Last updated October 28, 2026

BeLov is built around your psychological data. We treat it as sensitive and use it only to match you with compatible partners and to power the private guidance Sage provides to you. BeLov is for people aged 18 or older; we do not knowingly collect data from anyone under 18.

Who we are and what this covers

BeLov is operated by The Narrow Way Group LLC, a Texas limited liability company ("BeLov", "we", "us"). This policy covers the BeLov mobile app and the BeLov website. On the website you can take the free romantic-fingerprint assessment; accounts, profiles, matching, messages, calls, subscriptions and Sage are in the mobile app, and some of them are optional, paid or not yet available to everyone. This policy describes the data a feature uses if you choose to use it.

The Narrow Way Group LLC is the business responsible for your data (the "controller"). Contact us at privacy@getbelov.com for privacy questions and requests, or support@getbelov.com for anything else.

The free assessment on our website

You can take the romantic-fingerprint assessment on getbelov.com without creating an account. Here is what happens to your data:

Before you start, we ask whether you are 18 or older. If you say no, you are sent away and nothing is stored. If you say yes and agree to our Terms, this policy and the use of your answers, we create an anonymous session and store that you confirmed you are 18 or older (with the time), your answers and the scores derived from them. We ask for your date of birth later, if you create a full account in the app. We record your consents with the time, policy version, IP address and browser type. If you answer a first question on our home page, that answer stays in your browser and is stored, as your answer to that question, only after you agree; otherwise it is discarded when you close the tab.
Optional step counts. Only if you turn on "count which steps I finish" (off unless you choose it) do we record which steps you complete, never your answers.
If you don't save, we delete your answers, scores and session 30 days after your last visit. We keep only the record of your consents (with IP address and browser type removed), as described under "Data retention".
Continue on another device (optional). If you ask us to "email me a link to continue", we use the email address you type only to send that one email, then discard it: we don't store it with your answers, it doesn't create an account and it doesn't sign you up for anything (our email provider keeps a delivery log). The link works once, for 7 days. Opening it in another browser asks you to confirm your age and consent there, then copies your answers so far into that browser's session. The answers in the first browser stay there and are deleted 30 days after your last visit, like any unsaved session.
If you save with your first name and email, your session becomes a BeLov account. Your fingerprint is kept until you delete the account, whether or not you ever install the app, so it is ready when matching opens near you. No one is matched with you until you set up a profile in the app: a saved fingerprint is used for matching only after you do. You can delete it at any time in the app (Settings → Account) or by emailing privacy@getbelov.com.

Emails and your marketing choices

Service emails: sign-in codes, the link that confirms your save, the link to continue the assessment on another device when you ask for it, and account messages such as a deletion confirmation. We send these because you asked for them or because they are needed to run your account.
Your results by email: only if you tick "email me my results" when you save.
Launch news and app invite: only if you turn on "Send me BeLov news and an app invite when matching opens near me". It is off unless you choose it, separate from every other choice, and not required to save or to use BeLov. It covers announcements about BeLov, including when it opens near you, and your invitation to the app. If you turn it on, you can also tell us your city (optional). We use the city only to tell you when BeLov opens there and never show it on a profile. You can type your city or tap "Use my current location": your device asks your permission, then we send the coordinates once to a reverse-geocoding service (BigDataCloud) to turn them into a city name for you to confirm or edit. We do not store or log the coordinates, only the city you confirm. We send no other promotional email and never share your email for anyone else's marketing.
Founding lists: giving a city puts you on that city's founding list, which decides the order of the first app invites there. Nothing on it is paid. Your place depends on when you joined that list, and moves earlier (up to 5 times) for each friend who saves their own fingerprint from a link you shared. To keep this fair we compare a scrambled code made from internet addresses (never the address itself): only one friend per network counts, and not one from the network you joined from. You see only your own city, the number of people on its list once it reaches 25, and a rough "first X%" — never who else is on it, your exact place, or which friends counted. Changing your city starts a new place on the new list; withdrawing marketing consent takes you off the list.
Unsubscribing: every launch or news email includes an unsubscribe link, and you can also withdraw at any time by emailing privacy@getbelov.com. When you withdraw, we stop sending and delete the city you gave us. Service emails continue while you have an account.
Proof of your choice: we keep a record of each marketing opt-in and opt-out (the choice, its time and wording version, and the IP address and browser type) to show what you agreed to. It is kept for 7 years. If your account is deleted, we remove the IP address and browser type from it.

