Privacy Policy
Last updated: July 22, 2026 (audited against deployed code)
1. Information We Collect
When you use Vyrtex, we collect the following categories of information. Detailed, feature-specific disclosures appear in sections 5 through 12 below.
- Account Information: Email address, password (hashed), and age verification status.
- Profile Information: Display name, age, approximate location, photos, bio, and values screening answers.
- Usage Data: Swipes, matches, messages, and interactions with other users.
- Device & Infrastructure Information: IP addresses, device type, operating system, browser, app version, and security logs — collected for technical support, security monitoring, and abuse prevention.
- Communications: Messages sent through the platform are stored securely.
- Moderation Data: Reports, supporting evidence (including screenshots), and records of enforcement actions — described in section 11.
2. How We Use Your Information
- To provide and improve the matching service based on shared values.
- To facilitate communication between matched users.
- To enforce our Terms of Service and Community Guidelines.
- To ensure platform safety, investigate abuse, and detect prohibited behavior.
- To send transactional emails (verification, password reset, subscription updates).
- To comply with legal obligations.
3. Data Sharing
We do not sell your personal data. We share data only in the following circumstances:
- With Your Consent: Your values answers are used for matching but are never publicly displayed. Sexual compatibility preferences are private until you explicitly share them with a match.
- Service Providers: We use third-party services for payment processing (Chargebee), email delivery (Resend), and cloud hosting. These providers have access only to the data needed to perform their services.
- Legal Requirements: We may disclose information if required by law or in response to valid legal requests.
- Safety: We may share information to investigate or prevent violations of our terms, fraud, or safety issues.
4. General Data Retention
We retain your data for as long as your account is active. After account deletion:
- Profile information is removed or anonymized within 30 days.
- Messages may be retained for up to 90 days for safety and moderation purposes.
- Aggregated, anonymized data may be retained for analytics.
- Data required by law (e.g., payment records) is retained according to legal requirements.
Feature-specific retention periods are described in the relevant sections below. Where a feature-specific section states a different retention period, that section controls.
5. User Blocking
Vyrtex lets you block other users to prevent unwanted contact. When you block someone, neither of you can see each other's profiles, and any existing match between you is removed.
What Data Is Collected
- Block relationship records: When you block a user, we store a record linking your account to the blocked user's account (blocker ID and blocked ID). This record is used solely to enforce the block.
- No personal information about the blocked user beyond their user ID is stored in the block record. We do not access your device's contact list, phone numbers, or address book for blocking purposes.
Retention
Block records are retained while active. When you unblock a user, the block record is deleted immediately. Upon account deletion, all block records involving your account are deleted within 30 days. Block records are never shared with other users or third parties.
| Data | What We Collect | Why | Retention | Who Has Access | Shared? |
|---|---|---|---|---|---|
| Block records | Blocker and blocked user IDs; timestamp | Enforcing blocking preferences between users | Until unblock or account deletion | Automated enforcement systems only | No |
6. Location Data
Vyrtex uses your location to show you profiles of people near you and to enable distance-based matching preferences.
What Data Is Collected
- Approximate location only. Vyrtex collects approximate location derived from your IP address or from the city-level location you provide in your profile. We do not collect precise GPS coordinates unless you explicitly enable a location-sharing feature.
- Your profile displays a city or region-level location that you choose. You control the granularity of what other users see through your privacy settings, including our location-privacy and travel-mode features.
Why It's Collected
- To populate location-based matching and discovery.
- To support distance preference filters.
- Travel Mode allows you to temporarily set a different location for matching while traveling, without updating your permanent location.
Retention & Access
Location data associated with your profile is retained while your account is active. You may update or remove your location at any time from your profile settings. Historical location data is not retained after you change your location. Location data is accessible to other users only at the granularity you choose and is not sold or shared with third parties.
| Data | What We Collect | Why | Retention | Who Has Access | Shared? |
|---|---|---|---|---|---|
| Approximate location | City/region from IP or profile input | Location-based matching and discovery | While account is active; deleted on location change or account deletion | Other users (at your chosen granularity); Vyrtex staff for support | No |
7. Identity and Photo Verification
Vyrtex offers optional photo verification to build trust and reduce fake profiles. Verification is voluntary and involves submitting a real-time selfie for human review.
