Australian free release · Email and password sign-in. Paid subscriptions, VIP, group winks and social sign-in are not available in the free edition. Future-feature policies apply only when those features are introduced.
2. Privacy Policy
We do not sell your personal information. This policy explains what personal information SHAN QUANTUM TECH PTY LTD ("we") collects through the TrueLove app and website, why we collect it, how we use and share it, and your rights. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
1. Information we collect
| Category | Details | Source |
|---|---|---|
| Account information | Email address, password protected by the authentication service using secure hashing, first and last name, sign-in/registration source, agreement version and consent time | You and the authentication service |
| Third-party sign-in — deferred | If later enabled and chosen: the account identifier and name, email or avatar fields you authorise the provider to share; availability varies by provider | Apple, Google or Facebook, only after activation and your choice |
| Profile information | Display name, date of birth, gender, suburb and selected place details, one optional avatar, one optional album photo (a lifestyle or portrait photo) and replacements awaiting review, bio, height, education, occupation, languages, relationship goals, children and partner preferences | You |
| Sensitive information, if an optional field is offered | Information such as religion, ethnicity or sexuality only when separately explained and voluntarily supplied; partner preferences may also reveal sensitive information | You |
| Activity information | Likes, fixed greetings, matches, chat messages, blocks and reports | Generated as you use the Service |
| Purchase information — deferred | If paid services are later introduced: purchased items, subscription status and transaction identifiers; TrueLove does not collect full card numbers in the free release | The activated store/payment service and RevenueCat, where used |
| Device and technical information | Device brand/model, OS version and network type (such as Wi-Fi, 4G or 5G) where reported by the app, app version, IP address, language, session/security events and, if notifications are enabled, a push token; diagnostic information you submit or that the operating system provides | Your device and service infrastructure |
| Location | Your entered suburb/place information; when you permit foreground location, device coordinates and reverse-geocoded suburb, city, state/region, postcode and country. Precise coordinates are stored in the database and used only to sort recommendations and Nearby by real distance; they are not exposed to other members | You, your device and its location/geocoding service |
| Support and safety information | Your messages with support, appeal materials, and reports other users make about you | You or other users |
We do not continuously track your precise location in the background. Location permission and an avatar are optional for entering the main app; Nearby and location-based results need an available location and may be unavailable without it. Other members see an approximate distance and your address line (suburb, city and country code, e.g. “Lalor Park, Sydney, AU”), not your coordinates or postcode.
How device information is used: while you are online, other members can see your phone model and network type on your profile and in chats (for example “OPPO CPH2145 WiFi Online”). You can turn off “Show my phone model and network” in Online status; then only you see it. OS version and app version are used only for statistics (such as which phones and networks members use) and for investigating compatibility problems, and are not shown to other members. Device information is not used for advertising and not sold to any third party.
Online status: while the app is open we record when you were last online and the status you choose (Online, Invisible, Away, Do Not Disturb, Busy). Other members can see your status. Members who liked you may get an in-app alert when you come online; while you are Invisible, other members see you as offline and get no alert.
Remember password and notes to yourself: if you choose “Remember password”, the password is stored only on your device, encrypted, and is not uploaded to our servers. Messages you send to yourself are kept only in your account and are not visible to other members.
2. How we use information
- To create and manage your account, verify your email, and stop duplicate accounts and banned users returning.
- To show your profile, recommend people you may like, and provide likes, matches and chat.
- To provide customer support and, only if paid services are introduced, process purchases and subscriptions.
- To detect and deal with scams, impersonation, harassment, spam and other breaches, and keep users safe.
- To send service notices, safety alerts and policy updates. We send marketing only with your consent, and you can unsubscribe at any time.
- To analyse usage, fix bugs and improve the product.
- To meet legal obligations and respond to lawful requests from law enforcement.
3. Sensitive information
Fields such as religion, ethnicity or sexual orientation are not required for access. If an optional sensitive field is introduced, we will explain its use and seek the required consent before collection. Gender and partner preferences used for matching may also reveal sensitive information; their matching purpose is shown when collected. Optional fields can be corrected or removed. Removing a preference necessary to perform matching may limit those results.
4. Automated decision-making
We may use software to order compatible profile recommendations, identify suspicious behaviour and support content review. A recommendation affects profile ordering, not a guaranteed judgement about someone's character or safety. A specific fraud classifier, biometric tool or automatic banning process is not asserted to be in service unless separately disclosed as active.
When APP 1.7–1.9 applies: from 10 December 2026, if a program using personal information makes or substantially and directly informs a decision that could reasonably be expected to significantly affect a person's rights or interests, our published privacy notice will describe the kinds of personal information and decisions involved, distinguishing wholly automated decisions from those substantially informed by a program. We will maintain the relevant register and enable requests for information and review where required.
For significant account enforcement, contact support@shantechsolutions.com to ask for human assessment, subject to lawful safety and privacy limits. Details of the currently activated systems appear in our AI and Automated Decision-Making Policy.
5. How we share information
Other users. Depending on profile visibility settings and matching rules, others may see a display name, approximate age, suburb/region, an approved avatar and album photo, and selected profile details. We do not intend to publicly display account email, full birthdate, private reports or precise device location. Others may retain screenshots or messages outside our control.
