Privacy Policy
Last updated: 12 October 2026
Contents
- Controller
- Scope
- What data we process
- Purposes and legal bases
- Special categories of personal data
- Location data
- Who receives the data
- Retention periods
- Consequences of not providing data
- Automated decisions
- Club accounts
- Your rights
- Right to lodge a complaint
- Minimum age
- Security
- Changes
1. Controller
Fabio Bonamore
Jenullgasse 6
1140 Vienna
Austria
Contact: via the contact form — in the app under Settings → Contact. The postal address and the email address are in the imprint.
This is also the point of contact under Articles 11 and 12 of the Digital Services Act. Languages of communication: German and English.
2. Scope
This policy applies to the feva app and to the website fevanightlife.com. feva is a dating app with going out built in: viewing and liking profiles, matches, chat, stories, checking in at clubs and going-out plans. Through the website you can create a profile, maintain it and delete your account.
The General Data Protection Regulation and the Austrian Data Protection Act apply.
The German version of this policy is authoritative and is available at fevanightlife.com/datenschutz. This English version is provided for convenience; in the event of any discrepancy, the German version prevails.
3. What data we process
| Category | Content |
|---|---|
| Account | Phone number; when signing in with Apple, additionally the Apple user identifier and, where applicable, an email address; sign-in times and session data |
| Profile | Name, age, gender, who you would like to meet, interests, photos; optionally also an about-me text, regular clubs, sexual orientation, languages, education, occupation, height, lifestyle details and answers to profile questions |
| Settings | Search radius, age range, visibility (including "Swipe invisibly"), notifications, muted clubs, language |
| Usage | Likes and passes, matches, blocks, clubs followed, going-out plans, stories viewed, likes and reactions to pictures and reels, your agreement to exchange photos and videos with individual people |
| Content | Photos, stories, posts in the feva feed, reels (short videos), moments (feva Moment), chat messages, messages sent with a like, view-once photos and videos including the text on them, live photos (feva Live) |
| Location | see section 6 |
| Technical | Push token, device and platform details when retrieving app updates, IP address and time when accessing the website |
| Moderation | Reports you submit or that concern you, the reported content including the excerpt the reporting person sends along, warnings, suspension status and duration, and a log of when our team viewed reported content |
| In-app announcements | Which announcements from us you have read or dismissed, and which of our stories you have viewed |
| Consent | Which documents you accepted, in which version and when, and from which browser or device |
We calculate your age from your date of birth and store only the age. An age below 18 is rejected.
4. Purposes and legal bases
| Purpose | Legal basis | Data categories |
|---|---|---|
| Creating and maintaining an account, displaying a profile, signing in | Performance of a contract (Art. 6(1)(b)) | Account, profile |
| Verifying the phone number so that each person holds one account | Performance of a contract (b) and legitimate interest in preventing duplicate and circumvention accounts (f) | Account |
| A single text message once feva is on the App Store — only if you ticked that box | Consent (Art. 6(1)(a)); withdrawable by replying to that message or by deleting your account | Account |
| Suggesting profiles, likes, matches | Performance of a contract (b) | Profile, settings, usage |
| Taking gender, preferred gender and sexual orientation into account when matching | Explicit consent (Art. 9(2)(a)) | Profile |
| Chat between matches | Performance of a contract (b) | Content, account |
| Posts and pictures in the feva feed for your matches, likes and reactions to them | Performance of a contract (b) | Content, usage |
| View-once photos and videos in the chat — only after both people have agreed to the exchange; you can take back your agreement at any time. Between a woman and a man, only the woman can send the first photo; for this we use the gender stated in the profile. This entry can be changed once in twelve months; the previous entry and the time of the change are kept for twelve months for this purpose | Performance of a contract (b) | Content, usage, profile |
| Reels: short videos for your matches, likes and reactions to them | Performance of a contract (b) | Content, usage |
| feva Moment: once per night, everyone who is checked in at a club at that time receives a notification at the same moment and can share a photo or short video from the club for 20 minutes. Your moment is seen by your matches and — until 6 a.m. — additionally by everyone who shared a moment themselves at the same club that night, together with your name, your profile picture and the name of the club, even without a match. Taking part is voluntary; you can delete your moment at any time and switch the notification off | Performance of a contract (b) | Content, usage, location |
| Swipe invisibly (with the feva Backstage membership): for as long as you switch it on, your profile is only shown in discovery to people you have liked yourself | Performance of a contract (b) | Profile, settings, usage |
| feva Live: a live photo taken with the camera that, for at most 3 hours, only people who are live themselves can see; you can end it at any time | Performance of a contract (b) | Content, usage |
| Checking in at a club and showing presence to matches | Performance of a contract (b) | Location, usage |
| Automatic check-in in the background and a regular sign of life while you are checked in | Consent (Art. 6(1)(a)) | Location, technical data |
| Live location shared with one person for a limited time | Consent (a) | Location |
| Distance filter | Performance of a contract (b) | Location |
| Stories | Performance of a contract (b) | Content |
| Notifications about matches, messages, check-ins, feva Live and feva Moment | Performance of a contract (b) | Technical, usage |
| Notifications from clubs you follow, including to selected groups, for example by gender or by whether you have been there or plan to go | Consent (a), revocable per club | Profile, technical, usage |
| Handling reports and viewing the reported content, warnings and suspensions | Legitimate interest in the safety of users (f); legal obligation for unlawful content (c) | Moderation, content, account |
| Preventing re-registration after a suspension | Legitimate interest (f) | Hashed value of the phone number |
| Anonymous visit and usage statistics | Legitimate interest in operating and improving the service (f) | Usage |
| Showing announcements from us and remembering what you have read | Performance of a contract (b) | In-app announcements |
| Evidence of consent given | Legal obligation (Art. 7(1)) | Consent |
| Establishing, exercising or defending legal claims; complying with legal obligations | Legal obligation (c), legitimate interest (f) | Depending on the case |
You may object to processing based on a legitimate interest under Art. 21 GDPR. You may withdraw consent at any time (Art. 7(3)); withdrawal takes effect for the future.
