Six Vibes — Privacy Policy

Draft — this document is under legal review and may change before launch.

Effective date: [EFFECTIVE DATE]

This policy explains what personal data the Six Vibes app ("Six Vibes", "we", "us") collects, why, who we share it with, how long we keep it, and the rights you have. Six Vibes is a mobile app for adults (18+) who want to find people nearby who are up for the same thing — anything from a coffee or a hike to a night out or a date.

We have written this in plain English. If anything is unclear, contact us at info@sixvibes.org.

1. Who we are

The controller of your personal data is:

[OPERATOR NAME], an individual trading as Six Vibes [ADDRESS] [KVK/registration number if any] Email: info@sixvibes.org · Website: sixvibes.org

We have not appointed a Data Protection Officer because we are not legally required to. Questions about privacy go to info@sixvibes.org.

2. The short version

• Your exact location is never shown to anyone. Other people only ever see a deliberately shifted, rounded position, and never a distance to you.
• Your gender and who you're interested in are never shown on your profile, never used for analytics, never shared with third parties and never sent to the AI service. They are used only to decide who sees whom.
• We store no selfie, ID document or date of birth from age verification — only "passed: yes/no" and when.
• No ads, no ad tracking, no analytics SDKs, no selling of data.
• Push notifications are only ever sent for messages you receive, and they don't show the message text.
• You can delete your account in the app at any time (Profile → Settings → Delete account).

3. What we collect and why

We do not collect: your contacts, your date of birth, your real name (unless you choose to use it as your display name), payment details (no payments exist today), advertising IDs, or location in the background.

4. How location works (please read)

Location is the most sensitive thing this app handles, so here is exactly what happens:

1. When it's collected. Only while the app is open on your screen, and only if you have allowed location access. It is refreshed when you open the app and about every 15 minutes while it stays open. We never collect location in the background.
2. Where it's kept. Your true position is stored only on our server. It is never sent to another user's phone.
3. What others see. On the "Now" map, other people see your photo at a position that is (a) shifted by a fixed random offset of up to a few hundred metres that is chosen once for your account and never changes, and then (b) rounded to a grid cell of roughly 300–500 metres. People in the same cell are shown as one stacked group. Nobody is ever shown a distance to you.
4. How long you appear. You appear on the Now map only if the app has seen your location in the last 24 hours. Turn on Incognito (Profile → Account) to disappear from the map immediately.
5. Plans are different. A "Later" plan shows the place you chose (e.g. a city, neighbourhood or venue) to people whose plans match yours. If you move the plan's pin by hand, others see that pin. Don't put a plan's pin on your home.
6. Place search. When you type a place name for a plan, your search text and your phone's IP address are sent to Mapbox's place search to find matching places.
7. Activity ideas. If someone in a chat taps "Suggest Activities", our server calculates the middle point of the participants' stored positions, rounds it to about 1 km, and turns it into a neighbourhood/city name using OpenStreetMap services (see §7). Only that name — never coordinates — is sent to the AI service.

5. Gender and "interested in" — sensitive data

What you choose here can reveal information about your sex life or sexual orientation, which is "special category" data under the GDPR. We therefore:

• ask for your explicit consent before you set these (you can withdraw it at any time by deleting your account — matching cannot work without these fields);
• never show them on your profile;
• use them only to decide who can see whom, and only where both sides match each other's choices;
• never use them for analytics, never share them with any third party, never send them to the AI service, and never log them.

Please be aware that because matching is mutual, the fact that someone can see you implies that your choices include their gender. We consider this inherent to the service.

Your vibes (including "romance") are shown on your profile. Choose the ones you're comfortable with others seeing.

6. Age verification

Six Vibes is strictly 18+. During sign-up you take a selfie, which is sent to our age-estimation provider, Didit, to estimate whether you are an adult. We store only whether you passed and when. We never store the selfie, an ID document, a name or a date of birth. Didit's own retention of the image is governed by our data processing agreement with them: [DESCRIBE PROVIDER RETENTION — e.g. "deleted immediately after the check"].

You cannot browse, message, appear on the map or upload photos until you have passed.

7. Who we share data with

We never sell your data and never share it for advertising. We use these service providers ("processors"), each bound by a data processing agreement:

Other users see your display name, bio, vibes, approved photos, your shifted and rounded map position (if you're visible), your plans' place/time/vibes (to people whose plans match), and the messages you send them.

Authorities. We disclose data where the law requires it (e.g. a valid order from a court or police) and may report to authorities where there is a threat to someone's life or safety, or suspected child sexual abuse material.

International transfers

Several providers are based in the USA. Transfers rely on the EU–US Data Privacy Framework where the provider is certified, and otherwise on the European Commission's Standard Contractual Clauses with supplementary measures. Transfers to the UK rely on the EU adequacy decision. You can ask us for a copy of the relevant safeguards.

8. Automated decisions

• Photo moderation: an automated system checks every photo. Clean photos are approved automatically; anything flagged is held for a human to review. A photo is never rejected solely by the machine.
• Age estimation: an automated system estimates whether you are 18+. If it fails you, you can contact info@sixvibes.org to request a human review.
• Matching: who you see is decided automatically from location, vibes, gender/interested-in and times. This has no legal or similarly significant effect on you.

9. How long we keep data

In short: most data is kept while your account exists and deleted when you delete it. Some safety records (reports, moderation decisions) are kept longer to meet legal obligations. See our Data Retention Schedule for the full table.

Deleting a message in a chat hides it for you only; the other person still has their copy until they or you delete your accounts.

10. Your rights

Under the GDPR you have the right to:

• access your data and get a copy (portability);
• correct it (most of it you can edit in the app);
• delete it — use Delete account in the app, or email us;
• restrict or object to processing based on legitimate interests;
• withdraw consent at any time (e.g. location permission in your phone settings, notifications, or by deleting your account for gender/interested-in);
• not be subject to purely automated decisions with significant effects (see §8).

To exercise a right, email info@sixvibes.org from the email address on your account. We will reply within one month.

You can also complain to a data protection authority — in the Netherlands, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or the authority in the EU country where you live.

11. Security

Data is encrypted in transit. Access is controlled by database-level rules so users can only read what they're meant to see. Server-only keys never ship inside the app. Only the single operator has administrative access. No system is perfectly secure; if a breach affects you, we will notify you and the authority as the law requires.

12. Children

Six Vibes is only for people aged 18 and over. If we learn that a user is under 18, the account is suspended immediately and removed. Report a suspected minor in the app or at info@sixvibes.org.

13. Changes

If we make significant changes we will tell you in the app before they take effect. The effective date at the top shows when this policy last changed.