Terms & privacy

The plain version, then the whole thing.

Last updated 19 October 2026

In short

What we hold, in 4 lines

Your answers — used to build rooms. Never sold, and never shown beside your name.
Your face check — a record, not a photo. We keep the result and a reference. Our verification partner processes the camera capture and face template for liveness, age estimation, and duplicate checks.
What happened in your rooms — Rooms are live video. We do not save audio or video recordings. Conversation processing is optional: with your microphone permission, Groq turns your speech into text and OpenAI reads the text, for host prompts and matching. We keep facts, preferences and conversation observations for internal matching. With separate transcript-review permission, administrators can review text from your microphone for up to 7 days to improve analysis quality. Everyone chooses separately. Stop processing, stop review or forget learned data in Settings. We keep measurements for 180 days after the room: how much of a room you spoke for, how often the turn changed, how often people spoke over each other, and when you dropped out and came back.
Your email — to reach you. Nothing else while membership is free.

Your rights over all of it

See it — download a copy of everything in Settings, under What we hold about you.
Correct it — change any answer in Settings.
Take it back — withdraw your face-check consent, or remove your orientation, in Settings.
Delete all of it — in Settings, under Pause or leave. You have 14 days to change your mind. After that your account is erased.
Ask a person — write to us.

The short version of the terms

You must be 18 or over.
One account per person.
Don’t record rooms, and don’t share what happens in them in a way that identifies anyone.
We can remove you for breaking the rules on the Safety page. We never fine you.
Membership is free right now. It will be US$19 a month. You’ll get 30 days’ notice, and nothing begins without you choosing it.
We don’t promise you will meet anyone. We promise to seat you when we can, and to tell you honestly when we can’t.

If anything in this summary disagrees with the full text, tell us — the summary is what people read, so a mismatch is our mistake to fix, not yours to have missed.

Terms

1 · Who we are

PrettyMutual is operated by “Support Wing” EOOD (UIC 208345662), registered at 13 Roza St., Karavelovo 4350, Bulgaria. You can reach a person at hello@prettymutual.com.

2 · Who can use it

You must be 18 or over. One person, one account — enforced by the face check when you join. You may not create an account for anyone else, or hold a second account.

3 · What we provide

Scheduled video rooms of four people, at fixed times. We choose who is in your rooms using the answers you give us, who you have already met or blocked, and whether you came to the rooms you booked. With separate microphone permission, information you share, preferences and repeated conversation observations can also improve matching automatically. These findings are used internally.

We do not promise you will meet anyone, or enjoy any particular room. What we undertake is to seat you when we can, and to tell you honestly when we can’t.

4 · What we ask of you

Your camera stays on for the room. You may mute at any time, and you may leave at any time.
Do not record, photograph, screen-capture or re-transmit any part of a room. This is a ground for immediate removal.
Do not try to contact another member outside prettymutual unless you have both picked each other.
Do not harass, threaten, impersonate, or behave sexually toward anyone in a room.
Attend what you book, or cancel. Cancelling is free up to two hours before.

5 · What happens if you break these

A single report about conduct that is a matter of degree does not, by itself, change anything about your account.
Reports about serious matters — threats, sexual content, a minor, impersonation, recording — alert a person at once, on a single report, and that person may put your account on hold pending review.
Where reports build up from different people about the same conduct, we may warn you, restrict which rooms you can be seated in, or remove your account.
A person makes every decision, and you are told what it is.
We never impose financial penalties. Missing bookings affects seating priority only.

We don’t publish exactly where the lines sit, because a published line is a budget people spend.

6 · Appeals

You can appeal a removal or restriction once. Someone other than the person who made the original decision reviews it. We reply within [timeframe].

7 · Leaving

You can pause or delete your account at any time, in Settings, under Pause or leave.

8 · Cost

Membership is free right now. If that changes you will get at least 30 days’ notice by email and on the site, and nothing begins without you choosing it. We cannot charge a payment method you have not given us.

9 · Liability, governing law and changes

[For counsel: limitation of liability, indemnity, force majeure, governing law, dispute resolution, and how changes to these terms are notified. The liability position for a product that puts strangers on video together is not generic — do not paste a template here.]

