Privacy Policy
Version 1.0 · Last updated 25 August 2026
Who we are
TrueVibe is an AI-powered relationship matchmaking app. This policy describes how we handle your personal data. If you have questions or want to exercise any of the rights described below, contact our Data Protection Officer at contact us.
What we collect
- Account data: email, password (hashed), display name, date of birth.
- Profile data: bio, location (city/area you type), profile photo, posts you publish.
- Personality interview: the answers you give to our AI interviewer (“Vera”), the personality traits and partner preferences we infer from them, and the matching results they produce.
- Identity verification (optional): if you choose to verify your identity, we briefly process an image of your ID document and a selfie. We do not store these images — they live in memory only for the duration of one verification request.
- Messages and chat requests: the content of messages you send to other users.
- Consent records: which consents you gave, when, and to which version of this policy.
- Payment records: order ID, amount, currency, date, and what it unlocked. We never receive or store your card details.
Why we collect it
- To create your account and let you sign in.
- To run the personality interview and compute matches — this is the core product.
- To verify your identity when you ask us to (so other users can see a verified badge on your profile).
- To deliver and store your messages with other users.
- To meet our legal obligations, including evidencing your consent under PDPA-TH and PDPA-SG.
Sub-processors and where data goes
We use the following third parties to operate the service. Each sees only the data needed for its purpose.
| Provider | Purpose | Region |
|---|---|---|
| Supabase | Database, authentication, file storage | Singapore (ap-southeast-1) |
| Vercel | Application hosting and serverless functions | Singapore (sin1) |
| OpenRouter | Routes AI requests to model providers | United States |
| Google (Gemini) | Personality analysis, matching, identity verification | United States |
| Google Calendar | Calendar links for date reminders | Global |
| Twilio | Phone number verification (SMS one-time codes) | United States / global |
| Lemon Squeezy | Payments — merchant of record, checkout and payment processing | United States / global |
We do not sell your data, and we do not use it for advertising profiling.
International transfers
Your account data is stored in Singapore. Data sent to OpenRouter and Google for AI processing is transferred to the United States. You consent to this transfer as part of signing up — the consent is shown as a separate checkbox on the signup form so you can see exactly which data goes where.
How long we keep it
| Data | Retention |
|---|---|
| Profile, personality, posts, messages | For as long as your account exists |
| Identity-verification photos | Not stored; in-memory only during verification |
| Consent records | 6 years after account deletion (audit trail) |
| Server logs | 90 days |
| Payment records | 5 years (tax law), kept after account deletion |
Your rights
Under PDPA-TH and PDPA-SG you have the right to:
- Access the personal data we hold about you.
- Correct data that is inaccurate.
- Delete your account and the data associated with it. You can do this from the settings on your profile page, or by emailing the DPO — see how to delete your account.
- Withdraw consent for optional processing (e.g. identity verification). For consents that are required to run the app, withdrawal effectively means deleting your account.
- Object to specific processing or port your data to another service.
- Complain to the regulator: in Thailand, the PDPC (pdpc.or.th); in Singapore, the PDPC (pdpc.gov.sg).
Data Protection Officer
Email contact us for any data-protection request, including subject access requests and breach reports.
Changes to this policy
If we change this policy in a way that affects how your data is used, we'll bump the version, ask you to re-consent on your next sign-in, and email you about the change. Cosmetic edits do not bump the version.