Privacy Policy

1. Who we are

Vybe Date is a mobile and web app that helps people meet through the events they’re both going to. This policy covers the app at vybe.date and its supporting services. For anything about your data, write to vybe.date@gmail.com.

2. What we collect

Only what the app needs to work, and nothing bought or gathered from anywhere else.

Account and identity

• Name, email address, and a hashed (never plain-text) password, or your Google account details if you sign in with Google.
• Birth date and gender — used to confirm you’re 18 or over and to run the hard filters in matching.

Profile

• Photos and your profile picture.
• Interests, height, education, lifestyle habits, and the partner preferences you set for matching.
• A verification selfie and its pass/fail result, if you complete face verification.

Location

• The area, city and country you type in, or that we work out from your device location.
• If you allow it, your device’s GPS coordinates — rounded to roughly 110 metres and used only to measure distance for matching. It is never shown to other people, who only ever see your city.

Activity

• The events you swipe on, your matches, and the connections you accept, reject or block.
• Messages you send in chat, and when you’ve read a message.

Technical

• Your IP address and basic device/browser information, logged for security and abuse prevention.
• The login session stored on your device so you stay signed in.

3. Why we collect it, and our legal basis

We process your personal data on the basis of the consent you give when you create your account, for these purposes:

• Running your account — signing you in, keeping your session secure, and letting you edit or delete your profile.
• Matching — scoring compatibility between you and other people going to the same event, using your profile, interests, habits, preferences and distance.
• Events and chat — showing you relevant events, and delivering messages once you’ve matched with someone.
• Safety — running face verification, and reviewing reports of abuse or fake accounts.
• Support and legal compliance — responding to you, and meeting our obligations under the DPDP Act, consumer protection law, and other applicable regulation.

You can withdraw your consent at any time by deleting your account (see Your rights). Withdrawing consent doesn’t undo processing we already did before you withdrew it, and it means we can no longer provide the parts of the service that depend on that data.

4. Who we share it with

We never sell your personal data. It is shared only in these ways:

• People you’ve matched with see a limited version of your profile — your name, age, photos, interests, education, habits and verification badge. They never see your email, exact address, coordinates or your search preferences.
• Service providers who process data on our behalf under contract: our image hosting and delivery provider (photos and videos), our database and app hosting providers, our email provider (for OTPs and account emails), and OpenStreetMap’s Nominatim service (to turn coordinates or a typed address into an area/city/country — it receives only the coordinates or text needed for that one lookup).
• Google, if you choose to sign in with a Google account.
• Law enforcement or regulators, only when we’re legally required to, or to protect the rights, property or safety of our users or the public.

5. How long we keep it

We keep your data for as long as your account is active, or as long as we need it for the purposes above — whichever is relevant.

When you delete your account, we permanently erase your profile and photos, every direct conversation and message you’re part of (for the other person too), your matches and connections, your swipe history, and remove your membership from any event group chats. Your login session is also invalidated immediately. A short trail of records may be kept only where the law requires it (for example, fraud or dispute records), and only for as long as that requirement lasts.

6. Your rights as a Data Principal

Under the DPDP Act, you have the right to:

• Access a summary of the personal data we hold about you and how we process it.
• Correct, complete or update inaccurate or outdated data — most of this you can edit directly in your profile.
• Erase your personal data, by deleting your account from the Profile screen at any time.
• Withdraw your consent to our processing, as easily as you gave it.
• Nominate another individual to exercise these rights on your behalf if you die or become incapacitated.
• Grievance redressal — raise a complaint with us first (see Grievance Officer & contact), and take it to the Data Protection Board of India if you’re not satisfied with our response.

To exercise any of these, other than deleting your account yourself, write to us at the address in section 13.

7. How we protect it

• Passwords are hashed, never stored in plain text.
• Traffic between the app and our servers is encrypted (HTTPS).
• Device location is rounded before it’s stored, so it can’t pinpoint your home.
• Other people’s photos on the app resist right-click, drag and long-press saving, and are served as resized copies rather than full-resolution originals.
• Access to personal data inside our systems is limited to what each part of the app needs to function.

No system is perfectly secure, and we can’t guarantee absolute security — but we work to keep these protections current.

8. Age requirement

Vybe Date is for people 18 and older only. We check this at sign-up and don’t knowingly collect data from anyone under 18. If we learn an account belongs to someone under 18, we suspend it and delete the associated data.

9. Where your data is processed

Some of the service providers listed in section 4 may process data on servers outside India. The DPDP Act allows this except to countries the Central Government specifically restricts, and we choose providers that maintain appropriate safeguards for personal data.

10. Cookies and local storage

We don’t use third-party advertising or tracking cookies. The app stores your login session, and, while you’re signing up, your in-progress answers, in your browser’s local storage so you don’t lose them on a refresh. This data stays on your device and is never sent to anyone but our own servers.

11. If something goes wrong

If a personal data breach affects you, we will notify the Data Protection Board of India and affected users as required under the DPDP Act, describing what happened and what we’re doing about it.

12. Changes to this policy

We may update this policy from time to time. The version and effective date at the top of this page always reflect the current one. For material changes — anything that changes what we collect or why — we’ll let you know in the app, and ask for fresh consent where the law requires it.

13. Grievance Officer & contact

For privacy questions, to exercise your rights, or to raise a formal grievance under the DPDP Act, write to our Grievance Officer at vybe.date@gmail.com. We aim to acknowledge every grievance within 7 days and resolve it within 30 days.