Privacy Policy
Effective date: April 17, 2026 · Last updated: August 14, 2026
1. Who we are
DateVibe ("we," "us," "our") is a dating application operated by Xavier Ballesteros, based in Montreal, Quebec, Canada. Xavier Ballesteros is the sole proprietor responsible for the service and for the personal information processed in connection with it.
For any question about this policy or about your personal information, you can reach our Privacy Officer:
Xavier Ballesteros — Privacy Officer
Email: privacy@datevibe.io
Mail: Montreal, Quebec, Canada
Website: https://datevibe.io
Under Quebec's Act respecting the protection of personal information in the private sector (Law 25), the Privacy Officer is the person to contact to exercise your rights.
2. Who can use DateVibe
DateVibe is strictly for adults aged 18 years and older. We do not knowingly collect personal information from minors. If we discover that a user is under 18, we will terminate the account and delete the associated personal information. If you believe a minor is using the service, please contact us at privacy@datevibe.io.
3. What personal information we collect
We collect only what we need to run the service. Here is the complete list, grouped by category.
Account data (collected when you sign up)
- Email address (you can sign up with email and password, Sign in with Google, or Sign in with Apple)
- Display name
- Profile photo URL (from your Google account, if you choose)
- Unique user identifier
Profile data (collected during onboarding and in your profile)
- Date of birth (to confirm you are 18+)
- Gender identity
- Sexual orientation ⚠️
- Who you are interested in meeting
- City and neighborhood
- Photos you upload
- Short biography
- Lifestyle tags and interests
- Answers to the AI personality interview
- Personality quiz results
Activity data (created as you use the app)
- Availability slots you post
- Applications you send or receive
- Matches, accepted or cancelled
- Chat messages you send to matches
- AI compatibility scores generated for you
Technical data (collected automatically)
- IP address (used for rate limiting and fraud prevention, not stored long-term)
- Device type and operating system
- Browser information
- Session timestamps
- Error logs and crash reports
Communication data
- Emails we send you (transactional notifications only)
- Your interaction with those emails (delivered, opened, clicked)
We do NOT collect
- Your precise GPS location
- Your contacts list
- Your microphone, camera, or photo library without explicit action
- Payment information (there is no paid tier in the current version)
- Data from third-party apps for advertising purposes
- Biometric data
4. Why we collect it (legal basis and purpose)
We collect and use your personal information only for the specific purposes listed below. For each purpose, we rely on one of the following legal bases: your consent, performance of our service to you, our legitimate interests in operating a safe dating platform, or compliance with law.
Purpose 1 — Running your account
What: email, name, profile, photos
Why: we cannot provide the service without this
Basis: performance of contract
Purpose 2 — Matching you with compatible people
What: profile data, personality answers, orientation, location
Why: this is the core feature you signed up for
Basis: performance of contract + explicit consent for sensitive data
Purpose 3 — Keeping the platform safe
What: technical data, activity data, reports from users
Why: preventing abuse, spam, catfishing, harassment
Basis: legitimate interest
Purpose 4 — Sending you service notifications
What: email address, activity events
Why: telling you when someone applies to your slot or accepts yours
Basis: performance of contract
Purpose 5 — Improving the service
What: aggregated and anonymized activity data
Why: understanding what features work and fixing what doesn't
Basis: legitimate interest
Purpose 6 — Legal compliance
What: any data that regulators or courts may lawfully request
Why: complying with Canadian and applicable foreign law
Basis: legal obligation
6. Transfers outside Quebec and Canada
As described above, some of your personal information is transferred outside Quebec and Canada:
- To the United States (Vercel, Google, Giphy)
- To the European Union (Brevo)
- To Germany (Photon / komoot)
Under Quebec Law 25, we have assessed the privacy regime of these jurisdictions and concluded that, combined with the contractual safeguards we have in place with each provider, your information receives adequate protection. You have the right to ask us for the details of this assessment at privacy@datevibe.io.
