Privacy Policy

Veya is a dating product where people propose real-world activities and match with others who want to do them. The "data controller" for the information described here is Veya Connect Ltd, a company registered in England and Wales with company number 17317698, registered office 124 City Road, London, England, EC1V 2NX. For any privacy question, contact support@veyadate.com.

• Account data — email address, password hash, date of birth, and authentication provider (e.g. Google) if you use social sign-in.
• Profile data — name, photos, bio, interests, location (city / approximate area), and the activities you propose.
• Usage data — connections, matches, messages, events you join, and device/browser information needed to operate the service.
• Connect in the Moment photos — photos you capture in a chat as part of the Signal Moment ritual are stored by Veya for safety and moderation purposes, including photos that are retaken or never revealed. Access is restricted to our trust & safety team, they are not re-displayed to other members beyond the normal mutual-reveal flow, and they are kept only as long as needed for safety and moderation review (currently up to 90 days) unless a longer period is required to investigate a report or to meet a legal obligation.
• Payment data — for paid tiers on the web, billing is handled by Stripe; in the iOS and Android apps, billing is handled by Apple App Store / Google Play via RevenueCat. We receive only subscription status and transaction metadata — we never see or store full card numbers.
• Device & push data — if you enable notifications in the app, we store a push token from Firebase Cloud Messaging (FCM) (which uses Apple Push Notification service on iOS) so we can send you match and message alerts.

• To create your account, show your profile to potential matches, and run the app.
• To deliver messages, notifications, and match recommendations.
• To keep the service safe — detect abuse, fake accounts, and policy violations.
• To improve Veya through aggregated analytics (we use Google Analytics 4 / Firebase Analytics for app usage measurement).
• To comply with legal obligations and respond to lawful requests.

Our lawful basis for each purpose

• Contract: creating your account, showing your profile, matching, messaging, notifications and paid memberships.
• Legitimate interests: keeping members safe, moderating photos and messages, preventing fraud, fake accounts and abuse, enforcing country restrictions, and securing the service.
• Consent: analytics and advertising cookies, personalised ads, push notifications, precise location and optional profile details you choose to share. You can withdraw consent at any time.
• Explicit consent (special category data): your gender and who you're open to can reveal your sexual orientation, and selfie verification compares facial features (biometric data). We process these only with your explicit consent, given during setup and before verification. You can withdraw it by removing the details or deleting your account.
• Legal obligation: keeping financial records, responding to lawful requests and meeting our Online Safety Act duties.

We use a small number of cookies and browser storage entries. They fall into two categories:

• Essential — keep you signed in, remember your consent choice, protect against CSRF, and load the right preferences. These are always on; without them the app cannot function.
• Advertising & analytics — used by Google Analytics 4 / Firebase Analytics to measure usage, and by Google AdMob in the native app (see next section) to measure and, where you have consented, personalise ads. These are off by default and only enabled if you accept in the consent banner.

With advertising consent, our public website uses the Meta (Facebook/Instagram) Pixel to share page visits and successful UK profile-completion events for ad measurement and optimisation. Meta may receive browser/device information, the page URL, IP address and advertising cookie or click identifiers. We do not send your dating answers, profile photos, name or email with these events, and do not enable customer matching.

We retain your consent choice, time, notice version, anonymous browser reference and detected country in this browser, including previous choices when you withdraw. Advertising events are not sent when you refuse, and events blocked before acceptance are not replayed. Ad blockers and consent choices mean not every ad click can be attributed to a sign-up.

You can withdraw or change consent anytime through Cookie settings. Opening settings does not change your choice until you save it.

Ads are currently disabled on the web. In the native iOS and Android apps, free accounts may see ads served by Google AdMob. Plus, Pulse, and Pulse Plus subscribers do not see ads.

AdMob only receives data and serves personalised ads where you have given consent in the app. Without consent, only non-personalised (contextual) ads may be shown. If you accept, Google may use your interaction with ads to personalise future ads and measure performance, in line with Google's own privacy policy. Apple's App Tracking Transparency prompt governs ad tracking on iOS.

You can opt out of personalised advertising across the web at google.com/settings/ads.

• Other users — your public profile (name, photos, bio, activities) is visible to people you match with or who can browse you.
• Payments — Stripe (web checkout) and RevenueCat (in-app purchase status), with billing itself processed by Apple App Store or Google Play on native.
• Infrastructure & analytics — hosting and database (Lovable Cloud / Supabase), authentication, email delivery, image storage, mapping (Google Maps Platform), push notifications (Firebase Cloud Messaging and Apple Push Notification service), usage analytics (Google Analytics 4 / Firebase Analytics), and ads (Google AdMob), advertising measurement with consent (Meta), VPN and proxy fraud checks at sign-up (Proxycheck.io), transactional email delivery (Lovable managed email), and automated photo, text and selfie checks run through the Lovable AI Gateway and the AI model providers behind it.
• Legal — if required by law, court order, or to protect the rights and safety of users and the public.

We do not sell your personal data.

We keep your account data while your account is active. If you delete your account, your profile disappears straight away and you have 30 days to reactivate; after 30 days your profile and messages are permanently erased. Signal Moment photos are kept for up to 90 days for safety and moderation review. We keep limited records longer only where the law, safety or fraud prevention requires it.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data or update your profile.
• Delete your account and associated data.
• Object to or restrict certain processing, including personalised ads.
• Export your data in a portable format.

To exercise any of these rights, email support@veyadate.com from the address linked to your account.

We use automated tools to rank match suggestions, screen photos and messages for prohibited content, compare verification selfies with profile photos, and limit sign-ups by country or VPN use. Uncertain cases go to a person on our team, and you can ask for any automated decision about you to be reviewed by a person by emailing support@veyadate.com.

Veya is for adults only. You must be 18 or older to create an account. We do not knowingly collect data from anyone under 18; if we learn we have, we delete it.

Our service providers may process your data outside the country you live in, including in the EU and the US. Where required, we rely on standard contractual clauses (SCCs) approved for UK use, together with the UK International Data Transfer Agreement or the UK Addendum to the EU SCCs, or on a UK adequacy decision, alongside the providers' own safeguards.

We may update this policy as the product evolves. Material changes will be announced in-app or by email. The "Last updated" date at the top reflects the latest version.

The data controller for your information is Veya Connect Ltd, a company registered in England and Wales with company number 17317698, registered office 124 City Road, London, England, EC1V 2NX.

Questions, requests, or complaints? Email support@veyadate.com. If you are unhappy with our response you can complain to the UK Information Commissioner's Office (ico.org.uk). If you live in the European Union, you can also complain to the data protection authority in your country.