Privacy Policy
This policy explains how Shvets Ventures SIA (registration No. 40203464635, Ilūkstes iela 36-52, Rīga, LV-1082, Latvia; [email protected]) processes personal data when you use the Drinder app and drinder.eu. We are the controller of this data under the EU General Data Protection Regulation (GDPR).
In short: we collect what is needed to show you to people nearby while you are live and let you meet. We do not sell your data, show ads, or use advertising or analytics trackers. Your exact location is never shown to other users and is deleted soon after you go offline.
1. Data we collect
| Data | Why | Legal basis |
|---|---|---|
| Mobile number and one‑time login codes | Create your account and let you log in; prevent duplicate and banned accounts | Contract (Art. 6(1)(b)) |
| Profile: name, date of birth (others see only your age), avatar emoji, bio, drink preferences, mood, “I'm buying” flag, photos | Show your card to other users; check you meet the minimum age | Contract |
| Verification selfie and the gesture you were asked to show | A moderator compares it with your photos by eye to award the “verified” badge and fight fake profiles. We do not use facial recognition or create biometric templates. | Legitimate interest in user safety (Art. 6(1)(f)); you choose whether to verify |
| Precise location, only when you go live and every few minutes while live | Find people and bars near you and calculate distances. Others see only a distance rounded to 100 m, never your coordinates. | Contract; you also grant location permission on your device and can revoke it |
| Activity: swipes, matches, messages, proposed bars, issued partner codes | Provide matching and chat; prevent showing you the same people repeatedly | Contract |
| Reports and blocks | Keep the community safe, enforce our Terms | Legitimate interest in safety; legal obligations |
| Technical data: IP address, app version, request logs, login tokens (stored hashed) | Run, secure and debug the Service; prevent abuse such as SMS flooding | Legitimate interest in security |
Photos you upload are re‑encoded on our server, which removes embedded metadata such as GPS coordinates. Drink preferences describe your tastes and are not used for any other purpose.
2. What other users see
Other live users within their search radius see your name, age, photos or emoji, bio, drink preferences, mood, where you said you are heading (if you entered it), your “verified” and “I'm buying” badges, approximate distance and how long you will remain live. Your phone number and date of birth are never shown. Matched users can see the messages you send them.
3. Who we share data with
- Hetzner Online GmbH (Germany) — server hosting; data is stored in the EU.
- Cloudflare, Inc. — network delivery and protection for drinder.eu; it processes IP addresses and request data, which may involve transfers to the USA under the EU‑US Data Privacy Framework and Standard Contractual Clauses.
- WhatsApp (Meta Platforms Ireland Ltd.) — we send your login code as a WhatsApp message, so Meta receives your phone number and the code. Meta processes this data under its own terms and may transfer it to the USA under the EU‑US Data Privacy Framework.
- SMS provider (Mobizon) — used only if the code cannot be delivered via WhatsApp; receives your phone number and the code. Where this involves a transfer outside the EEA, we rely on Standard Contractual Clauses.
- Apple — app distribution; if you share diagnostics with developers in iOS settings or TestFlight, Apple provides us with crash reports under its own privacy policy.
- Partner bars receive no personal data — only the promo code you show them.
- Authorities, when we are legally required to disclose data or to protect someone's life or safety.
We do not sell personal data and do not share it for advertising.
4. How long we keep data
| Data | Retention |
|---|---|
| Location | Deleted when you go offline, or at the latest 6 hours after your live time ends |
| Chats and partner codes | Deleted 30 days after the chat closes |
| Swipes | 30 days |
| Verification selfies | Deleted 30 days after the moderator's decision |
| Login codes | 1 day after expiry |
| Login tokens | Until you log out, or 180 days of inactivity |
| Profile, photos and everything else | Until you delete your account; then deleted immediately |
| Server logs | Overwritten automatically, typically within 30 days |
5. Your rights
You can access and correct your profile in the app and delete your account at any time (Profile → Delete account). You also have the right to request access to your data, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interests. Write to [email protected] and include your registered phone number; we answer within one month. You can withdraw location or camera permission in your device settings at any time.
You may lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija, dvi.gov.lv) or the authority in your country of residence.
6. Age
Drinder is only for people aged 21 or older. If we learn that a user is younger, we delete the account.
7. Security
Connections are encrypted with TLS. Login tokens and codes are stored only as hashes. Access to the admin panel is limited to authorised staff and moderators.
8. Automated decisions
We do not make decisions with legal or similarly significant effects based solely on automated processing. People are shown to you by distance and filters you set; someone who already liked you may appear earlier.
9. Changes
We will update this page and the date above when this policy changes, and notify you in the app about material changes.