Legal · Privacy

Privacy Policy

Last updated: October 25, 2026

Vennu ("Vennu," "we," "us," or "our") is operated by Gutenwords LLC, a Wyoming limited liability company, 30 N Gould St Ste N, Sheridan, WY 82801, United States. This Privacy Policy explains what information we collect when you use the Vennu mobile application and related websites and services (together, the "Services"), how we use and share it, and the choices and rights you have.

Vennu is a social and dating app. By its nature, some of the information you choose to put on your profile — such as your dating preferences — may reveal sensitive information about you. We treat all profile information with the protections described in this Policy, and we never require you to share more than the minimum needed to use the Services.

You must be at least 18 years old to use Vennu. We do not knowingly collect information from anyone under 18. See Section 11.

1. Information We Collect

1.1 Information you provide

  • Account data — your sign-in identity (Sign in with Apple, Sign in with Google, or your phone number with a one-time SMS code), your date of birth, and the account identifiers we assign to you.
  • Profile data — name, gender, photos, prompt answers, bio text, the preferences you set (including who you want to meet), your selected modes (for example dating, friends, groups), and your verification badge status.
  • Photos and media — the profile photos you upload, photos attached to reports, and the verification selfie described in Section 5.
  • Location data — see Section 1.3. Location is central to how Vennu works and is handled with the specific safeguards described there.
  • Trips — the destination and date range of trips you create, so we can show you people and events relevant to where you are going.
  • Messages — text messages, voice messages, and shared content (such as event or venue cards) you exchange with your matches or groups. Voice messages are stored as audio files in private storage and are accessible only to the participants of the conversation. Messages are encrypted in transit and at rest but, as on most dating apps, are not end-to-end encrypted, so that we can act on reports and protect you from scams. Message text is checked automatically for threats, hate, harassment and content that sexualizes minors (see Section 3). Nobody at Vennu reads your conversations unless a message is flagged by these checks or reported to us, or we are legally required to.
  • Purchases — your subscription tier (Pro/VIP) and any consumable purchases. Payment itself is processed by Apple or Google; we never receive your full payment card details. For each first purchase we also keep which in-app offer screen came before it (for example "like limit") and which offer was shown. This stays with the purchase record after you delete your account, but is then no longer linked to you.
  • Reports and support — reports you file about other users (category, optional free text, and a snapshot of the reported content as evidence), and messages you send us.

1.2 Information collected automatically

  • Usage data — in-app actions such as likes sent and received, matches, profile impressions and profile views, feature usage, and session information. As part of operating the service, our servers also record which venue and event listings you were shown, which of them were actually visible on your screen, which you opened, which deals you viewed, and that you shared a listing through your phone's share sheet — only that a share happened, never who received it or which app you used; these listing records are deleted after 30 days and survive only in the de-identified form described in Section 6.1.
  • Device and technical data — device model, operating system and version, app version, language, time zone, IP address, push notification token, and crash and diagnostic data.
  • Install and link data — a Vennu link that an ad, a post, or a friend shared can carry a click or campaign identifier (for example Meta's fbclid, TikTok's ttclid, Google's gclid, or utm parameters) and an invite or creator code. Our website stores no click or campaign identifier and sets no cookie for it; it only passes it on inside the link you tap next. For invite and group links it keeps a short-lived record described in Section 6.5. If you install Vennu from Google Play, the app reads it once from Google's Play Install Referrer after your first start. If you open the link with Vennu already installed, the app reads it from the link itself. We use it to credit the invite, creator, or campaign that brought you to Vennu and — only if ad measurement is on (Section 6.2) — to attribute your sign-up to that ad.

