Heyup Privacy Policy

Heyup Privacy Policy

Do you live in California? Check out our California Privacy Statement, which supplements this Privacy Policy.

Residents of Washington and Nevada, please see our Consumer Health Data Privacy Policy, which supplements this Privacy Policy.

Hello! Welcome to our Privacy Policy.

We know reading a privacy policy might not be everyone’s idea of a good time, but hear us out. We’ve put a lot of effort into making this policy as clear and engaging as possible because we actually want you to read it! Think of us as your digital wingmate, here to guide you through the ins and outs of what data we collect, why we collect it, and how we use it. So get cozy, grab your favorite drink, and let’s make privacy make sense—together.

1.Who We Are

We are a company dedicated to providing users with safe and enjoyable social experiences, focusing on building a platform for meaningful social connections while safeguarding user account security and information privacy.

2.Where This Privacy Policy Applies

This Privacy Policy applies to websites, applications, events, and other related services we operate under the Heyup, including SMS notification services sent to ensure account security, service continuity, transaction confirmations, and other similar purposes. Whether you're searching for a soulmate, participating in our events, or using any of our other services, this policy has got you covered. For simplicity, all the aforementioned services are collectively referred to as the "Service" in this Privacy Policy.

If a specific service requires a separate privacy policy, we will provide you with that specific privacy policy separately, and such specific policy shall prevail over this Privacy Policy at that time.

3.Data We Collect

It goes without saying that we can’t help you develop meaningful connections without you providing some information about yourself, such as basic profile details and the types of people you’d like to meet. Using our Service also generates certain information, such as when you logged in and how you used the Service. We may also collect data from third parties, for example, when you log into our Service through an account on another platform (e.g., Google, Apple) or upload information from your account on another platform to complete your profile. If you're interested in all the details, be sure to check out the table below.

Data you give us	Description
Account Data	When you create an account, you give us basic information for your account to be set up such as email address and date of birth.
Profile Data	When you complete your profile, you share additional details about you, such as your gender, interests, preferences, approximate location, etc. Some of this data may be considered sensitive or special under the laws of certain U.S. states, such as details about sexual orientation, racial or ethnic origins, or info about your face, which may be considered biometric identifiers or information under the laws of states like Illinois, Texas, or Colorado. We will not use or disclose your sensitive personal information except as necessary to provide the services you request or with your explicit consent. If you wish to limit the use or disclosure of your sensitive personal information, please contact us. We also collect your exclusive AI Profile information, AI chat logs and Vibe Card content to power AI chat and intelligent matching features; such sensitive preference data shall only be processed with your explicit consent.
Content	When you use our Service, you may post photos, videos, audio, text and other types of content, such as your chats with other members or post a bio.
Marketing, Survey and Research Data	We sometimes run (i) surveys, focus groups, or market studies for research purposes and (ii) promotions, events for marketing purposes. When you choose to participate, you give us information to process your entry and participation, as well as your responses to our questions and your feedback.
Third-Party Data	When you choose to share with us information about other people (for example, if you use the contact details of someone you know for a given feature or if you submit a query or report involving a member), we process this data on your behalf to complete your request.
Customer Support Data	When you contact us, you provide us with information that may be necessary to help address your inquiry. Other people may also submit queries or reports involving you. Finally, our moderation tools and teams can collect additional data as part of their investigations.
Social Media Data	You may decide to share data with us through your accounts on other platforms (e.g., Google, Apple), for instance if you decide to create and log into your account via these platforms.

Data generated or automatically collected	Description
Usage Data	Using the Service generates data about your activity, including how you use it (e.g., when you logged in, features you’ve been using, actions taken, information shown to you) and how you interact with others (e.g., searching, matching, communicating). We may also receive data related to interactions you had with our ads on third party’s websites or apps.
Technical Data	Using the Service involves the collection of data from and about the device (s) you use to access our Service, including hardware and software information such as IP address, device ID, device type, operating systems and configurations, network information, as well as app settings and characteristics, app crashes, advertising IDs and identifiers associated with cookies or other technologies that can uniquely identify a device or browser. For more information about cookies, see our Cookie Policy.

