Privacy policy

1. Who we are

Trooze is run by trooze.com (“Trooze”, “we”, “us”). We’re the controller of your personal information under UK data protection law (the UK GDPR and the Data Protection Act 2018). For anything about your information or this policy, email info@trooze.com.

2. What we collect

When you join

Your first name, email address, password and date of birth, and when you agreed to our terms and gave the consents in section 3. We store your password only in a scrambled form (a hash) that can’t be turned back into it. Other members see your age, never your date of birth.

Your profile

• Photos, a video intro and a voice intro. We remove hidden information, such as the GPS location, from photos and videos when you upload them.
• For a live photo, taken with the Trooze camera, we also record that it was taken live and when. Trooze only uses your camera while its camera screen is open, and only keeps a photo if you choose to use it. While it’s open, it may also read which way your phone is tilted, on your phone, to show you when it’s level. That never leaves your phone.
• Your basics: gender, who you’d like to meet, what you’re looking for, town, height, and, if you choose, body type and ethnicity.
• What you write: your About me, job and prompt answers.
• Lifestyle answers (such as drinking, children and pets, and, if you choose, religion and politics), interests, and your answers to compatibility questions.

Your location

From your phone, if you allow it, or from a postcode you enter. We round it to two decimal places, about a kilometre, before we store it, and we only ever store that rounded location. If you use travel mode, we also store the place you’re visiting.

What you do on Trooze

Likes and passes (including comments you send with a like), matches, messages, photos, GIFs and voice notes you send, reactions, when messages are read, people you block, reports you make, your filters and settings, and when you last used Trooze.

Notifications

If you turn on notifications, the address your phone or browser gives us for sending them (a push subscription).

Safety and moderation

Results of the automatic checks in section 5, reports made by or about you, and any warnings, suspensions or notes from our team.

Technical information

Our web server keeps a log of requests: the IP address, the type of browser, the page asked for, and the time. Trooze itself doesn’t store your IP address with your account. It uses it briefly, in memory, to slow down repeated sign-up and log-in attempts, and lots of Your type quizzes started from one place.

If something goes wrong in Trooze, it records the error: what went wrong, the kind of page it happened on (without any numbers that point to a person or conversation) and, for an error in your browser, the type of browser and system, such as “Chrome on Android”. Error records don’t say who it happened to.

If you try Your type without an account

A random code, kept in a cookie on your device (we store only a scrambled form of it), so your browser can carry on with your answers; when you said you’re 18 or over and agreed to Your type, with the words you agreed to; the faces you were shown and the ones you chose; and when you last visited. We don’t ask for your name, email address or anything else about you.

When you contact us

Your emails to us and our replies.

3. Sensitive information

UK law gives extra protection to some information, called “special category” data. On Trooze, that’s:

Who you’d like to meet

This shows your sexual orientation. Trooze can’t match you without it, so we ask for your explicit consent when you join. Because Trooze can’t work without it, you withdraw this consent by deleting your account. We don’t show it on your profile, but people can only see you if you’d like to meet people like them.

Ethnicity

Optional. If you add it, we ask for your explicit consent first. It’s shown on your profile, and other members can use it in their Discover filter. Your own filter is never shown to anyone.

What you find attractive (Your type)

Optional, and open to anyone, with or without an account. If you try Your type, we ask for your explicit consent first. We keep the faces you were shown and the ones you chose, work out from them what you’re drawn to (including ethnicity), and show your type as a face: your closest faces blended together on our own server. The faces are AI-generated, not real people. Only you see your choices and your result; they aren’t used to match you, and nobody else sees them unless you share your result. None of it is sent outside Trooze.

Sharing your result

Only if you choose to. Sharing makes a public page, at a link only you are given, with what your result says (the features and colouring you’re drawn to) and its face, and pictures of it for social media. It never shows which backgrounds you lean towards, and never says who you are. Anyone with the link can see it, until you stop sharing.

Religion and politics

Optional. If you answer either, we ask for your explicit consent first. Your answer is shown on your profile, and other members can use it in their Discover filters. “Prefer not to say” is never shown, and needs no consent.

You can remove your ethnicity, religion and politics, and your Your type answers, at any time in Settings → Your data and consent, or by clearing them in your profile. That withdraws your consent, and we stop using them straight away. We keep a record of when you gave or withdrew each consent, and the words you agreed to. Without an account, you can delete your Your type answers, and anything you shared, straight away at trooze.com/type/forget on the same device.

