Privacy Policy
measured is a dating app, and dating apps hold unusually personal information. This explains exactly what we collect, why we're allowed to, who else sees it, and what you can make us do about it.
Who we are
measured is operated by Ternal Limited, a company registered in England and Wales (company number 17475488), registered office 128 City Road, London, United Kingdom, EC1V 2NX.
Ternal Limited is the data controller for the personal information described here. You can reach us at support@measured.date.
measured is available on Google Play. On iPhone it's in beta through Apple's TestFlight while it waits for App Store approval. It is offered in the United Kingdom and many other countries, and will reach the European Economic Area once the store requirements there are complete. We do not offer it where same-sex relationships are a crime, because the information a dating app holds could put people there at risk. This policy covers the beta and the released app alike.
What we collect
When you create an account
- Your phone number, or the identifier Apple or Google gives us when you sign in with them.
- Your name, date of birth, gender, who you're interested in, height and location.
- Your photos, and anything you write in prompts.
- Optional details if you choose to answer them: pronouns, sexuality, ethnicity, religion, politics, children, family plans, relationship type, drinking, smoking, cannabis, drugs, job title, workplace, school and hometown.
Information about your body and your preferences
If you list a size, we store the length and girth you enter and who you've chosen to show them to — everyone, your matches only, or nobody. If you set a size range you're looking for, we store that too. A range can have a lower bound, an upper bound, or both.
This is special category data under UK and EU data protection law, because it concerns your sex life. We treat it accordingly, and section "Why we're allowed to" explains the legal basis. The size range you're looking for is never shown to anyone else, and it only shapes your own view: it decides who appears in your deck, and has no effect on whether anyone else sees you. That is also true when you choose to show your own size to nobody: it still matches you accurately, it simply isn't displayed.
How you use measured
- Who you've liked, passed on, matched with, blocked, reported or archived.
- Messages you send to matches. When a message began as a comment on someone's photo or prompt, we keep a reference to that photo, or a copy of the prompt's wording as it read at the time, so the conversation still makes sense later.
- If you report someone you've exchanged messages with, a copy of your most recent messages with them (up to 50) goes with the report, so the person reviewing it can see what happened. We don't otherwise read, scan or filter your messages.
- Which profiles you've been shown, so we don't keep showing you the same people.
- When you were last active.
Technical information
- If a screen in the app fails, we record the error, which screen it happened on, your device platform and the app version, so we can fix it.
- If you turn on notifications, a token that lets us send them to your device.
If you join the waitlist
The waitlist form at measured.date/join collects your email address, and your gender and country if you choose to give them. It is open to anyone, anywhere. Joining tells us where to go next, but it isn't access to the app.
If you tick the box to say so, it also records who you're hoping to meet, and — where that doesn't already make it clear — whether you'd be listing a size or looking for someone who does. Together those amount to information about your sexual orientation, which is special category data, so we only store it when you've explicitly agreed and we record when you agreed. Leave the box unticked and none of it is collected. We use it to work out whether measured can work where you are.
We use it to tell you once when there's a place for you, and to work out which countries to open next. We won't send you anything else. Ask us at any time and we'll remove you.
We don't sell or share your address. The only third parties it reaches are Apple and Google, and only to invite you to test measured before it is in their app stores: on iPhone, your address goes to Apple's TestFlight, and on Android, to Google Play's testing programme, which is what delivers the invitation. That is the same "there's a place for you" we collected it for, done the only way Apple and Google allow. If you would rather not, reply to the invitation or write to us and we'll remove you instead.
Face data: age verification and the verified tick
measured uses images of your face in two places, both through our provider Didit (Didit Identity, Inc.), which processes them on our behalf and only to carry out these checks. We do not use face data for advertising, we never sell it or share it for anyone else's purposes, and we do not use it to recognise you anywhere else. We have opted out of Didit using our members' verification data to train its models.
Age verification, for every account. Before you can message anyone, you complete an age check on Didit's own page. Didit takes a selfie to estimate your age from your face and, if the estimate is close to 18, asks for a photo of an identity document. The selfie and any document go straight to Didit: we never receive or store them. We receive only whether you passed and which method was used. As soon as the result is final, we instruct Didit to delete the session, including the selfie, any document images, the details read from them and any face record. Didit is also set to delete any session it still holds after 30 days.