1.3 Location data — how it works

  • Matching location. With your permission, we collect your device location to show you people, events, and venues near you. Vennu asks for this permission from an explanatory screen inside the app, not on first launch, and location is required for the core discovery features to work. Where a feature allows it, you can set your location manually instead.
  • What others see. Other users never see your precise location. Your public profile shows only a neighborhood or city name. Distances shown to other users are calculated on our servers from locations stored only on an approximately 1 km grid, are rounded to whole kilometers or miles, and are shown only where you have a connection with that person (for example in their discovery feed, after a like or a match, or in a shared group or event) — so your position cannot be pinpointed through repeated distance checks.
  • Trips. If you create a trip, other users see only that you will be visiting a destination during an overlapping window — never your full trip list or your exact travel plans.
  • Retention. Your current matching location is stored on your profile only at that approximately 1 km precision and is replaced each time it updates. Archived trips are deleted no later than 6 months after the trip end date.

1.4 Sensitive information

Depending on what you choose to share, your profile may include information that some laws classify as sensitive (for example, information revealing sexual orientation, or precise geolocation). We use this information only to provide the Services (matching, discovery, safety) and as described in this Policy. We do not use sensitive information for targeted advertising, and we do not sell it. Where we build anonymous, aggregated statistics (see Section 6), we never key those aggregates to sexual orientation.

How you give and withdraw this consent (all regions): we use the dating preferences you share for matching only with your consent — in the EU/EEA, the United Kingdom, and Switzerland, your explicit consent (GDPR Article 9(2)(a)). You give it by choosing Dating when you create your account, or by turning on Love mode later; the app says so in one line right where you make that choice. You can withdraw it at any time in the app under Settings → Privacy → Dating preferences, by emailing support@vennuapp.com, or by deleting your account. Withdrawal does not affect processing before it. When you withdraw, we turn off Love mode and stop using these preferences for matching: nobody sees you in Love mode, and you don’t see anyone there. Your account, your chats and matches, and Friends and Group mode stay. You can turn Love mode back on anytime in the mode selection, which gives your consent again. The record of your choices is kept as described in Section 6.4.

2. How We Use Information

We use the information described above to:

  • Provide the Services — create and display your profile, compute your discovery feed, and deliver matches, messages, events, venue deals, and trips;
  • Keep Vennu safe — verify profiles, moderate content, detect and prevent spam, fraud, harassment, underage use, and other violations of our Terms and Community Guidelines; process reports; and comply with our legal obligations regarding child sexual abuse material (see Section 4);
  • Operate purchases — activate and manage Pro/VIP subscriptions and consumables, prevent purchase fraud, and handle refunds and billing disputes;
  • Improve the product — understand how features are used, fix crashes and bugs, and test improvements;
  • Communicate with you — send push notifications and messages about matches, messages, safety, and your account (you can control non-essential notifications in your settings);
  • Show you your own insights — profile performance statistics such as how often your profile was seen, based on your own activity data; any benchmarks are computed only from anonymized aggregates;
  • Measure our own marketing — see Section 6.2: in the United States, app installs and app opens from your first launch unless you opt out; everything else only if you turn on ad measurement;
  • Comply with law — respond to lawful requests, enforce our Terms, and establish, exercise, or defend legal claims.

We do not:

  • sell your personal information;
  • share your personal information for cross-context behavioral advertising, except for the ad measurement in Section 6.2, which is sent under Meta's and TikTok's limited data use terms. Under some U.S. state laws it may count as "sharing"; you can opt out of it at any time (Section 10);
  • use facial recognition or compute any biometric identifiers or "face templates" from your photos (see Section 5);
  • score your physical attractiveness, algorithmically or otherwise.

3. Content Moderation

To keep the community safe, content you upload or send may be reviewed by automated systems, by our trained team, or both:

  • Photos you upload may be screened by automated image-safety classifiers before or shortly after they become visible;
  • Text you write (name, bio, job title, prompt answers, group name, bio and prompts, comments on likes, venue reviews, and chat messages) is screened by automated text-moderation classifiers. Some checks run when you save: text that is clearly harmful (threats, hate, content that sexualizes minors, instructions for self-harm) is not saved, and the app tells you why so you can change it;
  • Before you send a chat message, the app may check it. If it may hurt someone, we ask whether you want to edit it or send it anyway. You decide; the message is never blocked. For this check we keep no copy of your text, only a one-way fingerprint and the category for 24 hours, so that a later report can show the prompt was seen;
  • Sent chat messages are also checked in the background. If a message crosses our threshold for threats, hate, harassment, or content that sexualizes minors, our moderation team receives a report with that message and up to 10 earlier messages of the conversation as context. Sexual content between adults is not reported on this basis alone. These checks never delete messages or suspend accounts on their own;
  • Reports and partner listings may be assessed by an AI model, which suggests an action and a confidence level to our team. A person makes the decision;
  • Content that is flagged automatically or reported by users may be reviewed by our moderation team, and enforcement decisions (removal, warnings, bans) may follow. Where we remove your content, we tell you the category of the reason and give you a way to request a review.

Automated decisions and how to object. Only these steps happen automatically, without a person deciding first: (a) a bio, job title, prompt answer, group bio or group prompt that our classifier flags is removed or hidden, and we tell you; (b) a profile or group that several people report independently within 24 hours, or that is reported for a minor, child sexual abuse material or intimate images shared without consent, is hidden from discovery (the swipe deck, likes and group discovery) until our team reviews it, while your chats and sign-in keep working. We may later let the system approve partner listings on its own where it has proven reliable, and we review a sample of those decisions. We never suspend or ban an account, decline a partner, or act on content involving minors without a person deciding. To object to an automated decision, use Appeal this decision where the app shows it, or email support@vennuapp.com; a person reviews every objection.

Moderation data (flags, decisions, and report evidence snapshots) is retained as described in Section 8.

4. Child Sexual Abuse Material (CSAM) — Detection and Reporting Disclosure

We have zero tolerance for child sexual abuse and exploitation. You should be aware that:

  • Images uploaded to Vennu are automatically checked against hash lists of known child sexual abuse material using industry-standard hash-matching technology operated by our media delivery provider, Cloudflare, on our media zone. Hash matching compares digital fingerprints of images against fingerprints of previously identified illegal material; it does not interpret your photos beyond that comparison. When a match is detected, the image is blocked and we are notified so that we can report it as described below.
  • If we obtain actual knowledge of apparent CSAM, we are required by U.S. federal law (18 U.S.C. § 2258A) to report it to the National Center for Missing & Exploited Children (NCMEC), and we will do so. In connection with such a report, we preserve the relevant content and associated account data for the period required by law (currently one year), even if the account is deleted, and we may suspend or terminate the account and cooperate with law enforcement.
  • Our full child safety standards, including how to report concerns to us, are published at https://www.vennuapp.com/child-safety.

5. Photo Verification and Biometric Information (including Illinois BIPA)

Vennu offers optional photo verification: to earn a verified badge, you take a selfie in the app matching a randomly assigned pose, and a trained human reviewer compares that selfie side by side with your profile photos.

We designed this feature deliberately so that no biometric identifiers or biometric information are collected, captured, computed, stored, or used:

  • Verification decisions are made exclusively by human visual review. We do not run facial recognition, face matching, or face analysis software on your verification selfie or on your profile photos.
  • We do not extract, generate, or store any face geometry, faceprint, face template, face embedding, or any other biometric identifier from any photo, for verification or for any other purpose.
  • The verification selfie is stored in a private, access-restricted bucket, is never shown on your profile or to other users, and is deleted after the verification decision — retained no longer than 30 days after the decision so that you can appeal — after which only a non-photographic record of the decision remains.
  • You are asked for your express consent on a dedicated screen immediately before taking the verification selfie, which explains that a human will review it and that it will be deleted afterwards.
  • Optional on-device photo-quality checks (for example blur or brightness detection) use only aggregate pixel statistics; at most, a device-local yes/no "contains a face" signal may be computed on your device, and no facial landmarks, measurements, or embeddings are created, transmitted, or stored.

If we ever introduce any automated face-comparison step, we will update this Policy first, obtain any legally required consent (including a written release where required by the Illinois Biometric Information Privacy Act, the Texas Capture or Use of Biometric Identifier Act, or the Washington My Health My Data Act), and make such processing strictly optional.