Other data we collect	Description
Geolocation Data	If you give us permission, we collect your geolocation (latitude and longitude) from your device. If you decline permission, features that rely on precise geolocation will not be available to you.
Face Geometry Data	You may choose to participate in certain of our features, like Selfie Verification, that involve the collection of face geometry data, which may be considered biometric data under the laws of certain U.S. states.
AI Chat Assistant Data	AI chat logs, AI Profile information and Vibe Card content used to power AI chat and intelligent matching features.

4.Why and How We Use Your Data

The main reason we process your data is to provide you with the Service and continuously improve its quality, including matching you with potential like-minded members, personalizing your user experience, and helping you make the most of our Service. We also process your data to ensure the security of the Service, as well as your safety and the safety of other users. We take this responsibility very seriously and constantly improve our systems and processes to enhance security. Additionally, we will show you relevant ads based on your settings. For detailed explanations, please see below.

For information on how we process personal data through "profiling" and "automated decision-making", please refer to our Frequently Asked Questions (FAQ).

4.1 To Achieve an Enjoyable Connection Experience

To achieve our goal of giving you an enjoyable connection experience, we use your personal information to:

i) Offer our services and features to you;

ii) Contact you with information about the Service, such as updates and new features;

iii) Personalise the Service, websites, and content we deliver to you;

iv) Carry out research and analysis about how you use and interact with the Service and websites;

v) Test new technologies and processes meant to enhance and improve the Service and websites;

vi) Resolve disputes, troubleshoot problems, and enforce our Terms and Conditions of Use;

vii) Investigate fraud and protect our legal rights;

viii) Protect third parties and the people on our Service and websites from harm;

ix) If you’ve signed up for our communications or otherwise consented, send you information by direct marketing and other communication methods about our promotions and offers, such as letting you know the types of goods, services, and offers we provide.

4.2 Our Matching Algorithm

We want to help you find the best possible connections, so we developed matching algorithms to predict your compatibility with others and show you people we think are a good match for you.

To predict your compatibility with others and recommend profiles, our matching algorithms use:

i) The information you share about yourself in your profile;

ii) Information about your activity on the Service;

iii) Whether you’ve verified your photo;

iv) Your device coordinates.

4.3 Moderation Practices

Safety on our Service and websites is very important to us, so we take steps to make sure every person follows our Terms and Conditions of Use while connecting.

We use a combination of automated systems and a team of employees to monitor and review accounts and messages for content that suggests a violation of our Terms and Conditions of Use. This process involves some personal information, such as photos and any other information uploaded to a profile or shared in messages.

We will issue a warning to the relevant account if any account or message meets the relevant criteria suggesting a likely violation. We can also restrict or block the relevant user’s access, who can contact us to contest the decision.