5. Special categories of personal data
Sexual orientation is a special category of data under Art. 9 GDPR. Providing it is optional; if you enter nothing, nothing is stored. If you set it to hidden, the value is deleted.
The legal basis is your explicit consent under Art. 9(2)(a) GDPR. The same applies to your own gender and the gender you are looking for, because these allow conclusions about orientation; both are required for matching.
No other special categories are processed. Lifestyle details about alcohol, smoking and sport are self-descriptions and not health data.
6. Location data
When you check in at a club, we store which person is at which club, since when, and when the device last reported in. To verify that you are really there, the app transmits your position; the coordinates are not stored. The entry is deleted when you check out.
Precise coordinates are processed in two places: for the distance filter when discovering profiles, where the position is stored in rounded form and overwritten each time it is used, and when sharing your live location, which you release to a single person for a limited time.
Automatic check-in in the background is switched off by default and requires your consent as well as your device's location permission. You can withdraw both at any time.
While you are checked in and have given your device the location permission "Always", the app queries your location at short intervals — also in the background and with precise positioning — and reports to the server that you are still there. If your device does not report in for a few minutes, the server can ask it for a sign of life with a silent message that is not displayed. If none arrives for 30 minutes, the check-in ends by itself; if you leave the club, it ends immediately. Outside a check-in this query does not take place.
Your presence at a club is visible to your matches, provided your visibility is switched on in the settings and no block is in place. If visibility is switched on, your profile may additionally be shown to people using the club filter when discovering profiles. Switching visibility off removes both.
7. Who receives the data
Other users see what you publish in your profile as well as the content you send to them. Clubs receive aggregate figures only, with no reference to individual people. A club can address a message to a group of its followers only; it does not learn who belongs to that group.
Our team does not look at private content on its own initiative. We only view content in the context of a report, and only what is attached to it: the reported message, the chat excerpt the reporting person sends along, the message the reported person sent them with a like, a reported withdrawn message, a reported view-once photo or video, or the live photo the reported person was showing at the time of the report. Every such access is logged. Posts in the feva feed and profile details that are visible to others anyway can be viewed by our team for moderation.
We use the following processors and providers:
| Service | Purpose | Location and basis |
|---|---|---|
| Supabase | Database, accounts, file storage, realtime, email delivery | Data centre in Sweden; provider in the USA, standard contractual clauses |
| Twilio | SMS containing the sign-in code | USA, standard contractual clauses |
| Expo (650 Industries) | Push notifications, delivery of app updates | USA, standard contractual clauses |
| Apple | Sign in with Apple, push delivery, maps | Ireland and USA; Apple acts as its own controller |
| Push delivery on Android, web font on the website | Ireland and USA | |
| Resend | Email delivery | USA, standard contractual clauses |
| Cloudflare | Delivery of the website | European data centres; provider in the USA, standard contractual clauses |
Transfers to third countries are based on the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR) and, for certified providers, additionally on the EU-US Data Privacy Framework. You can obtain a copy of the clauses, and find out which provider is certified, on request via the contact form.
Beyond this, we disclose data where we are legally obliged to do so or where it is necessary to establish, exercise or defend legal claims.
