This page is maintained by Krovo ("Krovo", "we", "us") to explain how we handle your information. It is written for our users and is not legal advice — consult a lawyer before relying on it in a specific situation. For questions, email privacy@krovo.app.
1. Who this policy applies to
This policy applies to everyone who creates an account or otherwise uses the Krovo mobile app, website, and related services (together, the "Service"). Krovo is intended only for people aged 18 or older; we do not knowingly collect information from anyone under 18.
2. Information we collect
2.1 Information you give us
- Account data: email address, display name, date of birth, and a hashed password (or an OAuth identifier if you sign in with Google).
- Profile data: photos, bio, gender, sexuality, height, ethnicity, nationality, area, hobbies, relationship intent, and any social links (Instagram, TikTok, Facebook) you choose to connect.
- Verification data: the government-issued ID and live selfie you submit through our identity provider (Stripe Identity). The verification result (approved / rejected) is returned to us; ID document images are processed by Stripe under their privacy terms.
- Communications: messages, photos, AI-suggested replies you send, date proposals, and any content of reports you submit.
- Payment data: when you subscribe to Plus or Boost, Stripe collects your payment information. Krovo receives only your subscription status, plan, and billing period — never card numbers or full billing details.
2.2 Information collected automatically
- Activity data: swipes, matches, blocks, reports, session times, and features used.
- Device and log data: IP address, device model, operating system, browser, crash logs, and diagnostic data used for security and reliability.
- Approximate location: derived from the area you enter on your profile. We do not collect precise GPS location.
2.3 Information from third parties
If you sign in with Google, we receive your name and email from Google. If you link a social account, we receive only the public handle you provide.
3. How we use your information
- Create and operate your account, match you with compatible people, and show relevant profiles in Discover.
- Verify your age and identity, and display the verified and "not a catfish" badges when you pass.
- Deliver messages, send AI-generated icebreaker suggestions, and support date proposals.
- Process subscriptions, prevent fraud, and enforce billing terms.
- Review reports, moderate content, remove policy-violating material, and ban abusive accounts within 24 hours of a substantiated report.
- Keep the Service secure, debug problems, and improve features.
- Comply with our legal obligations.
4. Legal bases (EEA / UK users)
Where GDPR applies, we rely on: performance of a contract (running your account and matching), legitimate interests (safety, fraud prevention, service improvement), consent (marketing, sensitive profile fields you choose to share such as sexuality and ethnicity), and legal obligation (responding to lawful requests).
5. Who we share it with
- Other users: your profile is visible to eligible users you have not blocked, subject to sexuality and match filters. Blocked users cannot see you.
- Service providers ("subprocessors"): Supabase (hosting, database, authentication, storage), Stripe (payments and identity verification), and Google Cloud (AI Gateway for icebreaker suggestions). Each is bound by their own privacy and security terms.
- Law enforcement and legal requests: only when required by valid legal process, or where necessary to protect the safety of a user or the public.
- Business transfers: in the event of a merger, acquisition, or sale of assets, your information may transfer to the successor under equivalent terms.
We do not sell your personal information. We do not share your information with third-party advertisers for cross-context behavioral advertising.
6. Retention
- Profile, matches, and messages are kept while your account is active.
- When you delete your account, your profile, photos, matches, messages, and uploaded verification files are removed from our production systems within 30 days.
- We may retain limited records longer where required for tax, fraud-prevention, safety-ban enforcement, or legal-compliance purposes.
- Backups are rotated on a rolling schedule and purged in the normal course of business.
7. Your rights
Regardless of where you live, you can view and edit your profile at any time and delete your account from Profile → Delete account. Depending on your jurisdiction (including the EEA, UK, California, Colorado, Connecticut, Utah, Virginia, and other US states with privacy laws), you may also have the right to:
- Access a copy of your personal information.
- Correct inaccurate information.
- Delete your information (subject to limited exceptions).
- Object to or restrict certain processing.
- Withdraw consent for optional processing.
- Lodge a complaint with your local data-protection authority.
To exercise these rights, email privacy@krovo.app from the address on your account. We respond within 30 days.
8. International transfers
Krovo operates globally. Your information may be processed in countries other than your own, including the United States. Where required, we rely on Standard Contractual Clauses or equivalent safeguards for international transfers.
9. Children
Krovo is strictly 18+. We enforce this at signup with a date-of-birth check, and we remove accounts that we discover belong to minors. If you believe a minor has created an account, report it to safety@krovo.app immediately.
10. Cookies and analytics
We use only the cookies and local storage strictly necessary to sign you in, keep your session active, and remember basic preferences. We do not use third-party advertising cookies.
11. Security
We use industry-standard encryption in transit (TLS) and at rest, role-based access controls, and row-level security in our database. No system is perfect. Choose a strong, unique password, do not share your login, and report anything suspicious to safety@krovo.app.
12. Changes to this policy
We may update this policy. Material changes will be announced in the app and the "Last updated" date at the top will change. Continued use of the Service after changes take effect means you accept the updated policy.
13. Contact
Privacy questions: privacy@krovo.app. Safety concerns: safety@krovo.app. Legal notices: legal@krovo.app.