1. Who is responsible
The data controller is Rebel Creative, trading as Secure Love Guide, Waterkersstraat 35, 8245 LC Lelystad, Nederland, Chamber of Commerce (KvK) 98982052.
For all privacy questions and to exercise your rights: privacy@secureloveguide.com.
2. In short
- You don't need to create an account or give your name.
- We do process sensitive data, such as who you're attracted to and what your desires are. We only do this with your explicit consent.
- We only ask for an email address when you buy a dossier, so we can deliver it.
- The explanation in your free diagnosis and your dossier are written by AI. Neither we nor our AI provider use your data to train AI models.
- We erase your intake answers and screenshots immediately once your dossier has been written.
- We never sell your data, and only use it for advertising with your consent (see §11).
- Unpaid sessions are automatically erased after 30 days, paid ones after 12 months.
- You can permanently delete all your data yourself with one button, or ask us for it.
3. What data we process
| When | Data |
|---|---|
| Visit | The country our hosting provider derives from your IP address, only at the moment of your visit, to automatically choose the right language. We don't store your IP address or country for this. |
| Scan (free) | Your gender, who you're attracted to, what you're looking for, your answers about attachment, dating anxiety, communication and desire (including control and surrender), and the language you use. |
| Profile question (optional) | The text of your dating profile and your own description of your profile photos. |
| Diagnosis | The result we calculate from this: archetype, attachment style, scores and analyses, plus the personal explanation that AI writes for it. |
| Purchase | Your email address, the payment status and a Mollie payment reference. Mollie processes your bank details, not us. |
| In-depth intake | Your description of fantasies and desires, situations in which you feel insecure, chat excerpts and (optionally) up to two screenshots, the desired tone and any additional notes. |
| Dossier | The text of your generated dossier. |
| Consent | When, and for which version of this policy and the terms, you gave consent or agreed. |
| Technical | Technical data needed to run and secure the website, such as your IP address in server logs at our hosting provider. |
4. Special categories of data and explicit consent
Data about your sexual orientation (which can be inferred from your gender and who you're attracted to) and about your sex life (your desires and fantasies) are special categories of personal data (Article 9 GDPR). We may only process them with your explicit consent (Article 9(2)(a) GDPR).
We ask for it at two moments: before the first question of the scan and before you submit the in-depth intake. We record when you gave consent and for which version of this policy.
5. Purposes and legal bases
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Pre-selecting the right language | Country derived from your IP address (not stored), browser language | Legitimate interest: a usable website in your own language (Art. 6(1)(f)) |
| Running the scan, calculating your free diagnosis and explaining it (with AI) | Scan and profile answers | Explicit consent (Art. 9(2)(a)) and performance of the requested service (Art. 6(1)(b)) |
| Selling, processing payment for and delivering the dossier | Email address, payment status, payment reference | Performance of the contract (Art. 6(1)(b)) |
| Writing the dossier with AI | Scan and intake answers, screenshots, diagnosis | Explicit consent (Art. 9(2)(a)) and performance of the contract (Art. 6(1)(b)) |
| Sending the order confirmation and the dossier by email | Email address, dossier | Performance of the contract (Art. 6(1)(b)) |
| Being able to demonstrate consent and acceptance | Time and version of consent/acceptance | Legal obligation (Art. 7(1) GDPR, Art. 6(1)(c)) |
| Accounting and tax obligations | Transaction data (amount, date, reference) | Legal obligation (Art. 6(1)(c)) |
| Security and abuse prevention | Technical data, server logs, a hashed (not directly traceable) form of your IP address to limit the number of free AI analyses | Legitimate interest: a secure, working service (Art. 6(1)(f)) |
| Handling complaints and questions | Your message, email address | Performance of the contract or legitimate interest (Art. 6(1)(b)/(f)) |
We don't send newsletters or marketing emails, and don't use tracking cookies without your consent.
