Privacy Policy — Match Your Vibe
Effective date: 8 October 2026

1. Who we are
Match Your Vibe, also known as Veil, is an adult dating and social discovery service operated by GeomJe Lim. This policy covers the app, its supporting services and privacy requests. Contact: [email protected].

2. Information we collect
Account information: service and social-provider account identifiers, sign-in sessions, consent records, account status and security records. Google, Apple or Facebook authenticate your chosen account; we do not receive your password for those services. If you use an enabled email/password or phone feature, we process the contact details and verification information you provide. Passwords are stored as hashes.
Profile information: date of birth, gender, nickname, height, introductions, dating intentions, preferences and optional profile fields. Information about your interests, dating preferences or content may reveal sensitive personal information. Do not include information you do not want shared at the relevant profile stage.
Location: precise device location, with your permission, for discovery, approximate distance and location-based settings. We store the latest submitted location. Other users receive approximate distances and broad region labels, not exact coordinates or an address. Location permission is required for discovery; we do not provide continuous background location tracking.
Content and activity: photos and audio you upload, strengths and tags, likes, passes, matches, messages, question answers, reactions, read/open states, reveal choices and discovery impressions.
Safety and support: reports, relevant conversation context and media evidence, moderation decisions, appeals and support correspondence.
Technical information: device/session identifiers, push notification tokens, platform and notification settings, connection metadata, diagnostic events and security logs. Network services receive your IP address when you connect. If a store purchase feature is used, we process purchase identifiers, verification data and subscription status; the app store handles payment-card details.

3. How we use information
We process information to provide accounts and profiles, check adult eligibility, apply discovery preferences, match users, reveal profile information progressively, deliver messages and notifications, respond to requests, investigate abuse and maintain service security and reliability. Discovery activity supports recommendation rules. We do not use private chat, photo or audio content to train recommendation models. We do not sell personal information or use it for cross-context behavioral advertising.
Where applicable law requires a legal basis, we rely on providing the requested service, consent where required for optional or sensitive processing, legitimate interests in safety and service reliability, and applicable legal obligations. Device permission alone does not replace any additional consent required by law. You may withdraw consent or object to processing by contacting us; this may affect the related features.

4. Who can see information
Other users see your information according to the app's reveal stages and your interactions. Discovery can show nickname, age, broad region, approximate distance, activity information, dating intention and one strength. Mutual matching reveals additional profile information. Later mutual choices reveal more. Messages are shared with their recipients. People may retain copies outside the app; we cannot guarantee prevention of screenshots or external recordings.
Authorized operators review profiles and reports for safety and support. Reported-conversation access is limited to relevant context and recorded in audit logs. Messages are not end-to-end encrypted; service-side processing and permitted moderation access are possible.
We use service providers for sign-in, notifications and communication. Google, Apple and Meta process your sign-in interactions under their respective policies. Firebase Cloud Messaging and Apple's notification services process delivery tokens and notification data. Emails sent to our contact address are processed through Google's email service. We use Microsoft Azure AI Content Safety to assess processed copies of uploaded profile photos (including photos used in highlights) and chat photos for sexual content, violence, hate and self-harm. The image-analysis request contains image content and analysis settings; we do not add account identifiers, contact details, location, chat text or audio to that request. Images themselves may contain identifying information. Veil retains moderation scores, decisions and diagnostic metadata associated with the submitted media, and authorized Veil moderators may review flagged content. Microsoft states that submitted images are not stored by this service or used to train its Content Safety models. Automated assessment may be followed by human review; it does not guarantee that all unsafe content will be detected.
Provider policies: https://policies.google.com/privacy ; https://www.apple.com/legal/privacy/ ; https://www.facebook.com/privacy/policy/ ; https://firebase.google.com/support/privacy ; https://privacy.microsoft.com/privacystatement ; https://learn.microsoft.com/en-us/azure/foundry/responsible-ai/content-safety/data-privacy .
We may disclose information when required by applicable law, to respond to valid legal requests, or when necessary to protect people and the service. Changes of operator or material changes in processing will be communicated as required.

5. Storage and international processing
The current closed beta stores application data and uploaded media on an operator-managed server in South Korea.
Azure image analysis takes place in the region selected for our Azure Content Safety resource; this may involve processing outside your country. Sign-in, email and notification providers operate internationally and may process data outside your country, including the United States. Applicable protections differ by country. Contact us for information about the arrangements relevant to your account. This notice does not waive any rights or transfer safeguards required by applicable law.

6. Retention and account deletion
We keep active account and profile information to provide the service. You can request withdrawal in the app's account settings. Your profile is hidden and new interactions are restricted immediately. There is one 30-day grace period: signing back in during it restores the account. When the period ends, the deletion job permanently clears account contact/login linkage, profile details, location/preferences, strengths, sessions, authored chat and custom-question content, and ordinary discovery/interaction history. Owned photos and recordings are queued for physical removal. Background jobs retry failures, so physical removal is not necessarily instantaneous at the deadline. Encrypted provider authorization data may remain temporarily while revocation is retried, and is removed when that work completes.
Other people's authored messages are not automatically erased by your withdrawal. Minimal internal identifiers and relationship placeholders may remain to preserve references. Blocking, report, moderation, audit and transaction records may remain for safety, accountability, dispute handling and applicable recordkeeping obligations. These records are access-controlled and are not described as anonymous. Some do not have an automatic expiry; you may request a review and deletion of information no longer needed for those purposes.
Ordinary chat photos and voice recordings normally expire after 90 days. One-time photo access ends after viewing or the fallback expiry. Separately preserved report evidence is retained while a report is unresolved and normally removed 90 days after resolution. Reviewed appeal text is normally cleared after 90 days. Incomplete registration records expire after 30 days. A preservation obligation may require longer retention for a specific matter.
Operational logs are used for diagnostics and security and do not intentionally contain passwords, tokens, raw message bodies or media. Log files are replaced or removed as part of maintenance rather than being erased through individual account deletion. The current closed beta does not maintain separate database or media backups. We will update the retention information before introducing a backup arrangement.

7. Your controls and requests
You can edit supported profile fields, change notification settings, revoke device permissions, block/report users and request account withdrawal. Camera, microphone and photo access support the media features you choose to use. Revoking permission stops future access through that permission but does not itself delete information already submitted.
To request access, correction, deletion or assistance without signing in, email [email protected] with the subject “Match Your Vibe privacy request” or “Match Your Vibe account deletion”. Give your account nickname and the sign-in provider you used, and explain your request. We may ask for proportionate verification before acting. Do not send passwords, verification codes or identity documents. We will respond within the period required by applicable law and explain any applicable retention exception. Uninstalling the app does not delete your account.
Depending on your location, you may have rights to access, correction, erasure, restriction, objection, portability and withdrawal of consent, and to complain to your local data-protection authority. You can exercise applicable rights without discrimination. Requests about information independently held by a sign-in, payment or email provider should also be directed to that provider.

8. Adults only
The service is for people aged 18 or older. Birth-date and adult-confirmation checks are not government-ID or biometric verification. Report suspected underage use through the app or our contact email so we can investigate and take appropriate action.

9. Security and updates
We use HTTPS for the public service, controlled access to private media and role-based administrative access. No system is completely secure. We will update this policy when practices change and provide additional notice or request consent where required. The effective date appears above.

Contact: GeomJe Lim — [email protected]