Legal
Privacy Policy
What we collect when you use Sinfully, why, who helps us process it, how long we keep it, and the rights you have over it.
Last updated
The short version
- Your chats are private. People on our team only look when something is reported, to keep the service safe, or when the law requires it. Our card processor may check what companions generate, without knowing who it was for.
- We never see your full card number, ID document or age-check selfie.
- We don't sell your data, use it for advertising, or train AI models on your chats.
- Delete your account yourself, any time; your data is gone within 30 days.
On this page
- 1Who we are
- 2One account with PornTok
- 3What we collect
- 4Sensitive information in your chats
- 5How we use it, and our legal reasons
- 6Automated checks
- 7Who we share it with
- 8International transfers
- 9How long we keep it
- 10Your rights
- 11Deleting your account
- 12Children
- 13Security
- 14Cookies
- 15Changes to this policy
- 16Contact us
1.Who we are
This policy explains how Sinfully (“we”, “us”) handles personal information when you use our website and apps. We decide how and why your information is used, so we are its “controller” under data protection law.
Sinfully is operated by JRL Software Ltd, registered in England and Wales, company number 15511536.
For anything about your data, email [email protected].
2.One account with PornTok
Sinfully is made by the team behind PornTok, and the two sites share one account system. If you have a PornTok account, you can sign in here with it, and an account you make here works there too. Your sign-in details (email, username and password) are stored once, for both sites. Your companion chats, memories, media and purchases belong to Sinfully and are not shown on PornTok.
3.What we collect
Your account
Your email address, username, password (stored only as a one-way hash), the date you joined and your settings. If you sign in with Google, Google tells us your email address, name and account ID; we don't use your Google name as your username.
Your chats and what companions remember
The messages you send and receive, and the short notes a companion keeps about you so she can remember things (for example your name, what you like and plans you've made). You can see, edit and delete those notes.
Photos and videos made for you
The photos and videos generated for you, the requests and settings that made them, and the results of our safety checks and any human review.
Purchases
Your plan, orders, amounts, your balance and history of Sins (our in-app credits), and the payment processor's reference for each payment. Your card or wallet details go straight to the payment processor: we never see or store your full card number.
Age checks
Where the law requires an age check, it's carried out by our age-check provider, AgeVerif. You choose the method (for example a selfie age estimate or an ID check), and AgeVerif handles it under its own privacy policy. We receive only the result: that you passed, with the date, the method and your country or region. We never receive or keep your ID document, selfie or date of birth.
Reports and messages to us
What you tell us when you report something, ask for content to be removed, make a complaint or contact support, with your contact details.
Device and usage information
Your IP address, browser and device type, the pages you visit, and your approximate location (country and region, from your IP address), which we need to apply the right age-check rules. We also keep short-lived security logs to stop abuse, such as rate limits on sign-in attempts.
Notifications
If you turn on texts from companions, your browser's push subscription; and your email preferences.
Cookies
Cookies and similar technologies, as described in our Cookie Policy.
4.Sensitive information in your chats
Chats on an adult service can reveal things about your sex life or sexual orientation. Data protection law treats that as “special category” information. We process it only because you choose to share it with us to use the service, which is your explicit consent, and only to provide the service to you and keep it safe.
You can withdraw that consent at any time by deleting chats or your account. We never sell it, use it for advertising, or share it except as described in this policy.
5.How we use it, and our legal reasons
Data protection law in the UK and the EU says we need a legal reason (a “lawful basis”) for each use of your information. Here are ours.
| What we do | Why we're allowed to |
|---|---|
| Run your account, chats, memory, photos and videos | To provide the service you asked for (contract), and your explicit consent for anything sensitive in your chats |
| Take payments, keep billing records, handle refunds and chargebacks | Contract, and legal obligation (tax and accounting law) |
| Check ages where the law requires it | Legal obligation |
| Check messages and media against our rules, review reports, and report illegal content | Legitimate interests (keeping the service and other people safe), and legal obligation |
| Send service emails: receipts, password resets, plan reminders | Contract |
| Send marketing emails and texts from companions | Consent: only if you opt in, and you can opt out at any time |
| Measure how the site is used (analytics) | Consent in the EEA, the UK and Switzerland; legitimate interests elsewhere |
| Count visits without cookies (a daily code from your IP address and browser that can't be traced back to you), and see which links and ads lead to sign-ups | Legitimate interests; where you came from is only kept with your account if you allow advertising cookies |
| Prevent fraud and abuse, and secure the service | Legitimate interests |
| Respond to legal requests, and bring or defend legal claims | Legal obligation and legitimate interests |
We don't use your private chats to train AI models, and we don't sell your personal information or share it for cross-context behavioural advertising.
