Legal

Privacy Policy

Last updated: 24 July 2026

This Privacy Policy explains how Softnergy Limited ("Afromigo", "we", "us", or "our") collects, uses, stores, and shares your personal data when you use the Afromigo mobile application and website.

1. Who we are and how to contact us

Afromigo is operated by Softnergy Limited, a company registered in Scotland under company number SC619146.

Softnergy Limited
Colliers Row
Wallyford
EH21 8GX
Scotland, United Kingdom

Softnergy Limited is the data controller responsible for your personal data under the UK GDPR and, where applicable, the EU GDPR.

Contact our data protection team at privacy@afromigo.com. We aim to respond within 30 days.

2. What personal data we collect

We collect different categories of personal data depending on how you interact with Afromigo.

CategoryData collectedPurpose
Account dataFull name, email address, date of birth, gender, password (hashed)To create and manage your account
Profile dataProfile photos, bio, heritage countries, UK generation, occupation, relationship goals, hobbies, heritage languages, religion, ethnicity, marital status, education level, lifestyle preferences (smoking, drinking, cannabis use, whether you want children)To show your profile to potential matches
Location dataResidence (free text, e.g. town/city), and — where you choose to share it — precise geolocation coordinates for distance-based matchingTo surface local matches and apply distance filters
Usage dataSwipe activity, likes, dislikes, messages sent, features used, profile views, login timestampsTo operate the matching service and improve the app
Device dataDevice type, operating system, OS version, app version, IP address, push notification tokenTo send notifications and diagnose technical issues
Payment dataSubscription type, transaction ID, purchase date, expiry dateTo manage premium subscriptions (card details handled by app stores)
CommunicationsMessages exchanged with other users, support tickets, feedback submissionsTo facilitate in-app messaging and handle support requests
Verification dataPhoto verification images, verification statusTo verify user identity and maintain community trust
Health-related dataGenotype and blood group, provided voluntarilyTo help surface genetically compatible matches, where you choose to share this

Special category data

Some data we collect may constitute special category data under UK/EU GDPR, including information about your religion, ethnicity, genotype, and blood group. We collect this solely to provide core app functionality — including surfacing genetically compatible matches where genotype/blood group are shared — and only with your explicit consent.

Children

Afromigo is not intended for users under 18. If you believe a minor has registered, contact privacy@afromigo.com.

3. How we use your data and our legal basis

Under UK/EU GDPR, we must have a lawful basis for processing your personal data.

PurposeLegal basis
Creating and managing your accountPerformance of a contract
Showing your profile to potential matchesPerformance of a contract
Facilitating in-app messagingPerformance of a contract
Processing premium subscription paymentsPerformance of a contract
Sending account and security notificationsPerformance of a contract
Processing special category data (religion, ethnicity, genotype, blood group)Explicit consent
Sending marketing emails and push notificationsConsent (you can withdraw at any time)
Preventing fraud, abuse, and safety violationsLegitimate interests
Improving the app using anonymised analyticsLegitimate interests
Complying with legal obligationsLegal obligation
Responding to support requestsLegitimate interests / contract

4. Who we share your data with

We do not sell your personal data to third parties.

Service providers

→

RevenueCat — Subscription billing and purchase verification. revenuecat.com/privacy

→

OneSignal — Push notification delivery. onesignal.com/privacy-policy

→

Amazon Web Services (AWS S3) — Secure cloud storage for profile photos and media. aws.amazon.com/privacy

→

Cloudinary — Image processing, optimisation, and delivery. cloudinary.com/privacy

→

MongoDB Atlas — Secure cloud database hosting. mongodb.com/legal/privacy-policy

→

Hostinger — Email delivery via SMTP. hostinger.com/privacy-policy

→

Anthropic (Claude API) — Powers the optional AI dating coach feature. anthropic.com/privacy

Legal disclosure

We may disclose your data to law enforcement agencies, courts, or regulatory authorities where legally required or where necessary to protect user safety.

Business transfers

In the event of a merger or acquisition, your data may be transferred to the acquiring entity. We will notify you before your data becomes subject to a different privacy policy.

5. International data transfers

Where we transfer personal data outside the UK and EEA, we ensure appropriate safeguards are in place such as Standard Contractual Clauses approved by the UK ICO or equivalent mechanisms.

6. How long we keep your data

Data typeRetention period
Account and profile dataFor the lifetime of your account, deleted within 30 days of account deletion
MessagesFor the lifetime of your account, deleted within 30 days of account deletion
Profile photosDeleted from Cloudinary/AWS within 30 days of account deletion
Usage and swipe dataFor the lifetime of your account
Payment recordsUp to 7 years for tax and accounting purposes
Support ticketsUp to 2 years after resolution
Safety and abuse reportsUp to 5 years for legal and safety purposes
Server logs and IP addressesUp to 90 days

7. Your rights under UK and EU GDPR

To exercise any of these rights, contact privacy@afromigo.com. We respond within 30 days.

→

Right of access — You can request a copy of the personal data we hold about you (a Subject Access Request).

→

Right to rectification — You can ask us to correct inaccurate or incomplete personal data.

→

Right to erasure — You can request deletion of your personal data where there is no legitimate reason for us to continue processing it.

→

Right to restriction — You can ask us to suspend processing of your personal data in certain circumstances.

→

Right to data portability — You can request a machine-readable copy of the data you provided to us.

→

Right to object — You can object to processing based on legitimate interests or for direct marketing purposes.

→

Right to withdraw consent — Where we rely on your consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

→

Right to lodge a complaint — You have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or your local supervisory authority in the EEA.

8. Security

We implement appropriate technical and organisational measures to protect your data.

✓

Passwords are hashed using bcrypt — we never store plain-text passwords

✓

All data in transit is encrypted using HTTPS/TLS

✓

Profile photos are stored in private cloud buckets (AWS S3, Cloudinary)

✓

Access to production systems is restricted to authorised personnel only

✓

JWT tokens are used for authenticated API requests with expiry controls

✓

IP-based fraud detection to identify suspicious login patterns

If you believe your account has been compromised, contact support@afromigo.com immediately.

9. Cookies and tracking

Mobile app

The app does not use browser cookies. We use device identifiers and push notification tokens. You can manage notifications through your device settings.

Website

We use essential cookies (required to function) and analytics cookies (anonymised where possible). We do not use advertising or tracking cookies.

10. Automated decision-making and profiling

Afromigo uses automated processes to calculate compatibility scores between users. This constitutes automated profiling under GDPR. No solely automated decisions are made that produce significant legal effects — all matching is advisory and you retain full control.

You may object to this profiling by contacting privacy@afromigo.com.

11. The AI dating coach feature

The optional AI dating coach feature sends conversation content and selected profile data to Anthropic's Claude API. This is subject to Anthropic's privacy policy. We do not store AI conversation history beyond your current session. Use is entirely optional.

12. Account deletion

Delete your account at any time from Settings → Delete Account. Upon deletion:

✓

Your profile will be immediately removed from the discovery feed

✓

Your personal data will be deleted from our systems within 30 days

✓

Your profile photos will be removed from Cloudinary and AWS S3 within 30 days

✓

Your messages will be deleted from our database within 30 days

✓

Payment records may be retained for up to 7 years for legal and accounting purposes

✓

Safety-related records may be retained for up to 5 years

13. Changes to this policy

When we make material changes we will notify you by email and/or by a prominent notice in the app before the changes take effect.

14. Contact us and complaints

If unsatisfied with our response, you may lodge a complaint with the ICO:

Website: ico.org.uk

Phone: 0303 123 1113

Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF