Privacy Policy.

01Who we are.

CoreAllure is a dating application operated by CoreAllure ("we", "us", "our"). When you sign up to our waitlist, use our website at coreallure.com, or use the CoreAllure app, we act as the data controller for the personal information you share with us.

You can reach us anytime at info@coreallure.com.

02What we collect.

We only collect what we genuinely need:

When you join the waitlist

• Your email address
• Any optional info you provide (name, location, why you're interested)
• Basic technical info (browser, device type) for analytics

When you use the CoreAllure app

• Account info: email, password (encrypted), phone number for verification
• Profile info: name, age, photos, voice recordings, prompt answers, location (city level), preferences
• Activity: matches, conversations, Soul Signals sent, swipe history
• Device info: device model, OS version, app version, crash logs
• Optional data: Spotify integration data, photos, voice notes you choose to share

What we do NOT collect

• Your exact GPS location (we use city-level only)
• Contacts from your phone
• Browsing data outside CoreAllure
• Financial data beyond what's needed for subscription payments (handled by Apple/Google)

03How we use it.

Your data is used to:

• Run the app and provide the service you signed up for
• Match you with compatible people based on values, energy and preferences
• Power Luna, our AI companion (your conversations are processed to give you suggestions — never stored or shared beyond what's needed to help you)
• Keep CoreAllure safe (detecting fake accounts, abuse, spam)
• Improve the product based on aggregate, anonymised usage patterns
• Send essential service messages (account, match notifications)
• Send marketing emails — only if you opt in, and you can opt out anytime

We never use your data to manipulate you, create addictive feedback loops, or feed advertisers.

04Who we share with.

We share data only with services that help us run CoreAllure, and only what's strictly needed. These include:

• Cloud hosting (Firebase / Google Cloud) — secure storage
• AI services (Anthropic, OpenAI) — to power Luna; conversations are processed but not retained by them
• Payment processors (Apple App Store, Google Play) — for subscription billing
• Email services (e.g. Mailchimp) — for marketing emails if you've opted in
• Analytics — aggregated, anonymised data only

We never sell your data. We never share it with advertisers. We never share data with third parties for their own marketing purposes.

If we're legally required to share data (a court order, law enforcement request) we'll do so only when properly compelled.

05Your rights.

Under GDPR (and equivalent laws), you have the right to:

• Access a copy of all data we hold about you
• Correct any data that's wrong
• Delete your data ("right to be forgotten") — anytime, no questions, everything wiped
• Restrict how we use your data
• Object to us using your data in particular ways
• Port your data to another service in a machine-readable format
• Withdraw consent to marketing emails or AI feature usage anytime
• Complain to the ICO (UK) or your local data protection authority

To exercise any of these rights, email info@coreallure.com. We'll respond within 30 days, usually much sooner.

06How long we keep it.

We keep your data only as long as we need it:

• Waitlist email: until you ask us to remove it or until you create a full account
• Active account data: while your account is active
• Deleted accounts: erased within 30 days of deletion request, except for legal obligations (e.g. fraud prevention) where we may retain minimal data longer
• Voice recordings & photos: deleted immediately when you remove them from your profile

07How we protect it.

Security is non-negotiable. We use:

• End-to-end encryption for messages in transit
• Encrypted databases for stored data
• Two-factor authentication (optional but encouraged)
• Regular security audits
• Strict internal access controls — only the team members who need data for support can see it

No system is 100% secure, but we treat your data the way we'd want ours treated. If a breach ever occurred, we'd notify affected users within 72 hours per GDPR.

08Cookies & tracking.

Our website uses minimal cookies:

• Essential cookies: needed to make the site work (always on)
• Analytics cookies: aggregated traffic data, only with your consent
• Marketing cookies: not used by default

You'll see a clear cookie banner on your first visit and can manage preferences anytime.

09Children & age.

CoreAllure is strictly for users 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has signed up, please email info@coreallure.com and we'll act immediately.

10Changes & contact.

If we update this policy, we'll notify you by email (for account holders) and update the "Last updated" date at the top. Material changes get clear notice.

Questions, concerns, or want to exercise any of your rights? Email info@coreallure.com. A real human reads every email, usually within 24 hours.