Your privacy at UpCatch

Who handles your data

UpCatch operates at upcatch.uk. The service operator has not yet supplied their legal identity for this notice.

What we use and why

We process your email, authentication identifiers, display name, birth month and year, profile photo, city, interests, preferences, friendships, messages, meetup history and ratings to provide your account and arrange meetups (contract). UpCatch is for adults 18 and over; we do not need your full birth date.

Signing in with Google

If you choose Google sign-in, Google shares your account identifier, email address and basic profile information, such as your name and profile picture, with our authentication provider, Supabase. We use this information to authenticate you and create or connect your UpCatch account. We do not request access to your Gmail messages, contacts, calendar or Drive files. We do not sell Google account data or use it for advertising.

You can remove UpCatch's access in your Google Account connections. Removing access does not itself delete your UpCatch account; use our data request page to request deletion.

Location, safety and optional features

Location permission is required for going online. We keep rounded coordinates for matching; your location is never shared with other members. Your own precise map marker uses browser location on your device. Birth month and year are private and are not shown to other members.

We use account restrictions, reports, blocks, verification status, presence events and operational logs for safety, fraud prevention and service security (legitimate interests). You can object to this processing; we assess your request against necessary safety and legal obligations. ID document upload and review are not currently available.

Analytics, push notifications and trusted-contact sharing are optional. Analytics uses your consent; you can withdraw it through Privacy settings. Push can be disabled in your profile and browser settings. Camera access is optional; you can upload an existing profile photo. Only add a trusted contact who expects these emails and let them know about this notice.

Storage and sharing

Supabase provides authentication, Postgres and private photo storage; Vercel hosts the site and optional analytics; Resend delivers service emails; OneSignal provides opted-in push. Other members receive only the profile and meetup information needed for the interaction. We do not sell personal data.

These providers may process information outside the UK. Provider locations and the applicable international transfer safeguards have not yet been confirmed for this notice. You can request information about transfers and safeguards through the data request page.

Cookies and device storage

Supabase authentication cookies and short-lived confirmation cookies support sign-in and email verification. We store your analytics choice locally on your device until you change it or clear site data. Optional analytics is disabled until you accept. OneSignal is used for opted-in notifications and may use device storage. Essential authentication storage cannot be disabled while using an account.

Retention and your rights

Account data is kept while needed to provide your account. Safety records may need to be retained for investigations or legal claims. Erasure requests are reviewed individually, including photos, backups and provider records. Retention depends on whether your account remains active, an unresolved safety report or legal claim requires the record, and applicable legal obligations. A final retention schedule has not yet been confirmed; no automatic deletion period is promised here.

You can request access and a portable copy of your data, correction, erasure, restriction or objection. Consent can be withdrawn without affecting earlier lawful processing. Use the authenticated request page below. We aim to respond within one month; identity verification or legally permitted extensions may apply.

Matching uses city, queue order and your preferences. You can decline offers or stop going online. Contact the operator to challenge a restriction or request human review.

You can complain to the Information Commissioner's Office.

See also our terms of use. We will update this notice when our handling of personal data changes and bring material changes to your attention.