Privacy

This privacy policy explains how prettymutual handles personal data on prettymutual.com and its app, including when you sign in with Google.

1 · Who controls your data

“Support Wing” EOOD (UIC 208345662), 13 Roza St., Karavelovo 4350, Bulgaria. Privacy contact: privacy@prettymutual.com. The controller is established in Bulgaria, in the European Union.

2 · What we hold, and why

What	Why	How long
Email and sign-in	Your account, and to reach you	Life of the account
Google sign-in, if you choose it: Google account identifier, email and verification status, name and profile picture URL	To authenticate you and connect you to your account. Your Google name and picture are not shown to other members	Life of the account, including the deletion recovery period described below
First name	So the people in your room know what to call you — the one thing about you shown in a room	Life of the account
Age band and field of work	Seating, and the aggregate line before your rooms (“a few in healthcare”) — never shown beside your name	Life of the account
Time zone — the only location on your account	To show you the right times	Life of the account
Face template held by Didit	One person, one account	the life of your account, including its 14-day deletion recovery window. Final erasure can be delayed by an open safety case or a provider failure that we retry
Camera capture held by Didit	Liveness and age estimation	the life of your account, including its 14-day deletion recovery window. Final erasure can be delayed by an open safety case or a provider failure that we retry
Your days, whether you’re here for romance or friendship, your seating answers	To build your rooms	Life of the account
Orientation	To build romance rooms	Life of the account, with your explicit consent
Faith, political outlook, relationship structure — optional	Only to keep you out of rooms you would not want	Life of the account, with your explicit consent; skippable
Room measurements — how much of a room you spoke for, how often the turn changed, how often people spoke over each other, and when you dropped out and came back	Evidence a person reads when reviewing a report. Never used to seat you	180 days after the room
Who you sat with, when you joined and left, and how much conversation each room gave you	Seating: new faces first, and priority for your next room that day if a room gave you less conversation	Life of the account
Optional conversation observations and reviewed interests	Host prompts and better matching, with separate microphone permission	Life of the account, until forgotten; withdrawn permission removes them from matching
Text from your microphone, for review — only with separate transcript-review permission	So administrators can check and improve the analysis	7 days after it is transcribed, unless you withdraw permission first
Whether you came to the rooms you booked	Seating priority	Life of the account
Your picks and impressions	A mutual pick opens a chat; your impressions tell us how well a room was seated, and a flag changes only who you are seated with next	Life of the account
Chat messages	The chat	For the life of the conversation
Reports and decisions	Safety	3 years after the case closes, or when a ban that came from it ends, if that is later
Warnings, restrictions and bans	Safety	3 years after a warning is given, or a restriction or ban ends. A ban with no end date is kept while it stands
Blocks	So you are never seated together	Permanent, both directions
Product measurement: the pages you view and the site that sent you; a fixed list of events, each with fixed choices, counts or durations; error reports, whatever you choose: what failed, and on which page, without the page’s address details; a random id — in memory before a yes, a 13-month cookie after; once you are signed in and only with your consent, your member id and the notice version you saw; your country	To see where people stop between arriving and their first room, and to fix what breaks	12 months after it is collected
Your cookie choice: which tier you chose, when, where from (the banner, Cookie settings, a browser signal or another device), and which version of the notice you saw	To honour it on every device you sign in on, and to show we asked	Life of the account

We don’t ask for: Your precise location · your contacts · government ID · payment card details · health, income or disability information. You do not have to enter your surname; Google can supply your full name if you choose Google sign-in.

Google sign-in is optional. If you choose it, Google provides your account identifier, email address and email verification status, and basic profile information such as your name and profile picture URL. We request only basic sign-in, email and profile permissions. We do not receive your Google password or request access to Gmail messages, contacts, calendars, Drive files or other Google account content.

We use your Google identifier and email to authenticate you, connect you to your account, protect account security, and send account or booking emails, including email reminders you choose. Supabase, our authentication and database provider, stores the Google details with your sign-in record; Resend delivers the sign-in, account and booking emails. A copy of your sign-in session is stored in your browser so you stay signed in. Our app is hosted by Cloudflare. Access to account data is limited by account permissions and authorised staff access, and communication uses HTTPS encryption.

