiting protects against abuse and automated attacks.
No system is perfectly secure. If you believe your account or data is at risk, contact safety@actual.love.
14. Your rights and choices#
Wherever you live, you can:
- Access and export your data: Account → Privacy → Download my data gives you a JSON file instantly (this also covers portability). It includes your visual compatibility estimate, if one exists.
- Correct your details and your matchmaking profile in the app, or by writing to us.
- Delete your account: Account → Privacy → Delete account. Deletion is immediate (backups roll off within 30 days). You can also delete your profile on its own.
- Withdraw consent at any time, including visual compatibility in Settings. This does not affect processing before you withdrew.
- Object to processing based on our legitimate interests, and ask for human review of automated matching decisions.
For anything you cannot do in the app, email privacy@actual.love. We may need to verify your identity, usually by asking you to write from your account email. We respond within one month (GDPR/UK GDPR) or 45 days (US state laws), and will tell you if we need an extension the law allows.
EU, EEA and UK residents also have the right to restrict processing and to complain to a data protection supervisory authority, for example where you live or work (in the UK, the Information Commissioner's Office). We would appreciate the chance to help first.
15. US state privacy rights (California and others)#
This section supplements the policy for residents of California (CCPA as amended by the CPRA) and other states with consumer privacy laws, such as Colorado, Connecticut, Oregon, Texas, Virginia and others.
- Notice at collection. The categories we collect are listed in Section 2: identifiers (email, name, hashed IP), personal records, characteristics of protected classifications (age, gender), commercial information (plan and status), internet activity (security logs), approximate geolocation (city level), audio and visual information (processed in real time; not stored, except optional match photos), and inferences (your matchmaking profile and visual compatibility estimate, which you can see in your data export). Sources, purposes and retention are in Sections 2, 9 and 12.
- Sensitive personal information. We collect information about sexual orientation (through who you are seeking), account log-in credentials (your email and password), and any sensitive details you choose to share in your interview or follow-up surveys, such as religious or philosophical beliefs, racial or ethnic origin, or health. We use it only to provide the Service you requested, keep members safe and comply with law, as permitted by the CCPA regulations. We do not use it to infer characteristics about you for any other purpose.
- No sale or sharing. We do not sell personal information or share it for cross-context behavioural advertising, and have not done so in the past 12 months. We have no actual knowledge of selling or sharing information of anyone under 16.
- Your rights. To know and access, delete, correct, and limit the use of sensitive personal information (we already limit it), and, in other states, to opt out of profiling in furtherance of decisions with legal or similarly significant effects. Use the in-app tools or email privacy@actual.love. You may use an authorised agent, and we may ask them for proof of authority.
- Appeals. If we decline a request, you can appeal by replying to our decision. If you remain unhappy, you may contact your state Attorney General.
- No discrimination. We will not deny you service, charge you differently or give you a lower quality of service for exercising your rights. (Withdrawing visual compatibility consent pauses introductions only because matching cannot work without it, not as a penalty.)
- Global Privacy Control. We do not sell or share data, so there is nothing for a GPC signal to opt you out of; we honour it all the same.
16. Consumer health data (Washington, Nevada, Connecticut)#
This section is our Consumer Health Data Privacy Policy under Washington's My Health My Data Act and similar laws in Nevada and Connecticut.
- What may be consumer health data. We do not ask for health information. But your transcript and profile may include health-related details you choose to share (for example, about fitness, diet, disabilities or family plans), and some laws treat information derived from images of you, such as the visual compatibility estimate, as consumer health data.
- Why we collect and use it. Only to provide the Service you requested: building your matchmaking profile and making introductions.
- Sources. You (your interview) and our AI analysis of it.
- Who we share it with. Only Google LLC as our processor, as described in Section 10. We never share it with other members, and we never sell it.
- Your rights. To confirm whether we hold your consumer health data, access it, see the list of processors and third parties that received it, withdraw consent, and have it deleted. Use Account → Privacy or email privacy@actual.love; you can appeal any refusal by replying to our decision, and then contact the Washington Attorney General.
- No geofencing. We do not use geofences around health-care facilities.
17. Biometric privacy (Illinois, Texas, Washington and others)#
We have designed visual compatibility to keep the use of images of your face to a minimum. Specifically:
- We do not create face templates or use facial recognition. An AI model reviews the frames once and returns only a number. We do not use the frames or the estimate to identify or verify anyone.
- It runs only for members who are eligible for introductions in the Los Angeles area, never for people on the waitlist.
- Still frames are analysed once for a single presentation estimate and then destroyed immediately.
- We obtain your written consent (the separate signup checkbox) before any analysis, after telling you its purpose and how long anything is kept.
- Retention and destruction. Frames: destroyed immediately after analysis. The estimate: destroyed when you withdraw consent or delete your account, and in any case when the purpose of matching you has been fulfilled, which happens no later than account deletion (including deletion of inactive accounts after 24 months).
- We never sell, lease, trade or otherwise profit from images of you or the estimate, and we do not disclose them to anyone except our processor (Google) to perform the analysis, or where the law requires.
This section is published as our public retention and destruction policy for the purposes of the Illinois Biometric Information Privacy Act, the Texas Capture or Use of Biometric Identifier Act, Washington's biometric identifier law and similar laws, to the extent they apply.
18. Children#
actual.love is only for adults 18 and older. We collect date of birth at signup and suspend accounts that appear to belong to someone under 18, and we delete their data except what we must keep for safety. Valeria is an AI companion chatbot and may not be suitable for some minors (see Valeria and your wellbeing). If you believe a minor is using the Service, contact safety@actual.love.
19. Cookies#
We use one strictly necessary session cookie, and local storage only to remember your plan choice. No advertising or third-party analytics cookies. Details are in our Cookies & local storage notice.
20. Changes to this policy#
We will post changes here with a new version number and date. For material changes, we will tell you in the app or by email before they take effect, and ask for fresh consent where the law requires it.
21. Contact#
Volumatrix LLC · Privacy: privacy@actual.love · Safety: safety@actual.love · Billing: support@actual.love
Postal address: Volumatrix LLC, 14014 Hartley Hall Pl, Germantown, MD 20874, USA.