You can create a share link only after you save, and only by choosing to. You pick which result cards it shows (from 1 card to your whole fingerprint). Before the link is made we tell you if any card you picked covers a sensitive topic.
A share link shows your first name, the cards you picked, a portrait drawn from those cards and your fingerprint picture. It never shows your answers, scores, email or anything else about you.
Anyone who has the link can open it without signing in. Share pages are hidden from search engines, and we send nothing to the people you share with and store none of their contact details.
A link expires after 180 days. You can end it earlier with "Stop sharing", and it stops working at once. We delete revoked and expired links from our systems within a day, and all of your links when you delete your account.
"Guess my fingerprint" links let a friend guess your results. Your friend's guesses are saved only if they choose, with a first name they type. They are not linked to the friend's own account, and they are deleted with the link.
If someone starts the test from your link, we record that they came from it. You never see who opened your link.
If that person later saves their own fingerprint, it can move you up your city's founding list (see "Founding lists" above). Neither of you is told about the other: you are not told who saved or how many did, and they are not told about your list.
The general "invite a friend" link holds no data about you.
Once you finish the test, you can make an image of your results to save or post yourself, before or after you save: your fingerprint picture and portrait (with your first name if you saved), or one line you choose from an everyday result card. We make it only when you ask, and we do not store or post it. Once you share it, it is outside our control.

What we collect and why

Account details (email address, phone number if you verify it, date of birth): to create and secure your account, confirm you are 18 or older, and prevent fraud and repeat abuse.
Profile content (name, bio, prompts, photos, video and voice clips you add): to show your profile to other members and to run matching.
Assessment answers (Big Five, attachment, relationship behavior, connection style, values, lifestyle) and the scores derived from them: to compute compatibility and to generate your private insights. Your scores are never shown to other members as raw values.
Messages you send in BeLov: to deliver them, and, if you have agreed to AI features, to power message coaching for you.
Approximate location or ZIP code, only if you choose to provide it: to find matches near you. Photo location metadata (EXIF/GPS) is removed from uploaded photos and is not used.
Selfie and face-verification data, only if you choose to verify: see "Face verification (biometric data)" below.
Purchase status (whether you have an active subscription): to unlock paid features. We do not receive your payment card details.
Device and push token: to deliver notifications you have allowed.
Crash diagnostics: to find and fix bugs. Personal data is scrubbed before reports are sent.
Anonymous page counts on our web quiz: we count how many times each step of the free assessment is opened per day (and which campaign link or headline version it came from). These counts contain no cookies, identifiers, IP addresses or device information and cannot be linked to you; we count them on our own servers with no third-party tool, and keep them for 13 months.
Which link brought you: when you start the free assessment, we save the name of the campaign link you came from (for example the ad) on your assessment profile. We use it only to see which links lead people to finish the assessment, not to advertise to you or to identify you. It is deleted with your profile.
Website visit statistics on our public pages (not on the free assessment pages): we use Vercel Web Analytics to see which pages are visited, from which referrer, country, browser and device type. It sets no cookies and we do not use it to identify you or for advertising.
Safety and usage records (reports, blocks, moderation decisions, consent history): to enforce our Terms and keep members safe.

We never sell your data and never use it for advertising.

Who can see it

You. Always.
Other BeLov members see only the public parts of your profile (name, age, photos, prompts, city).
People you send a share link to see only what that link shows (see "Share links").
Our service providers, listed below, only to the extent needed to run the service.
Authorities or others when the law requires it, or to protect someone's safety.

Service providers (processors)

We share data with the following providers only for the purposes stated. They process it to provide their service to us, under their service and data-processing terms, and we do not allow them to use it for advertising. Apple and Google also run their own independent services and handle data they receive from you directly under their own privacy policies.

