Privacy Policy
Effective 25 October 2026. Version 1.0.
1. Who we are
IRL Social Connect (“IRLSC”, “we”) is operated by In Real Life Social Connect Pty Ltd (ACN 685 034 315) as trustee for the KCB Trust, trading as IRL Social Connect, ABN 60 419 887 301, [Postal address], Northern Territory. IRLSC helps adults meet in real life through events, video introductions and dating courses. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).
2. What we collect
| Category | What it includes | When |
|---|---|---|
| Account | Sign-in details from our authentication provider, email address and email confirmation status | When you sign in |
| Profile | First name, date of birth, your "I'm here for" choice (Dating, Friends or Both), gender (and your own description, if you choose one), who you would like to meet, relationship intention, suburb, city and short bio | When you create a profile |
| Preferences | Discovery settings, distance and preferred age range, visibility choices | When you set them |
| Videos | Intro videos, event intro videos and video notes, including your voice and image, and your authenticity declaration | When you upload or record |
| Connections and messages | Connection requests, messages, blocks, “keen to meet” marks and match choices | When you use these features |
| Events | Tickets, check-in, waitlist entries (including the gender you chose), transfers, and the email of a friend you transfer a ticket to | When you book or transfer |
| Payments | Membership and ticket status, amounts and Stripe references. We never see or store your full card details | When you pay |
| Courses | Lessons viewed and completed, and your private exercise answers | When you use Date Ready or Video Ready |
| Safety | Reports you make or that are made about you, moderation decisions, private safety notes, and identifiers needed to enforce a ban (email and, where available, verified phone) | When safety issues arise |
| Support | Messages you send us and your browser’s technical details | When you contact us |
| Hosts | Legal and display names, ABN, GST status, contact email, mobile, suburb, city, bio and photo. Stripe collects ID and bank details directly | When you set up as a host |
2A. Technical and usage information
We and our providers automatically collect technical information such as your IP address, device and browser type, sign-in times and activity logs. We use it to keep IRLSC secure, prevent misuse and fix problems. We use essential cookies for sign-in and security. We do not use advertising cookies. If we add analytics cookies, we will update this policy first.
3. Sensitive information
Who you would like to meet, and your gender, may reveal your sexual orientation or gender identity. This is sensitive information under the Privacy Act. We collect it only with your consent, and only to provide introductions, events and connections. You can change it at any time. If you withdraw consent, we will delete it, but we cannot show you Introductions without it.
Please don’t include health, religious, political or other sensitive details in your bio or videos.
4. How we use it
Check you are 18 or over and eligible for events
Create your profile and show it to members according to your settings
Review videos before anyone else sees them
Run events, tickets, transfers, waitlists and after-event matching
Process memberships, refunds and host payouts
Send account, ticket, safety and billing emails
Investigate reports, enforce our Terms and keep members safe
Track course progress and improve our courses
Meet legal, tax and record-keeping duties
We use automatic pattern matching within the app to check messages for contact details, show safety reminders and flag unusual contact-sharing patterns for our safety team. Messages are not sent to AI providers or other third-party services for these checks.
We do not sell your personal information. We do not use it for advertising by others.
5. Who can see what
| Information | Who can see it |
|---|---|
| First name, age, suburb, bio, approved intro video | Members, if Introductions is switched on |
| Event intro video and event bio | Ticket holders for that event, and Introductions too if you choose |
| Pending or rejected videos | You and our review team only |
| Date of birth, email, phone | Not shown to other members |
| Messages | You and the member you’re messaging. Our safety team may review messages linked to a report |
| “Keen to meet” marks and match choices | Only you, unless the choice is mutual |
| Exercise answers | Only you. They are not shown to other members, hosts or in our admin screens. Authorised technical staff with database access could access them, and do so only to fix a technical fault or if required by law |
| Reports | Authorised IRLSC staff. We do not routinely share your report with the person or host reported, but may share what is needed to investigate, protect people or comply with law |
| Your ticket and name | The event host, to run the event |
6. Service providers and overseas storage
We use these providers to run IRLSC. They may store or process information in the United States and other countries:
| Provider | Purpose | Information |
|---|---|---|
| Replit | Hosting, database and sign-in | All account and app data |
| Mux | Video upload, storage and playback | Videos and video metadata |
| Stripe | Payments, subscriptions and host payouts | Name, email, payment and payout details |
| Resend | Sending emails | Name, email address and email content |
We choose providers with recognised security practices and take reasonable steps to make sure they protect your information. By using IRLSC, you acknowledge your information may be handled overseas.