Your Google name and profile picture are not shown to other members. You choose the first name used in rooms yourself. We do not sell Google account data, use it for advertising or matching, or send it to AI providers to train models. Google processes the sign-in under its own privacy policy.

Google sign-in details stay with your account until it is erased. To request deletion, open Settings, then Pause or leave. Your account closes immediately, with 14 days to change your mind. Final erasure removes the Google sign-in record; an open safety case can delay erasure. A separate scrambled email marker may be retained for the life of a ban. You can also request deletion by writing to the privacy address. Removing access in your Google Account connections stops Google access; it does not itself delete the account or data already held here, or end an existing app session. Sign out in the app separately. Email sign-in remains available.

3 · Your face

When you join, our verification partner processes your camera capture and face template. We keep the outcome, dates, and an opaque reference to the check. We do not store your capture or template in our application. Other members never see them.

The check assesses liveness, estimates whether you are old enough to join, and looks for an existing face enrolment. It does not request identity documents. An uncertain age estimate needs review before you can book. These data are not used to decide who you meet.

The partner keeps these data for the life of your account, including its 14-day deletion recovery window. Final erasure can be delayed by an open safety case or a provider failure that we retry. When your account is erased, we also request erasure of the partner's captures and face templates.

A ban does not preserve face data after final account erasure. A separate scrambled email marker may remain for the life of the ban.

We do not sell it, license it, or profit from it in any way.

We ask for your consent to the face check, and record it, before any capture is taken. Our retention schedule for face data: the camera capture and face template are kept for the life of your account, including its 14-day deletion recovery window. Final erasure can be delayed by an open safety case or a provider failure that we retry; when your account is erased, we ask our verification partner to erase its sessions and the templates it keeps. We never sell or license face data.

4 · What happens in rooms

Rooms are live video. We do not save audio or video recordings. Conversation processing is optional: with your microphone permission, Groq turns your speech into text and OpenAI reads the text, for host prompts and matching. We keep facts, preferences and conversation observations for internal matching. With separate transcript-review permission, administrators can review text from your microphone for up to 7 days to improve analysis quality. Everyone chooses separately. Stop processing, stop review or forget learned data in Settings.

The audio and video of your rooms pass between the people in them through Cloudflare Realtime, a relay. They are encrypted, so the relay passes them on without seeing or hearing them. With your microphone permission, your audio also goes to our servers, which Cloudflare runs, and on to Groq to be turned into text.

We do keep measurements of what happened: how much of a room you spoke for, how often the turn changed, how often people spoke over each other, and when you dropped out and came back. A person reviewing a report can read them, and we delete them 180 days after the room. They are never used to seat you.

Who you sat with, when you joined and left, and how much conversation each room gave you is different. It stays with your account, and seating uses it (section 5).

5 · How we decide who you meet

Seating is automated. We use the answers you gave us — including your orientation and any optional answers about faith, politics or relationship structure — together with who you have already met or blocked, whether you came to the rooms you booked, and how much conversation your rooms gave you. We seat you with new faces first, and if a room gave you less conversation, you get priority for your next room that day. With separate microphone permission, information you share, preferences and repeated conversation observations can also improve matching automatically. These findings are used internally.

A person will explain any seating decision if you ask. Write to privacy@prettymutual.com.

6 · Reports and moderation

When someone reports you, we keep the report and our decision. We never tell you who reported you, what they wrote, or how many people have.

We delete reports and decisions 3 years after the case closes, or when a ban that came from it ends, if that is later. We delete warnings, restrictions and bans 3 years after a warning is given, or a restriction or ban ends. A ban with no end date is kept while it stands. If your account is deleted while a ban stands, the scrambled email marker described above stays until the ban ends, or for good if it has no end date.

7 · Your rights

You can see, correct, delete, restrict, take a copy of and object to what we hold, and withdraw your consent for the optional answers at any time. For any of them, write to the privacy address.

If you’re unhappy with how we’ve handled your data, you can complain to the Commission for Personal Data Protection (Bulgaria), cpdp.bg.

