Law Enforcement Policy

Last updated: 7 October 2026

This page is Cpycat's law-enforcement policy. It explains how law enforcement and public authorities request information from us and how we respond.

These guidelines explain how law enforcement and other public authorities can request information from Cpycat Ltd (England and Wales, company number 17123542; registered office 71-75 Shelton Street, Covent Garden, London WC2H 9JQ), which operates cpycat.com.

How to contact us

Send requests to cpycatcc@gmail.com with "Law enforcement request" in the subject line. Requests must come from an official agency email address and identify the agency, the requesting officer, the legal basis for the request, the account concerned (email address, display name or profile link) and the specific information sought. We acknowledge requests within 2 business days and respond within 5 business days. We do not accept requests from private parties under these guidelines; private parties should use civil legal process.

What we require before disclosing member data

We disclose member data only in response to valid legal process under the laws of England and Wales (for example a court order or a statutory request that obliges or permits disclosure), or an equivalent process from another jurisdiction served through mutual legal assistance. We review every request for validity and scope and may seek clarification or narrow a request that is overbroad. This does not limit the reports we make ourselves under "Child safety" and "Zero tolerance", which contain only what the authority needs to act.

Emergency requests

Where we believe in good faith that there is an imminent risk of death or serious physical injury to any person, we may disclose limited information without legal process, as UK data protection law permits. Put "EMERGENCY" at the start of the subject line and describe the nature of the emergency; we aim to respond within 24 hours.

Preservation requests

On receipt of a valid preservation request we will preserve the specified account data for 90 days, extendable once, pending legal process.

What information we hold

Depending on the account: sign-in email address, display name, date of birth, profile details and preferences, uploaded photographs, voice recordings and personality data used to build the member's clone, records of simulated dates and compatibility reports, matches and introduction contact details, subscription status and payment metadata (card details are held by Stripe, not by us), and technical logs. Retention periods are set out in our Privacy Policy.

Notice to members

We notify members of requests for their data before disclosure unless we are legally prohibited from doing so, the request is an emergency, or notice would risk harm to a person or the integrity of an investigation.

Child safety

We report suspected child sexual abuse material and attempts to contact minors to the relevant authorities and cooperate fully with their investigations.

Whenever we identify child sexual abuse material (CSAM), child sexual exploitation or human trafficking, we immediately preserve the evidence — the account, the content concerned and the related records and, so far as we hold them, logs — under a legal hold, so that it cannot be deleted, including by the account holder. We restrict access to it and retain it securely until the authorities confirm it is no longer needed. In addition, we report it without delay to law enforcement and safeguarding authorities: the National Crime Agency (including CEOP) where a child is concerned, the Internet Watch Foundation (for imagery), the police and, where appropriate, the National Center for Missing & Exploited Children (NCMEC). Preserving evidence never delays a report.

Zero tolerance

Cpycat has zero tolerance for human trafficking, sex trafficking, commercial sexual services and the sexual exploitation of adults. Commercial sexual services include prostitution, escorting and any offer or request to exchange sexual acts for money, gifts or anything else of value. All of these are prohibited on Cpycat in every form, including through a profile, a clone, a simulated date or a shared contact detail. When we identify any of them, we suspend the account at once, remove the content from the Platform, preserve the evidence as described under "Child safety", and report it to the police and the relevant authorities.