DAVAI TODAY Privacy Policy

Last updated: March 2026

DAVAI TODAY (“We”, “App”) respects the privacy of its users. This Policy describes what data we collect, how we use it, and what rights you have.

1. Data We Collect

Sign-in identifiers: Telegram ID and Telegram profile data (when signing in via Mini App); Apple ID / Google ID (when signing in via the mobile app); name provided by the sign-in provider. We do not request or store phone numbers or email addresses as account data.
Profile: name, date of birth, gender, profile photos (including gallery), short bio, matching settings (including “same-gender company only”), profile pause status.
City and daily plan: selected city, districts, and times from your plan — to match people near your route. We do not store precise GPS coordinates on our servers.
Verification: selfie for moderation; technical liveness session data (session ID, check result) — see section 2.2.
Messages: match and event chat text stored on servers to operate the messenger.
Events and meetups: event participation, organizer applications; “meeting moment” photos uploaded by participants.
Payments: subscription status, transaction identifiers (we do not hold bank card data).
Technical data: errors, crashes, push token, device/session identifiers.

2. How We Use Data

To authenticate and identify users.
To match people with similar plans (swipe feed).
To operate chats and notifications.
To improve the App (debugging, analytics).
For moderation and safety.

2.1. “Meeting Moments” Photos and Social Media

Meetup participants may upload a shared photo to the chat. By default it is visible only to the two of you.
Public display (the “Moments” feed in the App and posts on official DAVAI TODAY social accounts, including Instagram) is possible only if both participants consent in the interface and the photo passes moderation.
By uploading a photo, you agree to possible public display if your match consents; your match confirms or declines publication separately.
We do not use such photos in paid targeted ads featuring your image without separate consent.
You may withdraw publication consent via support; new publications will not be made after withdrawal.

2.2. Biometric Verification (Face Liveness)

To prevent fraud and confirm that a profile belongs to a real person, we may process face images as part of a liveness check.
The legal basis is separate, informed, voluntary consent given in the App interface before the check starts.
The check uses Amazon Rekognition Face Liveness (AWS, EU region).
Liveness check video is not stored in DAVAI TODAY.
Selfies uploaded for moderation are kept only for the profile review period and deleted after moderation completes (approval/rejection), unless longer retention is required by law.
You may withdraw consent for biometric processing by contacting support; access to features requiring liveness may then be limited.

3. Sharing Data with Third Parties

We do not sell your data. Data may be shared with:

Amazon Web Services (AWS) — photo storage (S3), liveness checks (Rekognition Face Liveness, EU region).
Sentry — error reports: technical identifiers and crash context, without your message text.
RevenueCat — in-app purchases (no card data).
Apple / Google — sign-in and purchases in the mobile app (under their policies).
YooKassa — card subscription payment in the Mini App. Order ID, amount, and payment status are shared; card data is processed by the payment operator and not passed to us.
Telegram — Mini App authorization; Telegram Stars payments.

3.1. Cross-Border Transfers

Some processing may occur outside Russia (e.g. AWS EU for photos and liveness, Sentry infrastructure, RevenueCat, Apple, Google). Transfers are made where there is a legal basis (consent, contract, service operation) and in line with applicable law.

4. Data Retention

Main data is stored on servers in Russia / the EU. Retention periods:

Match chats: up to 48 hours after the match ends, then deleted.
Event chats: for the event period and a reasonable time after for moderation and support.
Profile and meeting moment photos: until you delete them or delete your account.
Moderation selfies: see section 2.2.
Backups: may be kept up to 30 days after account deletion, then destroyed.

5. Account Deletion

You may delete your account anytime via More → Delete account (or Profile in the mobile app). Your profile is deactivated immediately; personal data is deleted within 30 days (backups — within the period in section 4). Or email support@davaitoday.com.

6. Your Rights (GDPR / Russian Federal Law 152-FZ)

Right of access to your data.
Right to rectify inaccurate data.
Right to erasure (“right to be forgotten”).
Right to data portability.

For any requests: support@davaitoday.com or Telegram @davai_support

7. Children

The App is for users 18+. We do not knowingly collect data from children under 18. If you believe a child has provided data, contact us.

8. Policy Changes

For material changes, we will notify you through the App or Telegram. Continued use means you agree to the updated policy.

9. Contact

DAVAI TODAY
Email: support@davaitoday.com
Telegram: @davai_support
Website: davaitoday.com