OpenAI: AI coaching and insights, and content moderation (see "AI features").
Amazon Web Services (Rekognition): comparing your verification selfie to your profile photos.
Supabase: sign-in, database, file storage and realtime messaging.
Vercel: hosting of our servers and website.
Twilio: sending SMS codes to verify your phone number.
Daily: voice and video calls between matched members. We do not record call content.
RevenueCat and Apple: subscriptions and purchase status.
Sentry: crash reports, with personal data scrubbed.
Firebase Cloud Messaging (Google): delivering push notifications.
Resend: sending transactional email such as sign-in and account messages.
BigDataCloud: turning your device's coordinates into a city name, only when you tap "Use my current location" on the launch-city question. The request comes from our server, so it does not receive your IP address, and nothing is kept.

AI features

Sage and some other features use OpenAI's API. Only with your consent (asked before you first use an AI feature), we send OpenAI the specific information needed for that feature: assessment results, profile text (bio and prompts), and the messages you choose to send to Sage or that a coaching feature needs to read. We send limited, purpose-specific inputs rather than your whole account. Under OpenAI's API policy, data sent through the API is not used to train its models by default; OpenAI may keep API data for a limited period (currently up to 30 days) for abuse monitoring. Text shown to you by AI is checked by a safety filter, and some messages are screened by automated moderation, including for signs of crisis or abuse. When automated screening of a message you send detects possible crisis, we show you support resources such as a crisis helpline. We record only that this happened (a category and a technical code, never the message), our safety team can see that record, and we do not contact authorities because of it.

Declining AI processing is a real choice: you can still use BeLov without the AI features that depend on it.

Face verification (biometric data)

Photo verification is optional. Before the camera opens, we ask for your consent on its own screen, separate from our Terms and this policy. We record that consent, and without it no selfie is taken. If you choose it, we take your selfie and use AWS Rekognition to compare it with your profile photos and confirm it is you. The selfie and the comparison result are used only for verification and fraud prevention. We do not sell them, use them for advertising, or use them to identify you anywhere else. If the comparison is clear, the selfie is discarded immediately. If it needs a human check or you want to appeal, we keep it for that review only and delete it within 30 days. We keep only a record that verification took place and its outcome (verified, rejected or sent for review), for as long as your account exists. We do not keep the numeric match score. Our biometric retention and destruction rule: we permanently destroy a selfie when the purpose of collecting it is met (the comparison is done, or the review or appeal is closed), and in every case no later than 30 days after we collect it. We never keep face templates or face geometry of our own. We do not sell, lease or trade biometric data. You can limit the use of this sensitive data in Settings → Privacy & Data, in which case no selfie is taken or processed.

Data retention

Profile, assessment answers, derived scores and AI insights: kept while your account is active, deleted when you delete your account.
Messages: kept until the conversation or your account is deleted.
Verification selfies: discarded immediately when the match is clear; kept only for review or appeal otherwise, deleted within 30 days.
AI coaching drafts: 24 hours. Behavioral signals and notification logs: 90 days. Weekly readiness history: last 52 entries.
Crisis-detection flags (no message content): 1 year, or until account deletion.
Device tokens: removed when inactive for 90 days.
Free assessment that is never saved: answers, scores and session deleted 30 days after the last visit. Saved fingerprints: kept until you delete your account.
Share links: until they expire (180 days) or you stop sharing, then deleted within a day.
Launch city and your founding-list place: until you withdraw marketing consent, remove the city or delete your account. Your place is worked out when you look at it; it is not stored.
Safety and legal records (moderation decisions, audit logs, subscription event logs): at least 3 years. Records of your consents: 7 years, even after account deletion.
Anything else: kept while your account is active and deleted when you delete it, except where a legal or safety hold applies (for example, an active ban, or a legal obligation to preserve records) or where a minimal record is needed to stop banned users returning.

