← Legal & Safety

Privacy Notice

We collect what Opinions needs to work and keep people safe — and we try to be honest about every bit of it.

Last updated: 12 October 2026Version 0.1 (draft)

Contents+

01Introduction

This Privacy Notice explains how Opinions uses personal data when you visit our website or use the platform. It is written for UK data protection law, including the UK GDPR and the Data Protection Act 2018.

02Who is responsible for your data

The controller of your personal data is [ADMIN: legal entity or sole trader name], trading as Opinions, of [ADMIN: legal address].

General contact: us using the Contact button on your profile. Privacy contact: [ADMIN: privacy email].

ICO registration number: [ADMIN: ICO registration number, if registered]

03What personal data we collect

Account information+
  • Email address
  • Username
  • Password credentials (stored only as a secure hash by our authentication provider)
  • Account ID
  • Sign-up date
  • Verification status
  • Sign-in method (email, Google or Apple)
Profile information+
  • Display name
  • Profile picture
  • Biography
  • Interests and any other optional details you add
Age information+
  • Date of birth, collected at sign-up and kept private
User content+
  • Opinions
  • Arguments, comments and replies
  • Profile images
  • Reports and appeals you write
Engagement information+
  • Agree and Disagree votes
  • Likes and dislikes on arguments
  • Topics and interests you choose
  • Which debates you have taken part in
  • Notifications and read status
Recommendation information+
  • Selected interests
  • Interactions used to rank your For You feed
Search information+
  • Searches you make on Opinions (processed to return results)
Device and technical information+
  • IP address
  • Browser, device and operating system information
  • Session data and server logs
Security information+
  • Sign-in attempts
  • Authentication events
  • Signs of suspicious activity
Moderation information+
  • Reports you submit and reports about you
  • Moderation decisions and reasons
  • Warnings, suspensions and restrictions
  • Appeals
Communication information+
  • Support, privacy and legal requests
  • Safety communications
Marketing information+
  • Marketing preferences, consent and unsubscribe records — we do not currently send marketing
Cookie and tracking information+
  • Your cookie preferences. We do not currently use analytics or advertising cookies

04Sensitive and special category information

Important

Opinions is a place to debate. When you publish or vote on opinions you may reveal information such as political opinions, religious or philosophical beliefs, health information, racial or ethnic origin, sexual orientation or other sensitive details.

This content is published by you and made public by you. We use it to display your content and operate the platform. We do not deliberately infer sensitive characteristics about you or build sensitive profiles, and individual votes are never publicly attributed to you.

Where we would need to process special category data for any other purpose, we will only do so with an appropriate lawful basis and an additional legal condition. [ADMIN: confirm Article 9 condition(s), e.g. "manifestly made public by the data subject"]

05How information is collected

Information you provide

When you sign up, complete onboarding, edit your profile, post, vote, report, appeal or contact us.

Information generated through use

Votes, reactions, participation, notifications, moderation records and feed ranking signals.

Information collected automatically

Technical data such as IP address, browser details and logs created when your device connects to our services.

Information from third parties

If you sign in with Google or Apple, we receive basic details from them such as your name, email address and an account identifier.

06Why we use it and our lawful basis

The lawful bases below are proposed and must be confirmed by the platform owner before launch.

PurposeData usedLawful basis
Creating your accountAccount, ageContract [ADMIN: Proposed — owner to confirm]
Authenticating youAccount, security, technicalContract [ADMIN: Proposed — owner to confirm]
Operating the platform and displaying postsProfile, user contentContract [ADMIN: Proposed — owner to confirm]
Processing votes and reactionsEngagementContract [ADMIN: Proposed — owner to confirm]
Recommendations (For You)Interests, engagementLegitimate interests [ADMIN: Proposed — owner to confirm]
Security and fraud / abuse preventionSecurity, technical, engagementLegitimate interests [ADMIN: Proposed — owner to confirm]
ModerationUser content, moderationLegitimate interests / legal obligation [ADMIN: Proposed — owner to confirm]
Online Safety Act complianceUser content, moderation, ageLegal obligation [ADMIN: Proposed — owner to confirm]
Other legal obligationsAs requiredLegal obligation
Customer supportCommunications, accountContract / legitimate interests [ADMIN: Proposed — owner to confirm]
AnalyticsNot currently carried outConsent where required
Improving the serviceAggregated usageLegitimate interests [ADMIN: Proposed — owner to confirm]
MarketingNot currently carried outConsent

07Special category data

See the section on sensitive information above. We do not use special category data for advertising or to make decisions about you.

