Privacy Notice
Last updated: 12 October 2026Version 0.1 (draft)
Contents+
- 1Introduction
- 2Who is responsible for your data
- 3What personal data we collect
- 4Sensitive and special category information
- 5How information is collected
- 6Why we use it and our lawful basis
- 7Special category data
- 8Personalisation, recommendations and profiling
- 9Moderation systems and AI processing
- 10Who we share information with
- 11International data transfers
- 12How long we keep data
- 13Your data rights
- 14Making a privacy request
- 15Complaints
- 16Children's privacy and age policy
- 17Security and data breaches
- 18Third-party links
- 19Changes to this notice
- 20Contact, effective date and version
01Introduction
This Privacy Notice explains how Opinions uses personal data when you visit our website or use the platform. It is written for UK data protection law, including the UK GDPR and the Data Protection Act 2018.
02Who is responsible for your data
The controller of your personal data is [ADMIN: legal entity or sole trader name], trading as Opinions, of [ADMIN: legal address].
General contact: us using the Contact button on your profile. Privacy contact: [ADMIN: privacy email].
ICO registration number: [ADMIN: ICO registration number, if registered]
03What personal data we collect
Account information+
- Email address
- Username
- Password credentials (stored only as a secure hash by our authentication provider)
- Account ID
- Sign-up date
- Verification status
- Sign-in method (email, Google or Apple)
Profile information+
- Display name
- Profile picture
- Biography
- Interests and any other optional details you add
Age information+
- Date of birth, collected at sign-up and kept private
User content+
- Opinions
- Arguments, comments and replies
- Profile images
- Reports and appeals you write
Engagement information+
- Agree and Disagree votes
- Likes and dislikes on arguments
- Topics and interests you choose
- Which debates you have taken part in
- Notifications and read status
Recommendation information+
- Selected interests
- Interactions used to rank your For You feed
Search information+
- Searches you make on Opinions (processed to return results)
Device and technical information+
- IP address
- Browser, device and operating system information
- Session data and server logs
Security information+
- Sign-in attempts
- Authentication events
- Signs of suspicious activity
Moderation information+
- Reports you submit and reports about you
- Moderation decisions and reasons
- Warnings, suspensions and restrictions
- Appeals
Communication information+
- Support, privacy and legal requests
- Safety communications
Marketing information+
- Marketing preferences, consent and unsubscribe records — we do not currently send marketing
Cookie and tracking information+
- Your cookie preferences. We do not currently use analytics or advertising cookies
04Sensitive and special category information
Important
Opinions is a place to debate. When you publish or vote on opinions you may reveal information such as political opinions, religious or philosophical beliefs, health information, racial or ethnic origin, sexual orientation or other sensitive details.
This content is published by you and made public by you. We use it to display your content and operate the platform. We do not deliberately infer sensitive characteristics about you or build sensitive profiles, and individual votes are never publicly attributed to you.
Where we would need to process special category data for any other purpose, we will only do so with an appropriate lawful basis and an additional legal condition. [ADMIN: confirm Article 9 condition(s), e.g. "manifestly made public by the data subject"]
05How information is collected
Information you provide
When you sign up, complete onboarding, edit your profile, post, vote, report, appeal or contact us.
Information generated through use
Votes, reactions, participation, notifications, moderation records and feed ranking signals.
Information collected automatically
Technical data such as IP address, browser details and logs created when your device connects to our services.
Information from third parties
If you sign in with Google or Apple, we receive basic details from them such as your name, email address and an account identifier.
06Why we use it and our lawful basis
The lawful bases below are proposed and must be confirmed by the platform owner before launch.