What Data Is Collected
- Photo verification selfie: A real-time selfie captured through your device camera using the browser's built-in camera API. We require a live camera capture (not a photo upload from your gallery) so we can confirm you are a real person taking the photo now.
- Age verification: We verify that you are 18 or older through the information you provide during signup.
- The selfie is reviewed by Vyrtex staff to confirm it matches your profile photos and meets our authenticity guidelines. This is a human review process, not automated facial recognition.
Vendor & Processing
Vyrtex processes all verification data in-house on our own infrastructure. We do not use third-party facial recognition vendors or automated liveness-detection services. Selfies are reviewed manually by trained Vyrtex staff.
Retention
Verification selfies are stored in our verification system while your verification status is active or pending. If your verification is rejected, you may submit a new selfie, which replaces the previous one. If you delete your account, all verification data — including selfies and verification status — is deleted within 30 days.
| Data | What We Collect | Why | Retention | Who Has Access | Shared? |
|---|---|---|---|---|---|
| Verification selfie | Real-time camera capture (not gallery upload) | Human review to confirm you match your profile photos | While verification is active or pending; deleted within 30 days of account deletion | Vyrtex verification review staff | No |
| Verification status | Pending, verified, or rejected status | Displaying verification badge on profile | Duration of account (or until re-verification) | Other users (badge only); Vyrtex staff | No |
| Age verification status | Confirmation that user is 18+ | Legal compliance; platform safety | Duration of account | Platform enforcement systems | No |
8. Trusted Date Plan
The Trusted Date Plan feature lets you share details of an upcoming in-person date with trusted contacts you designate, so someone knows where you are and who you're meeting.
What Data Is Collected & Shared
- Date details you provide: Date, time, location, and the name or profile of the person you're meeting. You control exactly what is shared with each trusted contact. Only the information you explicitly enter is stored and transmitted.
- Trusted contact information: The name and contact method (email or phone) of each person you designate as a trusted contact. This information is stored solely for the purpose of delivering your date plan.
Who It's Shared With
The date plan is shared only with the trusted contacts you explicitly designate. Vyrtex does not share your date plans with your date, with other users, or with any third party. Vyrtex staff do not access individual date plans except as required for technical support at your request.
Retention
Date plans are retained while your account is active. You may delete a date plan at any time from the app. Upon account deletion, all date plan records are deleted within 30 days. Trusted contact information is retained until you remove the contact or delete your account.
| Data | What We Collect | Why | Retention | Who Has Access | Shared? |
|---|---|---|---|---|---|
| Date plan details | Date, time, location, match name/profile (user-provided) | Delivering safety information to trusted contacts | While account is active; deleted within 30 days of account deletion | You; your designated trusted contacts; Vyrtex support (at your request only) | Only with your designated trusted contacts |
| Trusted contact info | Name, email or phone (user-provided) | Delivering date plan notifications | Until removed by user or account deletion | You; automated delivery system | No |
9. Values, Screening, and Compatibility Data
Vyrtex is built around values-based matching. During onboarding you answer screening questions across multiple dimensions. Your answers drive our matching algorithm and determine which profiles you see.
Categories of Data Collected
- Values screening answers: Your responses to questions about political views, social and economic values, governance preferences, education, immigration, and foreign policy — across 13 value dimensions. These answers are used exclusively for matching and are never publicly displayed on your profile.
- Religious and spiritual views: If you choose to share them as part of your profile or screening. Optional; not required for matching.
- Sexual compatibility preferences: Private answers about intimacy, relationship expectations, and preferences. These are never visible to other users unless you explicitly choose to share them with a specific match.
- Family-planning and relationship goals: Your preferences regarding children, relationship type, and long-term goals. Some of these may appear on your profile as tags; the detailed answers remain private.
- Conversation prompts and scenarios: Your responses to conversation-starting prompts and hypothetical scenarios, which may be shown on your profile.
How This Data Is Used
Screening answers feed into our weighted compatibility algorithm to surface profiles that share your core values. Your overall compatibility alignment with another user may be displayed as a score or summary, but your individual answers to specific questions are never shown to other users. Dealbreaker answers are used to exclude incompatible profiles entirely.
