In one paragraph
Deyra has to know where you are in order to show you who is nearby — that is the whole product. Beyond that we collect as little as we can, we never sell any of it, and you can download or delete the lot from Settings at any time.
Who we are
Deyra is built and operated from Tunisia. We decide what the app collects and why, which makes us the data controller for it. You can reach us at any time at support@deyra.net.
What Deyra collects
Account — your email address and your password. Passwords are stored as a salted hash, so nobody at Deyra can read yours.
Profile — your display name, age, gender, bio, profile photo and any social links you add. All of it is shown to people near you. Gender is used to place you in other people's filters, and to apply the filter you set yourself.
Location — your precise location, and only while discovery is switched on. It is what decides who appears in your feed and how far away each person is.
Bluetooth — a rotating, anonymous token broadcast to nearby devices, so Deyra can tell that two phones are in the same room in places where GPS is imprecise. The token changes regularly and contains nothing personal.
Messages — the messages you send inside a match, kept only for the life of that chat.
Safety records — the accounts you block, and any report you make: who you reported, the reason, and anything you add. We need these to keep the block working and to act on the report.
Match records — a short-lived note that you and another person matched, so the app does not immediately offer you the same person again.
Push token — an identifier from Apple or Google that lets us tell you about a new wave or match.
What Deyra never does
- We never sell your data, to anyone, for any purpose.
- We do not track you across other apps or websites.
- We do not embed advertising networks or third-party analytics SDKs.
- We do not keep a history of where you have been. Your location is a single record that is overwritten on every update, not a trail.
Who can see what
People near you can see your display name, age, gender, photo, bio, links and an approximate distance. They can never see your exact coordinates, your email address, or anything at all about you while your discovery toggle is off.
When you turn discovery off
Location updates stop, the Bluetooth beacon stops, and you disappear from everybody's feed. Nothing further is collected until you switch it back on.
How long we keep things
- Location — the most recent point only, replaced on every update.
- Messages — deleted when the chat window closes.
- Match records — a short period after the match, then removed.
- Blocks — until you unblock the person.
- Reports — kept while both accounts exist, because a pattern over time is what identifies a repeat offender. They go when either account is deleted.
- Profile and account — until you delete your account.
Why we are allowed to hold it
Our processing in Tunisia is governed by Law No. 2004-63 of 27 July 2004 on the protection of personal data. Where the UK GDPR, the EU GDPR or a similar law also applies to you, we rely on:
- Performing our contract with you — your account, profile, location and messages. Deyra cannot work without them.
- Your consent — location access, Bluetooth access and push notifications. You give it at the system prompt and can withdraw it at any time in your device settings.
- Our legitimate interest in keeping people safe — blocks, reports and moderation.
Keeping it safe
Traffic between the app and our servers is encrypted in transit. Every table in our database is protected by row-level security, so one account cannot read another's data. Profile photos and data exports sit in private storage that is reachable only through short-lived signed links.
Your rights
- Get a copy. Settings → Request my data assembles everything Deyra holds about you and gives you a private download link that works for 24 hours.
- Correct it. Settings → Edit profile, or write to us.
- Delete it. Settings → Delete account removes your profile, photo, links, messages, location and login immediately. It cannot be undone.
- Object, or complain. Write to support@deyra.net and we will reply within 30 days. If you are not satisfied, you can complain to your national data protection authority — in Tunisia, the Instance Nationale de Protection des Données Personnelles (INPDP); in the UK or the EU, your local supervisory authority.
Who processes data for us
Deyra runs on Supabase for its database, authentication and media storage. ZeptoMail sends account email such as verification codes. Firebase Cloud Messaging, from Google, delivers push notifications. Each acts only on our instructions, and none of them may use your data for its own purposes.
Where your data is processed
Deyra is operated from Tunisia, and our providers run data centres in other countries, so your data is processed outside the country you live in. Where a transfer leaves the UK or the European Economic Area, we rely on the safeguards in our agreements with those providers, including the standard contractual clauses approved by the European Commission.
Children
Deyra is for adults. It is not directed at anyone under 18, and we do not knowingly collect anything from a child. If we learn that an account belongs to someone under 18, we delete it.
Changes to this policy
If we change what we collect or what we do with it, we will update this page and change the date at the top. Material changes are announced in the app.