Privacy Policy of VOLIMEH

1. Controller and privacy contact

The controller responsible for processing personal data is:

VOLIMEH
Denis Batinic
Dietikon, Zurich, Switzerland
Email: info@volimeh.app

There is no registered company. A full street address is not published.

For privacy requests, access, rectification, erasure and other data-subject rights, contact us at info@volimeh.app.

2. Scope

This privacy policy applies to the dating and getting-to-know-you platform VOLIMEH for people aged 18 and over, including the website at https://volimeh.com and https://www.volimeh.app, the web application, and the Android app currently in closed Google Play testing.

The Android app loads the existing web application as a Trusted Web Activity. This policy therefore covers the website and the app together, insofar as the same functions are used.

This policy does not cover Google’s own processing (for example Google Account sign-in or Google Play). Google’s own notices apply to that processing.

3. Minimum age

VOLIMEH is intended exclusively for people aged 18 and over. By registering, you confirm that you are at least 18 years old.

We reserve the right to suspend or delete accounts if there are indications that the age requirement is not met.

4. Personal data we process

We process personal data that you provide, data generated through use, and data transmitted by selected services if you use them. Mandatory details are those without which an account and the core functions cannot be provided. All other profile and additional details are voluntary.

User identifiers (such as account IDs) are personal data even if they do not contain your legal name. They are not anonymous.

4.1 Account and registration

• Email address
• Password: VOLIMEH does not store your password in plaintext. Sign-in uses Supabase Auth, which stores a password hash.
• Date of birth, derived age, and confirmation that you are of legal age
• Gender
• Display name (usually your first name)
• Connection mode (dating or getting to know someone)
• Who you want to see in Discover
• Place of residence as the city and country you enter
• Bio, interests, values, life goals and other onboarding details required for matching and profile display

4.2 Voluntary profile details

• Sexual orientation, if you provide it. It may be visible to other users on your profile. It is not used as a Discover ranking criterion.
• Religion, if you provide it. It may be used for certain search filters.
• Height, profession and education
• Lifestyle details such as smoking, alcohol, pets, desire for children, and zodiac sign
• Spoken languages
• Optional “secret” free-text field, if completed; it may be visible in Discover
• Further place and profile details that you save in Settings

There is no separate field for health data or medical information. Lifestyle details are not diagnoses.

4.3 Matching, filters and in-platform activity

• Saved search filters and Discover settings, such as age, distance, connection mode, languages, and further filters including certain lifestyle filters
• Compatibility and match scores
• Likes, swipes, heart greetings, and the last Discover action for undo
• Profile visits, where the function is active and you are not browsing invisibly
• Date proposals between matches
• Usage counters for limited features, such as daily likes
• In-app notifications

4.4 Messages, reports and feedback

• Message content, message type and timestamps
• Reports, blocks and chat restrictions
• Voluntary feedback and in-app ratings, if you send them

4.5 Photos, Reveal and optional verification

• Uploaded profile photos
• Reveal status per match
• Images and verification results if you complete optional profile verification

4.6 Sign-in, security and account settings

• If you sign in with Google: email address, Google user ID and other identity details Google transmits to VOLIMEH
• Session information for remaining signed in
• Optional “remember sign-in”: your email address and password may then be stored in that browser’s local storage on the device
• Security-related events and, where the protection function is active, device identifiers
• Settings such as discoverability, online status, read receipts and notifications
• Moderation or ban status
• Source of a flyer action if you claim the flyer special while signed in via the QR code

4.7 Purchases and subscriptions

• Subscription status, plan, and period start and end
• For Android purchases via Google Play: product ID, purchase token, order ID, renewal status and term details
• Access granted by the operator without a payment provider, such as a flyer month of Premium, where the conditions are met

VOLIMEH does not store full credit-card numbers.

4.8 Technical data

• IP address, insofar as it arises in hosting, security (for example rate limiting) or to determine the approximate pricing country
• Browser, device and user-agent details
• Error reports with the error message, affected page and technical details
• Push endpoint and related keys if you enable browser or app notifications
• Language and country cookies, and local storage for language, an install identifier and the in-app rating prompt

5. Sources of the data

The data comes from you (registration, profile, filters, photos, messages), from your device and browser (technical connection and storage data), from other users (for example likes, messages, profile visits), and from Google if you use Google sign-in or Google Play Billing. Hosting and email providers also generate operational logs.