We only use this information to show your profile and match you as described. We never use it for anything else, and never share it outside Trooze.

Please think carefully before sharing other sensitive things, like your health, in your About me, prompts or messages. If you do, we only use them to show them to the people you’ve chosen to show them to.

Reports can include sensitive information, or information about possible crimes. We use it only to look into the report, keep members safe and help the police, as the Data Protection Act 2018 allows.

4. How we use your information, and why we’re allowed to

To run Trooze for you

Your account, profile, Discover, matches, messages, notifications you’ve turned on, and emails about your account (like confirming your email or resetting your password). Our reason: we need to, to provide the service you’ve signed up for (our contract with you).

Sensitive information

As described in section 3. Our reason: your explicit consent.

To keep members safe

Checking photos and videos, the automatic checks in section 5, looking into reports, acting on our rules, and stopping removed members joining again. Our reasons: our legitimate interest in keeping Trooze safe, and our legal duties, including under the Online Safety Act 2023.

To keep accounts and Trooze secure, and working

Slowing down repeated log-in attempts, two-factor sign-in, server logs, and error records so we can fix what breaks. Our reason: our legitimate interest in security and in Trooze working properly.

To see how Trooze is doing

We count sign-ups, matches, messages, deleted accounts and how many members use Trooze each day, and use when each member joined and last used Trooze to work out how many people come back. Our team only ever sees totals, never who. Our reason: our legitimate interest in running and improving Trooze.

Emails about new matches and messages

Only if you haven’t opened Trooze since, and at most one every 12 hours. They name who it’s from but never quote messages. Turn them off in Settings → Notifications, or with the link in any of them. Our reason: our legitimate interest in letting you know about your matches.

When the law requires it

For example, answering a lawful request from the police. Our reason: legal obligation.

We don’t send marketing emails, show adverts, or use your information to build an advertising profile.

5. Automatic checks

• Photos. Software on our own server checks photos for nudity. Nothing is sent anywhere else to do this. In chat, a photo it thinks is explicit is blurred until the person you sent it to chooses to see it. Every profile photo and video intro is also checked by a person before anyone else sees it.
• Live photos. When you take a live photo, software on our own server checks it’s a clear photo of you: all your face is in it, the camera was level and at eye level, and it’s well lit. To do this it finds where your face is in the photo, then forgets it: nothing about your face is kept, and it isn’t used to recognise you. If a photo doesn’t pass, it isn’t saved, and we tell you what to change.
• Words. We automatically check messages, About me, prompt answers and job titles for common signs of scams and spam, such as asking for money, mentioning crypto, or asking to move to another app. Messages aren’t blocked, but the person receiving one may see a safety tip, and our team may look at what was flagged. We also notice when the same message is sent to lots of people.
• Matching. Who you see in Discover is worked out automatically from both people’s basics, location and filters. Filters work both ways: if someone’s filters leave you out, they won’t see you and you won’t see them. Your compatibility percentage with someone comes from your answers to the same questions.

Software never decides on its own to warn, suspend or remove anyone. A person on our team makes those decisions.

6. Who can see your information

Other members

Your profile: first name, age, gender, town (or, if you haven’t typed one, the area name from your location), height, body type, ethnicity, job, About me, prompts, interests, what you’re looking for, lifestyle answers, approved photos and video (with how long ago your live photo was taken), voice intro, roughly how far away you are in whole miles, and your compatibility percentage with them. In travel mode, they see “Visiting” and the place.

They never see your email address, date of birth, exact location, filters, or when you were last on Trooze.

Your matches

What you send them, your reactions, when you’re typing, and, if you both have read receipts on, when you’ve read their messages. If you report or block someone, they’re never told who did it.

Anyone you share your Your type result with

If you share it, anyone with the link sees what it says and its face (section 3). Nothing on it says who you are.

Our team

Moderators, who need two-factor sign-in, can see your account details (including your email address), your profile (including photos waiting to be checked), counts of your activity, flagged excerpts, and reports. They can only read a conversation when someone in it has been reported, and then only part of it: the messages around what was reported, or the most recent ones.

Companies that help us run Trooze

• Contabo GmbH, a German company, hosts our server in the European Union. Everything is stored there.
• postcodes.io, a free UK postcode service run by Ideal Postcodes. Our server sends it the postcode or place you type, or your rounded location, to find the area name. It gets nothing that identifies you.
• Your phone or browser’s notification service (Apple, Google, Microsoft or Mozilla), if you turn on notifications. Notifications are encrypted, so they can’t read them.
• Email is sent from our own mail server, straight to your email provider.