6. Analytics, Insights, and Marketing Measurement

6.1 Product analytics and your profile insights

We do not embed a third-party analytics SDK in the Vennu app. Product analytics are collected in our own database on our own infrastructure: the app sends a fixed, code-defined list of events (for example "paywall viewed," "onboarding step completed," "feature opened") to our servers, and we aggregate them into daily statistics. Raw analytics events are deleted after 180 days. Beyond that we keep two things that are no longer linked to you: anonymous daily aggregates, and de-identified event records that carry no user, device, or account identifier — only a timestamp, which event or surface it was, and coarse audience attributes (an age band such as "25-29" and gender). We use those to study how the product is used and to improve ranking and safety. Because they contain no identifier, they cannot be traced back to you and are not affected by account deletion.

We record when and where your profile is shown to someone in the app and when someone opens it, together with the mode (dating or friends) and the part of the app it happened in. From these we build a daily summary for each member: how often the profile was shown, how many distinct people saw it, likes and passes received and sent, matches, and messages sent and received. These summaries power feed quality, safety, and the profile-insights features we show to you about your own profile. Members with a VIP subscription can see their own summary in the app; nobody can see another member's figures, and we never show you who viewed you unless they liked you.

Comparisons against other members, where offered, are computed from anonymized, aggregated data and are only shown when the comparison group is large enough that no individual can be singled out. We also compute internal quality and ranking signals from this engagement data to decide the order in which profiles and listings are shown. These internal signals are never displayed to you or to anyone else, never shared, and never sold. We do not rate your physical appearance, and we do not produce any "attractiveness score." If we ever decided to show you a standing relative to others, it would be a broad band (such as "above average"), never a rank or a raw percentile. In the EU/EEA, the United Kingdom, and Switzerland, you can object to being included in these anonymous comparisons at any time in Settings → Privacy → Anonymous comparisons; elsewhere, email support@vennuapp.com and we will exclude you.

Service statistics. Separately from product analytics, our servers count which profiles, events and deals are shown, opened or redeemed, as part of running Vennu: to order your feed, to show you your insights, and to give partner venues aggregate reports. This happens on our servers when you use the Services and has no setting; it is listed under "Always on" in Settings → Privacy. You can object by emailing support@vennuapp.com.

Your choice about product analytics. In the United States and other regions outside the EU/EEA, the United Kingdom, and Switzerland, product analytics are part of operating and improving Vennu and are always on; they are never sold or used for advertising. If you turned them off before October 8, 2026, they stay off and you keep the setting in Settings → Privacy → Product analytics. In the EU/EEA, the United Kingdom, and Switzerland, product analytics run only if you agree when you create your account (off by default) or turn them on later in Settings → Privacy → Product analytics.

Crash reports. In every region, including the EU/EEA, the United Kingdom, and Switzerland, the app sends crash and error reports through Sentry (see Section 7) so that we can keep Vennu secure and stable. They are always on, based on our legitimate interest in the security and stability of the Services (GDPR Article 6(1)(f), where it applies). They are limited to the technical data needed to find and fix errors, contain no message content, and are never used for advertising.

6.2 Ad measurement (Meta and TikTok)

Outside the United States, ad measurement is off unless you turn it on — on the "Community guidelines" step when you create your account, or later in Settings → Privacy → Ad measurement. In the United States, the app measures app installs and app opens from your first launch unless you opt out (see "App installs in the United States" below); everything else starts only if you turn ad measurement on. It lets us see which of our ads bring people to Vennu and what those ads cost us per sign-up and per subscription. You can turn it off at any time in the same place; from then on nothing further is sent.

What runs in the app. Outside the United States, the app starts the Meta (Facebook) SDK and — once we advertise there — the TikTok SDK only after you turn ad measurement on. Before that, neither is initialised and neither receives anything. On iPhone, the app shows Apple's App Tracking Transparency prompt when you first open it. If you choose "Ask App Not to Track", no advertising identifier (IDFA) is ever read, whatever you later choose for ad measurement; the in-app setting never overrides your iOS tracking choice. On Android, the advertising ID is used only if ad measurement is on and you have not turned off ads personalization in your device settings.