7. Marketing
We send marketing emails only if you opt in. Every marketing email has an unsubscribe link, and we act on requests within 5 working days. Account, ticket, billing and safety emails are not marketing, and you will still receive them.
8. How long we keep it
| Information | How long |
|---|---|
| Profile, videos, preferences | Until you delete them or your account |
| Messages | Until account deletion. Messages you sent stay visible to the recipient, with your name removed |
| Payment and tax records | 5 years after the transaction (tax law) |
| Reports and safety notes | [2] years after the matter is closed, or longer if needed for legal claims |
| Ban identifiers | While the ban applies |
| Backups | Overwritten within [30] days |
9. Deleting your account
You can delete your account in My space. We delete your profile, personal details and videos (from IRLSC and Mux). Messages you sent are disconnected from your profile and your name is removed. Their content, timing and a coded identifier remain in the other member’s conversation, and the content could still identify you. We keep payment records, safety records and ban identifiers as set out above. If you have an active membership or host business, we will close those as part of the deletion, or tell you what is needed.
10. Security
We use encrypted connections, access controls and private video playback. Only authorised staff can access safety and admin tools. No system is completely secure. If a data breach is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC).
11. Access, correction and complaints
You can view, correct and download most of your information in My space. For anything else, email [Privacy email]. We will respond within 30 days.
If you have a privacy complaint, contact us first. If you’re not satisfied with our response, you can complain to the OAIC at oaic.gov.au.
12. Changes
We will email you before any significant change to this policy takes effect. Earlier versions are available on request.
Business contacts and enquiries
We record event bookings, transfers, cancellations, check-ins and attendance, and when a contact clicks the main link in a marketing email, to understand and improve our events and follow-ups. Ticket bookings may include the source of the event link and an optional answer about how you heard about us. We do not add email open-tracking pixels. Email security tools may also follow links, so a recorded click does not always mean a person clicked. CRM feedback activity contains only the rating; written survey responses remain in the private safety records. Account or contact deletion removes linked CRM activity and click records and anonymises recipient references in email send reports.
We also keep an admin-only contact list for past guests, leads, members, hosts and business contacts. This may include names, email addresses, phone numbers, organisations, suburbs, how we met and heard about IRLSC, event and speed-dating attendance, services of interest, tags, contact status, ordinary follow-up notes and activities, follow-up dates, first-added dates, and marketing consent, source and date. Voluntarily supplied gender and age bands are used only for planning and balancing event invitations. We use contact information to manage enquiries, hosting relationships and follow-ups. A contact record does not create a member account and is never shown in Introductions.
We do not import columns about sexuality, health, relationship history or other sensitive personal information into this contact list. Imports preserve the supplied marketing consent, source and date, and never change an existing No opt-out to Yes. Missing consent is Unknown, which is not permission to send marketing. Only contacts with Yes consent can receive CRM marketing; every marketing email has an unsubscribe link. A one-off request for permission is sent only where we have a lawful basis, and a new Yes requires affirmative confirmation. Member and CRM opt-outs are kept in sync. When a member account is deleted, its linked CRM contact and activity history are deleted and delivery references anonymised, unless an unresolved host or payment matter prevents completion of account deletion. We retain a keyed, non-readable suppression marker for removed opt-outs so an old contact list cannot resubscribe them. Use the contact details in this policy to request access or correction, or to ask us to stop marketing.