Really app
Privacy Policy
This Privacy Policy explains what personal information the Really mobile app ("Really" or "the app") collects, how we use and share it, and the choices and rights you have. Really is provided by Yuval Chen, an individual developer based in Israel ("we", "us" or "our"), who is responsible for your information (the "controller" or "database owner"). Questions? Write to support@real-y.io.
The short version
- Really is only for adults (18+).
- Other users see your first name, age, photo, the city you're in, and whether you've been active today or this week. They never see your exact location, phone number or email address.
- Your gender and who you're interested in decide who sees whom, so the people who see you can infer your sexual orientation. We use this only with your explicit consent.
- When you open the app, we use your location only to find the city you're in, then discard the exact coordinates. We never show your exact location to anyone.
- App versions before 2.0 work with check-ins at places instead. Section 2.10 explains what that means for your data.
- We don't sell your information and don't use it for advertising.
- You can delete your account at any time in the app: Profile → Leave → Delete Account.
1. Who we are
Really helps adults meet people nearby: it shows you people in your city whose preferences match yours, and you can like them and chat. (App versions before 2.0 work with check-ins at bars, cafés and other places instead.) The app is provided by Yuval Chen, an individual developer (not a company) based in Israel. You can reach us at support@real-y.io.
This policy covers the Really app for iPhone and Android and our related services, such as support by email. It doesn't cover other websites or services, including the other pages of real-y.io.
2. Information we collect
2.1 When you sign in
- Phone number, if you sign in with your phone. We send you a one-time code by SMS through Google Firebase Authentication. To prevent abuse, Google may check that the request comes from a genuine device or app (for example, with reCAPTCHA).
- Apple or Google account details, if you sign in with Apple or Google: an account identifier, your email address and your name (with Google, also a link to your Google profile picture). With Apple, you can hide your email address, and we then receive a private relay address. We use your first name only to pre-fill your profile.
- Account activity: when you signed up and when you last used the app.
2.2 Your profile
To use Really, you add:
- your first name;
- your date of birth, to confirm you're 18 or older and to show your age;
- your gender (man or woman);
- who you're interested in (men, women or both);
- a profile photo.
Sensitive information. Your gender together with who you're interested in reveals your sexual orientation. Privacy laws, including the GDPR and Israel's Privacy Protection Law, treat this as sensitive information. We process it only with your explicit consent, which you give by choosing these options in the app, and only to show you to the right people and the right people to you. You can change it at any time under Profile → Personal Details, or withdraw your consent by deleting your account.
Photo check. When you choose a photo, the app checks on your phone that it shows exactly one face (using Apple Vision on iPhone or Google ML Kit on Android). The check runs on your phone. We don't create, receive or store face-recognition data.
2.3 Your location
If you allow location access ("While using the app"), each time you open the app it sends your phone's current location to our server. The server works out which region you're in (a city, such as one of the largest cities in Israel, or a wider area, such as the UK or "Rest of the world") and then discards the coordinates. We store only your region.
We never store your exact location or show it to anyone, and the app shows no distances or maps. The app doesn't use your location in the background.
If you don't allow location access, you choose your city yourself. You can also correct a city we detected wrongly. You can turn location access off at any time in your phone's settings.
2.4 Your city, activity, likes and matches
- Your region and activity: your current region and when you last opened the app. For 7 days after you last open the app, you appear in your region's list of people, with a label such as "Active today" or "Active this week".
- Likes and matches: who you like, who likes you, and when. When two people like each other, we record the match.
- Weekly usage, if you use Really for free: which people were shown to you each week, and how many likes and first messages you sent, so we can apply the free weekly limits. We delete it automatically about 5 weeks later.
2.5 Messages
- The messages you send and receive, with the time they were sent and whether they've been read. They're stored on our servers so both of you can see the conversation. They are not end-to-end encrypted.
- New-message notifications show the sender's name and the message text. They're delivered through Expo and Apple's or Google's push notification services.
- We don't read your messages, except when needed to investigate a report, abuse or a legal request.
2.6 Reports, blocks and support
- When you report or unmatch someone, we record who it was, when, and the reason you give (if any), and we block you from each other. When someone reports you, we keep the same record.
- When you contact us through Help Center in the app or by email, we keep your message, your user ID and any contact details you give us.
2.7 Notifications
If you allow notifications, we store your device's push notification token. We use it to tell you about new messages, likes ("Someone likes you", without naming the person) and matches (with the other person's first name), and to send occasional reminders (for example, to finish your profile or to see who's around). You can turn notifications off in your phone's settings.
2.8 Device, usage and crash data
- Analytics (Mixpanel): the features you use (for example, sign-in, profile steps, likes and messages sent, but never message content), time spent on screens, your user ID, device model, operating system, app version, language, and approximate location (city or country) based on your IP address.
- Crash reports (Sentry): technical details when the app crashes or hits an error, such as device model, operating system, app version, error logs and IP address.
- Server logs (Google Cloud): IP address, time and type of request, for security and troubleshooting.