4.4 Detailed Breakdown of Data Use

Purposes for processing your data	Grounds for processing your data	Categories of data processed
To enable you to use our Service, including:i) Creating and maintaining your account and profile on our Serviceii) Operating and maintaining the various features on our Serviceiii) Recommending other members to you and recommending you to themiv) Responding to your requests and questionsv) Monitoring the well functioning of our Service and troubleshooting and fixing issues as neededvi) Create an avatar	Performance of our contract with you Your consent (where sensitive data or other type of data that requires consent is processed).	Account Data, Profile Data, Content, Purchase Data, Marketing, Survey and Research Data, Third Party Data, Customer Support Data, Social Media Data, Usage Data, Technical Data, Geolocation Data, Face Geometry Data, Info about your face.
To operate advertising and marketing campaigns, including:i) Performing and measuring the effectiveness of advertising campaigns run on our Serviceii) Performing and measuring the effectiveness of marketing campaigns promoting our own Service on third-party platformsiii) Communicating with you about products and services we believe may interest you.	Consent (where required under applicable law) and otherwise our legitimate interest. It is in our legitimate interest to promote our service to our users, which are tailored to their interests, as a way to improve their experience.	Account Data, Profile Data, Usage Data, Marketing, Survey and Research Data, Technical Data.
To improve our Service and create new features and services, including:i) Running focus groups, market studies and surveysii) Analyzing how our Service is usediii) Reviewing interactions with customer care teams to improve service qualityiv) Developing and improving new features and services, including through machine learning and other technologies, and testing them outv) Conducting research and publishing research papers	Performance of our contract with youOur legitimate interest: It is in our legitimate interest to improve our Service over timeConsent where required under applicable law (e.g., we may process data deemed sensitive or special in certain U.S. states to help make sure that the various communities using our Service are being treated fairly and equitably and that our Service remains diverse and inclusive).	Account Data, Profile Data, Content, Purchase Data, Marketing, Survey and Research Data, Third Party Data, Customer Support Data, Social Media Data, Usage Data, Technical Data.
To keep you and other members safe on our Service, including:i) Preventing, detecting and fighting against violations of our Terms, fraud and other illegal or unauthorized activitiesii) Developing and improving tools to prevent, detect and fight against violations of our Terms, fraud and other illegal or unauthorized activitiesiii) Preventing recurrences, notably by preventing individuals who violate our Terms from creating a new accountiv) Letting individuals know what we’ve done about reports they submit or potential safety risks we identifyv) Verifying your identity	Performance of our contract with youOur legitimate interest: It is in our legitimate interest and that of our members to keep them safeProtection of your vital interests and that of other membersEnsuring your securityCompliance with legal obligations that apply to us such as taking down illicit contentYour consent (where sensitive data or another type of data that requires consent is processed).	Account Data, Profile Data, Content, Third Party Data, Customer Support Data, Usage Data, Technical Data, Face Geometry Data, ID Data.
To comply with applicable law, establish, exercise and defend legal claims & rights, including:i) Preserving data to comply – and evidence compliance – with applicable lawii) Supporting investigations and defending potential or ongoing litigation, regulatory action or disputeiii) Responding to lawful requests from law enforcement, courts, regulators, and other third partiesiv) Reporting illegal or infringing content to law enforcement, government or other authoritiesv) Establishing, exercising, or defending ongoing or threatened claimsvi) Sharing data with law enforcement or partners to combat abusive or illegal behavior.	Our legitimate interest: It is in our legitimate interest to comply with applicable law and protect ourselves, our members and others, including as part of investigations, legal proceedings and other disputesProtection of your vital interests and that of other membersCompliance with legal obligations applying to us such as responding to law enforcement requests for information.	The categories of data shared will vary based on the specific circumstances surrounding each obligation, compelling interest or dispute.
Operate AI Chat Assistant and intelligent matching algorithm, including: 1) Store and update your exclusive AI Profile; 2) Generate compatible user recommendations and matching rationales based on your AI Profile, basic profile, Vibe Cards, geolocation and historical chat logs; 3) Support real-time casual chat with AI assistant by reading dialogue context for coherent interactions; 4) AI content safety risk control: automatically identify pornographic, violent, harassing, illegal sensitive content within chats, Vibe Cards and AI Profiles, block violating materials and suspend relevant recommendations. Explicit commitment: All AI dialogue, profile and post data will never be used for internal or third-party large language model training.	1. Performance of service contract with you (provision of core AI matching and AI chat functions) 2. Your explicit consent (processing sensitive AI profile data such as sexual orientation and lifestyle preferences) 3. Legitimate interest (content safety and anti-harassment risk control for the platform and all users) 4. Legal compliance obligation (block illegal content and comply with U.S. state privacy and content regulatory laws)	AI Chat Dialogue Data, AI Profile Data, Vibe Card Content, Geolocation Data, Profile Data, Usage Data, Technical Data

5.How We Share Data

Our goal is to help you build meaningful social connections, so some of your information will naturally be visible to other members of the Service. We may also share data with service providers and partners who assist us in operating the Service, as well as other affiliated companies. In certain cases, we may share data for legal and related purposes. For details, please see below:

