Privacy

Juno, Privacy Policy

Juno, voice-first matchmaking

Effective date: 27 June 2026 | Last updated: 19 October 2026


1. Who we are

Juno is a voice-first matchmaking application that helps adults meet compatible people. Instead of swiping through profiles, you have a guided spoken conversation with our in-app assistant, and we use what you tell us (together with information you choose to declare) to suggest a small number of considered introductions, each with a plain-English explanation of why we think you would get on.

The app and the Juno service are operated by Matthew Hesketh, an individual based in the United Kingdom, trading as Juno ("Juno", "we", "us", "our").

For the purposes of the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and (where it applies to you) the EU GDPR, we are the controller of your personal data. This means we are responsible for deciding how and why your data is used, and for the commitments in this policy.

If you have any questions about this policy or how we handle your data, you can contact us at support@hello-juno.com.

2. A quick summary

We have written this policy in full below, but in short:

3. The personal data we collect

3.1 Information you give us

3.2 Information generated by your use of Juno

3.3 Information collected automatically

3.4 Payment data

When you buy keys (the in-app credit used to open some introductions), payment is processed by Apple (App Store) or Google (Google Play) under their own terms. We do not take payments directly, so we never receive or store your card number. We receive confirmation of your purchase and limited transaction data only.

4. Special-category and sensitive data

Because Juno is a matchmaking service, some of the data we handle is treated as more sensitive and given extra protection under data-protection law. This may include data revealing your racial or ethnic origin, religious or philosophical beliefs, political opinions, health, sex life, or sexual orientation, the biometric data contained in your voice recordings to the extent it is used to characterise you, and the facial image processed for age verification (section 13).

We only process special-category data with your explicit consent, which we ask for separately and clearly during onboarding. Matchmaking needs it: Juno cannot introduce you to anyone without it. You can withdraw your consent at any time in Settings. Withdrawing clears what Juno has learned about you, closes your introductions and deletes your chats with the people you were introduced to (see sections 6 and 9).

Wherever we reasonably can, we let you declare sensitive traits yourself rather than inferring them, so that you stay in control of what is recorded about you.

5. How and why we use your data (purposes and lawful bases)

We use your data only where the law allows. The table below sets out what we do and the lawful basis we rely on under UK GDPR (and EU GDPR where it applies).

What we doLawful basis
Create and run your account; provide the core matchmaking servicePerformance of our contract with you (Art. 6(1)(b))
Process voice recordings and conversation content to build your profile and infer compatibilityExplicit consent for special-category elements (Art. 9(2)(a)); contract for the rest (Art. 6(1)(b))
Choose introductions, scores, and plain-English rationales (automated processing)Contract (Art. 6(1)(b)); explicit consent where special-category data is involved
Verify that you are 18 or over: your date of birth at sign-up, then facial age estimation from a live selfie and, where that is inconclusive, an identity document check, carried out by our age verification provider (section 13)Legal obligation under the Online Safety Act 2023 and our legitimate interests in keeping minors off the service (Art. 6(1)(c)/(f)); your explicit consent, given on the Verify your age page before the check starts, for the processing of your facial image (Art. 9(2)(a))
Keep a record that you agreed to the age check, and of its resultLegal obligation and legitimate interests (Art. 6(1)(c)/(f)): evidence that the check was carried out with your agreement
Keep the service safe: detect fraud, abuse, illegal content, and policy breachesLegitimate interests and legal obligation under the Online Safety Act 2023 (Art. 6(1)(f)/(c))
Process key purchases and maintain your key balanceContract (Art. 6(1)(b)) and legal obligation (record-keeping)
Provide support and respond to your requestsContract and legitimate interests (Art. 6(1)(b)/(f))
Improve and secure the app; analytics and diagnosticsLegitimate interests (Art. 6(1)(f)). You can ask us to switch app analytics off for your account (see section 11)
Send service messages and (where you opt in) marketingContract; consent for marketing (Art. 6(1)(b)/(a))

Where we rely on legitimate interests, we have balanced those interests against your rights and are happy to explain that assessment on request.

6. Automated processing and the in-app assistant

Juno's introductions are chosen by an automated compatibility system. It scores how well you and another person are likely to suit one another across many dimensions, and surfaces a small number of suggestions with a short explanation of the reasoning.

