Privacy policy
What we collect
| Data | Why | Kept for |
|---|---|---|
| Email address, or an Apple / Google sign-in identifier | To create and secure your account | Until you delete your account |
| Display name, birthdate, bio, tags, height | To show your profile. Only your age is shown, never your birthdate | Until you delete your account |
| Photos you upload | To show your profile. Every photo is automatically screened for nudity and violence | Until you remove them or delete your account |
| Verification selfie (optional), and the result of comparing it with your grid photo | To give your profile a verified badge. See Photo verification and face data | Deleted when verification fails, at the latest after 90 days; otherwise until you take a new selfie or delete your account |
| Your most recent location, while the app is open | To show people near you and a rounded distance to them. We keep only the latest point, never a history | Replaced each time it updates; deleted with your account |
| Messages you send and receive | To deliver them | 30 days, unless either person favourites the conversation |
| Taps, blocks and reports | To run those features and keep the service safe | Until you delete your account; reports may be kept longer for safety records |
| Push notification token, device type | To deliver notifications | Removed after 90 days without use |
| Crash reports and usage events (sign-in, photo uploaded, message sent) | To fix bugs and understand what works. Tied to your account id, not your name or email | 90 days |
Who processes it for us
| Provider | What they do | Where |
|---|---|---|
| Supabase | Database, sign-in, real-time messaging | United Kingdom (London) |
| Cloudflare | Photo storage and delivery, website | Global edge network |
| Amazon Web Services (Rekognition) | Automated screening of every uploaded photo, and comparing a verification selfie with your grid photo | United Kingdom (London) |
| Expo | Push notification delivery to Apple and Google | United States |
| Sentry | Crash reports | European Union (Frankfurt) |
| PostHog | Usage analytics | European Union |
| Apple, Google | Sign-in and in-app purchases | Per their policies |
We do not sell your data and do not show advertising.
What other users see
Your display name, age, bio, tags, public photos, whether you were active recently, and a distance to you rounded to the nearest hundred metres with random noise added, or nothing if you hide your distance. Private album photos are shown only to people you choose, for the period you choose. Nobody sees your coordinates, email, or birthdate.
Photo verification and face data
Verification is optional. If you choose to verify, you take one selfie with the front camera in the app. Amazon Rekognition checks that the selfie contains exactly one face and measures how similar that face is to the face in your grid photo. We use the result only to decide whether to show a verified badge on your profile. We do not use face data for advertising, profiling, identifying you, or any other purpose, and we never sell it or share it with anyone else.
We store the selfie in a private, encrypted storage bucket in the United Kingdom (London). Other users never see it; only our moderation team can see it, when a borderline result needs a human decision. We keep only the selfie and the result (the number of faces found, a similarity score and the outcome). We do not create or keep face templates, faceprints or any other biometric identifier. Amazon processes the images on our behalf, in London, only to return the comparison.
Retention: if verification fails, the selfie is deleted automatically, at once or at the latest after 90 days. If it succeeds, we keep the selfie while your badge is active so that the badge can be reviewed if it is disputed, and it is deleted automatically when you take a new selfie or delete your account.
Your rights
- Access and portability: Profile → Download my data gives you everything we hold, as a file, immediately.
- Deletion: Profile → Delete account removes your profile, photos, messages and sign-in immediately. Without the app, use the deletion request page.
- Correction: edit your profile at any time.
- Objection and complaint: write to [email protected], or to your local data-protection authority.
Age
Gadius is for people aged 18 and over. We ask for your birthdate at sign-up and remove accounts that state a false one.
Changes
We will announce material changes in the app before they take effect.