Privacy notice

Who is responsible

The controller is the operator of Uky.

Contact for privacy questions: [email protected].

What we process

• Account data: e-mail address, password (stored only as a secure hash by our authentication service), sign-in events.
• Profile data you enter: display name, date of birth (shown as age or range according to your settings), gender and optional self-description and pronouns, bio, prompts, interests, photos and captions.
• Matching settings: contexts (dating, friends & activities), long-term intentions, who you'd like to meet, age and distance ranges, dealbreakers, current “Now” intents and availability.
• Approximate location: your chosen area and, only if you allow it, a device position rounded on your device and snapped to a ~1 km grid on our server. Exact coordinates are never stored or shown.
• Interactions: likes (with optional notes), passes, bookmarks, matches, messages, plans and RSVPs, reports and blocks.
• Optional Desires data (only after a separate adult opt-in): interests, boundaries, relationship structures and visibility choices.
• Consent records: what you agreed to, which version and when.
• Technical data needed for security: rate-limit counters, audit events for sensitive actions.

Why we process it

We do not use your data for advertising, do not sell it and do not build hidden attractiveness or trust scores.

• To provide the service: account, profile, discovery, matching, messaging, plans and date planning.
• To match people reciprocally using the published baseline described in “How matching works”.
• To keep people safe: age eligibility, preventing spam, scams and harassment, moderation and appeals.
• To meet legal obligations and handle your rights requests.
• Aggregate, minimised statistics to improve the service (for example how many conversations start), never built from message contents.

Legal bases

• Performance of the contract with you (GDPR Art. 6(1)(b)) for running your account and the features you use.
• Your explicit consent (GDPR Art. 6(1)(a) and Art. 9(2)(a); FADP Art. 6(6)–(7)) for sensitive data such as dating preferences and Desires data, and for optional features like notifications.
• Legitimate interests (GDPR Art. 6(1)(f)) in keeping the service secure and preventing abuse, balanced against your rights.
• Legal obligations (GDPR Art. 6(1)(c)) where the law requires us to keep or disclose data.

Sensitive data and explicit consent

Who you want to date, relationship structures and anything in Desires can reveal information about your sex life or sexual orientation. Under the FADP this is sensitive personal data, and under Art. 9 GDPR it is a special category of data.

We process it only with your explicit consent, only to check mutual fit, and we never show it to others: profiles never display who someone is looking for, and explanations never reveal another person's private preferences. Desires data is stored separately, guarded by its own access rules and visible only inside the Desires space to people who opted in.

We never infer sexual orientation, kinks, health, religion or similar traits from your swipes, photos or messages. You can withdraw consent at any time; the related features switch off and the data is deleted.

What others can see

• Your profile fields according to your visibility settings (everyone, matches only, or nobody).
• A rough distance bucket such as “2–5 km away” — never your area centre, coordinates or exact distance.
• Messages only within a match or an accepted conversation; plan details only to participants.
• Fictional demo profiles exist only in local development and test environments and are always labelled.

How long we keep data

• Expired “Now” intent cards: purged 30 days after they end.
• Recommendation logs (which profiles were shown and why): 30 days.
• Rate-limit events: 2 days.
• Account deletion: a 7-day grace period in which you can cancel, then deletion of your profile, photos, messages and preferences. Limited records may be kept longer where needed for safety (for example a sanction against a banned account) or by law.
• Consent receipts and security audit events: as long as needed to demonstrate lawful processing, then deleted.

Service providers and hosting

The service is designed to be self-hosted: the database, authentication, file storage and the app run on infrastructure operated for Uky, not on third-party advertising or analytics platforms.

Where providers are used (for example for sending e-mails or hosting servers), they act as processors under a data processing agreement. The list of current processors and their locations will be published here before public launch.

International transfers

We aim to keep data in Switzerland or the EU/EEA. If a transfer to another country becomes necessary, it will only happen with adequate safeguards recognised by the FADP and GDPR, and this notice will be updated first.

Security

• Database row-level security: every person can only read their own records; everything about others goes through checked, minimal server functions.
• Private media is never public: photos are re-encoded to remove metadata and served only through short-lived signed links.
• Strict access for staff on a need-to-know basis, with tamper-evident logs of moderator actions.

Your rights

• Access and data export: download your data from You → Privacy.
• Correction: edit your profile and preferences at any time.
• Deletion: request account deletion in the app; it completes after the 7-day grace period.
• Withdraw consent at any time, with effect for the future.
• Object to processing based on legitimate interests, and restrict processing where the law provides.
• See and delete what the app has learned about your preferences, and switch off behavioural personalisation.
• Complain to a supervisory authority — in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EU your local authority.

Adults only

The service is only for people aged 18 or older. Sign-up requires a date of birth and a confirmation. Accounts that appear to belong to minors are restricted and reviewed.

Data sources

Place names, postal codes and approximate coordinates of Swiss localities and countries come from GeoNames (www.geonames.org), licensed under Creative Commons Attribution 4.0 (CC BY 4.0). We aggregated postal codes per place and use the capital as the reference point for countries outside Switzerland.

Country names are displayed using the Unicode CLDR data built into the runtime.

Changes

If this notice changes in a way that affects how your data is used, we will tell you in the app and, where consent is required, ask again before applying the change.

Contact

Questions or requests about your data: [email protected].