Policy

1. Who is responsible for your data

Neshamai is a serious-intent dating app for the Jewish community, today in Argentina and the region, and it works by invitation only. The data controller is the operator of Neshamai, domiciled in Argentina. For anything to do with your data — access, correction, deletion or a question — write to us at hola@neshamai.com.

2. What data we hold

Everything we keep comes from you: we don't buy databases and we don't take data from other apps.

• Account: your email and your password (our authentication provider stores the password encrypted; we never see it).
• Profile: name, date of birth, gender, orientation, city, province, neighbourhood (optional), bio, interests, height, whether you have children, how you live your Jewishness and anything else you fill in.
• Photos: the ones you upload to your gallery. They live in a storage bucket and they're what your matches see.
• Compatibility: your questionnaire answers, your life project and — if you enter it — your birth time and city, to calculate your chart.
• Location: your city always; your exact coordinates only if you granted GPS permission, and you can delete them whenever you want.
• Activity: your likes and passes, your messages, your matches, the dates you propose, your reviews and your post-date feedback, and when you were last in the app.
• Notifications: your email and push preferences, and the push subscription of each device where you turned them on.
• Judaism and lineage: how you live your Jewishness, Shabbat and kashrut —part of the questionnaire, since compatibility is calculated from them— and, if you want, the community you belong to, how you declare your lineage, and a copy of your ketubah or certificate.
• A reference from your community: only if you ask for it. We store the address we wrote to, its domain, the date and the answer. That address is never shown to anyone else, and only the domain appears on your profile.

Your religion, observance and lineage are sensitive data under Argentina's data protection law (25.326). Lineage, community and the document are optional: the app works without them, they give no advantage, and you can delete them from your profile whenever you want. And the document is not published: only the people you choose see it, inside a chat.

We use no third-party analytics or advertising tools at all: no Google Analytics, no pixels, no trackers.

3. What we use it for

• To run the app: show you profiles, work out compatibility, open chats when there's a match and tell you what's happening.
• To look after the community: review reports, detect fake profiles and support reputation (for example, who leaves conversations unanswered).
• To comply with the law and answer requests from a competent authority where applicable.
• Never to sell it, hand it over commercially or build advertising. We don't sell your data, and that can't change without telling you first.

4. The legal basis for each kind of processing

Argentina's Act 25.326 requires the data subject's consent, and there is also processing that is necessary to provide the service you asked for. Specifically:

• YOUR CONSENT, given when you create the account and accept this policy: your profile, your photos, your compatibility answers.
• A SEPARATE CONSENT, specific and revocable, for GPS and for AI photo analysis. Without that stored consent, the code doesn't use them.
• PERFORMANCE OF THE SERVICE: showing you profiles, opening chats, sending the notifications you asked for, recording your payment.
• A NARROW LEGITIMATE INTEREST: looking after the community — reviewing reports, detecting fake profiles, supporting reputation — and platform security.
• A LEGAL OBLIGATION: keeping accounting records of a payment, or answering a request from a competent authority through the proper channel.

5. What other people see

• They see your name, age, city, photos, bio and whatever you chose to show from your profile.
• They never see your coordinates: only an approximate distance, and you can hide it. The neighbourhood can be turned off too.
• Your questionnaire answers are private. They're used to compute affinity; nobody reads them.
• The feedback you leave after a date is only seen by the team: the other person never sees it.
• Reviews are anonymous and it takes several matching ones for anything to appear on a profile. A single opinion labels no one.

Your like is seen only by the person you sent it to, on their «Likes you» screen. Nobody else finds out. If they like you back, it is a match and the conversation opens.

6. Chats and what you build inside them: what we store and who can read it

Messages are stored in our database: if they weren't, you couldn't go back and read a conversation. Along with them we store the date, whether they were read and which conversation they belong to.

