How Galomira Dating handles your data

The short version

• Your dating profile is separate from your Galomira profile and is never shown in Galomira.
• We never store your exact location. Your device position is turned into a neighborhood and then discarded.
• Other people never see a distance, your date of birth, your surname or your Galomira username.
• Photo metadata (including GPS) is removed on your phone before upload.
• You can pause or delete your dating profile at any time, in the app.

What we collect

• Account: the Galomira account you sign in with (email address or Apple/Google sign-in identifier). See the Galomira Privacy Policy.
• Dating profile: first name, date of birth (to confirm you are 18+ and show your age), gender, who you would like to meet, age range, an optional short bio and 1–6 photos.
• Location: each time you open the app we use your device position once to find the nearest Galomira neighborhood. We store only that neighborhood and the area it belongs to — not your coordinates.
• Activity: likes and passes, matches, messages you send, and when you were last active.
• Safety: blocks, reports you make or that are made about you, and moderation decisions.
• Device: a push notification token and your app language, if you allow notifications.
• Technical logs kept by our hosting providers (IP address, timestamps, device type) for security and reliability.

Sensitive information

Who you would like to meet, combined with your gender, can reveal your sexual orientation, which data protection law treats as a special category of personal data. We process it only to show you and others relevant profiles, on the basis of your explicit consent, which you give when you create your dating profile. You can withdraw consent at any time by deleting your dating profile.

Why we use it

We do not sell your data, we do not show ads in Galomira Dating, and we do not use your data for automated decisions that have legal or similarly significant effects on you.

• To run the service: show your profile to people nearby who match your preferences, create matches and deliver messages (performance of our contract with you).
• To keep people safe: enforce the 18+ age limit, handle blocks and reports, investigate abuse and ban accounts (our legitimate interest in a safe service, and legal obligations).
• To send notifications you enabled about new matches and messages (your consent via your device settings).
• To secure and maintain the service (legitimate interest).

Who can see what

• People in your area who fit your preferences (and whose preferences you fit) see your first name, age, gender, bio, photos and either "same neighborhood" or the name of your area. They never see a distance.
• Your matches can read the messages you send them.
• Galomira, your neighbors and other Galomira users cannot see whether you use Galomira Dating.
• Our moderators can see the profile of someone who has been reported and, only when a report is made from a chat, that conversation between the two people involved. Every such view is recorded in an audit log.

Service providers

We use carefully chosen processors that act on our instructions: Supabase (database, authentication, file storage; hosted in the EU), Vercel (this website), Expo, Apple and Google (delivery of push notifications). Push notifications only ever say "You have a new match" or "You have a new message" — never a name or message content.

How long we keep it

• Your dating profile, photos, likes, matches and messages are deleted as soon as you delete your dating profile or your Galomira account.
• Matches that expire or are ended stop being visible immediately.
• Reports and moderation records are kept for up to [X] years after the decision, to protect other users and handle repeat abuse, and may be kept longer where the law requires.
• Hosting logs are kept for a short period set by our providers.

Your rights

Depending on where you live, you can ask to access, correct, export or delete your data, restrict or object to processing, and withdraw consent. In the EEA and UK you can also complain to a data protection authority: our lead authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), and you can also contact the authority where you live (for example IMY in Sweden or the ICO in the UK). In Türkiye your rights under KVKK Article 11 apply and you may complain to the Kişisel Verileri Koruma Kurumu. Most of these you can do yourself in the app; for anything else, email us.

Age limit

Galomira Dating is only for people aged 18 or over. If we learn that someone under 18 has created a dating profile, we delete it.

International transfers

Our database is hosted in the EU. Where a provider processes data outside the EEA, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

Contact

The data controller is Elvoren OÜ (registry code 17601867), Sepapaja tn 6, 15551 Tallinn, Estonia. For anything about your data, email support@galomira.com. [If Galomira Dating is offered in the UK: UK representative under UK GDPR Art. 27 to be added.]

We will post any changes to this policy on this page and, for significant changes, let you know in the app.