privacy · last updated may 2026

how we handle your data.

the short version: we don't sell or trade your data. ever. it lives on our server in germany, you can delete it any time, and the only thing we share publicly is anonymous, aggregated insights about the community as a whole.

responsible party.

honey lou UG (haftungsbeschränkt)
anzengruberstraße 3, 12043 berlin
geschäftsführer: paul rieck & orhan olgar
email: hi@honeylou.de

hi honey is an experimental side project by a bar in berlin neukölln. we handle your data with care but cannot make the same guarantees a dedicated technology company would.

what we collect & why.

we process the following personal data based on the legal bases indicated.

contract performance · Art. 6(1)(b) GDPR

· email address and password hash — authentication
· profile information (name, age, photos, bio, preferences) — matchmaking
· questionnaire answers — compatibility scoring
· swipe actions — determining mutual matches
· chat messages — communication between matches
· invite code usage — community management

legitimate interest · Art. 6(1)(f) GDPR

· instagram / linkedin / website handle — identity verification by admin to maintain community quality

anonymous insights & marketing.

we may share aggregated, anonymous insights about the community on our social media (instagram, etc.), in marketing materials, and on our website — but never in a way that could identify you.

what we may show in aggregate

· gender distribution across the community
· age range distribution
· attachment style breakdown (secure / anxious / avoidant)
· orientation distribution
· languages spoken
· neighborhoods (only by district, never specific addresses)
· match success patterns by attachment-style pairing
· engagement stats (e.g. average matches per member, share of users who go on a real-life date)
· community size and growth rate

what we never share, ever

· your name or any other identifier
· your photos
· the contents of your messages
· your bio, written facts, or any free-text answer
· your instagram handle, email, or contact info
· any combination of attributes narrow enough to identify you

aggregate buckets always contain at least 20 people before anything is published. when you delete your account, your data is removed from any future aggregate we publish. this processing is based on our legitimate interest (Art. 6(1)(f) GDPR). you can object at any time by emailing us — we will exclude your data from future aggregates.

what we don't do.

we do not sell your data. we do not run ads. we do not track you across the web. we do not share identifiable information with third parties for marketing purposes. we do not use your data for profiling beyond the matching algorithm and the anonymous aggregates above.

data processors.

we share limited data with the following service providers who process data on our behalf under data processing agreements (Auftragsverarbeitung, Art. 28 GDPR).

resend (resend.com, USA)

sending transactional emails (your email address only). transfer to the US is covered by EU standard contractual clauses.

all other data is processed exclusively on our own server in germany.

where your data lives.

your data is stored on a server located in germany. photos are stored on the same server. we use HTTPS encryption in transit and hashed passwords at rest.

your rights.

under the GDPR, you have the right to:

· access your personal data (Art. 15)
· correct inaccurate data (Art. 16) — via profile settings
· delete your data (Art. 17) — via settings or by emailing us
· restrict processing (Art. 18)
· data portability (Art. 20) — request an export by email
· object to processing (Art. 21)
· withdraw consent at any time (Art. 7(3))

to exercise these rights, email hi@honeylou.de. we respond within 30 days.

right to complain.

you have the right to lodge a complaint with the supervisory authority:

berliner beauftragte für datenschutz und informationsfreiheit
friedrichstraße 219, 10969 berlin

data retention.

we keep your data while your account is active. when you delete your account, all personal data (profile, photos, messages, matches, answers) is permanently removed. chat messages in expired matches are deleted automatically after the match period ends.

cookies.

we use a single, strictly necessary session cookie for authentication (Art. 6(1)(b) GDPR). no consent required as it is essential for the service. no tracking cookies, no analytics, no third-party scripts.

changes.

we may update this policy as the project evolves. material changes will be communicated via email. continued use after notification constitutes acceptance.

questions about your data?
hi@honeylou.de