The verified tick, which is optional. Nothing on measured requires a tick, and choosing not to have one does not limit your account. If you ask for one, you take a selfie and choose one of your own profile photos for it to be compared against. Comparing faces this way is biometric data, which is special category data under UK and EU data protection law, and we only do it because you asked us to. Your selfie is uploaded to our private storage, hosted by Supabase in Ireland, and is never shown on your profile or to other members. We send the selfie and the photo you chose to Didit, which checks the selfie was taken by a live person and compares the two faces; we instruct Didit not to keep either image. We keep the result and the two similarity scores Didit returns. We do not create or keep a face template. As soon as the check is decided, we delete your selfie. If Didit cannot complete the check, a person at measured compares your selfie with the photo you chose instead, and the selfie is deleted as soon as they decide.
Profile photos. Your profile photos show your face, but we do not create face templates or any face data from them. Before anyone sees them, an automated classifier (provided by Anthropic) checks them against our guidelines, including for nudity and for signs that someone may be under 18. That check produces a decision about the photo, not a record of your face.
How long face data is kept. Age-check images are deleted at Didit as soon as the result is final, and in any case within 30 days. A verified-tick selfie is deleted as soon as the check is decided. What remains is whether you passed, the method used and, for the tick, the two scores. These contain no image and no face template. They are deleted with your account, apart from the age-check result, which is kept for up to 2 years as evidence that we checked.
Why we're allowed to
Data protection law only lets us use your information when we have a lawful basis for it. These are the bases we rely on. They are the same under the UK GDPR and the EU GDPR.
| What | Lawful basis |
|---|---|
| Running your account, showing you people, matching, messaging | Performance of a contract — our Terms of Service |
| Your size, the size range you're looking for, who you're interested in, and any sexuality, ethnicity, religion or political views you choose to share | Your explicit consent, which you give by ticking the consent box when you join, and can withdraw at any time. We record when you gave it and which wording you agreed to |
| Moderating photos and profile text, acting on reports, blocking and banning | Our legitimate interests in keeping people safe. Where moderation involves special category data you've shared, it is covered by the explicit consent you gave for that data and, in the UK, by the substantial public interest in preventing unlawful acts |
| Confirming you're 18 or over | Legal obligation where the law requires age checks, such as the UK's Online Safety Act, and otherwise our legitimate interests in keeping minors off an adult service |
| Comparing your selfie with your photo for the optional verified tick | Your explicit consent, given when you ask to be verified and withdrawn by not asking |
| Crash reports and fixing faults | Our legitimate interests in the app working |
| Emailing you once about the waitlist | Your consent, given by joining it, which you can withdraw by asking us to remove you |
Where we rely on your explicit consent, you can withdraw it by removing the information or deleting your account. Withdrawing consent doesn't affect anything we did while it was valid. If you withdraw consent for your size, people will no longer be able to find you by it.
Who else sees your information
Other people using measured
Your name, age, photos, prompts, height, the town or city you set, an approximate distance, and any optional details you chose to show. Your size is shown according to the setting you pick: everyone, matches only, or nobody. The size range you're looking for is never shown to anyone. Neither is your exact location — distance is rounded. Archiving a conversation is private too: the other person sees no change.
Companies that help us run measured
| Who | What for | Where |
|---|---|---|
| Supabase | Database, photo storage and the servers the app talks to | Ireland |
| Didit | Confirming you're 18 or over, and the optional verified tick | See their privacy notice |
| Anthropic | Automated checking of photos and profile text before anyone sees them | United States |
| Apple | Delivering TestFlight invitations to people on the waitlist | See their privacy notice |
| Delivering Google Play testing invitations to people on the waitlist | See their privacy notice | |
| Twilio | Sending sign-in codes by SMS | United States |
| Komoot (Photon) | Suggesting towns and cities as you type your location. It receives only what you type, nothing that identifies you | Germany |
| Apple, Google | Sign-in, app distribution, subscriptions and notifications | See their privacy notices |
These companies act on our instructions and can't use your information for their own purposes.
