1. Information we collect
Depending on how you use the app, we may collect:
- Account and profile information: email address or phone number, name, biography, date of birth, age, gender, connection preferences, city, country, photos, interests, and profile settings. When you use Apple or Google sign-in, we also receive the provider account identifier and any name or email you authorize the provider to share.
- Location information: precise or approximate location when you grant permission, including coordinates and the time your location was last updated.
- Content and communications: messages, voice notes, images, reactions, reports, and other content you choose to share.
- Activity information: matches, connection requests, blocks, game activity, scores, events, rewards, and interactions with app features.
- Device and technical information: device and app platform, notification token, app version, IP address, and limited diagnostic or security information.
- Our own service records: in-app events such as screens opened and features used, recorded on our own servers so we can run and improve the service. Before an event is stored we strip anything identifying beyond the account it belongs to: email address, phone number, coordinates, IP address, date of birth, and anything that looks like a password or a token are rejected outright rather than saved. Server error reports are also monitored on our side. These records stay with us; we do not send them to an advertising network.
- Analytics and crash reports sent to Firebase, only if you agree: when you first open the app we ask whether app usage events and crash reports may be sent to Google Firebase (Firebase Analytics and Firebase Crashlytics). Nothing is sent unless you say yes: both are switched off in the app before it starts and are only turned on once you have agreed. If you agree, these records are linked to your account identifier so a crash can be traced to what you were doing. You can change your answer at any time in Profile → Settings → Privacy, and the app works exactly the same either way.
- Website information: if you join the waitlist on our website we store your email and any country, city, device platform, and language you provide to plan availability and send launch updates. Our website sets one strictly necessary cookie to keep you signed in. Optional Firebase Analytics is loaded only after you accept analytics in the consent banner.
We receive this information directly from you, from your device when you grant a permission, from Apple or Google when you choose their sign-in service, and from your activity in the app.
2. How we use information
We use personal information to:
- Create and secure your account.
- Show relevant profiles and enable matching.
- Deliver chats, media, notifications, events, and games.
- Personalize the app and remember your settings.
- Prevent abuse, investigate reports, and keep members safe.
- Maintain, troubleshoot, and improve the service.
- Comply with legal obligations and enforce our terms.
3. When information is shared
We may share information:
- With other members: profile details and content you choose to make visible or send through the app.
- With service providers: vendors supporting hosting, storage, security, and app operations. They may use information only to provide services to us and must protect it consistently with this policy and applicable law.
- With platform providers: Apple and Google support optional account sign-in, and Firebase Cloud Messaging delivers push notifications. Their handling of information is also governed by their own privacy terms.
- With analytics and moderation providers: Firebase Analytics and Firebase Crashlytics (Google) receive app usage and crash data, but only from members who agreed to that when they first opened the app, and only for as long as they leave it switched on; Sentry receives server error reports; and Sightengine receives a copy of a profile photo when it is uploaded, so it can be automatically screened against our photo rules before it goes live. These providers act on our instructions and may not use the information for their own purposes.
- For legal or safety reasons: when reasonably necessary to protect people, investigate misuse, or comply with law.
- During a business change: as part of a merger, financing, acquisition, or transfer of assets, subject to appropriate protections.
We do not sell personal information for money or share it for cross-context behavioral advertising.
4. Location, camera, photos, and microphone
These permissions are optional and requested only when a related feature needs them. Location supports nearby matching. Camera and photo access let you add or share images. Microphone access lets you record voice messages and join live voice chat during a game. Live game audio is streamed to the other players. You can change permissions in your device settings.
5. Message encryption
The text of a chat message is encrypted on your device before it is sent. Each device generates its own key pair, keeps the private half on the device, and publishes only the public half; the message key is derived from your key and your chat partner's, so the message body reaches our servers and is stored there as ciphertext that we cannot read.
What this does and does not cover:
- Encrypted on your device: the text of chat messages between members.
- Not encrypted in this way: photos, voice notes, videos, and files sent in chat, profile information and profile photos, reports you send us, and everything outside chat. We can access this content, and we do access it where needed to moderate it, investigate reports, and keep the service running.
- Text encryption needs both devices to have a key registered. If your chat partner's key is not yet available or your device cannot run the encryption, the message is sent without it, protected only by the encrypted connection.
- The private key is held on your device. If you lose your devices or sign out everywhere, earlier encrypted messages may no longer be readable, and we cannot recover them for you.
- All traffic between the app and our servers travels over an encrypted connection whether or not the body itself is encrypted.
This is our own implementation rather than an independently audited end-to-end encryption protocol, and it does not hide who you talked to or when. Content you report to us is sent to us in a readable form so our safety team can act on it. Please treat encryption as one protection among several, not a guarantee.
6. Our website and waitlist
You can browse our website without an account. If you join the waitlist, we use your email to send launch updates. We may also store the country, city, device platform, and language you provide to plan availability. We do not sell this information or use it for unrelated marketing, and you can ask us to remove it at any time. Our website sets a single necessary cookie that keeps you signed in when you use an account-related page. Optional Firebase Analytics is loaded only after you accept analytics in the consent banner.
7. Retention, deletion, and consent
We keep information while your account is active and as needed to run the service. When you delete your account, account-linked records and stored uploads are scheduled for deletion. Limited records may be kept only as long as needed for legal obligations, fraud prevention, safety investigations, disputes, and secure backups. Backup copies age out under our normal backup cycle and are not used for ordinary operations.
Visit our account deletion page for instructions and details. You can withdraw optional permission consent in device settings. You can also stop using Apple or Google sign-in by revoking access with that provider; contact us if you need help disconnecting the provider from your account.
8. Your choices and rights
You can update profile details and privacy settings in the app, manage device permissions, block or report members, and delete your account. Depending on your location, you may also have rights to access, correct, export, restrict, object to, or delete personal information. See Your Privacy Choices to make a request.
9. Security and international processing
We use reasonable administrative, technical, and organizational measures to protect information. No system is completely secure. Information may be processed outside your country, where privacy laws may differ, with safeguards required by applicable law.
10. Children
Dibzi is not intended for anyone under 18. We do not knowingly collect personal information from children. Contact us if you believe a child has provided information to the service. See our Safety Center for our child-safety standards.
11. Changes to this policy
We may update this policy as the app changes. We will update the date above and provide additional notice when required.
12. Contact us
Questions or privacy requests can be sent to info@dibzi.app.
Data controller: ZEEG LABS, Moerkerkestraat 87B1, 3081 RP Rotterdam, the Netherlands.