8 · Who else sees it

Which companies see your data depends on what you use. Unless a group says otherwise, each one handles it for us, only to do the job listed.

Always

Supabase runs our database and sign-in. It holds your account and everything listed in section 2 that we keep. Location: Sydney, Australia.
Cloudflare hosts and delivers this site and the app, and runs each live room on its servers, keeping the room’s state there for a short time. It sees your IP address, your browser’s details and what the site and the app send and receive, including your microphone’s audio on its way to be turned into text, when you allow it.
Cloudflare Realtime relays the audio and video of your rooms. They are encrypted, so the relay passes them on without seeing or hearing them. It sees your IP address.
Resend sends sign-in links and codes, our booking emails and the email reminders you choose. It receives your email address and each of those emails.
PostHog (EU) measures how the site and the app are used. It receives the product measurement in section 2, error reports included, whatever you choose, and, only with a yes, recordings of how this public site is used, never the app. It also sees your IP address and your browser’s details.

When you join

Didit runs the face check. It receives your camera capture and face template, as section 3 says.

With your microphone permission

Groq turns the speech from your microphone into text. It receives your microphone’s audio. Its zero data retention setting is on for our account.
OpenAI reads that text for facts, preferences, how each person takes part in the conversation, and a question for the host. It receives the text as it was spoken, names included, with a stand-in for each person in place of their account id. We ask it not to store our requests, but we have no written promise that it keeps nothing.

When you turn reminders on

The company that makes your browser runs its push service, for your browser and not for us. We only hand it each reminder.

Your browser’s push service carries each reminder to your device. Each reminder is encrypted, so it cannot read it.

If you sign in with Google

Google does not work for us here: it is a controller in its own right, under its own privacy policy.

Google signs you in, if you choose it. It gives us the details under “Sign in with Google” above.

[international transfer mechanism]

The measurement runs in your browser and reaches the processor directly, so it sees your IP address and your browser’s details, as any site you load does. We don’t use its automatic capture. It receives the events listed under product measurement in section 2, and error reports, whatever you choose: what failed, and on which page, without the page’s address details. Only with a yes does it also record how this public site is used, never the app.

We don’t sell personal data, and we don’t run advertising.

9 · Security

HTTPS protects data in transit. Account data is protected by authentication and access permissions; staff access is restricted by role. Sign-in sessions are stored in your browser, so use trusted devices and sign out on shared ones.

Cookies

There are two tiers, and you choose between them in the banner the first time you visit, or any time in Cookie settings. One choice covers the site and the app.

Essential — always on

What the product needs to do what you asked for, and the record of your asking. These have no switch, because the product cannot do what you asked without them.

Each one is in the list below, under what it is for.

Analytics — off until you say yes

It tells us where people stop between arriving and their first room. With a yes, a random id is kept in the ph_pm_aid cookie for 13 months, so the site and the app count as one visit; once you sign in, it is linked to your member id. The measurement runs in your browser and sends to our processor, which therefore sees your IP address and your browser’s details.

With a yes, we also record how this public site is used — pointer movement and clicks on these pages, so we can see where a page confuses people. Never on the app: once you’re signed in, nothing on your screen is recorded.

Two counts, for everyone, whatever you choose

Two things are counted for every visit: a page viewed, and a “Take a seat” pressed — before you choose, after Essentials only, and when your browser sends a privacy signal. They stay anonymous: no id is stored on your device before a yes, nobody is identified, and nothing on your screen is recorded. Your IP address reaches our processor as part of making the request, as it does for any page you load, and is not used to identify you. We count them because we need to know whether the page works at all, and it asks nothing of you — our legitimate interest.

If something breaks, an error report is sent too, whatever you choose: what failed, and on which page, without the page’s address details. Before a yes, nothing is stored on your device for it.

Browser signals

If your browser sends Global Privacy Control or Do Not Track, we treat it as Essentials only without asking. The two anonymous counts above still run. You can change it in Cookie settings.

How long a choice is kept

Your choice is kept for 12 months after Accept all and 6 months after Essentials only; then we ask again. Withdrawing a yes deletes the analytics cookie. Once you sign in, your choice is also kept with your account, so a device you sign in on later knows it; that record is listed under Privacy.

