Privacy policy
Last updated on October 22, 2026
DateYay helps you invite someone on a date with an interactive link. We collect as little data as we can, we never sell it and we never use it for advertising.
1. Who is responsible
The data controller is DateYay. For any question about your data, write to [email protected].
2. Data we collect
Account: your email address, the name you choose, your language and time zone, and the identifiers of Google or Apple if you sign in with them.
Invitations: what you write in them, the options you choose and the photos you upload.
Payments: the plan, the amounts and the PayPal identifiers of your purchases. Payment details are handled only by PayPal and never reach us.
Technical data: a session cookie to keep you signed in. We use your IP address only for a few minutes to limit abuse and we don’t store it.
3. People who receive an invitation
If you answer an invitation we save your choices (mood, day and time, food, activity), the receipt number, the language and a generic device type such as “mobile”. We don’t store your IP address or your exact device model. Your answer is visible only to the person who invited you.
4. Why we use it
To provide the service you asked for: creating and sharing invitations, showing answers and sending the related emails (contract).
To handle payments and keep invoices (contract and legal obligation).
To keep the service secure and prevent abuse (legitimate interest).
To understand, in aggregate and without cookies, how the public site is used (legitimate interest).
5. Who helps us
We rely on providers who process data on our behalf under a data processing agreement: OVH (hosting and database, in the EU), Cloudflare (network protection and photo storage), Resend (email), Sentry (error monitoring), PayPal (payments), Upstash (abuse protection), Plausible (cookieless statistics, public site only), and Google or Apple if you choose to sign in with them.
6. Transfers outside the EU
Some providers may process data outside the European Economic Area. In that case the transfer is covered by the European Commission’s standard contractual clauses or by an adequacy decision.
7. How long we keep it
Answers to invitations and visit statistics are deleted automatically after 12 months.
Your account and invitations stay until you delete them. When you delete your account we erase everything linked to it, except the invoices that the law requires us to keep.
8. Your rights
You can access, correct, export and delete your data at any time from your account, or by writing to [email protected]. You can also object to processing based on legitimate interest and lodge a complaint with your data protection authority.
9. Security
Connections are encrypted, sign-in links work once and expire quickly, invitation links are long and random, and every page of your area only shows your own data.
10. Minors
DateYay is meant for adults. You must be at least 18 years old to create an account.
11. Changes
If we change this policy in a meaningful way we’ll tell you by email or in the app before the change takes effect.