6. Purposes of processing

We process personal data for the following purposes:

• Providing the dating and getting-to-know-you platform
• Creating, signing in to and managing accounts
• Displaying and editing profiles
• Matching, compatibility and saved search filters
• Progressive photo release (Reveal)
• Messages, date proposals and in-app notifications
• Security, abuse and spam prevention, reports and moderation
• Optional profile verification
• Managing subscriptions and unlocked access
• Complying with legal obligations
• Stability, troubleshooting and operating the platform

We currently do not use tools to analyse usage behaviour and do not use advertising trackers. We do not display advertising.

7. Applicable legal bases

The starting point is the Swiss Federal Act on Data Protection (FADP / DSG), because the controller is established in Switzerland.

The GDPR does not apply solely because of your nationality. Where VOLIMEH offers the service to people in the European Economic Area, or the GDPR otherwise applies, we rely on the following bases — each tied to the specific purpose, not on a blanket consent for all processing:

• Article 6(1)(b) GDPR (contract): account, profile, matching, filters, Reveal, messages, core operation, and management of paid or granted subscriptions insofar as they form part of the contractual service
• Article 6(1)(f) GDPR (legitimate interests): security, abuse prevention, moderation access to the extent required, technical logs, error reports, and determining the approximate pricing country. The legitimate interest is a safe, stable and fair operation of the platform.
• Article 6(1)(a) GDPR (consent): optional push notifications, optional storing of sign-in details in the browser, optional verification images, and special categories of data that you choose to provide
• Article 6(1)(c) GDPR (legal obligation), where a legal duty to process exists

If you voluntarily provide religion or sexual orientation, these may be special categories of personal data under Article 9 GDPR. We process them only because you enter them yourself and — where visible — wish to show them to other users on a dating profile, and only for the purposes stated in this policy.

Where the service is offered to people in the United Kingdom, UK data protection law (UK GDPR) applies in addition, with the same purpose mapping, insofar as it is applicable.

Consent is not the legal basis for all processing.

8. Matching, personalisation and profiling

VOLIMEH calculates compatibility scores and rankings in order to show you possible contacts. The assessment includes, among other things, interests, life goals, communication and relationship style, place and activity details, as well as proximity, activity and a trust score. Your saved filters limit whom you see.

This is automated scoring to display suggestions (profiling in the data-protection sense). It is used to introduce contacts and does not have legal or similarly significant effects in the sense of a solely automated decision on concluding or ending a contract outside use of the platform.

Sexual orientation is not used as a Discover ranking criterion.

9. Visibility of profiles, messages and photos

Depending on the function, other users may see, among other things: display name, age, gender, the place you entered, bio, interests, values, life goals, compatibility indications, trust indications and — if provided — sexual orientation and the secret free-text field. Profession, education and height are typically shown in the match context, if present.

Profile photos are blurred in Discover. After a match, full photo release remains restricted on the free offer. On paid tiers, full release is progressive, after the number of messages provided in the application (currently five messages per person).

Messages are visible to the chat participants. The operator may access messages and related content where this is necessary for moderation, reports, security or legal duties. The fact that not every message is read in day-to-day operation does not mean there is no technical access.

Messages are encrypted in transit (HTTPS/TLS). There is no end-to-end encryption between user devices.

10. Security, moderation and administrative access

We use appropriate technical and organisational measures, in particular transport encryption, password hashes, access restrictions, authentication and logging of security-relevant events.

Administrators may access account, profile, photo and communication data to review reports, prevent abuse and protect security, insofar as needed for the case. Access is documented in the moderation context.

11. Cookies, local storage and notifications

We use cookies and similar technologies that are required to operate the service:

• Sign-in and session cookies
• Language cookie
• Pricing-country cookie
• Cookie for the source of a flyer action, if you use it

Depending on use, the device’s local storage may hold language, an install identifier, the state of the in-app rating prompt and — only if you choose this — sign-in details for “remember sign-in”.

In-app notifications are part of operating the account. Push notifications are enabled by you in Settings; the push endpoint and related keys are then stored.

We currently do not use tools to analyse usage behaviour and do not use advertising trackers. We do not display advertising. Error reports and security logs are part of operating and securing the platform; they are not used to analyse usage behaviour and not for advertising.

You can restrict cookies in your browser. Technically necessary cookies are required for sign-in and basic functions.

12. Hosting and technical providers

We use the following providers in particular to operate the service:

• Vercel: hosting the website and the web application
• Infomaniak: sending email and providing mailboxes
• Supabase: user management, authentication, database and file storage
• Google: Google Account sign-in and Google Play Billing, in each case if you use those functions

These parties have different roles. Technical hosting and database services process data in order to provide VOLIMEH. For Google Account and Google Play payments, Google is an independent controller of that payment and account processing. It is therefore incorrect to describe all recipients across the board as processors.