This is automated processing of your personal data, including profiling. It does not produce legal effects or similarly significant effects on you in the sense of decisions about employment, credit, or essential services; it suggests possible introductions, and you remain free to act on them or not. We tell you this plainly because we want you to understand how Juno works.

You have the right to:

Where the EU AI Act applies to you, we also meet its transparency obligations by telling you clearly when you are interacting with an AI system and how your inputs are used.

Two further automated inputs help choose your introductions. First, your profile photos: an AI system screens each upload for safety (this can block a photo that breaches our guidelines). If you choose Calibrate your look, it also records simple, factual appearance descriptors, such as hair colour, general style, or whether you wear glasses, so the system can suggest you to people whose stated and demonstrated preferences you fit. It deliberately records nothing about your body and never produces a rating or attractiveness score of you, and these descriptors are not shown to you or to the people you are introduced to. Second, your in-app photo calibration choices: the preferences you express when reacting to AI-generated example photos are used to model, in general terms, the kinds of appearances you respond to. Both inputs only influence which introductions are suggested, are weighted below personality and compatibility factors, and are covered by the same rights listed above.

6.1 Voice and conversation processing

When you speak to the in-app assistant, your audio is transmitted to Deepgram, our speech-to-text provider, and transcribed. Deepgram does not use your audio to train its models, and we do not store the audio on our servers. The text of what you say, together with the conversation so far and the information the assistant has recorded about you, is then sent to Anthropic, the provider of the AI language model that generates the assistant's replies. Anthropic does not use this content to train its models. The assistant's written replies are converted to speech by ElevenLabs, which receives the text of the replies only and never your voice; Speechmatics performs the same function as a fallback. These providers act as our processors under written contracts (section 7), and some of them are located in the United States (section 8).

6.2 Where your conversations are stored

On current versions of the app, the saved transcript of your conversations with the assistant is encrypted on your device with a key held only there, so we hold no readable copy. To generate a reply, your words pass through our server in memory to the AI provider and are not retained there. Older versions of the app stored those conversations on our servers; those copies are encrypted in transit and at rest by our database provider and are readable by our systems. They remain until you delete your account, and we may delete them sooner. Because the encryption key is held only on your device, moving to a new phone, or reinstalling the app on Android, means the saved transcript cannot be recovered; your profile, your introductions and the information the service has learned about you are unaffected. Messages between you and the people you are introduced to are stored on our servers so that both of you can read them. The app keeps you signed in on your device; if you turn on the app lock in Settings, it requires your face, fingerprint or device passcode before it opens.

6.3 What the service learns from your conversations

At the end of a conversation, the service records profile-style information drawn from it, such as your interests, how you come across and what you are looking for. This recorded information, rather than the words of the conversation, is what the compatibility system uses to choose your introductions. You can view and edit it at any time in Settings.

6.4 Exclusion preferences

You may tell the assistant that there is a kind of person you never wish to be introduced to, for example someone who smokes. The assistant repeats the preference back and asks you to confirm it before it is held, and you can ask at any time which preferences are held for you and change or remove any of them. To apply a preference, the system checks only what other people have said about themselves: their interests, how they spend their time and the answers they gave when they joined. In the same way, what you have said about yourself may be checked against a preference another person has set. Information about health, religion, race, sexuality, politics or similar matters is excluded from this check, and no preference based on such matters is held. Where the system cannot tell, nobody is excluded. Nobody is told that someone has asked not to meet people like them.

6.5 Feedback after an introduction

After an introduction, the assistant may ask how it went. If you answer, the service records structured answers only: whether you met and, if not, why not; whether you would see the person again and, if not, the main reason; how well suited you felt; a one-to-five rating of how it went; which introduction it concerned; and a broad compatibility band. Each answer is selected from a fixed list, never recorded in your words. These answers are stored under a pseudonymous code rather than your account and are deleted with your account. The conversation in which you gave them is not kept.

6.6 Partial key refunds

If you used a key to open an introduction and the conversation did not get going, the service may return half a key to your balance, and the assistant will tell you when it does. This decision is automated and is based on the shape of the conversation only: how many times each of you wrote, the length of the other person's messages, who wrote last and how long the conversation has been inactive, together with whether you have said you met or plan to and whether either of you ended the introduction. The content of the messages is not used. The record kept names only you. This occurs at most a few times a year.