7. How long we keep it
- Active account data: while your account exists
- Deleted account data: removed within 30 days, except items we are legally required to retain (e.g., records of reported abuse, for up to 2 years)
- Chat messages: retained until the match is cancelled or 6 months after the date, whichever comes first
- Technical logs: retained for 90 days, then purged
- Email delivery logs (Brevo): retained for 1 year
If you delete your account, your profile is removed from the user-facing service immediately, so other users can no longer see or contact you. Your data is then held for a 30-day grace period during which you can cancel the deletion and recover your account, after which it is permanently erased from our systems and backups. You can request deletion from inside the app (Settings → Pause or delete your account) or, without the app, at https://www.datevibe.io/legal/delete-account.
8. How we protect it
We use reasonable technical and organizational safeguards:
- HTTPS/TLS encryption for all traffic
- At-rest encryption on our database (Supabase managed encryption)
- Row-level security policies that prevent users from reading each other's private data
- Access controls: only authorized personnel can access production data
- Rate limiting on sensitive endpoints (AI interview, login)
- Regular security reviews
No system is perfectly secure. If a data breach occurs that presents a risk of serious harm to you, we will notify you and the Commission d'accès à l'information (CAI) of Quebec without undue delay, as required by law.
9. Your rights
You have the following rights over your personal information. To exercise any of them, email privacy@datevibe.io with proof that you are the account holder. We respond within 30 days.
Right of access
You can ask what information we hold about you and get a copy.
Right of rectification
You can correct inaccurate or incomplete information. Most fields are editable directly in your profile.
Right to erasure ("right to be forgotten")
You can delete your account at any time from the Settings screen. This erases your profile, photos, applications, and chat messages.
Right to portability
You can ask us to export your information in a structured, machine-readable format (JSON). This right comes from Quebec Law 25 and GDPR.
Right to withdraw consent
Where we rely on your consent, you can withdraw it at any time. This does not affect the lawfulness of processing that happened before the withdrawal.
Right to object
You can object to processing based on our legitimate interests. We will stop unless we have overriding legitimate grounds.
Right to lodge a complaint
- In Quebec, you can complain to the Commission d'accès à l'information (CAI) at cai.gouv.qc.ca.
- In the rest of Canada, you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.
- In the EU, you can complain to your national Data Protection Authority.
Under Quebec Law 25, you also have a private right of action. You can take direct legal action if you believe your rights have been violated, with minimum statutory damages of $1,000 CAD.
11. Automated decision-making
DateVibe uses AI (Google Gemini) to generate compatibility scores that rank other users in your feed. These scores affect the order in which you see people, but they do not decide for you — you always choose whether to apply, accept, or pass. No scoring decision has legal or similarly significant effects on you.
You have the right to
- Ask for the main factors the algorithm considers
- Contest the result of a matching decision
- Ask for human review if you believe the algorithm treated you unfairly
Contact privacy@datevibe.io to exercise these rights.
12. Account deletion
You can delete your account at any time without contacting us:
- Open DateVibe
- Go to Settings → "Pause or delete your account"
- Tap "Delete my account"
- Confirm
- Without the app: request deletion at https://www.datevibe.io/legal/delete-account or email privacy@datevibe.io
Your profile is removed from the user-facing service immediately. Your data is then held for a 30-day grace period during which you can cancel the deletion and recover your account, after which it is permanently erased from our systems and backups. Some records may be retained where law requires (e.g., evidence of reported abuse, to prevent re-registration of banned users).
13. Changes to this policy
We may update this policy as the service evolves. When we make material changes, we will notify you at least 30 days before the new version takes effect, by email and by in-app notice. The "Effective date" at the top of this policy always indicates the current version.
14. Governing law
This policy is governed by the laws of the Province of Quebec and the laws of Canada applicable there. Nothing in this policy waives rights that applicable law grants you and that cannot be waived by contract.
15. Contact
Privacy Officer: Xavier Ballesteros
Email: privacy@datevibe.io
Website: https://datevibe.io
Mail: Montreal, Quebec, Canada
We aim to respond to all privacy inquiries within 30 days. If we need more time, we will tell you why.