App installs in the United States. If your phone's region and time zone are set to the United States, the app starts both SDKs when you first open it, before you make a choice, but only to report that Vennu was installed and opened. Nothing else is sent at that point: no account or user ID, no email address or phone number, no events about your sign-up, profile, or purchases, and nothing from our server. It is sent under the same limited data use terms as below and never includes health information, your sexual orientation, or anything from your profile. On iPhone this happens only after you choose "Allow" on Apple's App Tracking Transparency prompt; without "Allow", nothing starts. On Android, it includes the advertising ID unless you have turned off ads personalization or deleted the ID in your device settings. To opt out, leave "Ad measurement" off and tap "Save my choices" on the "Community guidelines" step, or turn off Settings → Privacy → Ad measurement later. Both SDKs are switched off right away, and the app remembers your choice on that device: on later launches it sends nothing before a new choice either, even after you sign out.

What is sent with ad measurement on. A fixed, short list of events: account created, profile completed, free trial started, subscription started or renewed, and purchases of Boosts or subscriptions (with price and currency as Apple or Google report them). Each event carries a hashed (SHA-256) form of your email address or phone number, a pseudonymous app user ID, the platform's own anonymous app identifier, the advertising identifier where you allowed it, the click identifier of the ad link that brought you to Vennu (Section 1.2), your App Tracking Transparency status, and basic device context (platform, operating system version, language, screen size, time zone). We send the same events from our server (Meta Conversions API, TikTok Events API) with an event ID so that each one counts once. We never send your name, photos, messages, location, interests, age, gender, orientation, which modes you use (Love, Friends, Group), who you like or match, or any other profile content.

How Meta and TikTok may use it. We send every event with Meta's Limited Data Use and TikTok's limited data use setting, under which they process it as our service provider in the U.S. states where that setting applies and do not use it for their own advertising. We do not receive advertising audiences or profiles back from either. The platforms' own measurement systems (Apple's SKAdNetwork and AdAttributionKit) report an anonymous, aggregated conversion value for installs that came from an ad; these reports never identify you. In the EU/EEA, the United Kingdom, and Switzerland see also Section 13.

6.3 News, events & offers

Marketing emails and promotional push notifications about events, deals, and what's new (including tips about Vennu features) are sent only if you opt in ("News, events & offers", off by default). You can turn this off at any time in Settings → Privacy → News, events & offers. The unsubscribe link in any email from Vennu stops all optional emails; you can turn individual email types back on in Settings → Notifications. Security and account-safety emails — for example, a warning that a member you messaged was banned for fraud — are sent even if you unsubscribe from optional emails. Messages about your matches, conversations, safety, and your account are part of the Services and are not affected by this setting.

6.4 Records of your choices

When you accept our Terms, agree to our use of the dating preferences you share (by choosing Dating or turning on Love mode, as described in Section 1.4), make or change a privacy choice, or acknowledge the safety notice shown when you sign up, we keep a record of that decision: what you chose, the time (set by our server), the version of this Policy and of our Terms, an identifier and a cryptographic fingerprint (hash) of the exact text you were shown, your app language, region, platform, and app version, and — for ad measurement on iPhone — your App Tracking Transparency status. We keep these records to be able to show what you agreed to, for as long as your account exists. When you delete your account, we keep these records for up to 3 more years in pseudonymized form — without your account ID, replaced by a keyed cryptographic fingerprint that only we can match to a known account ID — solely to be able to prove your consent if it is ever disputed; after that they are deleted automatically. The data copy you can request in the app (“Request my data”) includes these records.

6.5 Invite and group links

When you open an invite link (vennuapp.com/i/…) or a group invite link (vennuapp.com/g/…) in a browser, our server records the invite code or the group link, your platform (iPhone or Android), and a keyed cryptographic hash (HMAC) of your IP address — never the plain address — for 7 days. Its only purpose is to match an install that follows within 30 minutes to that invite, so that the Boost described in the app reaches both of you or you land in the group you were invited to; it counts only if exactly one invite fits. The record is deleted automatically after 7 days. Creator links (vennuapp.com/c/…) are only counted per day, without any personal data.

