Privacy notice

Account and Google sign-in

We use your email and authentication data to create your account, sign you in, help you recover access and keep your account secure. If you choose Google, we receive your account identifier, email and the basic profile information you authorise, such as your name and photo. We do not request access to Gmail, Drive, contacts or calendar, and we do not receive your Google password. Google and Supabase process sign-in. You can revoke Eroveil access in your Google Account settings. This does not automatically delete your Eroveil account.

Profile, discovery and communication

We process the information you provide, including your display name, date of birth to check 18+ eligibility, gender, bio, interests, photos, filters, likes and matches. If you allow location access, it helps you find people nearby. Your profile shows approximate distance, not exact coordinates.

We use messages, voice recordings and related information to provide conversations. Drafts may sync to the server before you send them. Pending messages are stored locally for retry. Conversations are not guaranteed to be end-to-end encrypted.

Intimate preferences are optional and may reveal your sex life or sexual orientation. We process them with your explicit consent and apply the visibility you choose. You can withdraw consent in the app. Camera, microphone and location permissions are managed separately on your device.

Photos and verification

Information you publish on your profile is visible according to the available settings. Public photos can be accessed by URL outside the app, so only upload content you are comfortable making public. Private gallery access requires a match and the gallery owner's approval. The owner can revoke access. Authorised staff may review a reported private photo for moderation. Revoking access does not remove screenshots or copies saved by others.

We process the verification selfie in memory to detect a face and do not upload it to file storage as evidence. We link the result to your account. The badge does not verify identity or age or guarantee that photos are authentic.

Purposes and legal bases

We process data needed for accounts, profiles and conversations to provide the service you request. Our legitimate interest in protecting the service and its users supports security, fraud prevention, abuse prevention and moderation. Applicable obligations may require us to retain or disclose certain data. We process optional intimate information with explicit consent, which you can withdraw. A match or preference does not constitute consent to other activities.

Discovery uses filters, distance, likes and ranking rules, including boosts. Automated limits help prevent abuse. You can appeal moderation decisions through the available features.

Providers and storage

Supabase provides authentication, the database and file storage. The configured primary region is London, United Kingdom. Cloudflare hosts the web version. Google handles optional Google sign-in. LeafMail handles support correspondence. Expo and Android/Firebase infrastructure deliver notifications you allow, using device tokens and data needed for delivery. Providers may process technical data in other countries. The database region does not determine where all data is processed.

Your device or browser may store your session, preferences, filters, drafts and pending messages, including in persistent storage. Some of this storage is unencrypted. We use infrastructure logs for operations and security, and their retention periods may differ from account data. Eroveil does not sell access to your private gallery through a subscription.

Retention and deletion

We retain active data to operate your account until you delete the data or account. File cleanup may continue in the background after we remove access and your profile. We schedule recorded local backups for deletion 30 days after capture. A computer being switched off or an error may delay cleanup until the next run.

Moderation records covered by our retention process become eligible for deletion 180 days after closure, resolution or the relevant event, as applicable. Open cases, active sanctions, later appeals and justified preservation may extend retention. Technical and historical records may have different retention periods. We cannot guarantee that every copy is removed exactly on those dates.

Request deletion under Settings → My data or on the account deletion page. Uninstalling the app or revoking Google access does not delete your account.

Your choices and rights

You can edit your profile, manage visibility and gallery access, withdraw consent for preferences, block and report other users, export your data and request deletion. Where provided by law, you can request access, correction, restriction or portability, or object to processing by emailing [email protected]. We use proportionate checks to verify your request. Do not send your password or unsolicited identity documents. Withdrawing consent does not affect earlier lawful processing. You can complain to a data protection authority, including Romania's ANSPDCP.

The service is for adults. If you suspect an account belongs to a minor or encounter abuse, use the reporting feature and the safety channel.