Last updated October 7, 2026
Privacy
Who sees what
- People nearby see only your alias, a distance range (for example “1–2 km”), your shared-trait badges, what you're looking for, and a compatibility percentage.
- People you've mutually revealed with also see your name, photo, bio and profile posts. You can hide your profile from any of them at any time in Settings. Existing media links can remain accessible for up to five minutes; hiding cannot remove copies someone already saved.
- Nobody sees your exact location, email, birth year, your full answer history or payment details. Plus members can see answers you both chose in the compatibility breakdown, and quiz-battle participants see each other's battle answers.
What we collect
- Account: email address, password (hashed by our auth provider), birth year and the time you accept our terms. Your full date of birth is used during signup to check that you are at least 18, then removed after onboarding.
- Approximate location: your coordinates are rounded to about 1 km (or about 5 km with City precision) before they are stored. We never store your precise location.
- Content: messages, posts, photos and videos you share, quiz and daily-question answers.
- Advertisers: if you advertise, your business name, website, contact email, campaigns and ad images, and a Stripe customer reference for top-ups.
- Billing: if you buy Plus or the verified badge, Stripe processes your payment. We store only a Stripe customer reference and your subscription status.
- Verification: Stripe Identity processes your ID document and selfie. Heyborly receives only the result (verified or not) and never stores your ID images.
How we use it
To show you people nearby, calculate what you have in common, deliver messages, enforce plan limits, keep the community safe and respond to reports. We do not sell or share your personal data with advertisers.
Sponsored posts
Free accounts see a small number of clearly labeled sponsored posts from businesses and organizations. Plus members see none. Ads are selected inside Heyborly; advertisers never receive your name, alias, account ID, location, quiz answers or any other information about you, and only see aggregate totals (views, clicks, spend, and reach once at least 50 people have seen an ad).
- By default, ads are matched using your approximate area and the page you're on (contextual advertising).
- Personalized picks are off unless you turn them on in Settings. When on, we also use the intents you chose and your personality-quiz results to rank ads. You can turn this off anytime.
- We never use your chats, reveals, friends, photos or who you talk to for ads, and we don't target or exclude anyone based on sexual orientation, health or other sensitive characteristics.
- We record which ads were shown to you, viewed and clicked to charge advertisers, cap how often you see an ad, and prevent fraud. These records are deleted with your account. Links to advertisers carry no identifier for you; we only add generic campaign tags (utm_source=heyborly).
- AI models (TypeSafe Jev via Vercel AI Gateway) help rank which eligible ad is most relevant on a page. They receive your area and, only if personalized picks are on, your intents and quiz-based traits; not your identity.
Tap “Why this ad?” on any sponsored post to see why it was shown, hide it or report it. See our Ad policy.
Safety and moderation
To keep Heyborly a friendship platform, feed posts, profile posts, bios, profile photos, photo posts and video captions are automatically checked for sexual content, solicitation, money requests, contact details and signs of minors before they are published. These checks use AI models from TypeSafe and OpenAI, accessed through Vercel AI Gateway, which process the submitted content to help assess it. Uploaded photos are converted to still images with embedded location metadata removed. Photos that fail are deleted; uncertain profile posts are held until a person on our safety team reviews them, and every video is reviewed by a person. If automated checks are unavailable, feed posts and profile changes are refused; profile posts are held for human review. Video files are reviewed by a person before publication. Private chats are not scanned. When someone reports a person, post or chat, our safety team reviews the reported content, including recent messages in a reported chat, and may remove content or suspend accounts.
Service providers
We use Supabase (database, authentication and file storage), Stripe (payments and identity verification), and Vercel AI Gateway with TypeSafe and OpenAI models (automated content checks, ad review and ad relevance ranking). They process data on our behalf under their own security and privacy commitments.
Retention and deletion
Delete your account from Settings at any time. This removes your profile, messages you sent, posts, media and answers and cancels any active subscription. Records we must keep for legal or tax reasons, such as payment records held by Stripe, are kept only as long as required.
Contact
Privacy requests: our contact form.