Privacy Policy

In short

• Your real location is never shown on the map; it is rounded to roughly a 3 km area.
• Location updates only when you open the app. There is no background tracking.
• Your answers are used for matching; you can hide any of them from your profile.
• We do not sell your data for advertising or share it with third parties for marketing.
• You can delete your account from inside the app; personal data is permanently erased after 30 days.

1. Who is responsible

The operator of the Ruh Esi app is the data controller. For any question or request about this policy, write to destek@ruhesi.app.

2. What we collect

Account information

• Email address (for signing in)
• If you signed in with Apple or Google: the provider's stable user identifier and your email address if you shared it
• First and last name, date of birth, optional display name

Profile and matching data

• Your answers to questions and how important each one is to you
• The interests you select
• Photos you upload and, if requested, a verification selfie
• The short text you write about yourself

Location

Each time you open the app we read the location your device reports. Before storing it we round it to three decimal places (about 110 metres); we never keep a more precise record. The point shown on the map is coarser still: your location is snapped to a cell of roughly 3 kilometres and placed inside that cell with a fixed offset unique to you.

The offset being fixed is deliberate. If it were random on every request, someone querying you repeatedly could average the readings and recover your real position. With a fixed offset, querying again reveals nothing new.

Technical data

• Device type and operating system, app version
• IP address — not stored raw, kept as a salted hash
• Device notification token, so we can send you notifications

3. Sensitive data

Some questions may touch on belief, political opinion, health or similar sensitive topics. Answering them is entirely optional and we ask for separate explicit consent. If you do not consent, those questions are never shown to you and are not used in matching. You can withdraw consent at any time; the related answers are deleted when you do.

4. Why we process your data

5. What other users see

• By default only your initials are visible ("A. Y."). If you set a display name, that is shown instead.
• Your full name appears only when someone reveals you, or when you become connected.
• Your age is shown; your date of birth is not.
• Distance is shown as a range such as "~3 km"; a precise distance is never shared.
• Answers you mark as hidden are shown to nobody; they are used only in the compatibility calculation.
• Photos that have not been approved are visible to nobody.

6. Who we share with

We do not sell your data for advertising. We share it only with the service providers needed to run the service, and only as much as needed:

• Hosting and database provider
• Email provider (sign-in codes and essential notices only)
• Notification provider (device token and notification text only)
• Subscription verification provider and the stores (Apple, Google)
• Competent authorities where we are legally required

7. How long we keep it

• Account and profile data: for as long as your account is open
• After a deletion request: 30 days (you can change your mind), then personal data is permanently erased
• Sign-in codes: 10 minutes
• Reports and moderation records: kept for a limited period even after an account closes, so repeat abuse can be detected
• Billing and purchase records: for the legally required retention period

8. Your rights

You have the right to access, correct, delete, restrict processing of and port your data, and to object to processing. Most of these you can exercise directly in the app; for the rest, write to destek@ruhesi.app. We respond within 30 days at the latest.

9. Children

Ruh Esi is not for anyone under 13. Where your country sets a higher age, that higher age applies. If we find an account belonging to someone under 13 we close it and delete the data.

10. Security

• Passwords are hashed with Argon2id and never stored in plain text
• Session refresh tokens are stored as hashes, not in plain form
• If a used session token is presented again, all sessions are revoked
• IP addresses are stored as salted hashes
• Precise location data is never stored at full precision

11. Changes

If we update this policy we will tell you in the app. Where a change is meaningful we will ask for your consent again.