The police and other authorities

When the law requires it, or when we believe it’s needed to protect someone from harm or to prevent or detect a crime. We always report child sexual abuse material to the authorities.

If Trooze changes hands

If trooze.com is ever sold or reorganised, your information would pass to the new owner, who would have to look after it as this policy says. We’d tell you first.

We never sell your information, or share it with advertisers.

7. Where your information is stored

On our server in the European Union. UK law recognises the EU as protecting personal information to the same standard as the UK. Notification services may handle encrypted notifications in other countries, including the USA, but can’t read them.

8. How long we keep it

Your account and profile

Until you delete your account. Anything you remove before then, like a photo, is deleted when you remove it.

When you delete your account

We delete straight away your account, profile, photos, videos and voice recordings, likes, matches, and conversations (for both of you, including photos and voice notes), along with your settings, filters, consents and devices. All that stays is in our totals (section 4): that an account was deleted, and, counted together with others, the day it joined and whether it had come back a day, a week and a month later.

Reports and moderation records

We keep these after an account is deleted, for as long as we need them to keep members safe, deal with complaints and help the police. A report keeps the first name, a scrambled code made from the email address (it can’t be turned back into the address), the reason and details, and a copy of what was reported, such as a message or the profile.

Members we’ve removed

If we remove someone for breaking our rules, we keep their account information so we can help the police, and a scrambled code made from their email address so they can’t join again.

Ended conversations

When either of you unmatches or blocks the other, the conversation disappears for both of you, but we keep it until one of you deletes your account, so we can still look into a report made later.

Likes and passes

Until you delete your account.

Your type

Your choices and result, until you delete them in Settings → Your data and consent, or delete your account.

Your type without an account

Deleted 30 days after your last visit, or straight away at trooze.com/type/forget. If you join or log in on the same device, your answers move into your account instead.

Shared results

Until you stop sharing, delete your Your type answers, or delete your account. One shared without an account stays after your answers are deleted, with nothing left that links it to you.

Short-lived information

A sign-up that’s never confirmed is deleted after 24 hours. Password reset links last an hour, and email change links 24 hours. You’re logged out after 30 days of not using Trooze.

Server logs

Kept to keep Trooze secure and to fix problems. We don’t currently delete them on a fixed schedule.

Error records

Deleted 90 days after the error last happened.

9. Your rights

You have the right to:

• get a copy of the information we hold about you
• have it corrected if it’s wrong
• have it deleted
• ask us to limit how we use it, or object to how we use it
• get the information you gave us in a format you can take elsewhere
• withdraw a consent at any time (this doesn’t affect what we did before)

You can change most things yourself in your profile and Settings, and delete your account in Settings → Delete my account. For anything else, email info@trooze.com from the address on your account. It’s free, and we’ll reply within a month.

If you’re unhappy with how we’ve handled your information, please tell us. You can also complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint, or call 0303 123 1113.

10. Cookies and storage on your device

Trooze only uses cookies it needs to work. There are no advertising or analytics cookies, so there’s nothing to accept.

session

Keeps you logged in. It stops working after 30 days of not using Trooze, or when you log out.

signup

Lets the phone or browser you signed up on log you in once you’ve confirmed your email. Lasts 24 hours.

login_2fa

Remembers a log-in that’s waiting for your two-factor code. Lasts 10 minutes.

discover_view

Remembers whether you chose cards or a grid in Discover.

guest

Only if you try Your type without an account, once you’ve agreed to it: lets your browser carry on with your answers. They’re deleted 30 days after your last visit.

Your browser also keeps a copy of an offline page, and of photos and recordings you’ve viewed, so Trooze loads quickly. Clearing your browser’s data removes them.

11. Keeping your information secure

Everything travels over an encrypted connection. Passwords, log-in links and sessions are stored only in scrambled form, and two-factor sign-in is available to every member. Members’ photos, videos and recordings are only ever sent to signed-in members. Our team needs two-factor sign-in to use moderation tools. No system is perfectly secure, but if something went wrong that put you at risk, we’d tell you and the Information Commissioner’s Office as the law requires.

12. Under 18s

Trooze, including Your type, is only for adults. If we find out someone is under 18, we remove their account, or delete their Your type answers.

13. Changes to this policy

If we change this policy, we’ll update the date at the top. If it’s an important change, we’ll tell you in the app and ask you to agree before you carry on. Our Terms of use say more.

14. Contact us

Email info@trooze.com.