Recipients	Reasons for sharing	Categories of Personal Data
Other members	You share data with other members when you voluntarily disclose information on the Service for others to see (e.g., your public profile). If someone submits a report involving you (such as a claim you violated our Terms of Use), we may let the reporter know what actions we took, if any, as a result of their report. The same applies if you submit a report involving another member.	Profile Data, Content, Social Media Data, Third Party Data, Customer Support Data, Usage Data.
Service providers/partners	We share data with vendors and partners who help us operate, promote and improve our Service. They provide us services such as data hosting and maintenance, analytics, customer care, marketing, advertising, legal support, and security operations. This includes SMS infrastructure vendors who provide delivery, routing, and compliance support for transactional SMS. We require such vendors to use the data solely for message delivery and compliance purposes.	Depending on the service provided by the vendor or partner, it may include: Account Data, Profile Data, Content, Purchase Data, Marketing, Survey and Research Data, Third Party Data, Customer Support Data, Social Media Data, Usage Data, Technical Data, Geolocation Data, Face Data, ID Data.
Advertising Partners	We may publish ads about third-party advertisers’ products and services on our Service, and publish ads promoting our own Service on third-party sites and apps. To help improve the relevance of these ads, we provide certain info about you to third parties, including advertising partners, or allow them to collect such data from our services (such as via cookies, SDKs, or similar technologies). Some of our advertising partners enable us to transform your email address, advertising identifiers or phone number into an identifier that can’t be used to identify you personally and then use that unique identifier to either exclude you from our marketing campaigns, or to target our ads at an audience that is similar to you in terms of background, interests or app usage. We do not share SMS delivery logs or opt-in/opt-out records with advertising partners.	Account Data, Profile Data, Usage Data, Technical Data.
Affiliates	We may share data with affiliates or receive data from them for legitimate business purposes, such as improving safety across platforms, assisting in data processing operations, developing recommendation systems, and enhancing marketing campaigns where permitted by applicable law.	The categories of data will vary based on the reason for sharing, but it may include: Account Data, Profile Data, Content, Purchase Data, Marketing, Survey and Research Data, Third Party Data, Customer Support Data, Social Media Data, Usage Data, Technical Data, Geolocation Data, Face Data, ID Data.
Law enforcement authorities	We may disclose your data to:(i) comply with a legal process, such as a court order, subpoena or search warrant, government / law enforcement investigation or other legal requirements;(ii) assist in the prevention or detection of crime;(iii) protect the safety of any person; and(iv) establish, exercise or defend legal claims.	The categories of data shared will vary depending on the specific circumstances surrounding the request, but it often can include: Account data, Profile Data, Content, Purchase Data, Customer Support Data, Third Party Data, Social Media Data, Usage Data, Technical Data, Geolocation Data, ID Data. In rare cases, SMS delivery logs may be disclosed if required by law enforcement, and only where legally mandated.
Third-Party LLM Service Providers	We only transmit corresponding data temporarily to realize real-time AI chat, AI Profile analysis and matching content risk control. Binding contractual restrictions are imposed on all partners: 1) Data shall only be used for single real-time session processing and all local cache shall be destroyed immediately after the session ends; 2) Extraction, storage or reproduction of our user data is prohibited; 3) No chat, profile or post data shall be used for model training, fine-tuning or data labeling; 4) Secondary sharing of data to any other party is forbidden.	Only the minimum dataset required for a single session: real-time AI chat texts, desensitized AI Profile labels (fields that can directly identify you are removed), risk control keywords of Vibe Cards (complete original images/videos will not be transmitted); highly sensitive data such as ID documents, payment info and facial biometrics will never be shared.
In the context of merger and acquisition, with our affiliates or new owner (s)	We may transfer your data if we are involved, whether in whole or in part, in a merger, sale, acquisition, divestiture, restructuring, reorganization, dissolution, bankruptcy or other change of ownership or control.	The categories of data shared will vary based on the type of corporate transaction. It may include the entire organization data or only a specific subset such as Purchase Data.
When the profile sharing functionality is used.	You may choose to share other members’ profiles and they may share yours with people outside of our Service, using the sharing functionality.	Profile Data, Content

6.Cross-Border Data Transfers

Our Service is available to users worldwide, so the data sharing described in Section 5 of this Policy involves cross-border data transfers to the United States and other countries with potentially different data processing laws. Our data is primarily stored in the United States, and data for certain functions (such as SMS routing, analytics, or cloud hosting) may be processed outside the United States by vetted service providers. When we transfer personal data to countries outside the European Economic Area, the United Kingdom, Switzerland, or other countries/regions whose data protection laws have been deemed adequate by the European Commission or other competent governmental authorities, we typically rely on appropriate safeguards such as Standard Contractual Clauses. These Standard Contractual Clauses are commitments between the parties transferring personal data, binding both parties to protect the privacy and security of your data. To request a copy of the Standard Contractual Clauses, please contact us.