Two more records protect invite rewards from abuse. After you sign up, we keep a keyed hash of your phone's app-specific device ID (never the ID itself) to notice when an invite is redeemed on the same phone that sent it; it is deleted when you delete your account. If you joined through an invite and the reward was granted, we keep a keyed hash of your phone number so that the same number can earn an invite reward only once; this hash stays after you delete your account, and on its own it does not reveal your number.

7. Service Providers (Processors) and Other Sharing

We share personal information with service providers who process it on our behalf, under contracts that restrict their use of your data. Our current providers:

  • Supabase Inc. — core hosting: database, authentication, file storage, and realtime messaging. Data involved: account, profile, messages (including voice messages), verification selfies, location, purchase metadata, moderation records. Location: United States (US East).
  • Cloudflare, Inc. — media storage and delivery, network security, and CSAM scanning on our media zone. Data involved: profile photos and media delivery logs including IP addresses. Location: global edge network; primary storage in the United States.
  • Twilio Inc. — delivery of the one-time SMS codes used for phone sign-in. Data involved: your phone number and the verification code. Location: United States.
  • OpenAI, L.L.C. — automated text moderation (safety classification of names, bios, prompt answers, group texts, comments, reviews, partner listing texts, and chat text) and AI assistance for our moderation team (summaries and suggested actions for reports and partner listings). Data involved: the text submitted for classification or review. OpenAI does not use data submitted through its API to train its models. Location: United States.
  • Microsoft Corporation — Azure AI Content Safety — automated image moderation (safety classification of uploaded photos). Data involved: the images submitted for classification. Location: United States.
  • Amazon Web Services, Inc. — Amazon Rekognition — automated image moderation (safety classification of uploaded photos), alongside or instead of Azure AI Content Safety. Data involved: only the images submitted for classification. AWS processes them only to provide this service; we have opted out of AWS using them to develop or improve its services. It classifies content only — it does not identify people or measure faces (see Section 5). Location: United States.
  • Sentry (Functional Software, Inc.) — crash and error reporting, configured for errors only, with no session recording of message content. Data involved: device and technical data and crash traces. Location: United States.
  • RevenueCat, Inc. — subscription and in-app purchase management. Data involved: a pseudonymous app user ID and the purchase/entitlement data Apple and Google report. Location: United States.
  • Google LLC — Firebase Cloud Messaging — push notification delivery only. We do not use Firebase Analytics. Data involved: push token and device data. Location: United States and global.
  • Meta Platforms, Inc. — ad measurement as described in Section 6.2, in the United States from your first launch for app installs and app opens unless you opt out; otherwise only if you turn it on: the Meta SDK in the app and our server-side Conversions API events, sent under Meta's Limited Data Use terms. Data involved: the events and identifiers listed in Section 6.2 (hashed email address or phone number, pseudonymous IDs, advertising identifier where allowed, click identifier, device context). Location: United States.
  • TikTok Inc. — ad measurement as described in Section 6.2, only while we advertise on TikTok, under the same rules as for Meta: the TikTok SDK in the app and our server-side Events API events, sent with TikTok's limited data use setting. Data involved: the same events and identifiers as for Meta. Location: United States.
  • Plus Five Five, Inc. (Resend) — delivery of transactional emails such as sign-in codes and safety or account notices. Data involved: your email address and the content of the email. Location: United States.
  • KEPTAGO LTD (Geoapify) — place search when you choose a city or home town. Data involved: the text you search for and an approximate location used to rank results; no account identifier. Location: Cyprus (European Union).
  • OpenFreeMap (operated by Zsolt Ero, Hungary) — map tiles for the in-app map, which your device loads directly through the provider's content delivery network. Data involved: technical request data, such as your IP address as seen by that network, and the map area requested; the provider states that it does not log IP addresses by default. Location: European Union and global content delivery network.
  • Vercel Inc. — hosting of our website, partner portal, and internal administration tools. Data involved: IP addresses and technical request logs, and what you submit through website forms. Location: United States and global edge network.

