Last updated December 4, 2025.
The Data Controller responsible for your personal information is:
ROVR LABS INC. (DBA Flirtual)
6d - 7398 Yonge St, #776
Thornhill, ON, Canada, L4J 8J2
Profile Data: To facilitate connecting you with other users, we display the profile information you provide us (such as your display name, profile pictures, bio, and age) to them, and factor some of this information into our matchmaking algorithm. You may voluntarily provide sensitive information (such as your sexuality and location) to be displayed on your profile. You can control the visibility of some profile data in the Privacy Settings.
Account Data: When you sign up, you provide us with account details (such as your email address) to create your account and authenticate you. We use your email to send you transactional notifications and, with your permission, marketing communications.
Message Data: We process the messages you send in order to facilitate communications with other users.
Purchase Data: If you make a purchase, we collect your transaction details (such as subscription type and billing history) to fulfill your order and comply with accounting requirements. We do not store your full payment card details directly; they are processed securely by our payment partners.
Connected Platform Data: If you connect an external account, we collect information from it (such as your Discord ID or VRChat username). We use this data to enable social sign-in, share your connected profile with matches to facilitate communications, display connected content on your profile, or support other integrations.
Verification Data: If you choose to verify your identity or age, or where required by law, we may process your government-issued ID and/or biometric data (such as photo, video, and face geometry) to confirm your identity.
Usage Data: We collect data about how you use our service (such as when you access it, how you navigate and interact with it). We use this data to provide and improve the service.
Technical Data: We collect data from your device (such as IP address, device/browser identifiers, error/crash data, hardware and software information). We use this data to secure your account, customize your experience, and improve our service.
Additionally, we may use the above data to ensure the safety and security of our platform, prevent fraud, provide customer support, and comply with legal requirements. We may use aggregate or anonymized data to promote our service.
We process your data under the following legal bases:
Contractual Necessity: To provide our service (such as matchmaking, messaging, and facilitating social interactions).
Legitimate Interest: To ensure the safety and security of our platform, prevent fraud, and analyze usage to improve our service.
Legal Obligation: To comply with valid legal requests and reporting requirements.
Consent: For sensitive personal information you voluntarily provide (such as sexual orientation, precise geolocation, and biometric data) and for marketing communications. You may withdraw this consent at any time in the Settings.
We use an automated matchmaking algorithm to suggest compatible users to you, and to suggest your profile to other users. Our algorithm considers factors including matching profile data (such as interest tags, personality similarity, and geographic proximity), recent activity, and whether a user has already expressed interest in your profile. These factors are prioritized according to a combination of our preset values and, in some cases, user-defined weights. Results are filtered based on your preferences and theirs (such as gender, age, and other filters you choose). We do not use profiling to make decisions that produce legal or similarly significant effects on you.
We use trusted third parties to help us provide our services. We share data with them only to the extent necessary for them to perform their specific function. We review third parties we engage with to ensure they have adequate data protection and information security measures in place. We take measures to protect and anonymize data shared with third parties, as appropriate given the nature of the services provided. We do not sell your data.
Cloud Hosting Services: To provide reliable infrastructure for managing our platform.
In-App Functionality Services: To facilitate key features such as messaging and image hosting.
Billing Services: To manage payments and subscriptions.
Connected Platform Services: To enable social sign-in, display connected information, and facilitate other integrations.
Security and Performance Services: To safeguard our platform and deliver content globally.
Insight and Improvement Services: To analyze usage and technical data in order to improve our service.
Communication Services: To deliver transactional notifications and marketing communications.
Moderation Services: To detect harmful content, and ensure the safety and security of our platform.
Verification Services: To securely verify your identity and age.
IT Services: To assist in business operations, such as ticketing systems for customer support.
Legal Authorities and Safety Organizations: To comply with valid legal requests and reporting requirements.
We are headquartered in Canada. Your data is processed on servers located in the United States, accessed by our global team, and delivered via a global edge network.
By using Flirtual, you acknowledge that your data may be processed in countries outside your residence (including the US, Canada, and others) to ensure performance and support our business operations.
For users in the EEA, UK, and Switzerland, we rely on the EU-U.S. Data Privacy Framework, UK Extension to the EU-U.S. Data Privacy Framework, and Swiss-U.S. Data Privacy Framework for transfers to certified US providers; and Standard Contractual Clauses for transfers to other providers or jurisdictions. Canada is recognized by the European Commission as providing an adequate level of data protection.
Access, Portability, and To Know: You can view some data directly in the Settings. You can request a copy of your data by emailing us.
Rectification and Correction: You can update some data directly in the Settings.
Deletion and Erasure: You can delete some specific data directly in the Settings. You can also delete your account in the Settings.
Objection and Restriction: You can opt out of some data processing, including sensitive personal information, by deleting it or controlling its visibility directly in the Settings. You can opt out of anonymous usage analytics in the Privacy Settings.
Consent Withdrawal: You can withdraw consent you've given us directly in the Settings. You can also withdraw some device permissions (such as push notification and precise location access) in your device settings.
If you cannot access your account, or have any other privacy request, please email us. We will verify your identity and respond within 30 days. We may deny your request if we are unable to verify your identity, if your request is invalid, or if your request may infringe on someone else's privacy or other rights.
If you are a resident of a US state with applicable privacy laws and we deny your request, you may appeal our decision by emailing us. If you are unsatisfied with the result of your appeal, you may contact the Attorney General of your state.
If you have any concerns about how we process your data, you have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada or, depending on your jurisdiction, your local data protection authority if you believe your data has not been handled in accordance with the GDPR, CCPA, or other local data privacy regulations:
European Union and European Economic Area: Find your national supervisory authority here.
United Kingdom: Information Commissioner's Office.
California: Attorney General's Office.
Other jurisdictions: Depending on your location, other data protection laws may grant you similar or additional rights. We encourage you to explore the data protection rights available to you in your jurisdiction, or contact us for more information.
We retain transaction records, customer support records, and supporting data for 7 years to comply with accounting requirements.
If you verify your identity or age, your ID and biometric data is deleted immediately after the verification is complete.
If your account is suspended for violating our terms, we retain limited data necessary to prevent you from opening a new account (such as your email, usernames, IP address, and device/browser identifiers) and moderation records (such as reports, flagged data, and enforcement actions) for as long as necessary to ensure the safety of our platform.
Otherwise, we retain your data until your account is deleted. If your account remains inactive for two years, we will automatically delete it. If your account is suspended for violating our terms, we will automatically delete it (except the limited safety data described above) after 30 days.
When your account is deleted or you remove specific data from your profile, it is immediately deleted from our production systems. It may persist in disaster recovery snapshots for up to 7 days before being permanently erased.
Our service is strictly intended for individuals who are 18 years of age or older. We do not knowingly collect data from minors. If you are aware of someone under the age of 18 who has gained access to our service, please report their profile through the service or contact us.
We do not sell or share your personal information for cross-context behavioral advertising. We only use your sensitive personal information (such as messages, sexual orientation, precise geolocation, and biometric data) to provide the direct service you have requested.
If you have any questions about this privacy policy, you can contact our Data Protection Officer by sending an email to privacy@flirtual.com.
If you find a vulnerability or privacy leak, please report it to us discreetly via GitHub or email.