We will not permanently store your AI-related data with third-party LLM providers. All transmissions adopt encrypted channels, and Standard Contractual Clauses (SCC) are signed to complete cross-border data compliance safeguards.

7.Your Rights

We want you to be in control of your data, so we want to remind you of the following rights, options, and tools available to you. Depending on your location, these rights may not apply or may be named differently. If you have any questions about your rights and how to exercise them, please contact us through the designated channels.

Your Rights	How to exercise it
Access, Portability or To KnowRight to be informed of the personal data we process about you and/or ask for a copy of it	You can access and review some data directly by logging into your account. You may also request a copy of your SMS opt-in/opt-out records or delivery logs, to the extent required by applicable U.S. laws (e.g., TCPA/CTIA).
Rectification or CorrectionRight to amend or update your personal data where it’s inaccurate or incomplete	You can update your data directly within the Service by simply updating your profile. If you wish to rectify other data, please contact us through the designated channels.
Deletion or ErasureRight to delete personal data	You can delete some of the data you provided us directly within the Service. You can also close your account through the designated method and we’ll delete your data as laid out in this Privacy Policy. In any event, you can always contact us through the designated channels. Please note that certain SMS delivery records may need to be retained temporarily to demonstrate compliance with consent laws, but they will not be used for marketing. For AI chat logs, AI Profile and Vibe Card matching data: The Platform does not support separate deletion of single AI chat records or partial AI Profile data. Only when you submit an account deletion application in accordance with the process will we completely erase all AI-related data upon the expiration of the safety retention window set forth in Section 8 of this Policy. You may withdraw your consent for AI functions at any time via device permissions / app privacy settings. After withdrawal, AI chat and intelligent matching functions will be disabled immediately, but AI data will still be retained until the statutory retention period after account closure.
Objection (Opt-out) or RestrictionRight to object to us processing personal data or to request that we temporarily or permanently stop processing personal data	You can directly opt-out from certain of your personal data processing in your account settings. To discontinue receiving specific types of messages, adjust your preferences in the Notification Settings. You may also opt-out of SMS communications at any time by replying with “STOP”. Otherwise you can contact us through the designated channels should you wish to object to or restrict a data processing we’ve listed throughout this Privacy Policy.We do not sell or share your personal information. If in the future we engage in selling or sharing, we will provide a clear “Do Not Sell or Share My Personal Information” link and honor all opt-out requests as required by applicable U.S. laws.
Consent WithdrawalRight to withdraw a consent you’ve given us to process your personal data for a specific purpose	You can directly withdraw consent you’ve given us either by updating your account setting or removing Device Permissions you’ve agreed to in your device settings (e.g., access to specific types of device data such as phone contacts, pictures, advertising identifiers and location services or consent to receive push notifications). For SMS, you may withdraw consent at any time by using the opt-out mechanism (STOP/S) or by adjusting your account notification settings. When you withdraw consent, certain services may lose functionality. You can always contact us through the designated channels for more information.
Opt-out of Targeted Advertising, “Sales” and “Sharing”	You may opt out of activities that may fall under the legal definitions of “targeted advertising,” “sales,” or “sharing” under applicable U.S. laws	To opt out, please visit the “Your Privacy Choices” link in the footer of our website and in the Settings menu of the app and adjust the “Sale or Sharing of Personal Information” toggle accordingly. Authorized agents may submit opt-out requests on behalf of consumers through the designated channels.

For the protection of you and all members, before responding to the above requests, we may require you to provide information to verify your identity or your authority to act on behalf of a member. We wouldn’t want someone else to gain unauthorized access to your data!

Please note that we may reject certain requests, including but not limited to requests where we cannot verify your identity, illegal or invalid requests, or requests that may infringe on trade secrets, intellectual property rights, or the privacy or other rights of others. If you wish to obtain information related to another member (e.g., a copy of messages you received from that member), the other member must submit the request themselves.