We don't use advertising identifiers and don't track you across other companies' apps or websites.
2.9 Subscriptions
If you buy Really+, Apple or Google handle the payment. We and RevenueCat, which manages subscriptions for us, receive the subscription details: the product, the store, purchase and expiry dates, whether it renews automatically, whether it's a test purchase, a transaction ID and your Really user ID. We never receive your card or bank details. When you sign in, the app also tells RevenueCat your Really user ID, so a subscription follows your account. When you delete your account, we also delete your data at RevenueCat.
2.10 App versions before 2.0
Versions of Really before 2.0 work with check-ins at bars, cafés and other places instead of cities. If you use one of them, this also applies until you update:
- Location: while you use the app, it uses your precise location (GPS) to list places near you and their distance, show places on a map (Apple Maps on iPhone, Google Maps on Android), and confirm that you're inside a place when you check in. Your coordinates are used once to confirm the check-in and are then discarded.
- Background location, only if you choose "Always allow": your phone checks whether you're at a place that works with Really and, if you're not checked in, sends you a notification inviting you to check in. The notification goes through our push provider, Expo, which receives the name of the place.
- Check-ins: we keep which place you checked in at, and when. While you're checked in, people at the place can see you in its list of people. You stay checked in until you check out, check in somewhere else, or we check you out automatically after a while. For 30 days after you check in at a place, people who check in there may see you in their Recent list and message you.
- Analytics: if there are no places near you when you open the list of places, the app sends your coordinates, with your user ID, to our analytics provider (Mixpanel), so we can see where people would like Really to add places.
Really 2.0 doesn't use check-in data. We'll delete it when we stop supporting versions before 2.0, or earlier if you delete your account.
3. How we use it and why
We use your information only for the purposes below. If you're in the European Economic Area (EEA), the UK or Switzerland, the GDPR also requires us to tell you the legal basis for each purpose.
| Purpose | Information | Legal basis (GDPR) |
|---|---|---|
| Create your account, sign you in and keep it secure | Phone number or Apple/Google details, account activity | Contract (providing the app you signed up for) |
| Show your profile and match you with people | Profile, including gender and who you're interested in | Contract; your explicit consent for your sexual orientation |
| Find the city you're in and show you to people there | Location (used once, then discarded), region, last-active time | Your consent (location permission); contract |
| Likes, matches and your Likes list | Likes and matches | Contract |
| Before 2.0: show nearby places, check you in, show the people at a place and your Recent list, send nearby-place alerts | Precise location, check-ins and check-in history | Your consent (location permission); contract |
| Deliver messages and message notifications | Messages, push token | Contract |
| Send reminders | Push token, account activity | Legitimate interests (keeping the app useful to you); you can turn notifications off |
| Keep people safe: handle reports and blocks, enforce our Terms, prevent fraud and abuse | Reports, blocks, account and profile data; messages when needed | Legitimate interests (keeping users safe); legal obligations |
| Answer your questions and requests | Your messages to us | Contract; legitimate interests |
| Understand how the app is used (and, before 2.0, where to add places), fix crashes and improve the app | Analytics, crash and log data; before 2.0, your location when no places are near you | Legitimate interests (running a working, improving app) |
| Provide Really+ and the free weekly limits | Subscription details, weekly usage | Contract |
| Comply with the law and handle legal claims | Any of the above, as needed | Legal obligations; legitimate interests |
In Israel, under the Privacy Protection Law, we use your information with your informed consent and for the purposes in this policy. You have no legal obligation to give us any information, but without the information the app asks for when you sign up, you can't create a profile or use Really.
We don't make decisions about you based solely on automated processing that have legal or similarly significant effects on you.
4. Who can see or receive it
4.1 Other Really users
Your profile (first name, date of birth, gender, who you're interested in and photo), your region and whether you've been active today or this week are shared with other Really users who are 18 or older and whose preferences match yours, so the app can show you to them. The app shows your first name, age, photo, city and activity label. Because you're only shown to people whose preferences match yours, the people who see you can infer who you're interested in.
When you like someone, they get a notification that someone likes them, without your name, and can see how many people like them. Really+ members can also see who liked them. If they like you back, you match, and you both see the match. The people you chat with see your messages. Users who have blocked each other never see each other. In versions before 2.0, other users can also see when you're checked in at a place.
Your exact location, phone number and email address are never shared with other users.
4.2 Service providers
These providers run parts of the app for us. They process your information on our behalf, under contracts that limit how they can use it.
| Provider | What they do for us | Where |
|---|---|---|
| Google (Firebase, Google Cloud, Google Workspace) | Sign-in and SMS codes, database, photo storage, servers, push delivery on Android, our support email | EU and US |
| MongoDB (MongoDB Atlas) | Database hosting, on Google Cloud | US |
| Expo (650 Industries) | Delivering push notifications | US |
| Mixpanel | Analytics | US |
| Sentry (Functional Software) | Crash and error reports | US |
| RevenueCat | Subscription management (your user ID when you sign in, and purchase details if you subscribe) | US |
4.3 Apple and Google
Apple and Google provide sign-in, push notification delivery, app store purchases and, in versions before 2.0, maps (Apple Maps on iPhone, Google Maps on Android). When you use these features, they handle your information under their own privacy policies.
