Privacy policy
Version 2026-10 · applies from [launch date]
Snazzy is a dating app built around conversation. Dating means telling an app things you do not tell everyone, so this policy tries to say plainly what we keep, why, for how long, and who else ever touches it. If something here is unclear, ask us: privacy@snazzy-app.com.
Who we are
Snazzy is run by [full name], trading as Snazzy, [address], registered with the Netherlands Chamber of Commerce (KvK) under number [KvK number]. We are the controller of your personal data. Contact: privacy@snazzy-app.com.
The short version
- Everything is stored in the EU (Amsterdam). We sell nothing, share nothing with advertisers and use no tracking or analytics SDKs.
- Messages are not end-to-end encrypted. They are encrypted on our servers, and nobody reads them — except a moderator, and only a message that somebody reported, with three messages before and after it for context.
- Your location is stored only as an area of about 1 km. Nobody, including us, can see your exact position.
- Your verification selfie is looked at by a person, not by face-recognition software, and deleted the moment a decision is made.
- Deleting your account deletes it immediately. Our backups forget it within 7 days.
What we hold, why, and on what basis
| What | Why | Legal basis |
|---|---|---|
| Email address, password (hashed), date of birth, language | Your account; proving you are 18 or older | Contract (art. 6(1)(b) GDPR) |
| Which version of these terms and this policy you agreed to, and when | Proof of what you agreed to | Legal obligation and legitimate interest (art. 6(1)(c), (f)) |
| Profile: name, photos, gender, what you are looking for, interests, answers, prompts, voice intro | Showing you to people you might like, and them to you | Contract |
| Approximate area (snapped to about 1 km), town name | Suggesting people nearby | Contract |
| Orientation, ethnicity, religion, political views, identity label — only if you choose to fill them in | Showing them on your profile and, where you choose, filtering on them | Your explicit consent (art. 9(2)(a)); you can withdraw it at any time, and the answer is then deleted completely |
| Verification selfie (a short burst of frames) | Checking that you are the person in your photos | Contract, with preventing fraud as legitimate interest (art. 6(1)(f)) |
| Likes, passes, matches, and the preset reasons you give when passing | Making your suggestions better | Contract |
| Messages, goodbyes, date plans | The conversation you are having | Contract |
| Reports, blocks and block reasons you give | Keeping people safe | Legitimate interest (safety of members) |
| Share-date records (date, time, place of a date you chose to share) | Being able to help if something goes wrong on a date | Legitimate interest (your safety) |
| Signals about fake accounts and scams (for example the same opening message sent to many people, or a phone network in a different country from your profile) | Stopping fake accounts and scams | Legitimate interest (safety of members); a moderator always decides, never software alone |
| Membership status from Apple or Google | Whether your profile is live | Contract |
| Notification token for your phone | Sending you notifications | Contract |
| Feedback you send about the app, answers to the daily question, suggested interests | What you sent it for | Contract / legitimate interest |
| Your IP address, briefly | Limiting abuse (rate limiting); deriving the country of your network | Legitimate interest (security). We keep the country code, not the address |
We do not ask for your phone number, never collect identity documents and never read your address book.
How suggestions are made (profiling)
Suggestions are ranked by software from what you told us — interests, answers, what you are looking for, distance, age — and from the preset reasons you give when you pass on someone, which tune your own future suggestions for 180 days. Appearance answers you and others gave about themselves (for example hair colour) can count for a little; photos are never analysed. No suggestion has legal or similarly significant effects on you, and you can reset what was learned at any time in Settings › Reset match preferences.
Decisions that do affect you — approving your verification, warnings, suspensions and bans — are always taken by a person. A face-detection step checks that a selfie contains one face before it reaches a moderator; it does not recognise anyone and builds no template of your face.
Who else sees your data
- Other members see your profile, never your email, exact date of birth or exact location. In blind match mode, nobody sees your photos until you both choose to reveal them.
- Moderators see what they need to handle a report, a block reason or a verification — no more. Verification moderators see only your selfie and your profile photos: no name, age, bio or location. Every view is logged.
- Processors who work on our behalf, under a data processing agreement:
- DigitalOcean (servers, database, storage) — data stored in Amsterdam. DigitalOcean is a US company; transfers are covered by the EU–US Data Privacy Framework and standard contractual clauses.
- Scaleway (sending our emails) — France.
- Apple Push Notification service and Google Firebase Cloud Messaging (delivering notifications). A notification never contains a name or a message, only a general text such as "You have a new message".
- Apple and Google process your payment as independent controllers under their own privacy policies. We never see your payment details.
- Have I Been Pwned: when you choose a password we check whether it appears in known data breaches by sending the first five characters of a hash of it. The password itself and your account never leave our servers.
- Authorities, only when the law requires it, after we have checked the request is lawful, and only the data the request covers. Every request is logged.
Nobody else. We do not sell data and never will.
How long we keep it
| What | How long |
|---|---|
| Your account and profile | Until you delete your account |
| An unfinished signup | Email never confirmed: 7 days. Otherwise warned by email after 30 days of inactivity, deleted 14 days later |
| Verification selfie | Deleted when the decision is recorded |
| Messages you sent | Until you delete your account |
| Share-date records | 30 days after the date; longer only while a report, a block with a reason, an authority request, or your own "Something happened" holds it |
| Daily question answers | 30 days |
| Fake-account and scam signals | 60 days after last seen; message fingerprints 7 days |
| A data export we prepared for you | 7 days |
| Record of moderator actions concerning your account (audit log) | 2 years |
| Backups | 7 days, then overwritten |
When you delete your account, everything above goes at once, with one exception the law requires: a share-date record that an authority has formally requested is kept until that request is closed. Nothing else about the account survives.
Your rights
You can see, correct, export and delete your data, object to processing based on legitimate interest, restrict processing, and withdraw consent for the special-category fields at any time (which deletes them). Most of this you can do in the app; for the rest, email privacy@snazzy-app.com from the address on your account. We answer within one month.
Some things we will not show you, because showing them would expose someone else: who passed on you, who blocked or reported you, and why. We tell you when we withhold something and on what ground.
You can complain to the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), though we would like the chance to fix it first.
Security
Everything travels over TLS and is encrypted at rest. Sensitive fields — messages, the special-category answers, block reasons — are additionally encrypted in the database. The admin panel is reachable only through a VPN, with hardware-key sign-in. If a breach ever affects you, we will tell you directly. Found a security problem? See snazzy-app.com/security.
Age
Snazzy is for people aged 18 and over. We check your date of birth at signup and delete accounts we find to belong to someone younger.
Credits
IP geolocation by DB-IP (https://db-ip.com), licensed CC BY 4.0. The database runs on our own servers; no address is sent to DB-IP.
Changes
When this policy changes in a way that matters, we tell you in the app before it takes effect. The version and date are at the top.