Everything we keep on your device

What it’s for	Stored as	How long
Your choice
Your cookie choice	`pm_consent`, a cookie, on the site and the app	12 months after Accept all; 6 months after Essentials only
Being signed in
Your sign-in session	`sb-<project>-auth-token`, browser storage, on the app	Until you sign out
The page to bring you back to after Google sign-in	`pm_google_return_path`, browser storage for this tab, on the app	Until you are back, or the tab closes
An invitation you opened, carried through sign-in	`parlour.invitation`, browser storage, on the app	7 days after you open it, or sooner once it is used
Your answers in progress
Your questionnaire answers, before you send them	`parlour:onboarding:<pack>:<section>`, browser storage for this tab, on the app	Until you send the section, sign out, or close the tab
Where you were headed when sign-up began	`parlour:onboarding:intended`, browser storage for this tab, on the app	Until you get there, or the tab closes
That you have read the community rules	`parlour:onboarding:rules`, browser storage for this tab, on the app	Until the tab closes
Answers held back until you agree to how they are used	`parlour:onboarding:held-here-for`, browser storage for this tab, on the app	Until you agree, sign out, or close the tab
Room and draft state on your device
When this device first saw each room, so the three below can be cleared	`parlour:rooms:seen`, browser storage, on the app	30 days after the room, or sooner when you sign out
Your picks after a room, before you send them	`parlour:picks:<room>`, browser storage, on the app	30 days after the room, or sooner once it is sent or you sign out
A report you started, before you send it	`parlour:report:<room>`, browser storage, on the app	30 days after the room, or sooner once it is sent or you sign out
Who was in a room, so a report can name them	`parlour:people:<room>`, browser storage, on the app	30 days after the room, or sooner when you sign out
A game answer still on its way to the room	`parlour:game:<room>`, browser storage for this tab, on the app	Until the room has it, you sign out, or the tab closes
The room you were taken out of, so a review can offer its report	`parlour:removed-from`, browser storage, on the app	30 days after you were taken out, or sooner when the review ends or you sign out
Which chat lines this device has shown you	`parlour:chats:seen`, browser storage, on the app	30 days after this device last showed you each chat, or sooner when the chat is gone or you sign out
That you answered this week’s check-in here	`parlour.week.kept.<week>`, browser storage, on the app	14 days after the week begins, or sooner when you sign out
Your devices
The camera and microphone you chose	`parlour:devices`, browser storage, on the app	Until you choose others, or clear this site’s data
That you checked your camera and microphone today	`parlour.foyer.entered.<day>`, browser storage for this tab, on the app	Until the tab closes
Reminders
The small script that shows a reminder when one arrives	`/sw.js`, a service worker, on the app	Until you clear this site’s data
Where your browser receives our reminders	a push subscription, held by your browser’s push service, on the app	Until you turn push off on this browser
That you turned push off on this browser	`parlour:push:off`, browser storage, on the app	Until you turn it back on here
Staff only
Whether the staff tools’ sidebar is folded	`parlour:ops:sidebar-collapsed`, browser storage, on the app	Until it is changed
Third parties you may meet
Signing in with Google, on their pages	Google, and our sign-in service (Supabase), their own storage	Under their own notices
The face check, in the provider’s own frame	Didit’s own storage, in its frame on the app	Under its own notice
Analytics, only after a yes
A random id, so the site and the app count as one visit	`ph_pm_aid`, a cookie, on the site and the app	13 months after your last visit, or until you take back your yes
The same count’s notes for this tab	`ph_pm_aid<…>`, browser storage for this tab, on the site and the app	Until the tab closes, or you take back your yes
A recording of this site held for a moment before it is sent	`ph_replay_pending_buffer_<…>`, browser storage for this tab, on the site	Until it is sent, the tab closes, or you take back your yes

That is the complete list. Nothing else from us is kept on your device.

Cookie settings is in every page’s footer.

Something here unclear?

Ask us. If a term needs a lawyer to understand, it’s badly written and we’d rather fix it.