In addition, we may share information:

  • With Apple and Google as sign-in providers, as the payment processors for subscriptions and consumables bought through the App Store or Google Play, as the source of the Play Install Referrer described in Section 1.2, and as the operators of the anonymous ad-attribution systems described in Section 6.2 (governed by their own terms and privacy policies);
  • With other users — the profile information you choose to display, your approximate location as described in Section 1.3, and the content you send them;
  • For safety and legal reasons — with law enforcement or others where required by law (including NCMEC reporting under Section 4), to respond to lawful requests, or where necessary to protect the rights, property, or safety of our users, the public, or Vennu;
  • In a corporate transaction — if Gutenwords LLC is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to this Policy;
  • With your consent — in any other case, we will ask you first.

We do not sell personal information, and we do not share it with third parties for their own advertising purposes.

8. Data Retention

We keep personal information only as long as needed for the purposes above:

  • Account and profile data — until you delete your account (see Section 9), then deleted subject to the legal holds below.
  • Verification selfies — deleted after the verification decision; no longer than 30 days after the decision, to allow an appeal.
  • Archived trips — deleted no later than 6 months after the trip end date.
  • Messages, including voice messages — while the match or group exists. When you or your match unmatch, block, or report, the conversation disappears for both of you immediately; we keep it hidden for 30 days so it can still be reported, then delete it. When a group is closed, its group chats stay readable for the other group for 90 days and are then deleted. Deleting your account deletes your conversations immediately, subject to legal holds.
  • Moderation and report records — up to 24 months after the decision, so that we can enforce bans, handle appeals, and answer legal requests.
  • CSAM-related preservation — as required by 18 U.S.C. § 2258A (currently one year from the report).
  • Per-member daily summaries (the figures behind profile insights) — kept while your account exists and deleted with it; the underlying raw impression records are deleted after 30 days.
  • Raw analytics events — 180 days. Anonymous daily aggregates and de-identified event records (no user, device, or account identifier; timestamp, event, age band, and gender only) are kept longer, as described in Section 6.1.
  • Records of your choices — for as long as your account exists, then up to 3 years in pseudonymized form, solely to prove your consent, and then deleted (see Section 6.4).
  • Purchase records — as required for tax, accounting, and dispute-handling obligations.
  • Backups — deleted data disappears from our provider's rolling backup window, currently 7 days, as those backups age out.

Legal holds: we may retain limited data beyond deletion where required by law or necessary for safety — for example, records connected to an open investigation or report, CSAM preservation obligations, records of enforcement actions (so that banned users cannot simply return), and transaction records.

9. Deleting Your Account

You can permanently delete your account directly in the app: Profile → Settings → Delete account. Deletion is real deletion: your profile, photos, messages, trips, and related personal data are erased from our production systems, not merely deactivated or anonymized, except for the narrow legal-hold categories listed in Section 8 and the pseudonymized records of your choices described in Section 6.4.

Before you delete, you can tell us why you’re leaving. This is optional and never blocks deletion. We store your answer separately from your account: without your account ID or name, with only the month instead of the exact time, and with your account age only as a rough range. We look at these answers only in totals. Leave personal details out of the optional text field.

If you no longer have the app installed, you can request deletion on the web at https://www.vennuapp.com/delete-account.

If you purchased a subscription, deleting your account does not automatically cancel it — cancel it through your Apple or Google subscription settings (see our Terms of Service for step-by-step instructions).