Providers. Supabase supplies the core database, authentication and private photo storage. Cloudflare hosts and protects the public legal website. Resend is the selected transactional email provider for account verification, password reset and service messages. Where a supported device has notifications enabled, Expo Push and the device’s Apple/Google notification service handle delivery tokens, generic new-message notices and routing identifiers; the notification payload does not contain chat text or the sender’s name. Device location/geocoding services resolve a permitted foreground location to place details. Third-party sign-in and billing services are deferred for the free release. See our Third-Party Services and International Transfers Notice for purposes and conditional processing.
Safety, law and corporate events. We may disclose proportionate data for serious harm prevention, binding legal requests, professional advice, or genuine reorganisations, subject to applicable law and contractual protection. We do not sell member data or private chat content to data brokers or third-party advertisers.
International transfers. We assess overseas access and disclosures, supplier safeguards, and APP 8 where it applies before engaging international processors.
6. Overseas transfers
Our confirmed Supabase project uses AWS Sydney region ap-southeast-2 for the core PostgreSQL database, authentication and Storage objects. This is not a promise that all processing occurs only in Australia. Supabase service telemetry, support access, content delivery caches, and external identity or email providers may involve overseas systems.
Where feasible we restrict processing to necessary data and assess foreign recipients, countries and protections; the current supplier list, transfer categories and user contact are maintained in our Third-Party Services and International Transfers Notice. The current email service and relevant overseas processing are described in that notice.
7. Security
Security controls include private buckets, database row-level access controls, restricted admin privileges, encrypted transport, password hashing by the authentication provider, anti-abuse rate limits and security review. No website or application is risk-free. We do not promise end-to-end encryption unless separately implemented and verified.
Where applicable, we assess suspected eligible data breaches and notify affected people and the OAIC as required under the Notifiable Data Breaches scheme. We limit internal access to those with an operational need and review material service-provider incidents.
8. Retention
We retain information only for legitimate product, fraud prevention, safety, complaint, accounting and legal needs. Live-user data, deleted accounts, photo objects, messages, moderation evidence, financial records, email delivery records and backups can have different lifecycles.
Deleting a live account does not instantly erase historical backups or service logs. Their retention depends on the data category, the relevant provider’s service terms and settings, and any applicable legal preservation requirement. We do not promise an unverified universal backup-deletion period. You can ask support@shantechsolutions.com about information retained for your account and the applicable deletion process; we will explain known limits and any unresolved timing. See our Account Deletion and Data Retention Policy for the process and lawful exceptions.
9. Your rights
- Access and correction: view and edit your profile in the app, or ask us for a copy of the personal information we hold about you.
- Deletion: delete your account in the app at any time.
- Withdrawing consent: remove optional sensitive information, turn off location permission, or unsubscribe from marketing.
- Anonymity: because of the nature of the Service you cannot use it fully anonymously, but you may use a display name.
We aim to respond within a reasonable period, ordinarily within 30 days. If a request needs more time, we will explain the delay and next steps; any mandatory legal deadline still applies.
10. Children
The Service is for adults aged 18 and over. We do not knowingly permit under-18 accounts. If an account is identified as underage, we restrict access and delete unnecessary personal information, subject to narrowly justified safety evidence or legal preservation requirements.
11. Cookies and similar technologies
The public legal pages can be read without an account and do not load analytics or marketing scripts. Cloudflare handles technical access, delivery, security and aggregate traffic statistics for the website; other pages on the company website may use Cloudflare Web Analytics. The mobile app stores authentication tokens and preferences on the device as described in our Cookie and Similar Technologies Policy. Any future optional marketing identifiers or advertising pixels require separate disclosure and the choices required by law.
12. Complaints
If you believe we have breached the APPs, please contact support@shantechsolutions.com first and we aim to respond within a reasonable period, ordinarily within 30 days. If you are not satisfied, you can complain to the OAIC at www.oaic.gov.au.
13. Changes to this policy
When we update this policy we will change the effective date at the top, and notify you of material changes in the app or by email.
14. Contact us
SHAN QUANTUM TECH PTY LTD Privacy email: support@shantechsolutions.com
15. Contact preferences, sensitive data and location controls
Religious views, ethnicity, sexuality and comparable sensitive traits are optional and should not be mandatory to access the core service. Where sensitive data is collected, we seek appropriate informed consent and explain any fields displayed to other people. Optional location permissions can be withdrawn using device settings; we aim to offer manual city entry where feasible. Users may correct profile data and manage preferences without deleting their account.
16. Marketing, minors and privacy complaints
We do not use service-notice consent as permission for marketing. Marketing requires any legally necessary opt-in and a practical opt-out. Members must be at least 18. If you believe your information has been mishandled, email support@shantechsolutions.com with the nature of the concern; we will acknowledge and investigate reasonably, and explain available external complaints mechanisms, including the OAIC where its jurisdiction applies.
17. Effective operation of this notice
This notice distinguishes the services described as in use from future capabilities expressly labelled as deferred. Mentioning a future provider, profiling activity, face-recognition system, marketing pixel or payment gateway does not enable that processing. Material changes will be reflected in the applicable notice. This edition is available in English, Simplified Chinese and Traditional Chinese with the same version and effective date.