8. Retention periods
| What | How long |
|---|---|
| Account, profile, settings, usage data | Until the account is deleted |
| Chat messages | Until either person deletes the chat or their account |
| Withdrawn messages | Removed immediately for both; kept locked for 30 days in case of a report |
| View-once photos and videos including text | No longer retrievable for either person after viewing; kept locked until 30 days after viewing (unopened: 30 days after sending), if attached to an open report until it is resolved, and in any case only until one of the accounts involved is deleted |
| Live photos (feva Live) | Visible to others for at most 3 hours or until you end it; deleted 24 hours after that, if attached to an open report only once it is resolved, and after deletion of your account no later than the following day |
| Posts in the feva feed | Until you delete them or your account is deleted |
| Reels and moments (feva Moment) | Until you delete them or your account is deleted; a moment is visible to people without a match only until 6 a.m. |
| Agreement to exchange photos and videos | Until you take it back or one of the accounts involved is deleted |
| Check-in at a club | On check-out, at the latest 30 minutes after your device's last sign of life |
| Shared live location | Until the selected duration expires, at most 8 hours |
| Position for the distance filter | Until the account is deleted; overwritten each time it is used |
| Stories | No longer visible after 12 hours; the file until the story or the account is deleted |
| Going-out plans | Until the planned evening has passed |
| Visit log for club statistics | 12 months, then aggregate figures only |
| Push token | Until the account is deleted or the token becomes invalid |
| Reports and moderation notes | No longer than 12 months after resolution, and in any case when one of the accounts involved is deleted |
| Record of warnings and suspensions | 12 months |
| Read state and dismissed announcements | Until the account is deleted |
| Evidence of consent | Until the account is deleted |
You can delete your account at any time in the app and on the website. Profile, photos, messages, matches and location data are deleted. What remains is data we are legally obliged to retain, as well as the hashed value of the phone number if the account was suspended; it prevents circumvention of the suspension and does not allow the number to be reconstructed.
9. Consequences of not providing data
There is no legal obligation to provide us with data. However, without a phone number and an age no account can be created, and without a name, gender, preferred gender, interests and one photo a profile cannot be completed. All further details are optional; if they are omitted or a consent is withdrawn, the corresponding feature is unavailable, while the rest of the service remains usable.
10. Automated decisions
The order in which profiles are suggested follows your own details and filters.
Every warning is issued by a person who has looked at the case. If it is the third, the system suspends the account for seven days — the suspension follows from that third human decision rather than being one itself. This is not a decision based solely on automated processing within the meaning of Art. 22(1) GDPR. We tell you what we did and why, and you can dispute any measure with us; we will look at it again.
11. Club accounts
Club operators sign up with an email address and a password. We process the email address, the details of the club, the proof of affiliation with the club, and the time of submission and decision. The legal bases are performance of a contract (Art. 6(1)(b)) and our legitimate interest in ensuring that club profiles are managed only by authorised persons (f).
12. Your rights
| Right | Meaning | How to exercise it |
|---|---|---|
| Access (Art. 15) | Information about the data processed and a copy of it | In the app under Settings, or via the contact form |
| Rectification (Art. 16) | Correction of inaccurate or incomplete data | Directly in your profile |
| Erasure (Art. 17) | Deletion of data | Individual details in your profile; the account in the app or on the website |
| Restriction (Art. 18) | Temporary suspension of processing | Via the contact form |
| Data portability (Art. 20) | Receiving your data in a commonly used format | In the app under Settings |
| Objection (Art. 21) | Objection to processing based on a legitimate interest | Via the contact form |
| Withdrawal (Art. 7(3)) | Withdrawing a consent | Delete the detail in your profile, use the switches in the settings, mute the club, or revoke the device permission |
Please send requests via the contact form — in the app under Settings → Contact. That is the fastest route, but not the only one: a request sent to the address in the imprint is equally valid. Handling is free of charge and normally takes place within one month. For your protection we may verify your authorisation before responding.
Right to object
You may object at any time to processing we base on a legitimate interest, on grounds relating to your particular situation. Section 4 lists which processing that is. After your objection we will stop processing that data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves to establish, exercise or defend legal claims (Art. 21 GDPR).
13. Right to lodge a complaint
You may lodge a complaint with a supervisory authority (Art. 77 GDPR), in particular with the authority of your place of residence, your place of work or the place of the alleged infringement. The authority responsible for us is the
Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna, Austria
Email: dsb@dsb.gv.at
14. Minimum age
feva is exclusively for people aged 18 and over. Accounts with an age below 18 are not created. Where there are indications that a person is a minor, we suspend the account and delete the data.
15. Security
Data is transmitted in encrypted form. Access to data is restricted by access rules at database level, so that each account can read only the data intended for it. Photos and stories are held in storage areas governed by the same rules; addresses of story files are valid for a limited time only. View-once photos and videos cannot be retrieved directly by anyone; the app receives them only at the moment the recipient opens them. We cannot technically rule out that someone photographs the screen while doing so.
16. Changes
This policy will be adapted if our processing changes. The current version is available in the app and at fevanightlife.com. We will inform users in the app about material changes.
Last updated: 12 October 2026