Last updated: 15 October 2026

Privacy Policy

This Privacy Policy explains how duvvi sp. z o.o. ("duvvi", "we") collects and uses personal data when you use our apps, website and web app. We act as the data controller under the EU General Data Protection Regulation (GDPR).

1. Data we collect

Account data: email, phone number (optional), password hash, date of birth, gender, language and currency.
Profile data: name, photos, bio, interests, intents, prompts, job, school, height, languages and your profile frame.
Location: approximate location from your device or the city you enter. Other users only see a distance rounded to 1 km — never your exact location.
Activity: likes, passes, matches, messages, reports, blocks and how you use features.
Marketplace data: listings, offers, orders, shipping details, reviews and, for sellers, identity verification and payout information processed with Stripe.
Payments: subscription and purchase records. Card details are handled by Stripe, Apple or Google — we never store full card numbers.
Device data: device type, app version, push notification tokens, IP address and cookies (see our Cookie Policy).
Sensitive data: your dating preferences may reveal your sexual orientation. We process it only with your explicit consent, which you give by entering it, and you can withdraw it by editing or deleting your profile.

2. Why we use your data

To provide the Service: create your profile, show you to people nearby, enable matching, chat and the marketplace (contract).
To keep duvvi safe: age checks, photo and content moderation, fraud prevention and responding to reports (legitimate interest and legal obligation).
To process payments, escrow, payouts and invoices (contract and legal obligation).
To send notifications and service emails in your language, respecting your notification preferences (contract and legitimate interest).
To send marketing only if you opted in (consent), and to improve the Service with aggregated analytics (legitimate interest or consent for analytics cookies).

3. Matching algorithm

Our recommendations use your preferences, distance, activity, shared interests, intents and engagement signals. No decision with legal effect is made solely by automated means. You can influence recommendations through your discovery settings at any time.

We share data only with: other users (your public profile), service providers (hosting, Stripe, Apple, Google, email and push delivery, moderation tooling) under data processing agreements, business partners only in aggregated or anonymised form, and authorities when required by law. We never sell your personal data.

5. International transfers

Where data is transferred outside the EEA, we rely on adequacy decisions or the European Commission's Standard Contractual Clauses.

6. Retention

We keep your data while your account is active. After you delete your account we keep it for a 30-day grace period and then erase it, except data we must keep for legal reasons (for example invoices, or information related to safety reports) for the period required by law.

7. Your rights

You can access, correct, export (Settings → Download my data), restrict or delete your data, object to processing based on legitimate interest and withdraw consent at any time. You can also lodge a complaint with a supervisory authority, in Poland the President of the Personal Data Protection Office (UODO).

8. Security

We use encryption in transit, hashed passwords, rotating refresh tokens, access controls and regular security reviews. No system is perfectly secure, so please use a strong, unique password.

9. Children

duvvi is strictly for adults aged 18 and over. We delete accounts of anyone we believe to be under 18.

10. Contact

Data protection requests: [email protected]. Last updated 15 October 2026.