A little openness. Clear boundaries.
Your privacy at Aloud.
Dating carries real physical risk, so privacy here is an architecture decision rather than a page of promises. Most of what follows is enforced by the database itself — not by our code remembering to check.
Contact Aloud
Effective October 18, 2026. Quentin Mayo operates Aloud and is responsible for the personal information described here. For privacy requests, account deletion, support, or safety reports, email aloudlove.support@programmingsecurely.com. You can also report or block members inside the app. Never send your password or payment-card information by email.
Your location stays at city level
We do not collect or store your device’s GPS coordinates. You pick a city, and we store a reference to that city. Cities have coordinates, because a city’s location is a public fact; people do not.
Distance between two people is worked out between their cities. If our database were ever read by someone who shouldn’t, they would learn that you are in Dallas. They would not learn where you sleep.
If you use “use my location”, your device’s coordinates are compared against the city list on your device and then discarded. They are never sent to us. Matching does not reveal an exact location.
Explore cities, not people’s exact locations
Nearby and pen-pal searches use home cities. Browsing another area does not change your home city. Map pins mark public city centers; counts include only published introductions you are eligible to see.
The optional map loads from Mapbox when you open it. Mapbox receives your IP address and map requests for the area you view, but we do not send your device coordinates or profile details to Mapbox. You can use the city list without opening the map.
You can start with a private guest draft
The public preview contains illustrative examples, not real members. A guest session lets you save your own draft and city preference. Real-member discovery, publication, likes, and messaging require a verified email address.
Your draft is stored on our server and belongs to your guest account. Verify before signing out, clearing app data, or switching devices to keep access. Verification preserves the same account and draft. You can delete a guest account without creating a password.
Email verification proves access to an inbox; it does not verify a person’s identity. Guest drafts are not merged into a different existing account.
Your personal space
Your journal, compass, voice notes, and small steps are not shared with other members. Authorized operators may access stored information when necessary to maintain the service, investigate a specific safety or security issue, fulfill your requests, or comply with law. Data is not end-to-end encrypted. They are separate from dating profile answers and cannot be shared through discovery or answer links. You can use these tools without a dating profile, download your writing, and permanently delete journal entries and recordings.
Personal voice recordings are stored privately and played through links that expire after sixty seconds. Your writing and recordings are not sent to AI services or used for advertising. Editing an entry replaces its words; revisiting creates a separate entry so you can compare both.
Site usage statistics
We use a privately hosted Umami service to measure page visits, referring sites, language, screen size, and browser information. The analytics request can include an IP address. We exclude URL query strings, fragments, custom event data, and account identifiers from the data we forward. Analytics do not receive the contents of your journal, recordings, answers, or messages. Page paths may still indicate which features you use.
Error diagnostics
We use privately hosted Bugsink error reporting through the Sentry SDK to find and repair technical failures. Error reports can include an error message, stack trace, page path, browser or device information, and technical context. Our configuration removes user objects, request headers, cookies, request bodies, URL query strings, and breadcrumbs before sending reports. Tracing and session replay are disabled. Error messages can still contain information supplied by the failing code, so these controls do not make every diagnostic anonymous.
Support requests and optional beta signup
The Support / Feature Request form sends what you write and any contact email you provide to our Programming Securely support service. It also includes the page or screen, app platform and available version/build, operating-system information, language, timezone, and viewport size. When you are signed in, your session is used to associate the request with your account. Please leave private journal entries, recordings, passwords, and payment details out of a support request.
If you choose Become a beta tester, our Programming Securely beta service records your email, the projects you choose, and your signup and consent details so we can manage the testing you requested. Signing up for one project does not enroll you in every project. Contact support to change your preferences or ask us to remove a support or beta-signup record; deleting an Aloud account does not automatically remove records held by the separate support and beta services.
Free membership and optional sponsorships
Matching, messaging, verification, blocking, reporting, and account deletion are free. Clearly labelled sponsorships may appear in discovery. Premium access removes those placements when active.
Google AdSense may show one manual banner on our public Everyday ideas page after approval and consent setup. Google may process device and advertising data under its privacy policy; applicable privacy and cookie choices are available there. Google ad code is not loaded in your personal tools or on member profiles. We request non-personalized ads and do not send private answers, messages, or exact location to sponsors. Opening a sponsor’s link visits that sponsor’s website, which has its own privacy practices. New paid signups are paused during beta. We’ll share any future paid-plan details before asking you to subscribe. For existing web subscriptions, Stripe processes payments and stores your billing information. Stripe receives billing details, not your journal or recordings. Manage or cancel renewal from Membership. Deleting your Aloud account cancels its web subscriptions before removing your account.
Your answers are private until you share them
Answers are yours alone by default. Sharing is per answer and per person — you name someone, and only that person can read it. There is no “share with everyone” for these private answers.
Revoking works: once a share is removed, no new link to that recording can be created. A playback link already issued keeps working until it expires, which is at most sixty seconds. That short window is the guarantee, which is why it is so short.
Sharing the words never shares the recording. Voice is a separate choice each time, because a recording of your voice identifies you far beyond this app.