6. AI and profiling
The personal explanation in your free diagnosis is written by an AI language model from Anthropic (Claude). To do so, we send your scan answers (including any profile text and photo description) and the calculated result to Anthropic. We calculate the archetype, attachment style and scores ourselves; the AI only writes the explanation. If that fails, you'll see standard texts.
Your dossier is generated by AI language models from Anthropic (Claude). We use them with our own methodology, instructions and frameworks for this field. To do so, we send your scan and intake answers, the calculated diagnosis and any screenshots to Anthropic. We don't send your name or email address.
We don't use your data to train AI models. Under Anthropic's commercial terms, Anthropic does not use data sent via its API to train its models, and only keeps that data for a limited time for safety and abuse detection.
The diagnosis and the dossier are a form of profiling: we describe characteristics such as your attachment style based on your answers. No decisions with legal effects or similarly significant effects on you are attached to this. There is therefore no automated decision-making within the meaning of Article 22 GDPR. You decide what you do with the result.
7. Who we share data with
We use the following service providers (processors). We have concluded a data processing agreement with each of them. They may only use your data on our behalf.
| Party | Purpose | Location |
|---|---|---|
| Google Ireland Ltd. (Firebase / Google Cloud) | Storing sessions, answers, screenshots and dossiers (Firestore); storing images | EU (Netherlands); Google LLC (US) as parent company, see §8 |
| Anthropic (Claude API) | Writing the explanation of your diagnosis and the dossier | United States, see §8 |
| Mollie B.V. | Processing payments | Netherlands (EU) |
| Resend (Plus Five Five, Inc.) | Sending the order confirmation and the dossier by email | United States, see §8 |
| Vercel Inc. | Hosting the website | EU (Frankfurt); Vercel Inc. (USA) as parent company, see §8 |
For part of the payment data, Mollie is itself a data controller; Mollie's privacy policy also applies to that. We only share data otherwise if a legal obligation or court order requires us to.
8. Transfers outside the European Economic Area
Some processors are based in the United States or are part of a US group. Transfers only take place with appropriate safeguards: an adequacy decision (the EU-US Data Privacy Framework, where the party is certified under it) or Standard Contractual Clauses approved by the European Commission, supplemented by additional measures such as encryption. You can request a copy of these safeguards via privacy@secureloveguide.com.
9. Retention periods
| Data | Retention period |
|---|---|
| Intake answers (fantasies, insecurities, chat excerpts, notes) and screenshots | Deleted immediately once your dossier has been written. If writing fails, no later than 12 months after upload |
| Sessions without payment (scan, diagnosis) | Automatically deleted 30 days after creation |
| Sessions with payment (scan answers, diagnosis, dossier, email address, consents) | Automatically deleted 12 months after creation, so you can download your dossier again |
| Transaction data (amount, date, payment reference) | 7 years in Mollie's records and our accounts (Dutch tax retention obligation, Art. 52 AWR) |
| Email correspondence about questions and complaints | Up to 2 years after handling |
| Counters against abuse of the free AI analysis (hashed IP address, per hour) | Automatically deleted after 2 days |
| Data in your own browser (see §11) | Until you clear it, or until you finish the scan or intake |
Want your data gone sooner? Use the Delete all my data button at the bottom of your diagnosis or dossier page. It erases everything immediately and permanently. You can also ask us by email; we will then erase your data within one month, except what we are legally required to keep.
10. Security
- All connections are encrypted (HTTPS/TLS). Data is stored encrypted, in a data centre in the Netherlands.
- The database cannot be accessed directly from the browser. Only our server has access, with strictly limited keys.
- Your personal page can only be reached via a long, random and unguessable link.
- We don't ask for more data than necessary: no name, no account, no password.
- Staff only have access when it's needed for support, and are bound by confidentiality.
- We have a data breach procedure. In the event of a breach with a high risk to you, we'll inform you as soon as possible, and we report it to the Dutch Data Protection Authority within 72 hours.