6.7 Safety measures

The following safety checks operate today. Every profile photograph is screened by an automated system when it is uploaded, for nudity, sexual content, violence, hate symbols and spam, and a photograph that fails is removed. Before you send a message to someone you have been introduced to, the app checks it on your device for threats, sexually aggressive language, slurs and pressure and, if it finds something, asks you to reconsider; you may still send it, and that choice is recorded. You can report anyone you have been introduced to. A report blocks that person and closes the introduction for both of you immediately, and a member of our team reads every report. A report includes a copy of up to 500 of your messages with that person so that we can see what happened; we use it only to deal with the report, and it is deleted when either account is deleted. The person reported is not told who reported them, and nobody is restricted on the basis of a single report alone. We aim to review reports within 24 hours. Our full approach, including the automatic restriction of an account reported by several different people, is set out in our Community and Safety Guidelines and section 9 of our Terms of Service.

7. Who we share your data with

We do not sell your personal data. We share it only as set out here.

7.1 Other users

When you are introduced to someone, we share the profile information, photos, and any details you have chosen to make visible, along with the messages you send them. We do not share your contact details, exact location, or the underlying analysis behind an introduction.

7.2 Our service providers (processors)

We use carefully selected providers who process data on our instructions under written contracts. The main ones are:

ProviderWhat they do
AnthropicProvider of the AI language model behind the in-app assistant. Generates the assistant's replies, screens your profile photos for safety, analyses your responses to record traits, and writes the explanation shown with each introduction. Processes the text of your conversations with the assistant, your profile photos, your recorded traits and the facts the assistant has noted about you. Anthropic does not use this data to train its models. Located in the United States.
ElevenLabsText-to-speech provider. Converts the assistant's written replies into speech. Processes the text of those replies only; it never receives your voice. Located in the United States.
DeepgramSpeech-to-text provider. Transcribes what you say to the assistant. Processes your voice audio and the resulting transcript, and does not use your audio to train its models. Located in the United States.
YotiAge verification provider (Yoti Ltd, London). Estimates your age from a live selfie and, where that is inconclusive, verifies a passport or driving licence and compares your face to it. Processes your facial image and, where used, your identity document and the date of birth on it, and returns the result to us. Processes this data in the United Kingdom. See section 13.
SupabaseHosting and database provider. Hosts the app's servers and databases, and stores your account and beta sign-up details securely. Our database is in Ireland (EU).
TwilioPhone verification and text messages. Sends your sign-in codes and any texts we send you. Processes your phone number.
RevenueCatManages in-app purchases. Processes your account ID and what you have bought. It never sees your card details.
SentryCrash reports. When the app goes wrong, it sends a technical report to Sentry’s EU data centre, with device details and IP address. It never includes your messages or your conversations with Juno.
ExpoPush notifications. Delivers notifications to your phone. Processes your device’s notification token and the text of each notification.
SpeechmaticsBackup text-to-speech provider (Cantab Research Ltd, United Kingdom). Converts some of the assistant's spoken replies, and the introductions read aloud in the app, into speech. Current versions of the app send it text only.
CloudflareHosts and delivers this website, and protects it from abuse. Processes technical connection data such as IP address.
Apple / GoogleApp distribution, in-app payments, sign in with Apple or Google if you choose it, and delivery of push notifications, under their own terms.
ResendEmail provider. Sends service and (where you opt in) marketing communications. Processes your name and email address.
TikTokAdvertising measurement on this website, loaded only if you accept cookies. Tells us which ads led to a sign-up. Not used in the app.

We also use two services outside the list above. ntfy is an internal alert service that tells Juno’s founder how the service is running. It receives an account number only, never your name, contact details or messages. This website loads its fonts from Google Fonts, which receives your IP address when a page loads.

A current list of our sub-processors is available on request at support@hello-juno.com.

7.3 Legal and safety disclosures

We may disclose data where we are legally required to, to comply with the Online Safety Act 2023 or other law, to respond to lawful requests from authorities, to enforce our terms, or to protect the rights, safety, and property of our users, the public, or Juno.

7.4 Business transfers

If Juno is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will tell you and ensure your data remains protected.

