Privacy Policy
In force from 5 October 2026 until further notice.
1. Data controller
Searching Henry decides how and why your personal data is processed, and you can always reach us about it.
Searching Henry respects your privacy and is committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and other applicable data protection laws. This Privacy Notice explains how we collect, use, disclose and protect your personal data when you visit our website, create a profile, contact us or submit content to us.
Controller: Searching Henry Oy. Address: Pitkänkalliontie 17 A, 02170 Espoo, Finland. Business ID: 3650663-6. Email: info@searchinghenry.com. Website: https://searchinghenry.com. We have not appointed a separate data protection officer; privacy questions are handled at info@searchinghenry.com.
This notice applies to the Searching Henry website, application and related services (the "service"). It is part of our Terms & Conditions, which you accept when you create a profile. If you have any questions about this notice or the processing of your personal data, please contact us using the details above.
2. Personal data we collect
Almost everything we hold about you is something you typed, uploaded or placed yourself.
Information you provide:
- account data: your email address and, if you sign in with Google, the basic account identifiers Google returns;
- profile data: first name, age, gender (including your own free-text wording if you choose "else"), relationship type, your "About me" text and your "What I want" text;
- your profile photo, and any video, photograph, voice recording or other content you voluntarily submit;
- information that can be inferred from the texts you have written;
- match preferences: the age range, genders and relationship types you want to see;
- markers: the public place you place on the map by hand, its label, how long it stays active, and — if you use approach requests — the precise location description you choose to reveal to an accepted person;
- approach requests: who sent the request to whom, its status, and the optional short "Say hi" message you write, which is shown to the recipient together with your photo;
- live location: if you switch on live location sharing after an accepted approach request, your precise GPS coordinates and their accuracy while sharing is on. Only the one person you choose to share with can see them, only that latest position is stored (no history), and it is deleted as soon as you stop sharing, at the latest when the sharing time ends;
- meeting decisions: after a meeting, your yes/no answer and, if both of you answered yes, the contact details you choose to write. Your answer is not shown to the other person before they have answered, and contact details are shown only when both answers are yes;
- safety data: reports you make about other users, including the free-text reason, and the users you hide;
- messages or enquiries you send us by email or through the contact page, including any name, phone number or company name you choose to give;
- any additional information you choose to provide.
Information collected automatically when you use the service: IP address, browser type and version, device information, operating system, date and time of access, pages visited, referral URLs, cookie and analytics data, session and authentication data that keeps you signed in, and moderation records such as report counts, suspensions and their reasons.
We do not track your movements. The service reads your device location only if you allow it, and only to centre the map on your screen. That reading is not stored on our servers.
Your approximate country is derived from your IP address by our hosting provider for each request, solely to block access from jurisdictions subject to comprehensive international sanctions. This country information is used at the moment of the request only; it is not stored, logged or combined with your profile.
A daily limit on profile views is planned but not in use yet. When it is introduced, we will store the number of profiles you have opened during the day so we can apply the limit, and the status of a paid unlimited-viewing subscription. At the moment we collect neither.
3. Purposes of processing
To provide the service you asked for, to keep people safe, and to meet legal duties.
We process your personal data to:
- respond to enquiries and provide our services;
- create your profile, show markers and apply your match preferences;
- manage customer relationships and support requests;
- publish user-submitted videos and other content where consent has been provided;
- handle reports and hiding, review reports manually and suspend or delete accounts, and prevent harassment, fraud and misuse;
- improve our website and services, and ensure website security and reliability through logging, abuse prevention and backups;
- comply with legal obligations and respond to lawful requests from authorities, including sanctions and export-control rules that require us to block access from certain countries;
- establish, exercise or defend legal claims where necessary.
4. Legal bases for processing
Your profile and your marker are processed on the basis of your consent.