Treat the link to your personal page like a password and don't share it with others.
11. Cookies and local storage
Without your consent, we don't use advertising cookies and don't share data for advertising purposes. To make the site work, we always use one functional cookie and store a few pieces of data in your own browser's local storage (localStorage). This is strictly necessary for the service you're using, so we don't ask for separate consent for it:
- the cookie “NEXT_LOCALE” with the language you chose, so you don't have to choose it again (kept for up to 1 year);
- your progress in the scan and a draft of your in-depth intake, so you don't lose anything when reloading. This is cleared as soon as you finish the scan or intake;
- your choices from Step 0 (gender, who you're attracted to, what you're looking for), so you don't have to fill them in again for your next scan;
- your preference for a light or dark theme.
The data in local storage doesn't leave your device until you submit the scan. You can clear it in your browser settings. If you use a shared device, preferably use a private window.
In addition, only with your consent, we use Google Analytics to see how visitors use the site (for example, which pages are visited and via which source someone arrived). This only loads after you click “Accept” in the cookie notice; if you click “Decline”, Google Analytics is not loaded and no analytics cookies are placed. In that case:
- IP addresses are shortened/anonymised by Google before being stored;
- we don't enable Google Analytics advertising features: no remarketing and no personalised ads, and we don't share data with other Google services for advertising purposes;
- analytics data is automatically deleted after 14 months;
- Google may process data on servers outside the EU, including in the US. Appropriate safeguards apply (the EU–US Data Privacy Framework and/or standard contractual clauses).
Also only with your consent, we use the Meta (Facebook/Instagram) Pixel to measure how our ads perform, for example whether someone starts the scan or buys the dossier after clicking our ad. This only loads after you click “Accept” in the cookie notice; if you click “Decline”, the Meta Pixel is not loaded. In that case:
- we use the pixel to measure and improve ad performance (conversion measurement), not to track you across other sites;
- Meta may process data on servers outside the EU, including in the US. Appropriate safeguards apply (the EU–US Data Privacy Framework and/or standard contractual clauses).
You can withdraw or change your consent at any time via “Cookie settings” at the bottom of the site. More on how these parties handle data: Google's privacy policy and Meta's privacy policy.
12. Other people's data
Chat excerpts and screenshots often contain data about other people, such as your date or partner. Make names, phone numbers, profile photos and other identifying details as unrecognisable as possible before uploading anything. We only use this data to write your dossier, and we delete it as soon as the dossier is ready (see §9).
13. Minors
Secure Love Guide is only intended for people aged 18 or over. If we find out that someone under 18 has used the service, we delete the data. Do you suspect this has happened? Let us know via privacy@secureloveguide.com.
14. Your rights
You have the following rights:
- Access: knowing what data we hold about you, and receiving a copy.
- Rectification: having incorrect data corrected.
- Erasure: having your data deleted (the ‘right to be forgotten’).
- Restriction: having the processing temporarily stopped.
- Portability: receiving your data in a common, machine-readable format.
- Objection: to processing based on legitimate interest.
- Withdrawing consent: at any time, without giving a reason.
You can delete your data yourself with the Delete all my data button on your diagnosis or dossier page. For your other rights, or if you no longer have the link, send your request to privacy@secureloveguide.com. Because you don't have an account, we'll ask you to include the link to your personal page and/or the email address used for your order, so we can check that the data is yours. We respond within one month. For complex requests, this period can be extended by two months; we'll let you know if so.
15. Filing a complaint
Not happy with how we handle your data? Let us know first, and we'll look for a solution together. You also always have the right to file a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl), or with the supervisory authority in the EU country where you live.
16. Changes and language
We may update this policy, for example when we engage a new service provider. The date of the current version is shown at the top of this page. For significant changes affecting your consent, we'll ask for your consent again. This policy was drawn up in Dutch and translated; in case of discrepancies, the Dutch text prevails. See also our terms and conditions.