8. International data transfers

Some of our providers, including our AI and speech providers, are located in or process data in the United States and other countries outside the UK and EEA. When we transfer your data internationally, we put appropriate safeguards in place, such as the UK International Data Transfer Agreement (or the UK Addendum to the EU Standard Contractual Clauses) and, where relevant, reliance on an approved adequacy decision such as the UK Extension to the EU-US Data Privacy Framework.

You can ask us for a copy of the safeguards we use by contacting support@hello-juno.com.

9. How long we keep your data

We keep your data only as long as we need it for the purposes in this policy, and then delete or anonymise it. In general:

CategoryRetention
Account, profile, and trait dataFor as long as your account is active. Deleted straight away when you delete your account in the app. If you ask us by email, we delete it within 30 days.
Voice recordings and transcriptsAudio is processed by our speech provider (section 7) and is not stored on our servers. On current versions of the app, the transcript of your conversations with Juno is encrypted with a key only your phone holds, so our server keeps no readable copy. Conversations with Juno from older versions stay on our server until you delete your account, and we may clear them sooner (see section 6).
Messages between usersFor the life of the account, unless deleted earlier.
Payment and transaction recordsOur records of your purchases are deleted with your account. Apple, Google and our payments provider RevenueCat keep their own records under their own terms.
Beta and waitlist sign-up detailsKept separately from your app account, so deleting your account does not remove them. Kept until you ask us to delete them, or 12 months after Juno launches, whichever comes first.
Record of your consent choicesKept after your account is deleted, as our evidence that we asked you properly. It holds who you are, which wording you saw, what you chose and when.
Age verification imagesYour selfie passes through our server in memory on its way to our age verification provider and is not stored by us. An identity document, where one is needed, is captured by the provider directly and never reaches our servers. We keep only the result, which of the two checks it was, and when.
Age check recordIf you take the age check, the record that you agreed to it and the result are kept for six years after your account is deleted, with a pseudonymised (hashed) form of your phone number and email so the record can be found if a question is raised. After six years the content is deleted and only an anonymous marker that a record existed remains.
Accounts that have not passed the age checkIf you joined before the age check existed, the information the service had already learned about you is frozen until you pass, and your introductions and conversations are paused. If you have not passed 30 days after being asked, that learned information and the messages you sent to the people you were introduced to are deleted and those introductions are closed. The same 30 days apply if you withdraw your agreement to the check.
Accounts found to belong to someone under 18If the identity document check shows a date of birth under 18, the account is closed and its information deleted automatically. If you tell the assistant that you are under 18 before you have passed the check, that statement is kept while a member of our team reviews the account, and deleted once the review is decided.
Safety, moderation, and legal recordsReports and safety flags are kept while both accounts exist, and are deleted when either account is deleted. If a serious safety concern was raised about an account, a pseudonymised note saying which kind of concern it was, never any words, may be kept after deletion. Records kept for a legal claim or a police request are kept until the matter ends.
First name on another person’s recordFor two weeks after an introduction ends, your first name and which introduction it was may stay on the other person’s record, for safety only.

Where you withdraw consent for a particular use, we stop that processing and delete the related data unless we have another lawful basis to keep it.

9.1 What happens when you delete your account

You can delete your account at any time in the app (Settings, then Delete my account). Deletion is immediate and permanently removes your profile, your photographs, your introductions, your messages, any conversations with the assistant still held on our servers, and everything the service has learned about you. The encrypted transcript held on your device is removed with the app. If you no longer have the app, you can ask us to delete your account by email (see our account deletion page); we complete email requests within 30 days.

A small number of records are retained after deletion, each for a stated reason: the record that you gave or withdrew consent (your identity, the version of the wording you saw, what you chose and when), as our evidence that consent was properly obtained; the age check record described above, for six years; anonymised product feedback that no longer identifies you; for two weeks after an introduction ends, your first name and which introduction it was on the other person's record, for safety purposes only; and, if your account was closed for a safety reason or deleted while paused for one, a pseudonymised (hashed) form of your phone number for as long as that restriction stands or until a member of our team has reviewed it. Everything else about you is deleted, including anything written about you on another person's introduction.

10. Your rights

Under UK GDPR (and EU GDPR where it applies), you have the right to:

You can exercise most of these rights inside the app, or by emailing support@hello-juno.com. We will respond within one month. There is normally no charge. We may need to verify your identity first.

