Privacy Policy
Updated 1 October 2026
This describes what Vyraj collects, why, who can see it, where it is kept and for how long. It documents what the code actually does, not what is customary to write.
This English version is the authoritative one. Where a translation differs from it, this text governs.
Who is responsible
The controller is Eugene Klishevich. For anything about your data: privacy@vyraj.app.
Age
Vyraj is for people aged 18 and over. We ask for a date of birth when you create a profile and do not accept anyone younger.
What is collected, and who sees it
When you create an account
- Email address — to sign in and to recover access. Not shown to other people.
- Password — stored only as an argon2id hash. It cannot be turned back into your password, which is why we can reset it but never tell it to you.
When you fill in a profile
- Name, date of birth, city, optionally home town, gender, a short description, and photographs. Other signed-in people see your name, age, city, description and photographs; not your date of birth.
- Sexual orientation — only if you state it. Kept separately from the rest of the profile: it is a special category of data under GDPR and is treated more strictly.
- Whether you can be found in the nearby search. If you choose a city in Belarus, we ask you about this explicitly instead of deciding for you.
- Whether you are online — only if you switch on “Show when I’m online”: others then see a green dot on your photo while the app is open. When you were last online is neither stored nor shown.
When you open the “nearby” screen
- Your location, rounded on your phone to a grid of roughly 200 metres before it is sent, and sent at most once every 15 minutes while you use that screen. We do not hold precise coordinates at all, rather than holding them and choosing not to show them.
- Other people see only a distance band — “under 1 km”, “1–5 km” — never a number and never a point on the map. Exact distances let someone work out your address from a few readings, so we do not hand them out.
When you show yourself on the map
- Only when you tap “Show me here” on the map and confirm. Nothing puts you on the map automatically, and there is no setting that keeps you there.
- Your place, rounded to roughly 200 metres, is shown to everyone signed in, together with your name, age and a profile photo.
- You choose how long it is shown: 1, 4, 8 or 24 hours, or until you remove it. You can remove it at any time with “Remove me”. A place left until you remove it is also erased if you do not open Vyraj for 14 days. Once removed or expired, it is no longer shown to anyone and is erased at the next daily clean-up.
- If you have hidden yourself from the nearby search, you cannot appear on the map at all, and hiding yourself erases a place you have already shown.
What you write and send
- Posts, comments, likes on them, events and group posts — seen by other signed-in people. Posts in a group are seen by anyone who opens the group.
- Messages and the photographs attached to them — seen only by you and the person you write to. Photographs in conversations are deleted after the period you choose in settings (a month unless you change it), unless someone saves them.
- People you save, and the notes you add to them — seen only by you. The person is never told.
- Who liked a post: anyone who can see the post can open the list by tapping the number of likes. Hidden people do not see each other there either.
- Videos in posts — up to a minute. Your phone compresses them before sending and removes the place where they were filmed and other hidden details stored in the file.
Dating
- Your likes and passes. When two people like each other it is a match, and each sees the other.
- If you like someone who has not decided about you yet, they see that someone liked them. If they subscribe to Vyraj Plus, they also see who — your name and photographs — until they decide.
Notifications
- If you allow notifications, a device token that lets us address your phone. Notifications are delivered through Apple Push Notification service.
- By default a message notification shows the sender’s name and the text. You can turn this off in Settings → Notifications: then no name and no text leave our server at all, and the notification only says that something arrived.
Subscription
- Payment is handled entirely by Apple. We never see your card or your Apple ID.
- Apple tells us which subscription was bought, when it renews or ends, and a transaction identifier linked to your account. We keep Apple’s notifications as they arrived, to settle any question about a payment; they contain no name and no email address.
- While you are subscribed, others see a gold ring around your photo — that is, they can tell you subscribe. You can switch the ring off in settings.
Reports and blocks
- A report records who reported what and, if you give one, the reason. Our moderator is notified through Telegram: the message contains the names of both people and the reason.
- A block hides the two of you from each other everywhere — search, the map, the feed and conversations.