• By database permissions, a message can only be read by the two people in that conversation. That's tested, not just written.
• THEY ARE NOT END-TO-END ENCRYPTED. With the server key it is technically possible to read them, and that is only done when a report justifies it or a competent authority orders it. No dating app can promise otherwise while the chat works across several devices.
• We don't build advertising profiles from chat content, we don't sell it and we don't use it to train models. We do measure shape signals — how long each person takes to reply, whether the conversation went unanswered — for the reciprocity index, and that doesn't require reading what it says.
• When you delete your account your messages are deleted. In a two-person conversation, the other person stops seeing the thread.
• THE QUESTION FOR BOTH OF YOU AND THE SCENARIOS store the option you picked and, if you wrote one, your explanation. They live in tables separate from the messages.
• NOBODY READS YOUR EXPLANATION, and that isn't a promise on our word: that column has no permission granted to any account —not even yours— and the code that builds the joint reading never asks for it, not even with the server key.
• WHAT DOES GET CROSSED is your choice with the other person's, and only if you both gave permission in that conversation. Out of it comes a reading with no names, which can only talk about the topics the scenario declares up front —you see them on screen before you answer. A reading can allow some preference of yours to be inferred: we won't promise you otherwise.
• THE PERMISSION IS PER CONVERSATION AND YOU CAN WITHDRAW IT WHENEVER YOU WANT. Withdrawing it stops new readings and withdraws the ones that depended on it. What you both chose to share and that ended up written in “What we have” has its own permission, separate from this one.

7. Photos: where they live and who can see them

Photos are stored in Supabase Storage, not in the database. Each file sits in a folder named with your account identifier.

• IMPORTANT AND HONEST: photos are served from a web address that does NOT require a session. They aren't listed anywhere, they can't be searched and nobody can guess the address — it carries your identifier and the file name — but anyone with the exact link can open it without being registered. This is how profile photos work in almost every app, and it's worth knowing: don't upload a photo you wouldn't want circulating if someone forwards it.
• Whoever views your profile inside the app sees your photos. Nobody else receives a list of your files.
• When you delete a photo, or your account, we delete the file from storage, not just the record pointing at it.

8. Decisions the system makes on its own

There are three things the system decides without a person involved, and we tell you because they affect what you see:

• DECK ORDER. A compatibility score combines your answers, your search preferences, distance, interests and the astrological layer. It decides who you see first, not who you're allowed to see.
• THE RECIPROCITY INDEX. It measures the balance of a conversation from shape signals (count, length, response times). It isn't shown as a number anywhere: the coach uses it to tell you how one of your chats is going, and it is never shown to the other person.
• THE RECORD OF ABANDONMENTS. It does not lower any account's visibility and it doesn't take you out of the deck. What it can do, with two or more recorded abandonments, is show the “Frequent ghosting” label on your profile: it isn't a number or a ranking, it doesn't say with whom or when, and the whole procedure has to have been completed —a continuity request, the notice actually shown, and the time limits. You can dispute each record, and while it's being discussed it stops counting.

None of those three closes an account or shuts you out: that is always decided by a person. If you want to know how one of them affected you, write to us and we'll explain.

9. Plans: what we store when you host one or ask to join

Plans is the part of the app where someone hosts something — a dinner, a walk, a talk — and others ask to join. This is what gets stored:

• IF YOU HOST: the title, what you write about it, the day and time, the place you type, the capacity, the cost and any photo you upload. Anyone in the community who opens Plans sees that, along with your first name and your last name's initial.
• IF YOU ASK TO JOIN: your request is stored, along with the message you write to the host, if you write one. The host sees your name, your photo and that message so they can decide.
• A PENDING REQUEST DOES NOT LIST YOU AS ATTENDING: until you are approved, nobody but the host knows you asked.
• AND THEN TWO SWITCHES THAT ARE YOURS, AND SEPARATE: showing yourself among the people going, and showing the plan on your profile. Both stay as you leave them and can be turned off whenever you want.

When you turn either of those switches off, your row stops coming out of the database for everyone else: the app is not hiding it while drawing the screen. It is the same rule that protects your location.