We process personal data based on one or more of the following legal grounds under Article 6 GDPR:
- your consent — this is the basis on which we create your profile, show your first name, age, gender, relationship type, photo and written texts to other signed-in users, show the marker you place on the map, share your live location after an accepted approach request. You give that consent by creating a profile, by placing a marker, by pressing "Share live location" and by activating the feature concerned;
- compliance with legal obligations — accounting, and responding to lawful requests;
- our legitimate interests — safety and moderation, security, abuse prevention and defending legal claims — provided these are not overridden by your rights and freedoms.
Where we rely on consent, you may withdraw it at any time: remove your marker, stop live location sharing, edit or delete your profile texts and photo, or delete your account entirely. Withdrawing consent stops the processing concerned going forward but does not affect processing already carried out lawfully before the withdrawal.
5. Sensitive and free-text data
What you write in a free-text field is up to you — write only what you want public.
Data you enter about your gender, relationship goals or your own description may, depending on what you write, reveal sensitive information about you such as your sexual orientation. You provide this data voluntarily and explicitly consent to it being shown in your profile to other signed-in users as described in this notice. You may edit or delete it at any time.
Please do not enter health data, political or religious views, or other sensitive information you would not want other users to see. Do not enter other people's personal data.
6. Your photo
Photos are stored privately and shown through short-lived links.
Profile photos are held in private storage and shown to signed-in users through temporary links. Deleting your photo removes it from storage.
7. Who sees your data
Other users see your profile; they never see your email or reports.
Inside the service:
- signed-in users can see your first name, age, gender, relationship type, photo, "About me" and "What I want" while your marker is active, but only when visibility is mutual: they match your preferences and you match theirs;
- our administrators can see all profiles on the map regardless of preferences, for moderation and safety purposes;
- your marker shows the public place you chose. The precise location description is shown only to a person whose approach request you have accepted;
- your live location, if you switch it on, is visible only to the person whose approach request was accepted, and only while sharing is on;
- users you have hidden never see you, and you never see them;
- suspended profiles are hidden from everyone;
- your email address is never shown to other users;
- reports, including the free-text reason, are visible only to our administrators — never to the reported person, and never attributed to you in the app.
8. Service providers and international transfers
A small number of processors run the service on our behalf.
We share data with providers who process it on our instructions:
- hosting, database, authentication and file storage: Lovable (EU region);
- map tiles: OpenStreetMap Foundation, which receives your browser's IP address when map images load;
- payments and identity verification: Stripe, LLC;
- email delivery: Zoner Oy;
- collection and management of marketing consents: Tuyaform.
All third parties handling personal data on our behalf are required to process it in accordance with applicable data protection legislation.
Some of our service providers or social media platforms may process personal data outside the European Economic Area (EEA). Where such transfers occur, we rely on the Standard Contractual Clauses approved by the European Commission, or on an adequacy decision where one applies to the country in question.
We may also disclose data to authorities where required by law, and to advisers or acquirers in connection with a corporate transaction, subject to confidentiality. We do not sell your personal data and we do not use it for third-party advertising.
9. Marketing videos and user-submitted content
Content you send us for marketing is published only with your consent.
If you submit a video or other content for marketing purposes, we process your personal data in accordance with the consent you have provided. The content may be published on social media platforms such as Instagram, TikTok, YouTube, Facebook, LinkedIn or similar services.
Once content has been published publicly, third parties may copy, share or re-post it, and we cannot control or fully remove such copies. You may withdraw your consent at any time, after which we stop using the content and remove it from the channels we control.
The consent to use marketing videos and other content you submit is collected and stored using a consent service provided by Tuyaform. The consent record is kept only for as long as is necessary for the purposes of the processing, after which it is deleted.
10. Cookies and visitor statistics
Only what is needed to sign you in, plus cookie-free visit counting.
The service uses strictly necessary cookies and local storage to keep you signed in and to remember basic settings. These do not require consent.
We keep simple visitor statistics on our own servers: the time of a page view, the page address, an approximate country, the device type (mobile or desktop) and the referring website. Your IP address and browser details are converted into a one-way daily code so the same visit is not counted twice; the IP address is never stored, the code cannot be reversed and it changes every day. No cookies, device identifiers or profiling are used, the data is never linked to your account, and it is not shared with third parties. The legal basis is our legitimate interest in understanding how the service is used, and no consent is required because no one can be identified.