When you ask to be told about Android
- Email address, and the language you were reading the site in — nothing else. No account is created, and the address is not linked to one.
- It is used once: to write to you on the day the Android version is out. Then it is deleted. The basis is your consent, given by submitting the form, and you can withdraw it at any time by writing to privacy@vyraj.app.
Technical records
- Sessions: sign-in time and the browser or app identifier, so you can end a session you do not recognise.
- Connection address in server logs.
Usage statistics
- Which screens are opened and which features are used: actions such as a post, comment or message sent, a like, a match, a place shown on the map, an event, the subscription screen and a purchase, and when the app is opened. With them go only counts and choices: how many photos, whether there was an attachment, the duration chosen. Never the text, the photographs, names or who the other person is.
- The app version, phone model, system version, language, mobile carrier and the identifier Apple gives our app on your phone.
- Records are linked to your account’s internal number, not to your name or email. Amplitude also receives your network address and uses it to determine your approximate location — country, region and city. Precise coordinates are never sent.
- They are processed by Amplitude in the United States. You can switch them off at any time: Settings → “Share usage statistics”.
Why, and on what basis
| Account, sign-in, recovery | performance of our contract with you |
| Profile, photographs, posts, messages, dating | performance of contract: without them the service does not work |
| Location for the nearby search | your consent — withdrawable in your phone settings |
| Place on the map | your consent, asked each time you show yourself; withdrawn with “Remove me” |
| Sexual orientation | explicit consent; the field is optional |
| Notifications | your consent — withdrawable in your phone settings |
| Subscription | performance of contract |
| Reports and blocks | legitimate interest: the safety of people using the service |
| Usage statistics | legitimate interest: knowing which features are used, to decide what to improve; you can object with the switch in settings |
How long it is kept
Anything not listed here is kept while your account exists and is erased with it.
| Place on the map | as long as you chose — 1 to 24 hours, or until you remove it, but no longer than 14 days without opening Vyraj; then erased at the next daily clean-up |
| Photographs in conversations | the period you choose in settings — a month unless you change it |
| Deleted posts, comments and messages | 30 days; if they were reported, as long as the report — about a year |
| Photographs and videos uploaded but never posted | 24 hours |
| Notification device tokens | 180 days after the phone was last seen |
| Revoked and expired sessions | 90 days |
| Deleted account | 30 days to change your mind, then erased completely, photographs included |
| Reports and what was reported | about a year — otherwise there is no way to act on a complaint about something older |
| Apple’s purchase notifications | kept as they arrived, to settle payment questions; no name or email in them |
| Usage statistics | while your account exists; when it is erased, we ask Amplitude to erase them too |
| Backups | one month |
| Address left to be told about Android | until the day we write, then deleted |
Who else is involved
We do not sell data and do not pass it to advertisers. These providers help run the service:
- DigitalOcean — server and database.
- Cloudflare — traffic delivery and photo storage (R2, EU jurisdiction).
- Backblaze — backups, EU region, encrypted before they leave us.
- Resend — password reset and address confirmation emails.
- Apple — delivery of notifications, and payments for the subscription.
- Telegram — notifying our moderator of new reports.
- Amplitude — usage statistics, stored in the United States.
Your rights
You can obtain a copy of your data, correct it, delete your account outright from inside the app, withdraw consent for location, notifications and orientation, remove yourself from the map at any time, switch off usage statistics, and complain to the supervisory authority in your country.
Deletion lives in the app settings — no emails, no asking. After deleting you have 30 days to change your mind: sign in again and the account comes back.
Security
- Passwords use argon2id and are never stored in a readable form.
- Traffic is encrypted the whole way, including the leg from Cloudflare to our server.
- Backups are encrypted before they are sent: the storage provider holds no key.
Changes
If this policy changes materially, we will say so in the app before the change takes effect.
Language
This policy is published in English, Belarusian, Russian, Lithuanian and Georgian. The English version is the one that applies: where a translation differs from it, the English text prevails.