Photos, recordings and pictures you send
All three live in private storage. Nothing is served from a public URL — views use expiring signed links. Your main picture is visible to people you have matched with. Separately, you can submit one chosen photo, a prompt answer, and an optional voice intro for moderation before publication in discovery. Eligible people can see that introduction before a match. Your other photos and private answers are not published by this choice.
You can hide your introduction from You. Hiding it or blocking a person prevents new discovery media links; links already issued can work for up to one minute. Files already downloaded or recorded by a recipient cannot be recalled.
You decide who you're shown to
Rather than filtering other people, you declare who you are for — what you are here for, gender, an age range, distance, kids. Both people’s choices have to agree before either appears to the other.
You can also mark your exact date of birth and what you do as private. Switching those off removes them from other people’s reach entirely — the data is not sent to their browser and hidden; it is not sent. Your age is always shown.
Blocking, and reports
Blocking is enforced by the database in both directions. A blocked person disappears: their answers, their recordings, your conversation, and the messages already in it. Nobody can message you unless you have both liked each other.
Reports are one-way. The person you report cannot discover that you reported them — a report someone can see is a report people are afraid to file.
Advertising choices and mobile subscriptions
The Android app may show one Google AdMob banner on Everyday ideas. It does not show fullscreen, app-open, rewarded, or video ads. Paid members do not receive banner ads. The mobile banner requests non-personalized ads; private writing, recordings, profile answers, and exact coordinates are not supplied to AdMob. Google may process IP address, device information, ad interactions, and diagnostics for delivery, measurement, and fraud prevention. The app does not request access to your advertising ID.
Where required, Google presents privacy choices before requesting an ad. You can reopen mobile ad privacy choices beside the banner. The website offers privacy and cookie choices on Everyday ideas. Rejecting advertising consent does not restrict your personal tools. Google may use cookies or local storage as described in its privacy policy.
Android purchases are processed by Google Play. Aloud verifies purchase receipts and a pseudonymous account identifier to activate ad-free access; it does not receive your payment-card details. Manage or cancel Play subscriptions from Membership. Account deletion stops future renewal before removing your account. Payment processors may retain transaction records under their own policies.
We do not send your journal to advertisers or sell it. There are no read receipts or last-seen indicators. Authentication uses cookies to keep you signed in; optional ad services have separate privacy choices.
Who processes your data
The site, database, authentication, and file storage run on our own servers using Supabase software. Account emails are delivered through Amazon Simple Email Service. If the bot check is enabled, Cloudflare sees the challenge but not your account.
Getting your data, or deleting it
Deleting your account removes your profile, answers, recordings, photos, messages and likes from the active service. Reports linked to that profile are also removed by the current deletion process.
Delete your account from My space, under Account, or from your dating profile settings. You will need your current password and must confirm permanent deletion.
Information we use and why
We collect your account email and authentication information to sign you in and secure your account. If you create a dating profile, we collect the name, date of birth, gender, city, preferences, photographs, recordings, and optional details you provide. Preferences or answers can reveal sensitive information, such as sexual orientation, beliefs, or health information. Providing optional sensitive details is your choice. We also store your messages, private writing, activity in personal tools, blocks, and reports to provide those features.
We process account and feature data to provide the service you request. Security, abuse prevention, limited service analytics, and handling support requests serve our legitimate interests in operating a safe service. Where law requires consent for optional sensitive information or advertising technology, we rely on that consent. We also process information when necessary to comply with legal obligations. You can remove optional information, change sharing choices, or withdraw optional consent without losing access to core tools.
Retention and security
We retain account information and saved content while your account is active and the information is needed to provide the features you use. You can delete individual journal entries or your account. Deleted information may remain in restricted backup copies until those copies are replaced or no longer needed for recovery; deletion from the active service is not an instant purge of every backup. We may retain limited records separately where required by law or necessary for a specific security investigation or legal claim, and remove them when that purpose ends. Payment providers apply their own legal retention requirements.
We use encrypted connections, private storage, access controls, and expiring media links. Some profile photo links last up to ten minutes; discovery and shared voice links last up to sixty seconds. No security measure is an absolute guarantee, and a recipient can copy content you share. Moderators see submitted introductions and safety reports; personal tools are not part of the moderation console.
Your choices and rights
You can correct account and profile information, change visibility, export personal writing from My space → Account, and delete your account. Contact support to request access to other personal information, correction, deletion, restriction, objection to processing, or a portable copy, where these rights apply. We verify ownership before disclosing or changing account data. You may also complain to your local data protection authority. We do not penalize you for exercising applicable privacy rights.
We do not sell your private writing, messages, or recordings. Advertising choices, when ads are enabled, are separate from the use of core tools. You may reject optional advertising consent. The current iOS release has no active third-party ads or purchase checkout.
Providers and international processing
Hosting, email, security, map, advertising, and payment providers receive the information needed for the functions described above. Your information may be processed in the United States and other places where these services operate, whose laws may differ from yours. We use applicable contractual and legal safeguards where required. We may disclose information in response to valid legal demands or to protect users against serious harm.
Adults only and notice changes
Aloud is for adults 18 and older. If you believe a minor has an account, report it in the app or email support so we can investigate and remove the account and associated information as appropriate. The operator also handles child-safety reports. Do not send suspected illegal images.
We update this notice when our practices change, revise its effective date, and provide additional notice for material changes when required. Read our terms and community rules or visit support for help.