6.Automated checks
Every message, photo and video is checked automatically against our content rules. A check can refuse a message or stop a photo from being sent; when that happens, any Sins you spent are returned. Decisions to suspend or close an account are made or confirmed by a person, and you can ask for any automated decision to be reviewed by a person through our complaints procedure.
8.International transfers
Some of our providers are in, or use servers in, countries outside the UK and the European Economic Area, such as the United States. When your information is transferred there, we rely on adequacy decisions (including the UK-US data bridge and the EU-US Data Privacy Framework, where the provider is certified) or on the standard contractual clauses approved by the UK and the EU, with extra safeguards where needed. Email us for a copy of the relevant safeguards.
9.How long we keep it
| Information | How long |
|---|---|
| Account, chats, memories, photos and videos | While your account is open. You can delete chats and memories at any time; everything is deleted within 30 days of deleting your account. |
| Purchases and billing records | Six years after the payment, because tax and accounting law requires it |
| Age-check result | While your account is open, or as long as the law that required it says |
| Reports, removal requests and complaints | Three years after they're closed, so we can show how we handled them |
| Evidence of illegal content | Secured and kept for as long as the law requires, then deleted |
| Security logs, such as rate limits | Usually 24 hours, and no more than 30 days |
| Backups | Overwritten within 30 days |
| Analytics (Google) | Up to 14 months |
| Where your account came from | With your account, deleted when it is |
10.Your rights
In the UK, the EU and similar places
You have the right to:
- get a copy of your information (access);
- have it corrected if it's wrong;
- have it deleted;
- restrict or object to how we use it;
- receive it in a portable format;
- withdraw your consent at any time, where we rely on consent;
- ask for a person to review an automated decision.
You can also complain to a data protection authority. In the UK that's the Information Commissioner's Office (ico.org.uk); in the EU, it's the authority in your country. We'd appreciate the chance to sort things out first.
In the United States
If you live in California or another US state with a privacy law (such as Colorado, Connecticut, Virginia, Utah, Texas or Oregon), you have the right to know what personal information we collect, use and disclose; to get a copy of it; to correct it; to delete it; and not to be treated differently for using these rights. We don't sell personal information or share it for cross-context behavioural advertising, and we only use sensitive information to provide the service, so there's nothing to opt out of. If we turn down a request, you can appeal by replying to our answer.
How to use your rights
Email [email protected] from the address on your account, or tell us how to reach you. We may need to confirm it's you before acting. We'll answer within one month (45 days for US state law requests), and tell you if we need longer. An authorised agent can make a request for you with your written permission.
11.Deleting your account
You can delete your account yourself, at any time, in your account settings; you don't need to contact us. Deleting it:
- signs you out everywhere and cancels any renewing plan;
- ends any Sins left in your balance;
- deletes your chats, memories, photos and videos within 30 days, except what we must keep for the reasons in “How long we keep it”.
Because your account is shared with PornTok, deleting it closes it on both sites. If you'd rather keep your PornTok account, delete your chats and memories instead, or email [email protected] and we'll delete your Sinfully data only.
12.Children
Sinfully is only for adults. We don't knowingly collect information from anyone under 18. If we learn that an account belongs to someone under 18, we close it and delete its information. If you think a child is using the service, tell us at [email protected].
13.Security
We protect your information with encryption in transit (HTTPS), one-way hashed passwords, private storage for photos and videos, access limited to the people who need it, and logging of staff access. No system is perfectly secure, so please use a strong password you don't use anywhere else. If a breach puts you at risk, we'll tell you and the regulator as the law requires.
15.Changes to this policy
We'll update this policy when what we do changes. For an important change, we'll tell you by email or on the site before it takes effect. The date at the top shows when it last changed.
16.Contact us
Email [email protected] with any question about your data or this policy.
Sinfully is operated by JRL Software Ltd, registered in England and Wales, company number 15511536.
Questions about your data?
Email [email protected] and a person will reply.