| Purpose | Data used | Lawful basis |
|---|---|---|
| Creating your account | Account, age | Contract [ADMIN: Proposed — owner to confirm] |
| Authenticating you | Account, security, technical | Contract [ADMIN: Proposed — owner to confirm] |
| Operating the platform and displaying posts | Profile, user content | Contract [ADMIN: Proposed — owner to confirm] |
| Processing votes and reactions | Engagement | Contract [ADMIN: Proposed — owner to confirm] |
| Recommendations (For You) | Interests, engagement | Legitimate interests [ADMIN: Proposed — owner to confirm] |
| Security and fraud / abuse prevention | Security, technical, engagement | Legitimate interests [ADMIN: Proposed — owner to confirm] |
| Moderation | User content, moderation | Legitimate interests / legal obligation [ADMIN: Proposed — owner to confirm] |
| Online Safety Act compliance | User content, moderation, age | Legal obligation [ADMIN: Proposed — owner to confirm] |
| Other legal obligations | As required | Legal obligation |
| Customer support | Communications, account | Contract / legitimate interests [ADMIN: Proposed — owner to confirm] |
| Analytics | Not currently carried out | Consent where required |
| Improving the service | Aggregated usage | Legitimate interests [ADMIN: Proposed — owner to confirm] |
| Marketing | Not currently carried out | Consent |
07Special category data
See the section on sensitive information above. We do not use special category data for advertising or to make decisions about you.
08Personalisation, recommendations and profiling
Personalisation
Your For You feed is ranked using the interests you choose and your activity, such as the topics of debates you engage with.
Recommendation systems
Ranking also uses general signals like recency and activity. Hot and Active feeds are not based on your personal interests in the same way.
Profiling
This is a limited form of profiling for content ranking. It does not produce legal or similarly significant effects for you. You can change your interests at any time in Settings.
Automated decision-making
We do not make decisions with legal or similarly significant effects about you based solely on automated processing without the safeguards required by law.
Debatability score
Your public profile shows simple activity statistics, including a Debatability measure calculated from how your opinions perform in debate. It is calculated automatically from public activity and is not used to restrict your account.
09Moderation systems and AI processing
When content is reported, the reported text and report reason are sent to an AI model, accessed through the Lovable AI Gateway (currently a Google Gemini model), to help assess it against our Community Guidelines. The outcome is recorded and can be appealed and reviewed by a person.
We do not use your content to train AI models. [ADMIN: confirm AI provider data-use terms]
11International data transfers
Some providers may process data outside the UK. Where they do, we rely on UK adequacy regulations or appropriate safeguards such as the UK International Data Transfer Agreement or Addendum.
Data locations: [ADMIN: confirm hosting region and transfer mechanisms for each provider]
12How long we keep data
Retention criteria
We keep data for as long as your account is active and as needed for the purposes above, then delete or anonymise it.
Account deletion
When you delete your account, your profile, opinions and arguments are removed or anonymised.
What may remain
Replies by others to your content stay visible, and your content may show as “Comment deleted”. Aggregate vote totals remain.
Legal and safety retention
Moderation records and information connected to serious harm or legal claims may be kept longer. [ADMIN: retention periods for each category]
Anonymised data
We may keep data that no longer identifies you, such as totals.
13Your data rights
Your data rights
- Access — ask for a copy of your data.
- Rectification — correct inaccurate data.
- Erasure — ask us to delete data.
- Restriction — ask us to limit how we use it.
- Objection — object to processing based on legitimate interests.
- Portability — receive data you gave us in a reusable format.
- Withdraw consent — at any time, where we rely on consent.
- Automated decisions — rights relating to significant decisions made solely by automated means.
- Complain — to us or to the ICO.
Many of these are one tap away on Your Account & Data Rights.
14Making a privacy request
Email [ADMIN: privacy email]. We aim to respond within one month.
Identity verification
We may ask you to confirm your identity, usually by contacting us from your account email, before acting on a request.
15Complaints
Please contact us first so we can try to help: [ADMIN: privacy email].
You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.
16Children's privacy and age policy
Opinions is not intended for anyone under 16. We ask for date of birth at sign-up. If we learn an account belongs to someone below the minimum age, we will close it. [ADMIN: confirm age-assurance approach for Online Safety Act duties]
17Security and data breaches
We use measures such as encrypted connections, hashed passwords and access controls that limit who can see data. No system is perfectly secure.
Data breaches
If a breach is likely to result in a risk to you, we will notify the ICO where required, and tell you without undue delay where the risk is high.
18Third-party links
Content may link to other websites. Their privacy practices are their own responsibility.
19Changes to this notice
We will update this notice when our practices change and tell you about significant changes in the app or by email.
20Contact, effective date and version
Privacy contact: [ADMIN: privacy email]. Effective date: [ADMIN: effective date]. Version: 0.1 (draft).