Access & Third-Party Sharing
Values and screening data is accessible to Vyrtex's automated matching systems. Vyrtex staff may access this data only for technical debugging or to investigate reports. This data is never sold, licensed, or shared with third parties. It is not used for advertising or profiling unrelated to the Vyrtex matching service.
| Data | What We Collect | Why | Retention | Who Has Access | Shared? |
|---|---|---|---|---|---|
| Values screening answers | Responses across 13 value dimensions, scenarios, and dealbreakers | Compatibility matching; dealbreaker enforcement | While account is active; deleted within 30 days of account deletion | Automated matching systems; Vyrtex staff (debugging/moderation only) | No |
| Sexual compatibility data | Private intimacy and relationship preferences | Private compatibility insights; shareable only with explicit consent | While account is active; deleted within 30 days of account deletion | You; your match (only if you explicitly share) | Only with a match when you explicitly choose to share |
| Family-planning preferences | Children, relationship type, long-term goals | Compatibility matching; optional profile display | While account is active; deleted within 30 days of account deletion | Matching system; other users (profile-tag level only) | No |
10. Infrastructure Data and Security Logs
Like all online services, Vyrtex collects certain technical data automatically as part of operating and securing the platform.
What Data Is Collected
- IP addresses: Collected on each request for rate limiting, abuse detection, security monitoring, and geolocation-based approximate location. IP addresses are not linked to your public profile.
- Security logs: Authentication attempts (successful and failed), session creation, rate-limit triggers, suspicious activity patterns, and administrative actions. These logs include timestamps, IP addresses, and event types.
- Cloudflare infrastructure data: Vyrtex uses Cloudflare for DNS, traffic routing, and DDoS protection. Cloudflare may process request metadata (including IP addresses) as part of these services. Cloudflare's processing is governed by its own privacy policy.
- Device and session data: Device type, operating system, browser version, app version, and active session identifiers — used for session management, device tracking (so you can review and revoke sessions), and security monitoring.
Retention
Rate-limit records (which include IP addresses) are automatically cleaned up as their enforcement windows expire — typically within minutes to hours depending on the rate-limit rule. Security logs are retained for 90 days for active accounts. Logs related to accounts under investigation for abuse or Terms of Service violations may be retained longer, for the duration of the investigation and any resulting enforcement.
| Data | What We Collect | Why | Retention | Who Has Access | Shared? |
|---|---|---|---|---|---|
| IP addresses | Automatically on each request | Rate limiting, security, approximate location | Auto-cleared as rate-limit windows expire | Automated security systems; Vyrtex security staff | Processed by Cloudflare (infrastructure provider) |
| Security logs | Auth attempts, rate-limit events, admin actions | Abuse detection, security monitoring, incident response | 90 days (longer for accounts under investigation) | Vyrtex security and operations staff | No |
| Device & session data | Device type, OS, browser, session identifiers | Session management, device review, security | While session is active; device list retained while account is active | You (via device/session management); Vyrtex security systems | No |
11. Reports, Moderation Evidence, and Banned-User Records
Vyrtex maintains a moderation system to keep the platform safe. When users submit reports or when we take enforcement actions, we collect and retain evidence.
What Data Is Collected
- User reports: When you report another user, we collect the report category (one of 18 categories including harassment, impersonation, spam, inappropriate content, underage users, and others), your description of the issue, and the timestamp of the report.
- Screenshots and supporting evidence: You may attach screenshots or other files to support your report. These are stored securely with the report record.
- Moderation evidence: When we investigate a report, we may review and preserve relevant platform data — including messages, profile information, and interaction history — associated with the reported user and the reporting user.
- Banned-user records: When a user is suspended or banned, we retain a record of the enforcement action, the reason, and the evidence supporting it, to prevent re-registration and to demonstrate consistent enforcement.
Who Has Access
Reports and moderation evidence are accessible only to Vyrtex's moderation and administrative staff. They are never shared with other users, and the reporting user's identity is not disclosed to the reported user.
