Privacy Policy

Last Updated: January 14, 2025

1. Introduction

Welcome to Crush.lu ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our dating platform.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, date of birth, phone number
• Profile Information: Bio, interests, location, gender, photos (up to 3)
• Event Registration: Dietary restrictions, special requests, attendance status
• Communication: Messages exchanged through our coach-facilitated connection system

2.2 Information from Social Login

If you choose to sign up using Facebook or other social providers, we collect:

• Your public profile information (name, email, profile picture)
• Information you grant us permission to access

2.3 Automatically Collected Information

• Usage Data: Pages visited, time spent, interactions with features
• Device Information: Browser type, IP address, device identifiers
• Cookies: Session cookies for authentication and preferences

3. How We Use Your Information

We use your information to:

• Create and manage your Crush.lu account
• Facilitate profile review by our Crush Coaches
• Organize and manage speed dating events and meetups
• Enable coach-facilitated connections between users
• Send important notifications about events, profile status, and connections
• Improve our platform and develop new features
• Ensure safety and prevent fraud or abuse

4. Information Sharing and Disclosure

4.1 With Crush Coaches

Our verified Crush Coaches review all profiles to ensure authenticity and safety. They have access to your profile information during the review process.

4.2 With Other Users

Your profile information is visible to other approved users according to your privacy settings:

• You can choose to display your full name or first name only
• You can choose to display your exact age or age range
• You can choose to blur your photos until mutual interest

4.3 Service Providers

We share information with trusted third-party service providers who assist us in:

• Hosting and storage (Microsoft Azure)
• Email delivery (Microsoft Graph API)
• Payment processing (if applicable)

4.4 Legal Requirements

We may disclose your information if required by law, court order, or to protect the rights, property, or safety of Crush.lu, our users, or others.

5. Data Storage and Security

Your data is stored securely using industry-standard practices:

• Profile Photos: Stored in private Azure Blob Storage with time-limited access tokens
• Database: Encrypted PostgreSQL database hosted on Azure
• Transmission: All data transmitted over HTTPS with SSL/TLS encryption
• Access Control: Strict access controls limit who can view your information

6. Your Privacy Rights

Under GDPR and Luxembourg data protection laws, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete information
• Erasure: Request deletion of your personal data (see Data Deletion page)
• Restriction: Limit how we use your data
• Portability: Receive your data in a machine-readable format
• Objection: Object to certain processing of your data
• Withdraw Consent: Withdraw consent for data processing at any time

7. Data Retention

• Active Accounts: We retain your information while your account is active
• Deleted Accounts: Most data is deleted within 30 days of account deletion
• Legal Obligations: Some data may be retained longer for legal compliance
• Event Records: Event attendance records may be retained for safety and operational purposes

8. Cookies and Tracking

We use cookies for:

• Essential Cookies: Required for authentication and core functionality
• Preference Cookies: Remember your settings and choices
• Analytics: Understand how users interact with our platform (anonymized)

You can control cookies through your browser settings.

9. Children's Privacy

Crush.lu is intended for users 18 years and older. We do not knowingly collect information from anyone under 18. If you become aware that a child has provided us with personal information, please contact us immediately.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

11. International Data Transfers

Your data is processed and stored in the European Economic Area (EEA) on Microsoft Azure servers. If data is transferred outside the EEA, we ensure appropriate safeguards are in place.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:

• Email: privacy@crush.lu
• Address: Crush.lu, Luxembourg

---