sheytoonak Privacy Policy

Last updated: 12 September 2026

This policy explains what personal information sheytoonak collects, why, who it is shared with, how long it is kept and the choices you have. It applies to the sheytoonak website at sheytoonak.app and to the sheytoonak apps for iPhone and Android (together, the "Service"). By using the Service you agree to the practices described here.

Who can use sheytoonak

sheytoonak is only for adults aged 18 and over. We do not knowingly collect information from anyone under 18, and we delete any account we find belongs to someone under 18.

Information you give us

Account details: username, email address, password (stored only in encrypted, hashed form), first name, date of birth and gender. If you sign in with Apple or Google, we receive the account identifier and email address that provider shares with us.
Profile: your photos, the profile details you choose to fill in (such as appearance, background, lifestyle and what you are looking for) and your answers to profile prompts. Some of these, such as background or religion, may be sensitive; they are always optional and you decide whether to share them.
Location: the city you choose, or, if you allow it, your device location, which we turn into a city so we can show you members nearby. Other members only ever see your city, never an exact position.
Messages and activity: messages you send and receive, likes, favourites, blocks, reports, and which profiles you view.
Support requests you send us.

Information collected automatically

Device and security information: IP address, device and browser type, app version, the devices you are signed in on, a push notification token if you allow notifications, and security signals used to confirm requests come from a genuine copy of our app.
Usage: how you use features of the Service, which we use only to run and improve it.
Cookies: the website uses only the cookies it needs to keep you signed in and to protect forms from abuse. We do not use advertising or tracking cookies.

Purchases

Subscriptions bought in our apps are processed by the Apple App Store or Google Play, and subscriptions bought on the website are processed by Stripe. They send us the purchase and subscription status so we can give you the features you paid for. We never see or store your card number.

How we use your information

To create and run your account and show your profile to other members.
To suggest matches and show you members near you who fit what you are looking for.
To deliver messages and send the notifications and emails you ask for.
To keep the Service safe: reviewing photos, acting on reports, blocking abusive members, and preventing spam, fraud and fake accounts.
To process subscriptions and provide customer support.
To maintain, secure and improve the Service.

We do not sell your personal information, we do not show third-party advertising based on your data, and we do not track you across other companies' apps or websites.

Automated photo review

Every photo you upload is checked before other members can see it. As part of that check, the photo is sent to an automated image-moderation service provided by Google (the Gemini API), which tells us whether it appears to contain nudity or other content our Terms do not allow. Google processes the photo only to perform this check for us, under its terms as our service provider. Photos can also be reviewed by our moderators. By uploading a photo you agree to this check.

Who we share information with

Other members see your public profile: username, first name, age, city, photos, profile details and prompt answers. Messages are shared only with the member you send them to.

We also use service providers who process information on our behalf and only for the purposes described here:

Laravel Cloud — hosting of the Service, in the United Kingdom and European Union.
Cloudflare — network delivery and security (including bot protection on sign-up forms), and storage of photos.
Google — location search (Google Maps), automated photo review (Gemini API), Sign in with Google, and delivery of push notifications to Android devices.
Apple — Sign in with Apple, App Store subscriptions and delivery of push notifications to Apple devices.
Expo — delivery of push notifications to our apps.
Stripe — payments on the website.
Mailgun — sending account and notification emails.

We may also disclose information when the law requires it, to protect members' safety, or as part of a sale or reorganisation of the Service, in which case this policy continues to apply.

International transfers

Some of our service providers process information outside the United Kingdom and European Economic Area. Where they do, we rely on safeguards recognised by UK and EU data protection law, such as standard contractual clauses.

How long we keep information

We keep your information while your account is open. When you delete your account, we delete your profile, photos, likes, favourites, notifications and signed-in devices. We keep limited records only where we must, for example payment records for tax purposes and records of reports and enforcement needed to keep banned members off the Service, and only for as long as that purpose requires.

Your choices and rights

Delete your account at any time: in the app, open Settings and use Delete account at the bottom; on the website, use the delete account page in your account settings.
Edit or hide your profile at any time from your settings.
Location and notifications: you can turn off location access and push notifications in your device settings. You can still use the Service by choosing a city yourself.
Emails: use the unsubscribe link in any email, or your notification settings.

If you are in the United Kingdom or European Union, you also have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict how we use it, and to withdraw consent. We rely on performing our contract with you, your consent (for example for location and notifications), and our legitimate interest in keeping the Service safe. You can complain to your data protection authority; in the United Kingdom that is the Information Commissioner's Office (ico.org.uk).

Security

All information is encrypted in transit, passwords are stored only as hashes, photos are served only through short-lived signed links, and access to personal information is limited to what running the Service requires. No system is perfectly secure, so please use a strong, unique password or a passkey.

Changes to this policy

If we make a significant change we will tell you by email or in the Service before it takes effect. The date at the top shows when this policy last changed.

Contact us

Questions or requests about your privacy: email [email protected], or use the contact page.