The figures shown to our team are totals only. Service figures — such as the number of accounts, markers or requests — are counted from data we already hold and involve no additional collection. We set no analytics or advertising cookies; if we ever add them, we will update this notice first and ask for your consent.
11. Data retention
Markers disappear quickly; safety records last longer.
- markers: deleted when they expire or when you remove them. We keep no location history;
- profile, photo and preferences: kept while your account exists, and deleted when you delete your account;
- account data after deletion: removed without undue delay and no later than 30 days, except where we must keep something for a legal reason;
- reports, hiding and suspension records: kept for 24 months after the case is closed, so we can act on repeated behaviour;
- anonymous feedback: kept for 24 months from the day it is sent;
- age verification: the result and the date are kept while your account exists. Identity documents are handled by our verification provider and are never stored by us;
- payment and accounting records: kept for 6 years from the end of the financial year, as required by the Finnish Accounting Act;
- anonymous visitor statistics: kept for 14 months from the visit;
- technical logs: kept for 12 months.
We retain personal data only for as long as necessary for the purposes described in this notice or as required by applicable law. Where processing is based on consent, we delete or anonymise the data after consent has been withdrawn, unless retention is required by law.
12. Your rights
You can see, correct, export, restrict or delete your data.
Under the GDPR you have the right to:
- access the personal data we hold about you and receive a copy;
- request correction of inaccurate or incomplete data — most of it you can edit yourself in your profile;
- request deletion of your personal data, including by deleting your account in the app;
- request restriction of processing, or object to processing based on our legitimate interests;
- receive the data you gave us in a portable, machine-readable format and have it transferred to another controller;
- withdraw consent at any time, for example by removing your marker or stopping live location sharing, without affecting processing already carried out;
- lodge a complaint with your national data protection authority.
You can delete your account yourself at any time: open your profile page and use “Delete my account permanently”. Everything — profile, photo, markers, approach requests, preferences and reports you filed — is erased immediately and the deletion cannot be undone.
To exercise your rights, contact info@searchinghenry.com. We respond within one month. We may need to verify your identity before acting.
If you believe we handle your data unlawfully, you may lodge a complaint with your local data protection authority — in Finland, the Office of the Data Protection Ombudsman (tietosuoja.fi).
13. Security
Access is restricted and data is encrypted in transit.
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration or disclosure. Data is transmitted over encrypted connections and stored with access controls that limit each user to their own data. Administrative access is limited to named persons who need it for safety and support work, and is logged.
No internet transmission or electronic storage system can be guaranteed to be completely secure. If a personal data breach is likely to result in a high risk to you, we will inform you and the supervisory authority as required by law.
14. Children's privacy
The service is for adults only.
Searching Henry is not intended for anyone under 18. You must confirm that you are 18 or older when you create your profile. If we become aware that we have collected personal data from a child, we delete the account and its data without undue delay.
You may also verify your age voluntarily with an official identity document. The check is carried out by Stripe, LLC (Stripe Identity), which acts as an independent processor for the document, the selfie and the payment. Searching Henry never receives your document, your selfie, your card details or your date of birth — we only receive the outcome of the check and store the result ("verified" or not) together with the time it was made and the identifiers of the Stripe sessions. The one-off fee covers Stripe's cost of the check. Verification is optional and no feature depends on it.
15. Third-party websites
Links out of the service are not covered by this notice.
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy notices of any third-party services you visit.
16. Changes to this Privacy Notice
We may update this notice from time to time. The latest version is always published on this page together with the date of the latest revision, and material changes are announced in the app before they take effect.
17. Contact
Controller: Searching Henry Oy. Address: Pitkänkalliontie 17 A, 02170 Espoo, Finland. Business ID: 3650663-6.
Privacy questions and GDPR requests, safety concerns and general enquiries: info@searchinghenry.com.