When you delete your account (Settings → Account, or by emailing privacy@getbelov.com), deletion happens in two stages:

Immediately, when you confirm: you are signed out everywhere, your profile disappears from BeLov, and your account, fingerprint, photos and the other data listed above are permanently deleted from our live systems. This cannot be undone, and your email can be used again straight away.
Afterwards, automatically: copies in our providers' encrypted backups are not changed by hand. They expire on the providers' normal schedule and are gone within 6 months. Until then they are used only to restore service after a failure.

We keep only the safety, legal and consent records listed above. If a legal or safety hold applies (for example, an open safety report about the account), we pause the deletion, tell you, and complete it or contact you within 30 days.

Your controls and withdrawing consent

Edit or delete profile content from Settings → Edit Profile.
Pause matching or go incognito from Settings.
Withdraw AI consent or reset what Sage has inferred from Settings → My AI Profile, or email privacy@getbelov.com. Withdrawing stops further sending of your data to OpenAI.
Limit the use of sensitive data (including face verification) in Settings → Privacy & Data.
Stop launch and news emails with the unsubscribe link in any of them, or by emailing privacy@getbelov.com.
Turn off notifications in your device settings.
Export your data from Settings, or by emailing privacy@getbelov.com.
Delete your account permanently from Settings → Account.

Do Not Sell or Share My Personal Information

We do not sell your personal information for money, and we do not share it with third parties for their own advertising or marketing purposes. This holds for every category of data we collect, including the psychological-assessment responses, profile content, conversations with Sage, and app-usage telemetry described above.

California residents have the right to opt out of the sale or sharing of personal information under the California Consumer Privacy Act (CCPA / CPRA). Because BeLov does not sell or share personal information in the first place, there is nothing to opt out of today — but if that ever changes, an opt-out control will appear in Settings and a clear notice will be given here. To exercise any other CCPA right (access, deletion, correction, portability), email privacy@getbelov.com or use the Export my data and Manage account controls in Settings.

Where we operate, and visitors outside the US

BeLov is run from the United States and is designed for people in the US. Matching is planned for the US only. Our servers and main providers store data in the United States. If you use BeLov from another country, your data is transferred to and processed in the US, where the law may protect it differently. Where the law requires it, we rely on our providers' data-processing terms, including standard contractual clauses.

If you are in the European Economic Area or the UK, GDPR / UK-GDPR applies. The Narrow Way Group LLC is the controller. We rely on these legal bases:

Your explicit consent: assessment answers and scores, AI features, face verification, optional step counts, and launch and news emails. You can withdraw at any time.
Performing our contract with you: your account, profile, matching, messages and subscriptions.
Our legitimate interests: security, fraud prevention, member safety, anonymous page counts and crash diagnostics, balanced against your rights.
Legal obligations: for example, keeping records required by law.

Your rights are listed under "Your rights" below. You can also complain to your local data protection authority.

Your rights

Depending on where you live, you may have the right to access, correct, delete and receive a copy of your personal information, to object to or restrict some processing, to withdraw consent at any time (withdrawal does not undo processing already done), and to opt out of the sale or sharing of personal information (we do neither). Use the controls above, or email privacy@getbelov.com. We may need to confirm it is you, and we answer within 45 days (we may extend once by 45 more days and tell you why). If we decline a request you can reply to ask us to reconsider it, and you can complain to your local data protection authority.

Washington residents and others covered by consumer health data laws: see our Consumer Health Data Privacy Policy for the health-related data we handle (face verification, crisis flags, wellbeing-related assessment results), your consent choices and your rights.

Automated decisions

Compatibility scores decide which members we suggest to you. They do not decide anything with legal or similarly significant effect. A verification that is not clearly approved goes to human review. Repeated reports against an account can suspend it automatically until our safety team reviews it, and you can contact privacy@getbelov.com to ask for that decision to be reviewed.

Security

We protect your data with encryption in transit, access rules that restrict each member's data to that member, private storage for uploaded photos (photos are checked and stripped of location data before anyone else can see them), and limited staff access. No system is completely secure. If a breach affects you, we will notify you and the authorities as the law requires.

Contact

The Narrow Way Group LLC (BeLov)
539 W. Commerce St #7395, Dallas, TX 75208
Privacy: privacy@getbelov.com
Support: support@getbelov.com