Privacy Policy

Last updated: October 23, 2026

HeyBibi ("we", "us") is an app for adults 18 and over. This policy explains what we collect, why, who we share it with, and the choices you have. Contact: [email protected], or by post at HeyBibi, 3379 Peachtree Road NE, Suite 700 #1141, Atlanta, GA 30326, USA.

What we collect

• Account: your email address and a password (stored securely by our authentication provider, never in readable form).
• Profile: display name, age (we use your date of birth only to confirm you are 18+ and show your age), bio, photos, and optional details you choose to add (for example height, weight, interests, relationship preferences, and optional health information such as HIV status, last test date, PrEP and vaccinations). Health details are optional and are visible on your profile to other members according to your settings.
• Location: your approximate location while you use the app, rounded on our servers (about 100 m by default, about 1 km if you choose "approximate"). Others see an approximate distance, never your exact position. You can hide yourself from the map and grid at any time.
• Messages and media: chat messages, photos you send (including "view once" photos), event details and invitations. Messages are stored so they can be delivered to you; you can delete your own messages for everyone.
• Age check: an independent age-verification service (AgeWallet) confirms you are an adult. We receive the result and a stable anonymous identifier, not your ID document.
• Device and technical data: a hashed device identifier (to limit accounts per phone and stop ban evasion), IP addresses, push-notification tokens, app version, and error logs.
• Safety data: reports and blocks, results of photo scanning, and moderation actions.

How we use it

• To run the service: show you nearby people, deliver messages, run events, send notifications.
• To keep people safe: age checks, scanning photos, handling reports, preventing abuse and illegal content.
• To translate chats when you turn translation on (see below).
• To comply with the law, for example reporting child sexual abuse material to the authorities and preserving evidence as required.
• To improve and fix the app.

We do not sell your personal information, and we do not use third parties for advertising.

Who we share it with

• Other members: what you put on your profile and in your chats, as your settings allow.
• Service providers that help us run the app: hosting, database and file storage (Supabase); photo scanning on our own server (Fly.io); maps (Mapbox, OpenStreetMap data); push notifications (Apple and Expo); age verification (AgeWallet); and translation (Google Cloud Translation). They may only use data to provide their service to us.
• Translation: when you switch translation on for a chat, the text of messages you receive in that chat is sent to Google Cloud Translation to translate it. Translations are stored on our servers until the message is deleted. If you never turn translation on, your messages are not sent to Google.
• Authorities: when the law requires it, to protect someone's safety, or to report illegal content.

How long we keep it

• Your profile, photos and messages: until you delete them or your account.
• IP address history: up to 12 months, longer if connected to a safety report.
• Records connected to reports of illegal content: as long as the law requires.
• When you delete your account, we remove your profile, photos and messages. Some records may be kept where the law requires or to prevent abuse (for example, a ban record).

Your choices and rights

• Hide yourself from the map and grid, use approximate location, or browse incognito in Settings.
• Edit or delete your profile information and photos at any time; delete your account in Settings.
• Ask to access, correct or delete your data, or object to processing, by emailing us. Depending on where you live (for example the EU, UK, or California) you have additional legal rights, and you may complain to your data protection authority.

Where data is processed

Your account data, messages and photos are stored in the European Union (Ireland), and photo scanning runs in the Netherlands. Some of our providers (for example Google Cloud Translation, Mapbox, Apple and Expo push notifications, and age verification) may process data in the United States or elsewhere. Where that happens we rely on appropriate safeguards for international transfers.

Children

HeyBibi is only for people 18 and over. If we learn that someone under 18 has an account, we remove it.

Security

We use encryption in transit, access controls and monitoring. No system is perfectly secure; please choose a strong password.

Changes

If we change this policy in a meaningful way, we will tell you in the app before it takes effect.