Privacy Policy

Last updated: 22 October 2026

This policy explains how your personal data is collected, used, shared and protected when you use the Vebuu website (vebuu.com) and the Vebuu iOS and Android apps (together, “Vebuu”). It contains the information notice required under the Turkish Personal Data Protection Law No. 6698 (KVKK) and the information required under the European Union General Data Protection Regulation (GDPR).

1. Data controller and contact

Data controller: Budun Tech, Harmony Tower, Odunluk Mah. Akademi Cad. No:1 A3 Blok No:13, 16000 Nilüfer/Bursa, Türkiye.
For privacy and personal data requests: [email protected]

2. Data we collect

Information you give us

• Account information: name, email address, password (stored only in encrypted form), date of birth, gender and the gender of the people you want to meet.
• Profile information: photos (including those you mark as private), your bio, interests, what you are looking for (a serious relationship, friendship, etc.), height, occupation, city and other optional fields.
• Messages: your conversations with other members and the photos you send in chat.
• Verification: the selfie you send for the blue tick.
• Reports and support: the reason you select and the description you write when you report a member; the support messages you send us.

Information generated when you use Vebuu

• Interactions: likes, profiles you pass on, super likes, matches, profile visits, people you block and when you were last active.
• Location: your phone’s location, if you allow it. Your location is stored rounded to an accuracy of about 1 km; other members never see your exact location, only your city and the approximate distance. If you don’t allow it, you choose your city yourself; at sign-up, your country and city may be estimated from your IP address.
• Device and usage information: IP address, device and browser type, app version, language, the device key (token) used for notifications, error logs and statistics on which screens are used.
• Purchases: the type of your Premium subscription, its start and end dates and its renewal status. Payment is taken by Apple or Google; your card details never reach us.

Information we receive from others

• Sign in with Google or Apple: if you sign in this way, Google or Apple sends us your name, your email address (with Apple this may be a hidden email address) and your account’s unique ID. We do not access any other Google or Apple data.
• Other members: information provided by members who report you or send you messages.

3. Why we use your data

• Providing the service: creating your account, showing your profile and enabling you to message and match. (Legal basis: entering into and performing the contract.)
• Recommendations: to show you suitable people in Discover and Today’s Picks, we calculate an automatic compatibility score from your age, distance, interests, intentions, activity and preferences. This score only affects the order in which profiles are shown; no automated decision is made that produces legal or similarly significant effects for you. (Performance of the contract, legitimate interest.)
• Safety: preventing fake accounts, spam, fraud and abusive behaviour; enforcing the age rule; reviewing reports. Reported conversations and messages flagged by automatic spam checks may be reviewed by our authorised team. (Legitimate interest, legal obligation.)
• Notifications and emails: news about new matches, messages and likes; account and security emails. You can choose which notifications you receive in the settings. (Performance of the contract; explicit consent for marketing messages.)
• Analytics and improvement: understanding how the app is used and fixing bugs. (Legitimate interest; consent for cookies/analytics in the EU.)
• Advertising: showing ads to free users. In the app, only ads that you choose to watch to earn a reward are shown; Premium members are not shown ads. In the EU, the United Kingdom and Switzerland, personalised ads are only shown if you give consent; on iPhone, iOS also asks separately for permission to track for advertising. (Explicit consent / legitimate interest.)
• Legal obligations: responding to lawful requests from competent authorities and meeting record-keeping obligations.

Special category data: Information such as the gender of the people you want to meet may be considered special category data concerning your sex life or sexual orientation. We process this information based on your explicit consent, only because you choose to share it on your profile and for the purpose of showing you suitable people. You can change this information in your settings at any time.

4. Who we share your data with

• Other members: your profile (your name, age, photos, city, approximate distance and profile information) is visible to other members. Your private photos are only seen by people you give permission to. If you hide your profile, you won’t appear in Discover or searches.
• Our service providers (they work only on our behalf and on our instructions):
  • Hosting and database: RegTR, Turkey.
  • Cloudflare (security, network and attack protection).
  • Google: Firebase Cloud Messaging (notifications), Google Analytics / Firebase Analytics (usage statistics), Google AdMob and AdSense (advertising), Sign in with Google.
  • Apple: Sign in with Apple, notification service, App Store payments.
  • RevenueCat (tracking subscription status).
  • Email delivery service (account and notification emails).
• Legal requirements: with competent authorities when there is a court order or a lawful request; and where necessary to protect the safety of our members.
• Change of ownership: if Vebuu is transferred or merged, under the same protections as this policy.

We do not sell your data, and we do not share information that directly identifies you, such as your name, email or messages, with advertisers.

International transfers: The servers of service providers such as Google, Apple, Cloudflare and RevenueCat may be located outside Turkey and the EU, for example in the USA. These transfers are made with safeguards that comply with Article 9 of the KVKK and the relevant provisions of the GDPR (standard contracts and, where necessary, your explicit consent).

5. How long we keep your data

• We keep your data for as long as your account is open.
• When you delete your account, your profile, photos, the photos you sent in chat, your verification selfie, likes, matches and messages are deleted immediately. Deleted data is permanently removed from security backups within 30 days at the latest.
• Your notification history is automatically deleted after 90 days.
• For accounts closed for breaking our rules, the email address and some technical information may be kept to prevent the same person from signing up again.
• Records subject to a legal retention obligation (for example traffic and transaction logs) are kept for the period set out in the relevant legislation.

6. Your rights

Under Article 11 of the KVKK and the GDPR, you have the right to: find out whether your data is being processed, access your data and get a copy of it, ask for incorrect data to be corrected and for your data to be deleted, object to processing or ask for processing to be restricted, receive your data in a portable format, and withdraw any consent you have given at any time.

• Download my data: Settings → Account and security → Download my data.
• Correction: from the profile and settings screens.
• Deleting your account: Settings → Account and security → Delete account (from within the app, with no need to send an email).
• Other requests: you can write to [email protected]; we will reply within 30 days at the latest.

If you are not satisfied with the outcome of your request, you can lodge a complaint with the Personal Data Protection Authority (Turkey) or with the data protection authority in the EU country where you live.

7. Security

All connections are encrypted (HTTPS). Passwords are stored irreversibly encrypted. Private photos and chat photos are only shown through short-lived, signed links. In the app, screenshots and screen recording are blocked, as far as the device allows, on screens that show other people’s photos and messages. Since no system is 100% secure, please let us know right away if you notice anything suspicious.

8. Age limit

Vebuu is only for people aged 18 and over. If we learn that an account belongs to someone under 18, we close it and delete their data.

9. Cookies

On our website we use strictly necessary cookies, such as those that keep you signed in, and, if you allow it, analytics and advertising cookies. For details and your preferences, see the Cookie Policy.

10. Google user data

When you sign in with Google, we receive only your name, email address and Google account ID from Google, and we use them only to create your account and sign you in. We do not use this information for advertising, we do not sell it, and we do not share it with anyone other than the service providers listed above. Vebuu’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

11. Changes

We may update this policy. We will announce important changes in advance in the app or by email. The current version is always on this page.