This is a template for development and does not constitute legal advice. Review by qualified counsel is required before production use.

Legal

Privacy Policy

Privacy is the product. This policy explains exactly what Veyora collects, why, how long we keep it, and how you stay in control — including permanent deletion.

Last updated July 7, 2026

1. Overview

Veyora (“we”, “us”) is a privacy-first, AI-moderated nearby dating service for adults aged 21 and over. This Privacy Policy describes how we handle personal data when you use our website and progressive web app (the “Service”). It should be read together with our Terms of Service.

Two principles drive our design: we collect the minimum needed to run a safe service, and you decide who can see you. You start invisible and become visible only when you choose.

2. Data we collect

We collect only the categories of data listed below.

Sign-in identifier

Your mobile number or email address, used to send a one-time code (OTP) and to authenticate you. Veyora is passwordless — we do not store a password.

Age & basic details

Your date of birth (to confirm you are 21+ — it is never shown publicly), your gender, and who you are looking to meet.

Profile

The profile information you add (such as display name, bio, and preferences) and your visibility settings.

Photos & voice

Photos you upload and voice messages you send. Media objects are stored in our object storage (MinIO / S3-compatible). Blurred previews are display-time derivatives of your photos.

Approximate location

A coarse geohash and city label used to show approximate distance. We never store or share your exact coordinates. See the next section.

Verification signals

Whether you have completed phone and selfie verification and (for men) a Respect Check. These power your Trust Passport.

Chat messages

Text and voice messages you exchange within a match, plus AI-moderation metadata (such as a risk score and moderation status) generated when a message is sent.

Safety reports

If you report someone, we store the report, its category, your note, and recent messages attached as evidence, together with blocks and passes.

Product-analytics events

Stable event keys (e.g. a page view or a signup step) with a small properties blob and an optional session id, used to understand and improve the funnel.

Campaign attribution

The source / campaign that referred you (for example, marketing UTM values), so we understand where members come from.

Device & push

If you enable notifications, a Web Push subscription for your device (endpoint and keys) and your notification preferences.

Technical logs

Limited operational logs (e.g. timestamps, error and security events) needed to run, secure, and debug the Service.

We do not sell your personal data, and we do not collect data we do not need to operate the Service.

3. Location: approximate only

Location privacy is a core invariant of Veyora. We convert location into a coarse geohash and a city label so we can show approximate distance and city. Your precise GPS coordinates are never stored in your profile and are never shown to other members. You can further limit distance visibility in your settings.

4. How we use your data

Authenticate you and keep your account secure (OTP sign-in, rate-limiting, abuse prevention).
Operate core features: build your profile, show approximate distance, surface and filter requests, and enable matches and chat.
Keep members safe: run AI moderation on messages, verify identities, review reports, and enforce our Community & Safety Guidelines.
Send communications you have enabled, such as new-request and safety notifications.
Improve the Service using aggregated product-analytics and campaign attribution.
Comply with law and enforce our Terms.

5. Legal bases (GDPR)

Where the EU/UK General Data Protection Regulation applies, we rely on the following legal bases:

Contract — to provide the Service you signed up for (account, profile, matching, chat).
Legitimate interests — to keep the platform safe, prevent fraud and abuse, and improve the Service, balanced against your rights.
Consent — for optional processing such as push notifications; you can withdraw consent at any time.
Legal obligation — to comply with applicable laws and lawful requests.

7. Retention

We keep personal data only as long as needed for the purposes above. In practice, account data is retained while your account is active; messages and media are retained for the life of the relevant match or until you delete them or your account; safety reports may be retained longer where needed to protect members or meet legal obligations; and analytics data is retained in aggregated or limited form. When data is no longer needed, we delete or anonymise it.

8. Deletion & your rights

You can delete your account at any time from your account settings. Deletion is permanent: we remove your account and associated database records — including your likes, passes, matches, messages, reports, and blocks — and we purge your media objects from storage, including your uploaded photos, their blurred derivatives, and your voice messages. Some limited records may be retained only where the law requires or to resolve disputes and enforce our agreements.

Depending on where you live, you may also have the right to:

access the personal data we hold about you and receive a copy;
correct inaccurate data;
erase your data (“right to be forgotten”);
restrict or object to certain processing;
data portability;
withdraw consent for consent-based processing at any time.

To exercise these rights, contact privacy@joinveyora.com. We will respond within the time required by applicable law.

9. Security

We use technical and organisational measures appropriate to the sensitivity of the data, including passwordless authentication, access controls, encryption in transit, and restricted media access. No system is perfectly secure, so we cannot guarantee absolute security; please help by keeping access to your sign-in number or inbox secure.

10. International transfers

We and our service providers may process data in countries other than yours. Where we transfer personal data across borders, we use appropriate safeguards required by applicable law (such as standard contractual clauses). The governing jurisdiction is [Operating entity & jurisdiction — to be set by counsel].

11. No under-21s

Veyora is exclusively for adults aged 21 and over and is not directed to anyone under that age. We do not knowingly collect data from anyone under 21. If we learn that an underage person has created an account, we will remove it and delete the associated data. See the Age & Consent Policy.

12. Changes

We may update this Privacy Policy. When we make material changes we will update the “Last updated” date (July 7, 2026) and, where appropriate, notify you in the Service.

13. Contact & complaints

For any privacy question or to exercise your rights, contact our privacy team at privacy@joinveyora.com. If you are in the EU/UK and believe we have not handled your data properly, you also have the right to complain to your local data-protection authority. The identity of the data controller and any EU/UK representative must be confirmed by counsel before launch.