Privacy Policy

Last updated: 11 November 2026

1. Controller

The controller of your data is LunaDevel (identification details in the annex). For any privacy matter, write to admin@lunadevel.com.

2. What data we process

Account (private):

• Email and password. The password is handled by Firebase Authentication and we never see it.
• Phone number, only if you choose to verify it.
• Date of birth. It is private: other users only see your age.
• Settings, language and search preferences.

Profile (visible to other users): name, age, gender, photos, languages, interests, since when you have lived in the city, activity (work, studies…), city, neighbourhood, whether you have verified your phone, and your last activity.

Location:

• We use your device's precise location, only while you use the App, when you set your city and when you open the App to check you are still there.
• We store the coordinates in your private account.
• Other users only see your city, your neighbourhood and an approximate area of about 1 km.

Activity in the App: who you like, which profiles you have seen, connections, groups, chat messages, plans, blocks and reports.

Technical data:

• The identifier used to send you notifications.
• Crash reports.
• Usage statistics that do not include your name, email or messages.
• Checks that you are using the official App and that your location is not simulated.

Purchases: your subscription status and the receipts we verify with Apple or Google. We never receive your card details.

We do not ask for data about sexual orientation, religion, health or political views. If you choose to include them in your profile or in chats, bear in mind that other people will be able to see them.

3. Why we use it and on what legal basis

• Providing the service (legal basis: performance of the contract, Art. 6(1)(b) GDPR). This covers:
  • creating your account and profile;
  • assigning you a city and recommending compatible profiles;
  • forming groups;
  • the chat;
  • sending you service notifications.
• Safety, moderation and fraud prevention (legal basis: legitimate interest, Art. 6(1)(f), and compliance with legal obligations, Art. 6(1)(c)). This covers:
  • reviewing reports;
  • detecting fake accounts or simulated locations;
  • protecting the App from unofficial clients.
• Crash diagnostics (legal basis: legitimate interest in the App working properly).
• Usage statistics (legal basis: your consent, Art. 6(1)(a)). You can withdraw it at any time in the App settings.
• Payments (legal basis: performance of the contract and tax obligations).
• Advertising in the free version, if introduced: we will ask for your consent where required.

Automated recommendations:

• The order in which you see profiles is decided by an algorithm based on interests, languages, age, time in the city and activity.
• It has no legal effects and does not significantly affect you.
• Automatic suspensions after reports are temporary and are always reviewed by a person.

4. Who can see your data

• Other users:
  • they see your profile;
  • members of your groups see the group's messages and plans;
  • users with Premium can see that you have liked them.
• Our providers, which process data on our behalf:
  • Google Ireland Ltd. and Google LLC, through Firebase (authentication, databases, photo storage, cloud functions, notifications, statistics, crash reports and App verification).
  • App data is hosted in the European Union (Belgium). Some services may also process it in the US (see section 5).
• Apple and Google, as app stores, when you buy something. They act as independent controllers under their own policies.
• Authorities, when the law requires us to.

We do not sell your data.

5. International transfers

When a provider processes data outside the European Economic Area, it does so with appropriate safeguards. Google LLC participates in the EU-US Data Privacy Framework and also applies the European Commission's Standard Contractual Clauses.

6. How long we keep it

• While your account is active.
• Likes expire after 60 days.
• If you delete your account:
  • we delete your profile, photos, likes and connections within 30 days at most;
  • messages you sent in groups remain visible to their members, but anonymised ("Deleted user").
• Report and moderation records are kept for up to 1 year after they are closed, or longer if needed for a legal claim.
• Billing data is kept for as long as tax law requires.
• Backups are deleted in their normal cycle, within 30 days at most.

7. Your rights

You can exercise these rights at any time:

• access;
• rectification;
• erasure;
• objection;
• restriction of processing;
• portability;
• withdrawal of consent.

To exercise them, write to admin@lunadevel.com from your account's email. We will reply within one month. You can delete your account directly from the App (see Delete your account).

If you believe we have not handled your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es) or to the supervisory authority in your country.

8. Security

We use encryption in transit and at rest, access rules that limit who can read each piece of data, and checks that only the official App can access the service. No system is infallible: if we detect a breach affecting you, we will notify you as required by law.

9. Minors

ThreeKind is only for people aged 18 or over. If we detect an account belonging to a minor, we will delete it.

10. Changes

If we change this policy significantly, we will notify you in the App before the change takes effect.

Annex: controller details

LunaDevel is the trade name of Carlos Santiago Melón Fernández, an individual based at Calle Abtao, 48 - 1 03, 28007 Madrid (Spain). Contact: admin@lunadevel.com.