Kettle
Privacy Policy
Last updated: [date]
This policy explains what Kettle collects, why, who sees it and the choices you have. We've written it in plain English. If anything is unclear, email hello@kettledate.com.
Who we are
Kettle: Gym Dating ("Kettle", "we", "us") is run by [Company name] Ltd, a company registered in England and Wales (company number [number]), registered office [address]. We are the data controller for your personal data. ICO registration number: [number].
Contact us about privacy at hello@kettledate.com. We'll reply within one month.
What we collect
| What | Examples | Where it comes from |
|---|---|---|
| Account | Email address, sign-in codes, date of birth | You |
| Profile | First name, age, hometown, bio, height, body type, what you're looking for, gender | You |
| Optional details | Weight (hidden unless you choose to show it) | You |
| Sensitive details | Who you're interested in, sexual orientation (optional) | You, only with your explicit consent |
| Photos | 3 to 8 profile photos | You |
| Training | Your gym, favourite exercise, lift and PB, cardio, energy drink, usual training time | You |
| Availability | When you're usually free, and times you add for a specific week (private) | You |
| Location | Approximate location, rounded to about 1 km, if you allow it | Your phone |
| Activity | Likes, passes, matches, messages, planned sessions, "we trained together" confirmations | Your use of Kettle |
| Safety | Blocks, reports you make or receive, moderation decisions | You, other users, our team |
| Technical | Sign-in records, error logs, device type | Your phone and our providers |
We don't collect your exact location, your contacts or your payment details. Kettle is free and has no in-app purchases at the moment.
Why we use it, and our legal basis
| Why | Data used | Legal basis (UK GDPR) |
|---|---|---|
| Create and run your account, show your profile, match you, run chat and session planning | Account, profile, photos, training, availability, activity | Contract: it's needed to provide Kettle |
| Show you people you're interested in, and show you to them | Who you're interested in, sexual orientation | Explicit consent (Article 9(2)(a)), which you can withdraw at any time |
| Show people nearby or at your gym | Approximate location, gym | Contract, and your phone's location permission |
| Check you're 18 or over | Date of birth | Contract and legitimate interests (keeping minors off Kettle) |
| Review photos, handle reports, ban accounts, stop scams and stop banned people coming back | Photos, reports, messages in reported chats, a one-way code made from a banned email address | Legitimate interests: keeping Kettle safe |
| Send sign-in codes and service emails | Email address | Contract |
| Fix bugs and keep Kettle secure | Technical data | Legitimate interests |
| Meet legal requests | Any relevant data | Legal obligation |
We don't sell your data, use it for advertising profiles, or share it with advertisers.
Who can see what
| Information | Who sees it |
|---|---|
| Approved photos, first name, age, hometown, bio, height, body type, what you're looking for, training favourites | People shown your profile in their deck |
| Distance (rounded to the nearest km) and whether you train at the same gym | People shown your profile |
| Weight | People shown your profile, only if you turn on "Show weight on my profile" |
| Sexual orientation | Only shown if you turn on "Show on my profile" |
| Who you're interested in, your exact location, email, date of birth | Nobody else. Your age is shown, not your birthday |
| Your gym's name and your usual free times | Your matches see suggested session times and gyms, never your full weekly schedule |
| Messages | You and your match. Our moderators only if one of you reports the other |
| Photos waiting for review | You and our moderators |
Nobody can see who liked them until they match. They only see that "someone likes you".
Moderation and safety
A small team of Kettle moderators checks every photo by hand before anyone else can see it. If someone reports you, a moderator can see the report, your profile and photos, and the messages between you and the person who reported you. They can't read anyone else's chats.
Messages are checked automatically for a short list of scam phrases, such as requests for gift cards or wire transfers, and these messages are blocked. If we ban an account, we keep a one-way code made from its email address (not the email itself), so the same email can't be used to sign up again.
Who we share it with
We use a few trusted providers to run Kettle. They only process your data on our instructions, under contracts that protect it.
| Provider | What they do | Data involved |
|---|---|---|
| Supabase | Hosts our database, sign-in, photo storage and server code | Everything you store in Kettle |
| Resend | Sends sign-in codes and our team's moderation alerts | Your email address and the sign-in code |
| Google (Places API) | Powers gym search | The words you type when searching for a gym |
| Apple | App Store, maps on iPhone, and calendar and notifications on your phone | Map views. Calendar events and reminders stay on your phone |
| Expo | Builds and updates the app | Technical data |
We may also share data if the law requires it, to protect someone from harm (for example with the police), or if Kettle is sold or merged, in which case we'll tell you first.
Data stored outside the UK
Our database is hosted in [Supabase project region]. Some providers, such as Resend and Google, may process data in the United States. Where data leaves the UK, we rely on UK adequacy regulations (including the UK–US data bridge) or the ICO's International Data Transfer Addendum to keep it protected.
How long we keep it
| Data | How long |
|---|---|
| Your account, profile, photos, likes, matches, messages and sessions | Until you delete your account. Deleting in the app removes them straight away |
| Sensitive details | Until you withdraw consent in Settings or delete your account |
| Reports you made or received | Kept after deletion for safety, with your name removed |
| One-way code for a banned email | Kept so the person can't rejoin |
| Backups | Overwritten within [7] days |
| Technical logs | Up to [90] days |
Your rights
You can do most of this yourself in the app. For anything else, email hello@kettledate.com and we'll respond within one month.
| Right | How |
|---|---|
| See your data | Settings & privacy → Request a copy of your data |
| Correct it | Profile → Edit profile (your name can change once every 30 days, and date of birth by emailing us) |
| Delete it | Settings & privacy → Delete account |
| Withdraw consent for sensitive details | Settings & privacy → Withdraw consent |
| Turn off location | Your iPhone's Settings → Kettle → Location |
| Object, restrict or move your data | Email us |
If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We'd appreciate the chance to put it right first.
Adults only
Kettle is for people aged 18 and over. We check your date of birth when you sign up and remove accounts we believe belong to anyone younger.
Keeping your data secure
Your data is encrypted when it's sent and when it's stored. Photos are kept in private storage and shared through links that expire. Each person can only read their own data, and our moderators can only see what they need to review.
Changes to this policy
If we make important changes, we'll tell you in the app before they take effect.