If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk, or to your local supervisory authority in the EEA. We would appreciate the chance to resolve your concern first.

11. Cookies, SDKs, and tracking

The Juno mobile app uses software development kits (SDKs) and similar technologies for essential functions and security.

The app also records how its features are used, to help us improve Juno. It is never used for advertising. To switch it off, email us at support@hello-juno.com and we will turn it off for your account.

On this website, we use one non-essential tracker: the TikTok advertising pixel, which tells us which of our ads led to a beta sign-up. It does not load at all unless you choose "Accept" on the cookie banner shown on your first visit. If you choose "Decline", the pixel is never loaded and no advertising cookies are set. Nothing else on this website sets a non-essential cookie. Your choice is remembered in your browser's local storage, and you can change it at any time using the "Cookie settings" link in the footer of any page.

We do not use your data for cross-app advertising tracking without your explicit permission, and where Apple's App Tracking Transparency framework applies, we will only track across other companies' apps and websites with your consent.

12. App Store and Google Play disclosures

To help you compare this policy with the summaries shown on the stores: the Apple App Privacy label and the Google Play Data Safety section describe, at a glance, the categories of data Juno collects, whether they are linked to your identity, and whether they are used for tracking. Those summaries are drawn from and consistent with this policy. Categories we collect include contact info, user content (including voice and messages), identifiers, usage and diagnostics, and, with your explicit consent, sensitive information. We collect this to operate the matchmaking service as described above, and we do not use it for third-party advertising tracking without consent.

13. Age verification and children

Juno is for adults only. You must be 18 or over to create an account, and everyone's age is verified before the service learns anything about them or introduces them to anyone. Until you have passed the check you can talk to the in-app assistant, but nothing from those conversations is kept or learned from.

The check is carried out by Yoti, an age verification provider, after you have agreed to it on the Verify your age page in the app. Yoti first estimates your age from a live selfie. If the selfie cannot confirm that you are over 18, Yoti verifies a photo identity document, such as a passport or driving licence, and compares your face to it. Your selfie passes through our server in memory on its way to Yoti and is not stored by us. Your identity document goes directly to Yoti and never reaches our servers. Yoti returns its age estimate, or the date of birth on your document, and we use it to decide whether you have passed. We keep whether you passed, which of the two checks it was, and when. If the identity document check shows that you are under 18, your account is closed and its information deleted automatically.

Your agreement to the check is recorded as evidence: the words shown to you, the button you pressed, the time and the version of the app. This record is kept for six years after your account is deleted, as set out in section 9. You can decline the check and continue talking to the assistant without being introduced to anyone, and you can withdraw your agreement at any time in Settings or by telling the assistant. If you withdraw, the service stops learning about you, your introductions and conversations are paused, and the withdrawal is added to the record.

If you joined before the age check was introduced, the information the service had already learned about you is frozen until you pass, and your introductions and conversations are paused; if you have not passed 30 days after being asked, that information and the messages you sent are deleted (section 9).

We do not knowingly collect data from anyone under 18. If we learn that someone under 18 has used Juno, we will close the account and delete their data. If you believe a minor is using Juno, contact us immediately at support@hello-juno.com.

14. Security

We use technical and organisational measures appropriate to the sensitivity of the data, including encryption in transit and at rest, access controls, and supplier due diligence. No system is perfectly secure, but we work hard to protect your data and will notify you and the ICO of any breach where we are required to.

15. Region-specific information

15.1 United Kingdom and EEA

This policy is written to meet UK GDPR and, where it applies to you, EU GDPR. Our UK/EU lawful bases are set out in section 5, and your rights in section 10.

15.2 California (CCPA/CPRA)

If you are a California resident, you have rights to know, delete, correct, and limit the use of sensitive personal information, and not to be discriminated against for exercising them. We do not sell or "share" personal information as those terms are defined under California law. To exercise your rights, contact support@hello-juno.com.

16. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you in the app or by email before they take effect. The "last updated" date at the top shows the current version.

17. Contact us

Controller: Matthew Hesketh, an individual trading as Juno, United Kingdom.

Privacy contact: support@hello-juno.com.

UK supervisory authority: Information Commissioner's Office, ico.org.uk.