Last updated: February 2026
When you use Kupy, we collect: your email address and password (encrypted) at signup; your username, date of birth, gender, and optional bio during profile setup; your profile photo uploaded to our servers; your device location (latitude and longitude) when you grant permission; a selfie for face verification (processed in real-time and never stored); your chat messages with matched users; your mission progress, hearts balance, and interaction history; your device push notification token for messaging; and your language preference.
We use your data to: create and manage your account; show you nearby users based on your location; match you with other users through the mission system; deliver chat messages in real-time; send push notifications for new messages and engagement reminders; verify your identity through face comparison; process in-app purchases and manage subscriptions; and improve the app experience.
Kupy uses face verification to confirm your identity matches your profile photo. Before any face data is collected, you are shown a consent dialog and must explicitly agree to proceed. Your selfie is captured via your device's front camera and, together with your profile photo, is sent to a third-party AI service (DeepFace with the ArcFace model, hosted on Hugging Face Spaces) for comparison. Both images are processed in memory on the server and are immediately and permanently deleted after the comparison is complete — no face or biometric data is ever stored on any server. Only a boolean verification result (verified or not verified) is saved to your user profile. You may decline face verification at any time by dismissing the consent dialog.
We collect your location only when you grant permission. Location is used to show you nearby users and calculate distances. Your coordinates are stored in your profile and updated on-demand (not continuously tracked). You can revoke location permission at any time through your device settings.
Kupy uses the following third-party services: Supabase for database, authentication, file storage, and real-time messaging; Firebase (Google) for push notifications; Apple App Store and Google Play for in-app purchases; Klipy for GIF and sticker search in chat. For face verification, your selfie and profile photo are sent to a Hugging Face-hosted AI service running DeepFace (ArcFace model). This is the only external AI integration in the app. No other user data is sent to any AI service. Your explicit consent is required before any face data is transmitted. These third-party services may process your data according to their own privacy policies.
Your data is stored on Supabase servers with encryption in transit (HTTPS/TLS). Passwords are hashed and never stored in plain text. Chat messages are encrypted in transit but not end-to-end encrypted. Profile photos are stored in cloud storage with secure access controls. We implement row-level security policies to ensure users can only access authorized data.
We use Firebase Cloud Messaging to send you notifications about new messages and matches. We also schedule local engagement reminders on your device. You can disable notifications at any time through your device settings. Your push notification token is cleared when you log out.
Purchases are processed entirely through Apple App Store or Google Play. We do not collect or store your payment information. We only receive confirmation of successful purchases to deliver the corresponding in-app items (KupyHearts, subscriptions).
We retain your data for as long as your account is active. When you delete your account, all your data is permanently removed including your profile, messages, matches, photos, and interaction history. Face verification images are never retained beyond the instant verification process.
You have the right to: access your personal data through your profile; correct your information at any time; delete your account and all associated data; withdraw consent for location access or notifications; and request information about how your data is processed. To exercise these rights, use the app settings or contact us.
Kupy is intended for users aged 18 and older. We do not knowingly collect data from anyone under 18. If we discover that a minor has created an account, we will terminate it and delete all associated data immediately.
We may update this privacy policy from time to time. We will notify you of significant changes through the app. Continued use of Kupy after changes constitutes acceptance of the updated policy.
For privacy-related questions or requests, contact us at kupy.dating@gmail.com.