Supabase publishes a Data Processing Addendum. The specific server region and individual contracts are not stated in this policy.

13. Google Play Billing and subscriptions

In the Android app, paid monthly subscriptions for the Premium, Maximum and Galaxy tiers are processed through Google Play Billing. The product IDs are currently volimeh_premium, volimeh_maximum and volimeh_galaxy. A separate web payment provider is not currently in use. CCBill is not used.

Google processes your payment instruments under Google’s terms. VOLIMEH receives purchase evidence from Google and stores in particular: product ID, purchase token, order ID where available, subscription status, renewal flag, and the start and end of the term. These details are linked to the signed-in VOLIMEH account, usually via the user ID after sign-in or restore purchases.

The purpose is to verify the purchase, unlock the ordered features and manage the subscription, including status changes that Google transmits to VOLIMEH.

Besides the Trusted Web Activity shell, the Android app uses the Google Play Billing bridge. No further native third-party SDKs are included in the Android shell.

Deleting the VOLIMEH account does not automatically cancel a Google Play subscription. You must also cancel the subscription in Google Play, otherwise Google may continue to charge.

14. Recipients and international disclosure

Personal data is disclosed to:

• other users, insofar as details and content are visible under section 9
• Vercel, Infomaniak and Supabase for hosting, email and data storage
• Google for Google sign-in and Google Play Billing, if used
• authorities, where a legal duty exists

Personal data is not sold.

Data is not stored exclusively in Switzerland. Providers may process personal data in Switzerland, the EEA or other countries. Supabase’s exact server region and an exhaustive list of all recipient countries are not stated here, because they are not published in that form.

Under the Swiss FADP, personal data may be disclosed abroad if the recipient state provides adequate protection, or if a statutory exception or suitable safeguards apply. Whether an adequacy decision, standard contractual clauses or another lawful ground applies in a given case depends on the provider. This policy does not assert specific contract texts that are not evidenced here.

The selected Android test markets describe intended availability of the app. They are neither storage locations nor proof of users’ whereabouts. The language you choose does not determine the applicable law.

15. Retention, account deletion and remaining data

We retain personal data while the account exists and the respective purposes require it, or a legal duty prevents deletion.

You can delete your account in the application Settings. The application then deletes the account and the related personal data immediately. The application does not provide a 30-day post-deletion period.

If you can no longer use the app, you can also request deletion by email to info@volimeh.app. State the email address of the account. You must additionally cancel a Google Play subscription in Google Play.

After deletion, technical remnants at providers (for example short-term backups) or data still needed by law or to resolve payment and security matters may remain. A fixed backup or retention period in days is not currently defined and is not invented here.

Signed-in users can request a data export of the account details provided for that purpose in Settings.

16. Your rights and complaints

Under the Swiss FADP you have, in particular, the right to information, rectification and release of data, and to erasure or restriction, where the statutory conditions are met. Where the GDPR or UK GDPR applies, you additionally have the rights to data portability, to object to certain processing, and to withdraw consent with effect for the future.

Send requests to info@volimeh.app.

You may lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC / EDÖB). Where the GDPR applies, you may also contact the supervisory authority of your EU/EEA place of residence or work, or of the place of the alleged infringement. Where the UK GDPR applies, you may contact the Information Commissioner’s Office (ICO).

17. Further target markets

The Android app is intended for a closed test in, among others, the following markets: Albania, Australia, Belgium, Bosnia and Herzegovina, Bulgaria, China, Germany, Denmark, Estonia, Finland, France, Georgia, Greece, India, Indonesia, Ireland, Iceland, Israel, Italy, Japan, Canada, Croatia, Latvia, Liechtenstein, Lithuania, Luxembourg, Malta, Mexico, New Zealand, Netherlands, North Macedonia, Norway, Philippines, Poland, Portugal, Romania, Russia, San Marino, Sweden, Switzerland, Serbia, Slovenia, Spain, Taiwan, Czechia, Hungary, United States, United Kingdom and Austria.

This list is not a statement about storage locations. No separate country-specific clauses beyond the FADP, GDPR and UK GDPR have been added to this policy for those markets, because the additional local requirements have not been fully assessed here. That concerns, among others, China, Russia, India and individual US states. No general claim is made that VOLIMEH is compliant worldwide. For questions from one of these markets, write to info@volimeh.app.

18. Changes to this privacy policy

We update this privacy policy if processing, technology or the legal situation changes. The current version is published on the website and in the app. The date stated above is decisive.

← Legal Information