4.4 Legal reasons and safety
We may share information if the law requires it (for example, a court order), or if we believe in good faith that it's needed to protect someone's safety, investigate fraud or abuse, or enforce our Terms of Use.
4.5 If Really changes hands
If Really is transferred to a company (for example, one we set up) or to a buyer, your information may be transferred with it. This policy will continue to apply, and we'll tell you before your information becomes subject to a different policy.
We don't sell your personal information, and we don't share it with advertisers.
5. International transfers
We're based in Israel, and our providers store and process information in the EU, the US and other countries. Israel and the EU recognize each other's data protection laws as adequate. When information goes to the US or other countries, we rely on our providers' data protection agreements, such as the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework, as allowed by Israel's Privacy Protection (Transfer of Data to Databases Abroad) Regulations and the GDPR. Contact us for more details.
6. How long we keep it
| Information | How long |
|---|---|
| Account and profile | Until you delete your account |
| Exact location | Not stored: used once to find your region (for versions before 2.0, see section 2.10) |
| Your region and last-active time | Until you delete your account. You're listed in your region for 7 days after you last open the app |
| Likes and matches | Until you unlike someone (before a match), unmatch, block or report them, or either of you deletes the account |
| Check-in data (before 2.0) | Until we stop supporting versions before 2.0, or until you delete your account if that's sooner. A place's Recent list shows you for 30 days after your last check-in there |
| Messages | Until you or the other person unmatches or reports the other, or either of you deletes the account |
| Reports and blocks | As long as needed to keep users safe and enforce our Terms, including after an account is deleted (for example, to stop a banned user from coming back) |
| Support messages | As long as needed to handle your request and keep a record of it |
| Analytics and crash data | Linked to a random user ID, not to your name or phone number, and kept only as long as it helps us understand and improve the app |
| Weekly usage (free limits) | About 5 weeks, then deleted automatically |
| Subscription details | Until you delete your account, here and at RevenueCat. Apple and Google keep their own purchase records |
Copies can stay in backups and logs for a short time after deletion. We may keep information longer if the law requires it or to handle a legal claim.
7. Deleting your account
You can delete your account in the app at any time: Profile → Leave → Delete Account. In app versions before 2.0, you may need to sign in again to confirm. This deletes your profile and photo, your region and activity, your likes and matches, your weekly usage, your chats (for both sides), any check-in data, your subscription details (including at RevenueCat), your push token and your sign-in account. We keep only what section 6 says we keep after deletion.
You can also ask us to delete your account by emailing support@real-y.io. We'll ask you to confirm the phone number or the Apple or Google account you sign in with, to make sure the request is yours.
Uninstalling the app doesn't delete your account. Deleting your account doesn't cancel a subscription: cancel it in the App Store or Google Play.
Step-by-step instructions, with or without the app: Delete your account.
8. Your rights
Wherever you live, you can:
- see and edit your profile in the app (Profile → Personal Details);
- turn location access and notifications off in your phone's settings;
- delete your account in the app;
- ask us for a copy of your information, or ask us to correct or delete it, by emailing support@real-y.io.
We'll answer within 30 days. We may ask you to confirm your identity first. We don't charge for reasonable requests.
If you're in Israel: under the Privacy Protection Law, 5741-1981 (as amended, including by Amendment 13), you have the right to review the information about you in our database, and to ask us to correct or delete information that is inaccurate, incomplete, unclear or out of date. If we refuse a request, we'll tell you why. You can also complain to the Privacy Protection Authority.
If you're in the EEA, the UK or Switzerland: under the GDPR (or the UK GDPR or Swiss law), you also have the right to restrict our processing, to data portability, and to object to processing based on our legitimate interests. You can withdraw your consent at any time; this doesn't affect processing that happened before. You can complain to your local data protection authority (EEA authorities, UK ICO).
Elsewhere: you may have similar rights under your local law. Contact us and we'll help.
9. Security
We protect your information with encryption in transit (HTTPS/TLS), access rules that limit what each user and each part of the app can read, limited access to our systems, and providers with strong security programs. No method is completely secure. If a security incident puts your information at risk, we'll notify you and the authorities as the law requires. Please keep your phone and your sign-in accounts secure.
10. Age limit (18+)
Really is only for people aged 18 or over. We don't knowingly collect information from anyone under 18. If we learn that a user is under 18, we'll delete the account. If you think someone under 18 is using Really, tell us at support@real-y.io.
11. Changes to this policy
We'll update this policy when the app or the law changes. We'll post the new version on this page with a new date, and we'll tell you in the app before significant changes take effect. If a change needs your consent by law, we'll ask for it.
12. Contact us
For privacy questions and requests, or to use any of your rights, contact Yuval Chen (Really), Israel, at support@real-y.io.
See also our Terms of Use.