Consumer Apps · LGBTQ dating / social app · Regulatory action + Private litigation

Grindr

Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.

Grindr is the clearest case in this tracker of an app whose mere use reveals sensitive data: Norway's data protection authority held that sharing Grindr users' data with advertisers disclosed special-category data (sexual orientation) without a valid legal basis, and fined it NOK 65 million in December 2021. Grindr lost at every level - the Privacy Appeals Board (2023), Oslo District Court (2024) and Borgarting Court of Appeal (October 2025) - and paid the fine in February 2026. Separately, about 12,000 UK users sued in the High Court alleging Grindr shared HIV status and last-test dates with ad-tech firms before 2020; Grindr settled on September 2, 2026 for GBP 26 million with no admission of liability.

Severity
Evidence tierUnassigned
Claims confirmed
Last verified2026-10-16

Primary source. www.sec.gov/Archives/edgar/data/1820144/000182014426000027/grnd-20260902.htm — Unverified - heuristic first draft.

Freshness. Last verified 23 days ago (2026-10-16); stale after 180 days.

Terms

Arbitration

Yes - individual AAA Consumer arbitration (ToS Sec. 21.4) after a 45-day informal dispute process (Sec. 21.2); class, collective and representative actions and jury trial waived (Sec. 21.15); batch arbitration at 25+ similar demands (Sec. 21.9). FAA plus California law; court claims in Los Angeles County.

Opt-out window: 31 days. 31-day opt-out window from sign-up. Recorded as: 31 days after first accepting the terms (new users) or after posting of material changes to the arbitration provision (existing users). Method: user must personally email arbitrationoptout@grindr.com with legal name, mailing address, account email(s) and a copy of signature; third-party opt-outs not effective (ToS Secs. 21.13-21.14)..

Data sharing

FINAL REGULATORY FINDING (Norway): disclosure of personal data to third-party advertisers without legal basis (GDPR Art. 6(1)) and of special-category data without exemption (Art. 9(1)); NOK 65M fine upheld through Court of Appeal, paid Feb. 2026; Grindr disputes ~NOK 16.8M of interest. ALLEGED (UK, settled, no admission): HIV status, last-test date and possibly PrEP use shared with advertising companies and third parties pre-2020. REPORTED: location data sold through ad networks 2017-2020 (WSJ via Wikipedia). Pending: PurposeMed/Freddie HIV-prevention telehealth acquisition.

Who holds your data. Data chain: Grindr, then Grindr Inc. (public, NYSE: GRND); ›50% beneficially owned by director G. Raymond Zage III (parent).

Fees and billing

Paid subscriptions offered; ToS Sec. 24 lists P.O. Box 69176, West Hollywood, Attn: Cancellations for cancellation notices. Renewal and refund mechanics not fully reviewed this pass.

Contacts

Privacy contact. help@grindr.com (general notices, ToS Sec. 27.8); privacy-specific contact not verified this pass

Legal notice. Grindr LLC, P.O. Box 69176, West Hollywood, CA 90069 (ToS Sec. 27.8); arbitration notices to disputes@grindr.com. SEC business address: 750 N. San Vicente Blvd., Suite RE 1400, West Hollywood, CA 90069.

Mailing address. Not recorded.

Paper trail: written. Written channel present.

Evidence

No claims have been itemized for this row yet.

