Privacy Policy

• — Account: email, password (stored hashed, never in plain text), date of birth.
• — Profile: name, gender, who you are looking for, bio, interests, photos, and an optional voice intro.
• — Location: approximate coordinates and a city, used to show people near you and to apply your search radius.
• — Brazil only: a CPF number. We do not ask people outside Brazil for a document.
• — Optional face check: only if you choose it, and only after you agree on screen. We store a mathematical descriptor of your face, encrypted — not the photo used for the check.
• — Usage: IP address, browser, pages visited and timestamps, kept as a security log.

We would rather be blunt about this than let you assume otherwise. Messages between members are stored on our servers and can be read by moderation when someone reports a conversation. Traffic between your phone and our servers is encrypted (HTTPS), but that is not the same as end-to-end encryption. If you need a conversation that nobody but the two of you can ever read, do not have it here.

We do not sell your data, and we do not share it with advertisers.

• — Mercado Pago handles payments and receives what it needs to charge you.
• — Our own analytics (self-hosted, on our servers) counts page visits. It does not follow you to other sites.
• — Automatic scam screening: we built a check that reads message text to flag romance-scam patterns, using an external AI provider. It is not switched on today. When we turn it on we will say so here, and name the provider, before it starts.

Photos you upload have their EXIF metadata stripped on upload, including GPS coordinates, so a picture taken at home does not carry your address into the app.

There is a delete button in your profile. It removes your account, profile, photos, likes, matches and messages. Records we must keep for accounting or abuse investigation are unlinked from you rather than kept identifiable. Deletion is immediate and cannot be undone.

VibeLove is operated from Brazil and the data is stored on servers in Europe. Brazilian data protection law (LGPD) applies, and it gives you the right to see, correct, export and delete your data.

If you are in the European Union, the United Kingdom or California, your local law may give you further rights. We are a small operation and have not yet completed a formal GDPR or CCPA programme. We are telling you that instead of claiming a compliance we have not finished. Write to us and we will honour a request to see or delete your data regardless of where you are.

Questions about your data: support.