Privacy Policy

1. Data we collect

• Sign-up: email and password (stored as an irreversible hash); for Google or Apple sign-in — the provider account identifier.
• Profile: name, date of birth, gender, photos, city and the details you choose to add — height, attitude to children, marital status, religion, education, habits, languages, interests.
• Location: approximate coordinates to find people nearby. Only with your permission — you can search by city without granting location access.
• Activity: swipes, matches, messages, mini-game sessions.
• Technical: device model, OS version, push token, IP address.
• The device advertising identifier — assigned by the operating system, it carries no name of yours, and you can reset or switch it off in the phone settings.
• Crash reports: what broke in the app, on which screen, plus device model and build version.

2. How we use it

• Showing your profile to others and selecting candidates according to your filters.
• Messaging and mini-games with your matches.
• Safety: photo moderation, handling reports, fighting fake profiles.
• Push notifications about matches and messages — can be turned off in the app settings.
• Purchasing and renewing the Premium subscription.
• Statistics: counting how many people get from sign-up to their first match, so we can see where the service loses people. Only the fact that a step was completed is recorded — no message text, photos or coordinates.
• Advertising measurement: if you arrived from an ad, the advertising identifier lets Google tell that the ad worked and show it to similar people.
• Crash diagnostics: an error report tells us what to find and fix.

3. Who we share with

We do not sell personal data.

• Processors the service depends on: cloud hosting, photo storage, push delivery (Firebase), subscription provider (RevenueCat, Google Play, App Store). Each receives the minimum data required.
• Analytics and advertising: Google Analytics for Firebase and Google Ads receive funnel events (sign-up, completed profile, first swipe, match, first message) and the device advertising identifier. Messages, photos and coordinates are not sent there.
• Crash diagnostics (Sentry) — a technical description of the error and the circumstances it occurred in.
• Other users: your profile and photos are visible in search; messages are visible only to your matches.
• Authorities — upon an official request, as required by law.

4. Retention and deletion

Data is kept while the account is active. You can delete the account in the app: Profile → Settings → Delete account, or by email request — see the “Account deletion” page.

On deletion, photos immediately become inaccessible to everyone and their direct links stop working. They are kept privately for another 30 days, solely to review complaints filed against you before deletion, and are then erased permanently. Email and phone number are removed from the record right away, push tokens and Google/Apple links are dropped, sessions on all devices are terminated, and the profile stops appearing in search.

Messages you sent remain in the recipients’ chats — otherwise the conversation history would break for people who deleted nothing. Those messages are no longer linked to your name, photos or contacts.

5. Age

The service is intended for people aged 18 and over. Accounts found to belong to minors are deleted.

6. Your rights

You may request access to your data, its correction or deletion, and withdraw consent to processing — write to support@aylu.app from the address used at sign-up.

7. Security

Passwords are stored hashed, traffic to the server is protected with TLS, access to data is restricted. No protection is absolute, so avoid publishing details in your profile that you would not show to strangers.

8. Changes

We may update this policy. Material changes are announced in the app; the revision date is shown at the top of this page.

9. Contact

Dmitriy Pozhidayev · support@aylu.app · Kyrgyz Republic