Privacy Policy
This Privacy Policy (“Policy”) describes how Vexy AI (“Vexy”, “we”, “us”) collects, uses, shares, and protects your personal data through its mobile application. It complies with the EU General Data Protection Regulation (“GDPR”) and the Turkish Personal Data Protection Law (“KVKK”).
1. Data Controller
Vexy AI is the controller of your personal data. Contact: privacy@vexyapp.com
2. Personal Data We Collect
2.1 Account Information
- Email address (via Apple Sign In or Google Sign In)
- Name or nickname (provided by you during onboarding)
- Gender preference and interest tags (onboarding)
2.2 Content Data
- Chat messages exchanged with AI characters
- Swipe interactions and matches
- Virtual gifts sent and in-app purchases
2.3 Technical Data
- Device type, operating system, language, time zone
- App version and usage logs
- IP address (stored in anonymized truncated form)
- Crash reports and performance metrics
- Advertising identifier (IDFA on iOS, Advertising ID on Android), used only as described in “Advertising & Tracking”
- Push notification token (if you enable notifications)
2.4 Payment Data
All purchases are handled by Apple App Store or Google Play. We never store your card number or financial details. We only receive the transaction result (success/failure) and the purchased product identifier.
3. Purposes of Processing
| Purpose | Example |
|---|---|
| Service delivery | Account creation, enabling chat with AI characters |
| Personalization | Character recommendations based on your interests (tag matching) |
| Safety & moderation | Content filtering, detection of prohibited content, account security |
| Communications | Push notifications (with your consent), service announcements |
| Analytics & improvement | Error tracking, performance measurement, anonymous feature usage stats |
| Legal compliance | Responding to lawful requests, dispute resolution |
4. Legal Bases
- Contract performance (GDPR Art. 6(1)(b); KVKK Art. 5/2-c): Processing necessary to deliver the service.
- Explicit consent (GDPR Art. 6(1)(a); KVKK Art. 5/1): Push notifications, optional analytics.
- Legitimate interest (GDPR Art. 6(1)(f)): Fraud prevention, service security, abuse detection.
- Legal obligation (GDPR Art. 6(1)(c); KVKK Art. 5/2-ç): Record keeping, authority requests.
5. Service Providers We Work With
We do not sell your personal data. To operate Vexy, we share the minimum data necessary with carefully selected service providers who act on our behalf and are bound by confidentiality and data-protection obligations. They fall into these categories:
- Cloud infrastructure, database & storage — hosting your account and content. Our primary database and file storage are located within the European Union (Frankfurt).
- AI language model processing — generating character responses. Conversation content sent for this purpose is minimized where possible, and these providers are not permitted to use your data to train their own models.
- Content moderation — automated detection of prohibited content.
- Authentication & app distribution — the Apple App Store and Google Play, for Sign in with Apple / Google Sign-In and for processing your purchases.
- Subscription & purchase management — validating and managing in-app purchases and subscriptions.
- Advertising — serving rewarded ads, as described in “Advertising & Tracking” below.
- Analytics, performance & crash reporting — diagnosing errors and improving the app.
- Push notifications — delivering the messages you have enabled.
We never share the content of your conversations for advertising or marketing purposes.
6. International Data Transfers
Some of our service providers operate outside the European Economic Area and Türkiye. Where your personal data is transferred internationally, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses and/or your explicit consent. Under KVKK, your explicit consent is obtained for transfers abroad.
7. Retention
- Account data — retained while your account is active.
- Chat history — retained until account deletion; permanently destroyed within 30 days of a deletion request.
- Crash & analytics logs — up to 12 months, then anonymized.
- Data retained for legal obligations — for the period required by applicable law.
8. Security
We protect your data with TLS 1.2+ encryption in transit, at-rest encryption in the database, access control via database row-level security, and periodic security audits and penetration tests.
9. Data Breach Notification
If a personal data breach is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority without undue delay and, where required, inform affected users, in line with GDPR and KVKK.
10. Advertising & Tracking
Vexy shows occasional rewarded ads (you watch a short ad to earn Gems). To serve these ads, our advertising partner may access your device’s advertising identifier (IDFA on iOS, Advertising ID on Android) and limited device and usage data. We never use the content of your conversations to target ads.
- iOS: before any tracking, we ask your permission through Apple’s App Tracking Transparency.
- EEA/UK: we request your consent through a consent prompt before serving personalized ads.
- Your control: you can reset or limit your advertising identifier and opt out of personalized ads in your device settings at any time. Declining does not prevent you from using Vexy — you may still see non-personalized ads.
11. Your Rights
Under GDPR and KVKK you have the right to:
- Access the data we hold about you
- Correct inaccurate data
- Erasure (“right to be forgotten”)
- Restrict processing
- Data portability (export)
- Object to processing
- Not be subject to solely automated decisions and profiling
How to delete your account and data. You can permanently delete your account and all associated data at any time:
- In the app: Profile → “Delete account”.
- On the web: visit vexyapp.com/en/delete-account, or email privacy@vexyapp.com from your registered address.
Deletion is permanent and completed within 30 days. “Download my data” on the Profile screen exports your data as JSON. Data we must keep for legal obligations is retained only as long as the law requires.
For other rights requests: privacy@vexyapp.com
12. Children’s Privacy
Vexy is strictly for adults aged 18 and older. We do not direct the service to children and do not knowingly collect personal data from anyone under 18 (or under the minimum age required in your country). If we learn that we have collected data from a minor, we delete the account and associated data promptly. If you believe a minor is using Vexy, contact privacy@vexyapp.com.
13. Your California Privacy Rights
If you are a California resident, you have the right to know, access, correct, delete, and limit the use of your personal information, and not to be discriminated against for exercising these rights. We do not sell your personal information for money. Some advertising activity may be considered “sharing” for cross-context behavioral advertising under California law; you can opt out through your device’s tracking and ad settings, and we honor Global Privacy Control signals where required. To exercise your rights, contact privacy@vexyapp.com.
14. About AI Conversations
Vexy characters are generated by generative AI — they are not real people. Your conversations are:
- Stored for quality and safety purposes.
- Not used to train third-party AI models.
- Processed only to maintain consistent character memory.
For crisis or urgent medical support please contact professional help: in the US 988 (Suicide & Crisis Lifeline) or 911; in Türkiye 182 or 112; elsewhere contact your local emergency services.
15. Age Restriction
Vexy is intended only for users 18 years of age or older. Individuals under 18 must not create an account. Accounts detected to belong to minors are deleted immediately.
16. Changes
We may update this Policy from time to time. For material changes, you will be asked to re-consent in the app. Minor changes are published by updating the effective date.
Our website (vexyapp.com) is a static informational site and does not use tracking cookies.
17. Contact
Vexy AI · Privacy — Email: privacy@vexyapp.com