10. Your Privacy Rights (U.S. State Privacy Laws)

Depending on where you live (including under the California Consumer Privacy Act as amended by the CPRA, and comparable laws in states such as Colorado, Connecticut, Virginia, Texas, and Oregon), you may have the right to:

  • Know / access the personal information we hold about you;
  • Correct inaccurate personal information;
  • Delete your personal information (see Section 9 — deletion is available in-app to everyone, regardless of state);
  • Portability — receive a copy of your personal information in a usable format;
  • Opt out of the sale of personal information, of sharing for cross-context behavioral advertising, and of certain profiling — note that we do not sell personal information, and the only disclosure to an advertising platform is the ad measurement in Section 6.2. It is sent under Meta's and TikTok's limited data use terms; in the United States, the measurement of app installs and app opens starts with your first launch. To opt out, turn off Settings → Privacy → Ad measurement (or leave it off when you sign up); the app stops it right away and remembers your choice on that device;
  • Limit the use of sensitive personal information — we already use sensitive information only to provide the Services;
  • Non-discrimination — we will not treat you differently for exercising your rights;
  • Appeal — if we decline a request, you may appeal by replying to our decision, and we will respond as required by your state's law.

How to exercise your rights: use the in-app tools (account deletion, profile editing, settings toggles), or email support@vennuapp.com with the subject "Privacy request". We will verify your request using your logged-in account or equivalent verification. You may use an authorized agent where your state's law provides for it.

Global Privacy Control (GPC): we do not sell personal information, and the ad measurement in Section 6.2 runs only in the app, where you opt out under Settings → Privacy → Ad measurement. Our website sets no advertising cookies and sends nothing to advertising platforms, so there is currently nothing on it for a GPC signal to turn off. Where a browser-based service of ours falls within a GPC obligation, we honor the signal.

California residents: the categories of personal information we collect, the sources, the purposes, and the recipients are described in Sections 1, 2, 6, 7, and 8. We have not sold personal information in the preceding 12 months. We have disclosed the identifiers, device information, and app activity described in Section 6.2 to Meta and TikTok for ad measurement, which may count as "sharing" under California law.

11. Age Policy — No One Under 18

The Services are strictly for adults 18 and older. We require a date of birth at sign-up, we deny access to anyone under 18, and reports of suspected underage users are our highest-priority moderation category. If we learn that we have collected personal information from someone under 18, we delete it and terminate the account. To report an underage user, use the in-app report flow or email reports@vennuapp.com.

12. Security

We protect your information with technical and organizational measures appropriate to the risk, including encryption in transit, access-restricted private storage for voice messages and verification selfies (served through signed, expiring links), delivery of profile photos through our content delivery network at unguessable addresses (a photo is removed from it when you delete it or when moderation rejects it), row-level access controls in our database, an encrypted local message cache on your device, restricted internal access, and audit logging of administrative actions. No system is perfectly secure; if a breach affecting your personal information occurs, we will notify you and the regulators as required by law.

13. International Users

The Services are operated from the United States, and your information is processed and stored in the United States. If you use the Services from outside the United States, you understand that your information will be transferred to and processed in the United States, where privacy laws may differ from those of your country.

EU/EEA, United Kingdom, and Switzerland — ad measurement. We send the events in Section 6.2 only on the basis of your consent (GDPR Article 6(1)(a)). Because the fact that you use a dating app can reveal information about your sex life or sexual orientation, we ask for your explicit consent (Article 9(2)(a)) and start the Meta or TikTok SDK only after you have given it. You can withdraw it at any time under Settings → Privacy → Ad measurement; withdrawal does not affect processing before it. Transfers. Meta Platforms, Inc. states that it is certified under the EU-U.S. Data Privacy Framework, including the UK Extension and the Swiss-U.S. framework. Where a recipient is not certified under that framework (this applies to TikTok Inc. unless it is listed), we rely on the European Commission's Standard Contractual Clauses together with the UK Addendum. You can ask us for a copy at support@vennuapp.com.

14. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will notify you in the app or by other means before the changes take effect, and we will update the "Last Updated" date above. Continued use of the Services after the effective date constitutes acceptance of the updated Policy.

15. Contact Us

Gutenwords LLC 30 N Gould St Ste N Sheridan, WY 82801 United States

  • General support and privacy requests: support@vennuapp.com
  • Safety and child-safety concerns: reports@vennuapp.com