Last updated: 11 May 2026.
1. Introduction
This Privacy Policy explains how Crossroad collects, uses, stores, shares, and protects personal data when you use our website, mobile app, and related services.
2. Who is responsible for your data
Crossroad is the data controller for the personal data described in this Policy. We aim to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and applicable privacy and electronic communications rules. You can contact us through our contact form.
3. Personal data we collect
Depending on how you use the Service, we may collect:
- Account data: name, email address, password hash, preferred language, account status, role, registration source, and login history.
- Profile data: age or date of birth information, gender, location, denomination or faith-related preferences, relationship goals, profile text, answers to profile questions, photos, and profile background choices.
- Communication data: messages, likes, winks, matches, gifts, reports, support requests, and moderation notes.
- Payment and subscription data: subscription status, plan, expiry dates, purchase identifiers, gift subscriptions, wallet or coin balances where available. Payment card data is processed by external payment providers and is not stored by Crossroad.
- Technical and security data: IP address, device information, browser, operating system, app version, logs, session identifiers, fraud-prevention signals, and anti-spam checks.
- Cookie and analytics data: as described in our Cookie Policy.
4. Special category data
Because Crossroad is a faith-based dating service, some profile information may reveal religious belief or denomination. We process this information only because you choose to provide it as part of your profile and matching preferences. You can remove or change this information where the Service allows.
5. How we use personal data
We use personal data to:
- create and manage accounts;
- provide dating, matching, messaging, profile, moderation, notification, and safety features;
- review profiles, photos, posts, reports, and suspicious activity;
- send service messages such as verification codes, password reset messages, moderation updates, and important account notices;
- manage subscriptions, gifts, wallet balances, promotions, and purchases where available;
- protect users, prevent fraud, spam, abuse, security incidents, and child safety risks;
- analyse aggregated or anonymised usage to improve the Service, where permitted by consent or law;
- comply with legal obligations and respond to lawful requests.
6. Lawful bases
We rely on different lawful bases depending on the purpose:
- Contract: to provide the Service you request.
- Consent: for optional analytics cookies, optional marketing where used, and information you choose to provide in your profile.
- Legitimate interests: safety, moderation, fraud prevention, security, service improvement, and protecting our community.
- Legal obligation: where we must keep records, respond to lawful requests, or report serious illegal content or safety issues.
7. Who we share data with
We do not sell personal data. We may share data with:
- other users, where profile information is visible according to the Service design and your settings;
- hosting, infrastructure, database, security, and backup providers;
- email delivery providers such as Resend for transactional emails;
- push notification providers such as Firebase Cloud Messaging and Apple Push Notification service;
- analytics providers such as Google Analytics, only according to your cookie choices;
- anti-spam providers such as Cloudflare Turnstile for form protection;
- authentication providers such as Apple or Google when you use social sign-in;
- payment and subscription providers such as Apple, Google, RevenueCat, Stripe, or another payment provider where paid features are used;
- law enforcement, regulators, courts, or child safety authorities where required or appropriate under law.
8. International transfers
Our main server is in the United Kingdom. Some providers may process data outside the UK. Where this happens, we rely on safeguards such as adequacy regulations, the UK-US Data Bridge, Standard Contractual Clauses, or equivalent protections.
9. Data retention
We keep personal data only as long as needed for the purposes described in this Policy. In general:
- account and profile data is kept while your account is active;
- messages and interactions are kept while needed to provide the Service and handle safety reports;
- technical logs are kept for limited periods for security and debugging;
- support and contact messages are kept while needed to respond and maintain records;
- after account deletion, we delete or anonymise personal data within a reasonable period, except limited records needed for legal, safety, fraud-prevention, accounting, dispute, or security reasons.
10. Deletion logs and safety records
If an account is deleted, we may keep a minimal deletion record, such as user ID, name, email, gender, age, country, deletion reason, deletion date, and the administrator who handled the request. This helps us maintain safety, prevent abuse, and keep deletion statistics. Access to these records is restricted.
11. Child safety
Crossroad is for adults aged 18 and over. We do not knowingly collect data from minors. We may process and preserve relevant information when investigating child safety concerns, CSAE, or CSAM, and may report confirmed or suspected illegal content to appropriate authorities where required or appropriate. See our Child Safety Standards.
12. Your rights
Under UK GDPR, you may have the right to access, correct, delete, restrict, object to processing, receive a copy of your data, and withdraw consent where processing is based on consent. To make a request, use our contact form. We normally respond within one month.
13. Security
We use HTTPS, encrypted sessions, password hashing, access controls, server hardening, rate limits, audit logs, anti-spam checks, and moderation tools. No online service can be completely risk-free, but we work to protect personal data and the community.
14. Cookies
We use cookies and similar technologies as described in our Cookie Policy. You can manage cookie preferences through the cookie settings link in the footer.
15. Complaints
You can contact us first through our contact form. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.
16. Changes to this Policy
We may update this Privacy Policy from time to time. If changes are significant, we may notify users by email, in-app notice, website banner, or another appropriate method.