Your data deserves plain language.

Information we process

• Account: a protected hash of your Sign in with Apple identifier, sessions, adult age-gate status, and account state.
• Profile: name, birth date, city and country, approximate city coordinates, dating preferences, relationship and family intentions, languages, optional faith, travel readiness, prompts, and photos.
• Activity: introductions, messages, GIF selections, voice notes, optional translations, read state, likes, profile views, feed photos and captions, and private date-plan check-ins.
• Trust and safety: camera-only verification captures, review and appeal status, blocks, reports, automated moderation results, and human-review audit records.
• Purchases and support: entitlement state from Apple and RevenueCat, support requests, and limited security or error logs. Naya does not receive full payment-card numbers.

How we use information

We use information to authenticate you; operate discovery, Feed, introductions, conversations, translation, private date plans, and purchases; apply your controls; prevent spam and abuse; assist human moderation and verification review; answer support; and comply with law.

We record limited first-party success events—qualified profile view, introduction, reply, five-message conversation, planned date, and safe-date feedback—to learn whether Naya creates useful, safe connections. We do not sell personal information or use third-party advertising trackers.

Service providers

• Cloudflare hosts Naya’s API, D1 database, private R2 media, logs, and this site.
• OpenAI receives submitted text and images for automated safety triage. Automation can escalate content but is not the sole enforcement or identity authority.
• OpenRouter and DeepSeek process the text of a message only when a member requests translation. Naya currently uses DeepSeek V4 Flash, caches translations to reduce repeated processing, and keeps the original available.
• GIPHY receives GIF search terms, a Naya pseudonymous identifier, approximate country, network information, and GIF interaction events when the GIF picker is used. Naya stores the selected GIPHY identifier.
• Apple and RevenueCat provide authentication, device services, App Store purchases, and entitlement validation.

Visibility and location

Other signed-in members may see approved profile information, photos, Feed posts, approximate location, presence you allow, and verification badge. Naya does not require or share continuous live location with a match. Private date plans are visible only to their creator unless that person deliberately shares a summary with someone they trust.

Verification and retention

Verification requires a randomized pose in a new camera photo. A human reviewer compares the capture with the primary profile photo. The capture is never displayed on your profile. Approved captures are deleted after the decision; failed captures are retained for no more than seven days so a requested appeal can be reviewed, then deleted. Naya retains the decision, timestamps, retry count, and appeal record as needed for safety and accountability. Changing the primary profile photo removes the verified state and requires a new check.

Voice notes are private to conversation members. If a device supplies a transcript, Naya can safety-screen that text; Naya does not claim that every audio recording is fully machine-moderated.

Deletion and choices

Use the in-app Delete profile control to remove the account’s D1 records and stored media. Limited provider, security, backup, dispute, or legal records may remain for their required periods. Deleting Naya does not cancel an Apple subscription.

You can edit your profile, hide presence, control introductions, opt in or out of translation, adjust discovery and privacy preferences, delete photos or Feed posts, block, report, appeal eligible decisions, restore purchases, sign out, or delete the account. Contact us through the support form for access, correction, deletion, or privacy questions.

Adults only and changes

Naya is not for anyone under 18. An under-18 date of birth causes the account to be rejected and deleted. We may update this policy as the service changes and will post the new effective date here.