If you are a resident of Indiana, Kentucky, Rhode Island, Maryland, Tennessee, Minnesota, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Texas, Oregon, Montana, Virginia, Colorado, or Connecticut, USA, and we deny your privacy request, you may appeal by contacting us through the designated channels and explicitly referencing “Privacy Request Appeal.” If you have concerns about the result of your appeal, you may contact the attorney general of your state.

8.How Long We Retain Your Data

We want the connections you make through our Service to last, but we only retain your personal data for as long as necessary for legitimate business purposes (as outlined in Section 4 of this Policy) and as permitted by applicable law.

If you decide to stop using our Service, you may close your account, and your profile will no longer be visible to other members. Please note that we will automatically close your account if you are inactive for two consecutive years.

After account closure, we will delete your data in the following manner:

i) To protect the safety and security of our members, we implement a safety retention window: three months following account closure and up to one year following an account ban. During this period, we will retain your data to investigate unlawful or harmful conduct. The retention of data during this safety retention window is based on our legitimate interest and that of potential third-party victims.

ii) To comply with legal data retention obligations, we will retain certain data: in particular, we will retain transaction data for 10 years to comply with tax and accounting-related legal requirements; retain credit card information for the period during which you may challenge the transaction; retain "traffic data"/logs for one year to comply with legal data retention obligations; and retain members' consent records for at least five years (or longer if required by applicable law, such as TCPA/CTIA) to comply with and demonstrate compliance with applicable law. After the expiration of the aforementioned periods, we will securely delete or anonymize the data.

iii) Based on legitimate interests, we will retain certain data: retain customer service communication records with you for six years from the date of communication; retain customer service records and supporting data, as well as approximate location information of downloads/purchases, for five years to support safety efforts, customer service decisions, exercise rights, and defend against claims; retain past account and subscription records for three years after the closure of your last account to ensure the accuracy of financial forecasting and reporting; retain profile data for one year to address potential litigation, establish, exercise, or defend legal claims; and retain necessary data to prevent banned members from re-creating accounts for a reasonable period required to ensure member safety and vital interests.

iv) Face data (if provided) will be deleted within 30 days, unless continued retention is necessary to comply with applicable legal obligations or ensure the security of the Service and members (within the scope permitted by applicable law).

v) If there are unresolved or potential issues, claims, or disputes, we will retain relevant data based on legitimate interests, particularly when receiving a valid subpoena or request to retain data (in which case data must be retained to comply with legal obligations) or when data is necessary for legal proceedings. If SMS delivery data or subscription records are relevant to the aforementioned claims or proceedings, we may retain such data until the relevant matters are resolved.

vi)To the extent permitted by law, we may retain and use data that cannot be individually identified or attributed to a specific individual for the purposes described in this Privacy Policy, including improving the Service, developing new features, new technologies, and new services, as well as ensuring Service security.

Retention Rules for AI-related Data: During active account status, AI chats, AI Profile and Vibe Card content will be retained continuously to support matching and chat functions. After account closure, a unified 3-month safety retention window applies (up to 1 year for banned accounts). All AI chat logs, AI Profiles and post materials will be permanently destroyed upon expiry of the retention window. The above statutory retention rules for transaction, tax and legal data shall not be affected by this clause. No long-term storage is allowed on third-party LLM providers; all cache is cleared once a single session terminates.

9.Children's Privacy

Our Service is restricted to individuals aged 18 and above, and minors under the age of 18 are not permitted to use our platform. If you suspect a member is a minor, please use the reporting mechanism available within the Service to submit a report. We will not intentionally collect or process any personal information of minors under the age of 18, including phone numbers or SMS consent records.

10.Privacy Policy Changes

This Policy may be updated from time to time. We are constantly exploring new and innovative ways to help you build meaningful social connections and strive to ensure that explanations of our data processing practices remain up-to-date. If there are material changes to this Policy (including changes to terms related to SMS services or consent), we will notify you before the changes take effect to ensure you have sufficient time to review the changes.

11.How To Contact Us

If you have any questions about this Privacy Policy or wish to submit a complaint, you may contact us through the following designated channels:

Online: Contact us

Email: service@heeeyup.com

That’s it! You’ve reached the end of our Privacy Policy. We hope it’s as clear and engaging as we strived to make it. Now, let’s embark on an exciting social journey together! We are honored to be with you every step of the way.