The event photo lives in the same place as profile photos, so the same thing said above applies: anyone with the exact file address can open it.

All of this is deleted with your account. If you drop out of a plan, your request is withdrawn and you stop appearing.

10. Artificial intelligence

We use AI (Anthropic) for the relationship coach, the icebreakers and — only if you turn it on — the analysis of your photos. Photo analysis is opt-in: your consent is stored with its date, and without it the code sends no photo anywhere. The coach also analyzes the text messages in your conversations — yours and the other person's — to advise you; you agree to it with the terms (section 8). They're sent when you ask it something and aren't stored. Voice notes are not analyzed.

• What it looks at: whether your photos, age and bio are consistent with each other, which photo works best first, and which interests are visible (travel, sport) to add to affinity.
• What it is forbidden to do: diagnose personality, predict fidelity or ghosting, sexualise, judge attractiveness, analyse minors or identify other people who appear in a photo.
• You can delete the analysis and withdraw your consent whenever you want, from Settings → Privacy and data.

11. Payments

We NEVER see or store card details: the charge is made by the app store and the payment details stay there, not here. For a subscription we keep which plan it is, the date, the identifier the store sends us and how long it's paid for. No other user sees any of that.

12. Emails and notifications

We write to you about what happens in the app: invitations, likes, matches, messages, date proposals and your weekly summary. Each type can be turned off separately in Settings → Notifications, and we respect Shabbat quiet hours. We don't send advertising.

13. Who we share it with

Only the providers the app needs to exist, and each one sees the minimum for its job:

• Supabase: database, accounts and photo storage.
• Vercel: application hosting.
• Anthropic: the text and photos sent to the AI, in the cases described in point 9.
• Resend: sending the emails.
• The app store (App Store or Google Play): whatever is needed to take the subscription payment and to identify it. Your card details go straight to them and never pass through us.

Some of these providers are outside Argentina, so your data may be processed abroad. We may also share data if a competent authority requests it through the proper channel, or if it's needed to protect someone's safety.

14. Cookies

Only the necessary ones: your session cookie (so you don't have to log in on every screen) and your language cookie. There are no advertising or third-party cookies following you around other sites.

15. How long we keep it and how it's deleted

While you have an account we keep your data so the app works. When you delete your account from Settings → Privacy and data:

• Your profile, your photos (the files, not just the link), your messages, your likes, your matches, your dates and your answers are deleted.
• Your login account is deleted too: there's no way back in.
• Moderation records may remain if there was a report, for as long as needed to protect the person who reported, along with accounting records of a payment where the law requires keeping them.

16. How long we keep each thing

While you have an account, whatever the app needs to work. When you delete it:

• Profile, photos, answers, likes, matches, messages and dates: deleted immediately.
• Moderation records from a report: up to 2 years, so we can protect the person who reported if the same person comes back with another account.
• Accounting records of a payment: 10 years, which is what the law requires.
• Log of notifications sent (which type of email or push went out and when, not its content): up to 12 months, so we don't repeat the same notice.
• Backups: database backups may retain already-deleted data for up to 30 days, until that backup is replaced.

17. Your rights

We process your data under Argentina's Personal Data Protection Act 25.326. As the data subject you have the right to access your data, rectify it, update it and request its deletion. You can do all three from Settings → Privacy and data, which includes exporting everything of yours in a file, or by writing to us.

The Agencia de Acceso a la Información Pública, as the supervisory authority for Act 25.326, handles complaints from anyone who believes their rights have been affected.

18. Minors

Neshamai is for people over 18. We don't knowingly create accounts for minors; if we find one, we delete it.

19. Security

The database tables have row-level permissions: your messages, your answers and your coordinates cannot be read with someone else's session, and that's tested as well as written. No measure is infallible: if there were ever an incident affecting your data, we'd tell you.

20. Changes

If we change anything important in this policy, we'll tell you inside the app before it applies. The date above says when it last changed.