Privacy policy

This policy explains what personal data SoulDu collects, why, who can see it, how long we keep it and what rights you have. SoulDu is a dating app for adults in Lithuania that gives you one match at a time.

Who is responsible

The controller of your data is Pedro Iglesias, Eitminų g. 66, Vilnius, Lietuva. For anything about your data, write to privacy@souldu.com.

What we collect

When you use the app

• Account: your email address. If you sign in with Google or Apple, we receive from them your email address and an account identifier, never your password.
• Profile: first name, date of birth, gender, the genders and age range you want to meet, city, language, and the short text about you if you write one.
• Photos: between 2 and 6. The app removes location data and other metadata from each photo before uploading it.
• Questionnaire: your answers about values, plans, lifestyle and personality, how important each question is to you and which answers you accept in another person. All questions can be skipped.
• Politics and religion: these answers are special categories of data (Article 9 GDPR). We only ask them after your explicit consent; if you withdraw it, those answers are deleted.
• Ratings and matches: the ratings from 1 to 10 you give, the minimum rating you require, your matches and when they ended.
• Messages you exchange with your match.
• Safety: the people you block and report, and the reports others make about you.
• Security log: a record of important actions (for example a report, a block or the end of a match), with the account and the time.

We do not collect your precise location, contacts, or advertising identifiers, and the app has no advertising or analytics trackers.

When you join the waiting list

Your email address, city and language, and, if you came from the link in one of our videos, which one (never anything else about the visit). To stop abuse we keep a keyed hash of your IP address for one day; we never store the IP address itself. The form uses Cloudflare Turnstile to stop bots.

Why we use it and on what legal basis

• To provide SoulDu (Article 6(1)(b) GDPR, our contract with you): your account, profile, deck of people, matching, chat and the options you choose.
• Politics and religion answers (Article 9(2)(a), your explicit consent): only for matching.
• Safety and moderation (Article 6(1)(f), our legitimate interest and that of our users in a safe service): reviewing reports, blocking accounts that break the terms, preventing banned people from coming back, and the security log.
• The waiting list (Article 6(1)(a), your consent): to tell you by email when SoulDu opens in your city.
• Legal obligations (Article 6(1)(c)): for example answering requests from authorities when the law requires it.

How matching works

Matching is automated. SoulDu pairs two people only when both have rated each other at least as high as the minimum each of them requires, both are free, and their profiles fit what the other is looking for. Among those, the algorithm proposes the pair whose ratings and questionnaire answers fit best. The result only decides who you are introduced to: it has no legal or similarly significant effect on you, and you can end a match at any time. If you have questions about it, write to privacy@souldu.com and a person will answer.

Who can see your data

• Other people in your city who could be your match see your first name, age, photos and the text about you. They never see your date of birth, email, answers, ratings or who you have blocked.
• Your match also sees the messages you exchange.
• Nobody sees the ratings you give, your questionnaire answers or your minimum rating.
• Our moderators, only when someone is reported: the reported profile, the reports about it and the messages between the person who reported and the reported person. Moderators must sign in with two-step verification and every action is logged.
• Service providers that process data on our behalf under a data processing agreement: Supabase (database, file storage and sign-in, hosted in the European Union), Cloudflare (website hosting and bot protection) and our email delivery provider. If you sign in with Google or Apple, they process that sign-in under their own policies. Apple and Google also process app downloads through their stores.

We never sell your data or use it for advertising.

Transfers outside the European Union

Your account data is stored in the European Union. Some of our providers are companies based in the United States; when they process data outside the European Economic Area, they do so under the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

How long we keep it

• Your account and everything in it: until you delete it. Deletion is immediate and includes your photos and messages. See how to delete your account.
• Reports: reports you made stay without your name; reports about you are kept for up to one year after they are resolved.
• Banned accounts: we keep the data needed to stop the person from creating a new account and to handle any claim, for as long as that is necessary.
• Security log: one year.
• Waiting list: until you ask us to remove you, and at the latest six months after SoulDu opens in your city.
• Backups: overwritten within 30 days.

Your rights

You can, at any time and free of charge:

• Access your data and get a copy: in the app, Profile → Options → Download my data.
• Correct it: edit your profile and answers in the app.
• Delete it: in the app or as explained on this page.
• Withdraw your consent to the politics and religion questions, or to the waiting list emails, without affecting what was done before.
• Object to processing based on our legitimate interest, ask us to restrict processing, and take your data with you (portability).

Write to privacy@souldu.com; we answer within one month. You can also complain to the Lithuanian data protection authority, the State Data Protection Inspectorate (vdai.lrv.lt), or to the authority in the EU country where you live.

Age

SoulDu is only for people aged 18 or over. We check the date of birth on sign-up and delete accounts that belong to minors.

Security

Connections are encrypted, every table in our database is protected so that each person can only reach the data they are allowed to see, photos are only served through short-lived links to the people who may see them, and moderators use two-step verification. No system is perfect: if a breach puts your data at risk, we will tell you and the authority as the law requires.

Changes

If we change this policy in a way that matters, we will tell you in the app before the change applies. The date of the latest version is below.

Last updated: 2026-10-27