Privacy Policy

Veya is a dating product where people propose real-world activities and match with others who want to do them. The "data controller" for the information described here is the Veya team. For any privacy question, contact hello@veyadating.app.

• Account data — email address, password hash, date of birth, and authentication provider (e.g. Google) if you use social sign-in.
• Profile data — name, photos, bio, interests, location (city / approximate area), and the activities you propose.
• Usage data — connections, matches, messages, events you join, and device/browser information needed to operate the service.
• Connect in the Moment photos — photos you capture in a chat as part of the Signal Moment ritual are stored by Veya for safety and moderation purposes, including photos that are retaken or never revealed. Access is restricted to our trust & safety team, they are not re-displayed to other members beyond the normal mutual-reveal flow, and they are kept only as long as needed for safety and moderation review (currently up to 90 days) unless a longer period is required to investigate a report or to meet a legal obligation.
• Payment data — for paid tiers on the web, billing is handled by Stripe; in the iOS and Android apps, billing is handled by Apple App Store / Google Play via RevenueCat. We receive only subscription status and transaction metadata — we never see or store full card numbers.
• Device & push data — if you enable notifications in the app, we store a push token from Firebase Cloud Messaging (FCM) (which uses Apple Push Notification service on iOS) so we can send you match and message alerts.

• To create your account, show your profile to potential matches, and run the app.
• To deliver messages, notifications, and match recommendations.
• To keep the service safe — detect abuse, fake accounts, and policy violations.
• To improve Veya through aggregated analytics (we use Google Analytics 4 / Firebase Analytics for app usage measurement).
• To comply with legal obligations and respond to lawful requests.

We use a small number of cookies and browser storage entries. They fall into two categories:

• Essential — keep you signed in, remember your consent choice, protect against CSRF, and load the right preferences. These are always on; without them the app cannot function.
• Advertising & analytics — used by Google Analytics 4 / Firebase Analytics to measure usage, and by Google AdMob in the native app (see next section) to measure and, where you have consented, personalise ads. These are off by default and only enabled if you accept in the consent banner.

You can change your choice at any time by clearing the veya-consent-v1 entry in your browser storage, which will make the consent banner reappear.

Ads are currently disabled on the web. In the native iOS and Android apps, free accounts may see ads served by Google AdMob. Plus, Pulse, and Pulse Plus subscribers do not see ads.

AdMob only receives data and serves personalised ads where you have given consent in the app. Without consent, only non-personalised (contextual) ads may be shown. If you accept, Google may use your interaction with ads to personalise future ads and measure performance, in line with Google's own privacy policy. Apple's App Tracking Transparency prompt governs ad tracking on iOS.

You can opt out of personalised advertising across the web at google.com/settings/ads.

• Other users — your public profile (name, photos, bio, activities) is visible to people you match with or who can browse you.
• Payments — Stripe (web checkout) and RevenueCat (in-app purchase status), with billing itself processed by Apple App Store or Google Play on native.
• Infrastructure & analytics — hosting and database (Lovable Cloud / Supabase), authentication, email delivery, image storage, mapping (Google Maps Platform), push notifications (Firebase Cloud Messaging and Apple Push Notification service), usage analytics (Google Analytics 4 / Firebase Analytics), and ads (Google AdMob).
• Legal — if required by law, court order, or to protect the rights and safety of users and the public.

We do not sell your personal data.

We keep your account data while your account is active. If you delete your account, we remove your profile and messages from active systems within 30 days, except where we are required to retain limited records for legal, safety, or fraud-prevention reasons.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data or update your profile.
• Delete your account and associated data.
• Object to or restrict certain processing, including personalised ads.
• Export your data in a portable format.

To exercise any of these rights, email hello@veyadating.app from the address linked to your account.

Veya is for adults only. You must be 18 or older to create an account. We do not knowingly collect data from anyone under 18; if we learn we have, we delete it.

Our service providers may process your data outside the country you live in, including in the EU and the US. Where required, we rely on standard contractual clauses and the providers' own safeguards to protect that data.

We may update this policy as the product evolves. Material changes will be announced in-app or by email. The "Last updated" date at the top reflects the latest version.

Questions, requests, or complaints? Email hello@veyadating.app.