Privacy Policy

How Triploop UK Limited (ICO registration ZC267009) collects, uses and protects personal data across the AeroAmour app and aeroamour.com. Effective 7 November 2026.

1. INTRODUCTION & DATA CONTROLLER DETAILS

Triploop UK Limited ("we", "us", "our") operates the AeroAmour mobile application and associated services. We are committed to protecting your privacy and personal data in strict compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR). Triploop UK Limited is registered with the UK Information Commissioner's Office (ICO) under registration reference ZC267009.

2. STRICT AGE RESTRICTION & MANDATORY AGE VERIFICATION

AeroAmour is strictly limited to individuals who are 18 years of age or older. Persons under 18 are prohibited from creating an account or using the platform.

• Mandatory Age Verification System: Before account activation, all users must complete automated age verification (utilizing government-issued ID scanning, biometric facial age estimation, or authorized third-party age verification providers).

• Legal Basis: Compliance with legal obligations under UK child safety regulations and protecting minors (UK GDPR Article 6(1)(c)).

• Data Retention of Verification Materials: Verification materials (e.g., facial biometric scans or temporary ID images) are processed solely to verify age and identity. Biometric templates or raw ID captures used for verification are immediately deleted or hashed following validation, and are never retained for marketing or secondary profiling.

• Immediate Account Termination: If automated checks indicate or suspect an applicant is under 18, access is denied immediately, and any associated registration data is permanently purged.

3. MANDATORY DISCLOSURE: AUTOMATED SAFETY SCANNING & REAL-TIME MODERATION

To protect user safety, maintain platform integrity, and prevent illegal activities, AeroAmour employs continuous automated scanning tools and real-time natural language processing (NLP) systems across the platform.

• What Is Scanned: All user profiles, public photos, bio text, and in-app text messages exchanged between users are continuously monitored by automated algorithmic systems.

• Purpose of Automated Scanning: Detecting under-age activity, grooming, sexual harassment, explicit/unsolicited adult media, fraud, financial scams, hate speech, threats of violence, and illegal content.

• System Action & Flagging: If the automated safety system detects suspicious patterns, policy breaches, or potential safety threats:

• The message or content is automatically flagged or blocked from delivery.

• The involved user account is immediately restricted, suspended, or flagged for safety team review.

• Where illegal conduct (such as child sexual exploitation or serious violence) is detected, data may be preserved and reported to law enforcement agencies (e.g., the National Crime Agency or police authorities).

• Legal Basis:

• Legitimate Interests (UK GDPR Article 6(1)(f)) to ensure user safety and prevent crime.

• Substantial Public Interest (UK GDPR Article 9(2)(g) / Data Protection Act 2018 Schedule 1) for preventing or detecting unlawful acts.

4. PERSONAL DATA WE COLLECT & PURPOSES

We collect data directly provided by you, automatically generated during app usage, and received from third-party verification partners:

• Account Profile Data: Name, date of birth, gender, sexual orientation, profile photos, bio description, travel preferences, and location settings.

• Technical & Device Data: IP address, device model, operating system, unique hardware identifiers, and app diagnostic logs.

• Location Data: Precise GPS coordinates (processed with user consent) to facilitate local and travel-companion matching features.

• Communications & Safety Logs: In-app messages, safety alerts, automated scan flags, customer support inquiries, and moderation audit trails.

• Subscription & Payment Data: Transaction records processed securely through authorized app store billing systems (Apple App Store In-App Purchases / Google Play Billing). We do not store full credit card details on our servers.

5. LAWFUL BASES FOR PROCESSING UNDER UK GDPR

We process your personal data under the following legal grounds:

• Contractual Necessity (Article 6(1)(b)): Providing core matching, profile creation, and messaging services.

• Legitimate Interests (Article 6(1)(f)): Ensuring platform safety via automated scanning, preventing fraud, and optimizing app performance.

• Legal Obligation (Article 6(1)(c)): ICO compliance, age restriction enforcement, and responding to law enforcement requests.

• Explicit Consent (Article 6(1)(a) & Article 9(2)(a)): Processing precise location data and special category data (such as sexual orientation or relationship preferences) voluntarily added to your profile.

6. DATA SHARING & THIRD-PARTY PROCESSORS

We do not sell user personal data. Data is shared strictly as necessary with:

• Age & Identity Verification Vendors: Third-party verification providers bound by strict data processing agreements.

• Cloud Infrastructure & Safety Tool Providers: Secure cloud hosting facilities and real-time automated safety scanning services operating under GDPR-compliant data processing contracts.

• App Store Billing Providers: Apple Inc. and Google LLC for managing in-app subscriptions.

• Legal & Regulatory Authorities: Law enforcement or regulatory bodies (including the ICO) when legally required or necessary to protect safety and prevent crime.

7. INTERNATIONAL DATA TRANSFERS

Where data is transferred outside the UK or European Economic Area (EEA), we ensure adequate protection through UK International Data Transfer Agreements (IDTAs) or standard contractual clauses (SCCs) approved by the UK Government.

8. DATA RETENTION & DELETION

• Active Accounts: Profile and interaction data are retained for as long as your account remains active.

• Account Deletion: Upon account deletion, personal data is permanently deleted or anonymized within 30 days, except where longer retention is required by law or necessary for ongoing safety/fraud investigations.

• Safety & Security Logs: Safety flags, ban logs, and automated scan reports associated with account suspensions are retained for up to 24 months to prevent banned users from re-registering.

9. YOUR RIGHTS UNDER UK GDPR

As a data subject, you have the following rights under UK data protection law:

• Right of Access: Request a copy of the personal data we hold about you.

• Right to Rectification: Request correction of inaccurate data.

• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data.

• Right to Restrict or Object: Object to processing based on legitimate interests or restrict data processing.

• Right to Data Portability: Request transfer of your data in a structured, machine-readable format.

• Right to Withdraw Consent: Withdraw consent for location processing or profile customization at any time.

To exercise any of these rights, contact our Data Protection Team at dpo@AeroAmour.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk.

10. CONTACT INFORMATION

For questions, privacy inquiries, or exercising your GDPR rights:

• Data Controller: Triploop UK Limited

• ICO Registration: ZC267009

• Address: 66 Paul Street, London, England, EC2A 4NA

• Email: hello@AeroAmour.com / dpo@AeroAmour.com

11. THIS WEBSITE (AEROAMOUR.COM)

This website collects less than the app, and only the following:

• Waitlist email address. Stored with your consent, using double opt-in: we send one confirmation email and your place is only added when you confirm. We keep the address and its confirmation status until you ask us to delete them.
• Deletion requests. If you use the delete-account page, we store the email address you give us and the status of that request; it is used solely to run the app deletion flow described in section 8.
• Consent record. We store your cookie/analytics choice and when you made it.
• Aggregate page counts. If and only if you accept, we count page views per page per day — no cookies, no IP addresses, no user agents, nothing personal.

The only cookie this website sets is aa_consent (12 months). See our cookies page for the complete list. Website data-rights requests go to dpo@aeroamour.com.