08Personalisation, recommendations and profiling

Personalisation

Your For You feed is ranked using the interests you choose and your activity, such as the topics of debates you engage with.

Recommendation systems

Ranking also uses general signals like recency and activity. Hot and Active feeds are not based on your personal interests in the same way.

Profiling

This is a limited form of profiling for content ranking. It does not produce legal or similarly significant effects for you. You can change your interests at any time in Settings.

Automated decision-making

We do not make decisions with legal or similarly significant effects about you based solely on automated processing without the safeguards required by law.

Debatability score

Your public profile shows simple activity statistics, including a Debatability measure calculated from how your opinions perform in debate. It is calculated automatically from public activity and is not used to restrict your account.

09Moderation systems and AI processing

When content is reported, the reported text and report reason are sent to an AI model, accessed through the Lovable AI Gateway (currently a Google Gemini model), to help assess it against our Community Guidelines. The outcome is recorded and can be appealed and reviewed by a person.

We do not use your content to train AI models. [ADMIN: confirm AI provider data-use terms]

10Who we share information with

We do not sell your personal data. We share it with service providers (processors) who help us run Opinions, under contract and only on our instructions.

TypeProviderPurpose
Hosting and databaseLovable Cloud (built on Supabase); website hosting via LovableStoring data and running the platform
AuthenticationLovable Cloud; Google and Apple if you choose themSign-in and account security
EmailLovable Cloud authentication emailPassword reset and account emails
AILovable AI Gateway (Google Gemini)Assisting with review of reported content
AnalyticsNone currently—
Security[ADMIN: confirm any security / CDN provider]Protecting the service
PaymentsNone — Opinions is free—

Professional advisers

Lawyers, accountants and insurers where needed.

Law enforcement and regulators

Where legally required, or where necessary to protect someone from serious harm.

Corporate transactions

If Opinions is sold, merged or reorganised, data may transfer to the new operator, who must respect this notice.

11International data transfers

Some providers may process data outside the UK. Where they do, we rely on UK adequacy regulations or appropriate safeguards such as the UK International Data Transfer Agreement or Addendum.

Data locations: [ADMIN: confirm hosting region and transfer mechanisms for each provider]

12How long we keep data

Retention criteria

We keep data for as long as your account is active and as needed for the purposes above, then delete or anonymise it.

Account deletion

When you delete your account, your profile, opinions and arguments are removed or anonymised.

What may remain

Replies by others to your content stay visible, and your content may show as “Comment deleted”. Aggregate vote totals remain.

Legal and safety retention

Moderation records and information connected to serious harm or legal claims may be kept longer. [ADMIN: retention periods for each category]

Anonymised data

We may keep data that no longer identifies you, such as totals.

13Your data rights

Your data rights

  • Access — ask for a copy of your data.
  • Rectification — correct inaccurate data.
  • Erasure — ask us to delete data.
  • Restriction — ask us to limit how we use it.
  • Objection — object to processing based on legitimate interests.
  • Portability — receive data you gave us in a reusable format.
  • Withdraw consent — at any time, where we rely on consent.
  • Automated decisions — rights relating to significant decisions made solely by automated means.
  • Complain — to us or to the ICO.

Many of these are one tap away on Your Account & Data Rights.

14Making a privacy request

Email [ADMIN: privacy email]. We aim to respond within one month.

Identity verification

We may ask you to confirm your identity, usually by contacting us from your account email, before acting on a request.

15Complaints

Please contact us first so we can try to help: [ADMIN: privacy email].

You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.

16Children's privacy and age policy

Opinions is not intended for anyone under 16. We ask for date of birth at sign-up. If we learn an account belongs to someone below the minimum age, we will close it. [ADMIN: confirm age-assurance approach for Online Safety Act duties]

17Security and data breaches

We use measures such as encrypted connections, hashed passwords and access controls that limit who can see data. No system is perfectly secure.

Data breaches

If a breach is likely to result in a risk to you, we will notify the ICO where required, and tell you without undue delay where the risk is high.

19Changes to this notice

We will update this notice when our practices change and tell you about significant changes in the app or by email.

20Contact, effective date and version

Privacy contact: [ADMIN: privacy email]. Effective date: [ADMIN: effective date]. Version: 0.1 (draft).