Privacy policy

Your privacy is not a checkbox: it is part of the product. This page describes, without jargon, what we collect, why, for how long, and what we will never do.

We record neither the video nor the audio of your conversations.
We never sell your data and show no advertising.
Moderation relies on artificial intelligence; only images that trigger an alert are kept, for 30 days at most.
Your data is hosted in the European Union.
You can view, correct or delete your data from the app.

1. Who is responsible

Sheez Ltd, a company established in the United Kingdom, is the controller of the data described here. For any question about your data: contact@sheez.io.

2. What we collect

Category	Details	Retention
Account	Email, first name or nickname, birth date, language, password (hashed) or Google identifier, meeting counter.	Until account deletion (+ 30-day cancellation window).
Profile (optional)	Photo, bio, gender, spoken languages, choice to display your age.	Until you change or delete it.
Country	Derived from the first IP address at sign-up, to display your flag. Never your precise location.	Until account deletion.
Meeting log	Who met whom, and when — needed to handle reports.	90 days.
Technical fingerprints	IP address and device identifier, stored as irreversible fingerprints, used only to enforce sanctions.	Duration of the sanction.
Video moderation	Occasional snapshots of the video during the conversation (see section 3).	30 days if an alert, otherwise nothing.
Chat moderation	Only messages blocked by the filter are logged (first 200 characters), for review and appeal.	12 months after the end of the sanction.

3. Video moderation

During a conversation, occasional images of the video are analysed by artificial intelligence systems, on our own servers — they are never passed to a third party or used for anything other than moderation. An image that triggers no alert is destroyed immediately; an image that triggers an alert is kept for at most 30 days, to allow human review and your appeal. Nobody watches conversations live. So that these checks stay effective, we do not publish how often they run, what they look for, or the thresholds that trigger them.

4. What we never do

We do not record video or audio conversations.
We do not sell or rent your data, to anyone.
We show no advertising and use no advertising trackers or third-party analytics.
We do not read your messages: they are transmitted live and not stored (apart from blocked messages, section 2).
We never ask for your precise location, your contacts or your photo library.

5. Why we use your data

Purpose	Legal basis	Data involved
Provide the service: account, matching, profile, chat translation	Performance of the contract	Account, profile, country, meeting log
Protect the community: moderation, sanctions, handling reports	Legitimate interest (user safety)	Moderation snapshots, blocked messages, technical fingerprints
Answer a legal obligation or a lawful request	Legal obligation	Strictly the data requested

6. Who we share with

Hosting: our servers, located in the Netherlands (European Union).
Transactional emails (address verification, forgotten password): an email delivery provider receives your email address, with the required European contractual safeguards.
Chat translation: if your partner enabled it, the text of the message (without your identity) is sent to our translation provider.
Google sign-in: only if you choose it; Google confirms your email address to us, nothing more.
Authorities: only upon a legally valid request.

Video effects and filters are computed in your browser: your camera images are not sent to a third party for that.

7. Where your data lives

Our servers — application, database, moderation and video relays — are located in the European Union. When a provider processes data outside the EU (for example to deliver an email), it does so with the safeguards required by the GDPR, such as standard contractual clauses.

8. For how long

Moderation snapshots with an alert: 30 days.
Meeting log: 90 days.
Sanctions and moderation decisions: 12 months after the end of the sanction.
Account and profile: until deletion, effective 30 days after your request (signing back in cancels it).

9. Your rights

Under the GDPR, you can access your data, correct it, delete it, object to a processing operation or request its restriction and portability. The simplest way: "My account" in the app, where you can view, correct and delete everything. For the rest, write to contact@sheez.io — we answer within 30 days. You can also contact the data protection authority of your country (the ICO in the United Kingdom, the CNIL in France).

10. Cookies

Cookie	Role	Duration
Session	Keep you signed in.	30 days
Device	Enforce suspensions (irreversible fingerprint).	1 year
Language	Remember your chosen language.	1 year

Since there are no advertising or analytics cookies, there is no banner to accept: there is nothing to accept.

11. Minors

The service is for adults only. If you believe a minor is using Sheez, report them: the conversation is cut and the account handled as a priority. The account of an adult who shows a minor on camera is suspended.

12. Security

Exchanges with our servers are encrypted (TLS), video travels encrypted between participants (WebRTC), including when it transits through our relays, passwords are hashed with modern algorithms, and access to our systems is restricted and logged. The best protection is still not collecting what we do not need — that is our baseline principle.

13. When this policy changes

The date of the current version appears at the top of this page. For significant changes, we inform you in the app or by email before they take effect.

14. Write to us

For any question about this policy or your data: contact@sheez.io.