Retention
Reports and associated evidence are retained for the duration of the investigation plus 180 days after resolution. Banned-user records (including identifying information used to prevent re-registration) are retained indefinitely to enforce platform bans. If a report does not result in an enforcement action, the evidence is retained for 90 days and then deleted.
| Data | What We Collect | Why | Retention | Who Has Access | Shared? |
|---|---|---|---|---|---|
| User reports | Category, description, timestamp | Moderation and platform safety | 180 days after resolution; 90 days if no action taken | Vyrtex moderation and admin staff only | No |
| Report screenshots/evidence | User-submitted files supporting a report | Evidence for moderation decisions | 180 days after resolution; 90 days if no action taken | Vyrtex moderation and admin staff only | No |
| Banned-user records | Enforcement action, reason, identifying information, evidence | Prevent re-registration; consistent enforcement | Indefinitely (for ban enforcement) | Vyrtex moderation, admin, and security staff | No |
12. State Privacy Rights
Several U.S. states have enacted comprehensive privacy laws that give residents specific rights over their personal data. Vyrtex honors these rights for all users regardless of location, but this section outlines the specific rights available under state laws including the Texas Data Privacy and Security Act (TDPSA), the California Consumer Privacy Act (CCPA/CPRA), and similar laws in other states.
Your State Privacy Rights
Depending on your state of residence, you may have the right to:
- Know and access: Request confirmation of whether we process your personal data and receive a copy of the specific pieces of personal data we hold about you.
- Delete: Request deletion of your personal data, subject to legal retention exceptions.
- Correct: Request correction of inaccurate personal data.
- Data portability: Receive your data in a portable, readily usable format.
- Opt out: Opt out of targeted advertising and the sale of personal data. Vyrtex does not sell personal data or engage in targeted advertising, so these rights are inherently honored.
- Appeal: Appeal a denial of your privacy request.
- Non-discrimination: We will not discriminate against you for exercising any of your privacy rights.
How to Submit a Request
To exercise any of these rights, you or your authorized agent may submit a request through any of the following channels:
- Email: privacy@vyrtex.app (preferred for privacy-specific requests)
- General support: support@vyrtex.app
- In-app: You may delete your account and associated data directly from your account settings at any time.
Verification & Timeline
We will verify your identity before processing privacy requests to prevent unauthorized access. We verify by confirming your identity against the email address and account information on file. We will respond to your request within 45 days, with the possibility of a 45-day extension when reasonably necessary. We will notify you within the initial 45-day period if an extension is needed and explain the reason.
Authorized Agents
You may designate an authorized agent to submit a privacy request on your behalf. We will require the agent to provide proof of your signed permission, and we may verify your identity directly with you.
Appeals
If we deny your privacy request, you may appeal the decision by emailing privacy@vyrtex.app with "APPEAL" in the subject line. We will respond to your appeal within 60 days. If your appeal is denied, we will provide you with information about how to contact your state Attorney General's office if you wish to file a complaint.
13. Your Rights (General)
In addition to the state-specific rights described in section 12, all Vyrtex users have the following general rights:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data (subject to legal retention requirements).
- Object to or restrict certain processing.
- Data portability.
- Withdraw consent at any time.
To exercise these rights, contact us at support@vyrtex.app.
14. Security
We take reasonable technical and organizational measures to protect your data, including encryption in transit (TLS), encryption at rest, secure authentication (including passkey and two-factor authentication support), HTTP-only session cookies, rate limiting, input sanitization, Content Security Policy headers, and access controls. However, no method of electronic storage is 100% secure.
15. Cookies & Tracking
Vyrtex uses essential HTTP-only, Secure, SameSite cookies for authentication and session management. These cookies are necessary for the platform to function and are not used for tracking, advertising, or analytics purposes. We do not use third-party tracking cookies, analytics cookies, or advertising cookies. We do not share data with advertising networks. The app may use browser local storage for non-sensitive UI preferences (such as theme preference), but authentication tokens are stored exclusively in HTTP-only cookies that are inaccessible to client-side JavaScript.
16. Children's Privacy
Vyrtex is strictly for users aged 18 and older. We do not knowingly collect information from anyone under 18. If we learn that a user is under 18, we will delete their account and data immediately.
17. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of material changes via email or through the app. Continued use after changes constitutes acceptance of the updated policy.
18. Contact
For questions about this Privacy Policy or your data, contact us at support@vyrtex.app. For privacy-specific or state-law requests, use privacy@vyrtex.app.