1. General Provisions and Legal Basis

1.1. We collect and process personal data strictly in accordance with the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and applicable national data protection legislation. 1.2. The data controller is Forza Group OÜ, Estonia, Tallinn, F. Faehlmanni 5-11A, 17286514. 1.3. Legal bases for processing:

• User consent — for geolocation, marketing notifications, optional profile fields (height, weight);

• Performance of a contract / Terms of Service — for registration, profile functionality, payment processing, and gifts;

• Legal obligation — for storing financial reporting, anti-money laundering (AML) compliance, and tax accounting;

• Legitimate interest of the Platform — for fraud prevention, content moderation, and ensuring user safety. 1.4. Special categories of data specified in clause 2.4 (biometric data for verification) are processed based on the User's explicit separate consent.

2. Categories of Data Collected

2.1. Data Provided During Standard Registration Name, phone number, email address, date of birth, gender, geolocation (upon consent), password (stored in hashed form). 2.2. Additional Profile Data (Optional) Height, weight, "about me" description, messenger, profile photos, and additional photos. Providing these fields is optional and does not affect access to core functionality. 2.2.1. Consent to Publish Contact Information (Star Role) Users with the Star role, by adding a phone number and additional photos to their profile, consent to these data being opened (unlocked) to other Platform users for internal currency (credits) or within a premium subscription (VIP status). Consent is given when filling out the relevant profile fields and can be revoked by deleting the data from the profile. 2.3. Incognito Mode Data Minimum set of data (name, geolocation, age). Incognito profile data are automatically and permanently deleted 24 hours after creation or upon session termination, whichever comes first. 2.4. Biometric and Identification Data To obtain "Trust" status, the User may voluntarily provide a selfie photo holding a piece of paper (with a date). For identity verification upon withdrawal of funds, the User provides a photograph of an identity document and a selfie with that document. These data are biometric / belong to a special category and are processed solely on the basis of separate explicit consent provided directly at the time of the verification request. Refusing to provide these data does not restrict access to the core functionality of the Platform — it only restricts access to Trust status and the withdrawal feature. 2.4.1. Processing of Verification Data (KYC) The identity document and selfie provided for identity verification are stored in encrypted form on the Platform's servers. Access to these data is restricted to a limited circle of authorized Administration employees responsible for reviewing withdrawal requests and anti-money laundering / fraud prevention. The data are not used for any purposes other than identity verification and compliance with legislative requirements (AML), and are not published in the profile or anywhere else on the Platform. 2.5 Payment Data Balance top-ups are carried out via bank card or mobile operator billing. Payment card details and mobile operator data are processed directly by the payment provider and are not stored on the Platform's servers. The Platform stores only the operation result (amount, date, transaction status). 2.6. User Interaction Data History of likes, profile visits, sent gifts, ratings, reports of violations (complaints about a profile) — processed for the operation of the "Activity" tab and the rating system. 2.7. Technical Data IP address, browser/device type, visit time, server logs.

3. Use of Data

3.1. Data is used exclusively to ensure the operation of the service: creation and display of profiles, search and filtering of profiles, processing of payments and internal currency (credits), crediting and withdrawal of funds, identity verification, content moderation, communication between users, and ensuring security. 3.2. Prohibition of Contact Publication: Users are prohibited from publishing personal contact details (phones, messengers, social media links) in open profile text fields. Access to contact data is carried out exclusively through the Platform's functionality (including unlocking for credits). 3.3. Automated Content Moderation: Uploaded photos undergo automatic verification (AI filter) for prohibited content prior to publication. This verification does not constitute an automated decision producing legal consequences for the User in the sense that any decision on restricting/blocking content rejected by the filter is subject to review by the Administration. 3.4. Server logs are stored for 90 days to ensure security and prevent offenses.

4. Data Recipients and Transfer to Third Parties

4.1. We do not sell personal data to third parties. Data may be transferred to the following categories of recipients solely to the extent necessary to provide services:

• Payment providers and carrier billing partners — for payment processing;

• Identity verification service provider (KYC) — for document verification during fund withdrawals;

• Hosting provider and cloud storage — for storing Platform data;

• State authorities — in cases provided by law (law enforcement requests, AML/financial monitoring requirements). 4.2. In the event of data transfer outside the EEA, appropriate data protection safeguards apply (Standard Contractual Clauses or an adequacy decision by the European Commission).

5. Data Retention Periods

• Account data — for the duration of the account; after account deletion — up to 30 days (technical deletion from backups), except for data that must be stored longer by law;

• Incognito mode data — 24 hours;

• Identity verification documents (KYC) and Trust status selfies — stored for the period necessary for verification purposes and compliance with AML/payment services legislation, but no longer than [5 years from the last transaction], after which they are deleted or anonymized;

• Transaction history and financial records — stored in accordance with periods established by applicable accounting and tax legislation (usually at least 5–10 years);

• Server logs — 90 days.

6. Age Restrictions

6.1. The service is intended exclusively for persons over 18 years of age. We do not knowingly collect data from persons under 18. Registration requires confirmation of date of birth; if it is discovered that a User is under 18, the account and all related data are subject to immediate deletion.

7. User Rights (GDPR Data Subject Rights)

7.1. You have the right to: obtain information about your data (access), rectification, restriction of processing, objection to processing, data portability, request for complete deletion ("right to be forgotten"), as well as withdraw consent to processing at any time without affecting the lawfulness of processing based on consent before its withdrawal. 7.2. To perform procedures for deleting, exporting, or correcting data, the Administration has the right to request User identity confirmation (Verification ID) to prevent fraud. 7.3. You have the right to lodge a complaint with the data protection supervisory authority of your country if you believe that the processing of your data violates the GDPR. 7.4. Data protection inquiries should be sent to support: support@loveradar.vip

8. Data Security

8.1. The Platform applies technical and organizational data protection measures (encryption in transit and at rest, restriction of personnel access, separate storage of sensitive verification data) commensurate with the processing risks, particularly regarding biometric and payment data. 8.2. In the event of a data breach creating a high risk to the rights and freedoms of Users, the Administration will notify the supervisory authority and affected Users within the timeframes established by GDPR.

9. Cookies

9.1. The use of cookies and similar technologies is regulated by a separate document — Cookie Policy, available in the footer of the Platform.

10. Changes to the Policy

10.1. The Administration has the right to update this Policy. In case of substantial changes, Users will be notified via the Platform interface or by email before the changes take effect.