Sources

Source	Claim	Tier	Status	Quote
SEC Form 8-K Item 8.01 · 2026-09-04 www.sec.gov/Archives/edgar/data/1820144/000182014426000027/grnd-20260902.htm	whole row	Unassigned	confirmed	“The settlement includes no findings or admission of liability.” Quote basis: not recorded.
SEC Form 10-Q (Q2 2026), Note 14 · 2026-08-07 www.sec.gov/Archives/edgar/data/1820144/000182014426000025/grnd-20260630.htm	whole row	Unassigned	confirmed	“In October 2025, the Norwegian Appeals Court upheld the administrative fine of 65,000 NOK.” Quote basis: not recorded.
SEC Form 8-K · 2026-09-30 www.sec.gov/Archives/edgar/data/1820144/000182014426000033/grnd-20260930.htm	whole row	Unassigned	confirmed	“PurposeMed is the parent company behind the Freddie brand, a leading telehealth provider of PrEP and HIV prevention care” Quote basis: not recorded.
News report · 2026-09-07 www.attitude.co.uk/news/grindr-agrees-26m-settlement-with-uk-users-hiv-status-533551/	whole row	Unassigned	confirmed	“it recognises and acknowledges the distress and loss of trust expressed by some of its UK users” Quote basis: not recorded.
News report · 2025-10-21 www.grcreport.com/post/norwegian-court-upholds-fine-against-adult-dating-app-over-data-privacy-violations	whole row	Unassigned	confirmed	“This is a fundamental and important decision for the right to data protection” Quote basis: not recorded.
Wikipedia · 2026-10-16 en.wikipedia.org/wiki/Grindr	whole row	Unassigned	confirmed	“Grindr's user location data has been collected and sold through a digital advertising network since 2017” Quote basis: not recorded.
Company terms (2026 Terms of Service) · 2026-10-16 trust.grindr.com/en-US/legal	whole row	Unassigned	confirmed	“arbitrationoptout@grindr.com” Quote basis: not recorded.

Source vault

Link status: Candidate - not yet fetched

Document	Last fetch	PDF
Privacy policy https://www.grindr.com/privacy-policy/	Not fetched yet	NOT CONFIRMED
Terms of service https://trust.grindr.com/en-US/legal	Not fetched yet	NOT CONFIRMED
Website https://www.grindr.com	Not fetched yet	—
Primary source https://www.sec.gov/Archives/edgar/data/1820144/000182014426000027/grnd-20260902.htm Verification: Unverified - heuristic first draft	Not fetched yet	—

Enforcement

No enforcement actions are linked to this row.

State statute

Headquarters on file: CA. Provisions of CCPA/CPRA on file:

Provision	Type	Source
Right to Deletion Cal. Civ. Code § 1798.105	hard	source
Right to Correction Cal. Civ. Code § 1798.106	hard	source
Right to Know / Access Cal. Civ. Code § 1798.110	hard	source
Right to Limit Use of Sensitive Personal Information Cal. Civ. Code § 1798.121; Cal. Code Regs. tit. 11, § 7027	hard	source
Right to Data Portability Cal. Civ. Code § 1798.130(a)(3)(B)(iii)	hard	source
Privacy Policy / Privacy Notice Requirements Cal. Civ. Code § 1798.130(a)(5); Cal. Code Regs. tit. 11, § 7011	hard	source
Sensitive Personal Information — Categories Cal. Civ. Code § 1798.140(ae)	hard	source
Service Provider and Contractor Contract Requirements Cal. Civ. Code § 1798.140(ag); Cal. Code Regs. tit. 11, § 7051	hard	source
Applicability Threshold (2025 CPI-Adjusted) Cal. Civ. Code § 1798.140(d)	threshold	source
Privacy Risk Assessment — Mandatory for High-Risk Processing (Eff. Jan. 1, 2026) Cal. Civ. Code § 1798.185(a)(15); Cal. Code Regs. tit. 11, §§ 7150-7157	hard	source
Right to Opt Out of Sale or Sharing Cal. Civ. Code §§ 1798.120, 1798.135	hard	source
Sale vs. Sharing Distinction Cal. Civ. Code §§ 1798.140(ad), 1798.140(ah)	hard	source
Enforcement — CPPA and AG; Civil Penalties (2025 CPI-Adjusted) Cal. Civ. Code §§ 1798.155, 1798.199.90; Cal. Bus. & Prof. Code § 17206	hard	source
Notice at Collection Cal. Code Regs. tit. 11, § 7012	hard	source
Cybersecurity Audit — Annual Independent Audit Requirement (Eff. Jan. 1, 2026) Cal. Code Regs. tit. 11, §§ 7120-7124	hard	source
Automated Decision-Making Technology (ADMT) — Notice, Opt-Out, and Access Rights Cal. Code Regs. tit. 11, §§ 7200-7222; Cal. Civ. Code § 1798.185(a)(16)	hard	source