Some of them are outside the UK and the European Economic Area. Where information goes to a country that the UK or the European Commission hasn't recognised as protecting it adequately, we rely on approved safeguards: the European Commission's Standard Contractual Clauses, with the UK Addendum or the UK's International Data Transfer Agreement for UK data, or the EU-US Data Privacy Framework and its UK extension where the recipient is certified. You can ask us for a copy of the safeguards that apply.
We do not sell your personal information, and we don't share it with advertisers.
When the law requires it
We may disclose information where we're legally required to, or where we believe in good faith that it's necessary to prevent serious harm, investigate a credible threat to someone's safety, or defend legal claims.
How long we keep it
| What | How long |
|---|---|
| Your profile and everything on it | Until you delete your account |
| Messages | Until you delete your account, or the match ends and both people have gone |
| A photo or prompt someone liked or commented on | Kept with that conversation, so it still makes sense, even if you later remove it from your profile. Visible only to the two of you while you're matched. Deleted when your account is, or straight away if our moderation removes it |
| Reports, blocks and moderation decisions, including messages attached to a report | Up to 2 years after the account closes, so we can act on repeat behaviour |
| Age-check selfie and any identity document (held by Didit, never by us) | Deleted as soon as the result is final, and in any case within 30 days |
| Verified-tick selfie | Deleted as soon as the check is decided |
| That you passed an age check, and when | Up to 2 years, as evidence we checked |
| If your account is banned: one-way hashes of your phone number, email address and sign-in ID | For as long as the ban stands, so it can't be undone by deleting the account and signing up again. A hash can't be turned back into the details it came from |
| Crash reports | Deleted after 7 days |
| Waitlist entries | Until you join measured or ask to be removed, and no more than 2 years |
You can delete your account in the app, or without it by following the steps at measured.date/delete-account.
When you delete your account, your profile, photos and prompts are removed and you stop appearing to anyone. Messages you sent may remain visible to the person you sent them to, in the same way an email you've sent stays in the recipient's inbox.
Your rights
Under UK and EU data protection law you can ask us to:
- give you a copy of the information we hold about you
- correct anything that's wrong
- delete your information — you can do this yourself, in the app, under Settings
- stop or limit what we do with it
- send your information to another service where technically possible
- stop relying on legitimate interests, where you object to that
- have a person look again at any decision our automated checks made about your photos or profile text
Where we rely on your consent, you can withdraw it at any time, as described above.
Our automated checks decide whether a photo or piece of text can go live, or hold it for a person to review. If they reject the text on your profile itself, your profile is hidden until you change it. They never suspend or ban anyone: those decisions are made by a person.
Email support@measured.date and we'll respond within one month. We may need to confirm it's really you before we act.
If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint. We'd rather you came to us first so we can put it right. If you're in the European Economic Area, you can also complain to the data protection authority in the country where you live or work, or where you think the problem happened. The European Data Protection Board lists them at edpb.europa.eu.
If you're in the European Economic Area
The EU GDPR applies to how we handle your information, because we offer measured to people in the EEA. Ternal Limited is the controller, based in the United Kingdom. The European Commission recognises the UK as giving personal data adequate protection, so information can come to us from the EEA without further safeguards. Our database is hosted in Ireland.
Everywhere else
The rights above are ones we give everyone using measured, wherever you are, and the same practices apply. If your local law gives you additional rights, contact us and we'll honour them. We don't sell or share personal information for cross-context behavioural advertising, as those terms are used in United States privacy laws.
Children
measured is for adults. Nobody under 18 may use it, and every account passes an age check before it can be used. If you believe a minor is using measured, report the account in the app or email us and we will act.
Security
Your photos are stored privately and served through links that expire. Access to your data is restricted at the database level, so one person's account cannot reach another's. Staff access is limited to what's needed to operate the service and handle reports. No service can promise perfect security, but we take this seriously and will tell you and the relevant regulator if something goes wrong in a way that puts you at risk.
Changes to this policy
If we change this policy we'll update the date at the top, and we'll tell you in the app if the change is significant.