The world doesn't
get a seat.
This page explains, in plain language, what Ohrny collects, what we refuse
to collect, what we delete and when, and the rights you have over any of it.
Our promise.
Ohrny exists for one reason: to give people a private, calm space to connect. We are a subscription product — our incentives are aligned with yours. We don't sell ads, so we have no reason to harvest your data.
We collect the minimum needed to run the app. We don't sell your data. We don't share it for advertising. We delete it on a fixed schedule. You control it.
What we collect.
When you sign up and use Ohrny, we collect:
- Account data: email address, date of birth (age verification only), and the display name you choose.
- Profile data: photos, preferences, and the bio you write. All voluntary.
- Messages: stored end-to-end encrypted. We cannot read them.
- Usage data: which features you use, crash reports, and performance metrics. Never tied to your identity in analytics.
- Payment data: processed by Stripe. We receive only a token and the last 4 digits of your card — never the full number.
- Device data: OS version and app version, for debugging only.
We do not collect precise GPS location, contacts, or access to your camera roll beyond photos you explicitly upload.
What we refuse.
Some data is simply off the table, regardless of what's technically possible:
- No advertising identifiers (IDFA, GAID).
- No third-party analytics SDKs that phone home.
- No purchase of data about you from data brokers.
- No persistent tracking of your location.
- No profiling for resale or ad targeting — ever.
We have never sold user data. We will never sell user data. This is a founding commitment — not a policy that can be changed in fine print.
How we use it.
The data we collect is used exclusively for:
- Running and improving the app (matching, messaging, moderation).
- Processing your subscription and sending receipts.
- Detecting and removing fake profiles, spam, and abuse.
- Complying with legal obligations (fraud prevention, court orders).
Legal basis under GDPR: performance of a contract (core features), legitimate interest (safety), legal obligation (compliance).
Deletion schedule.
We operate on a fixed, automatic deletion schedule:
- Messages — deleted from our servers 30 days after delivery.
- Profile photos — deleted within 24 hours of account deletion.
- Account data — fully purged 30 days after account deletion (retention for fraud prevention).
- Inactive accounts — accounts with no login for 18 months are automatically deleted with 14 days notice by email.
- Payment records — retained 7 years per Dutch tax law, then purged.
You can delete your account at any time in Settings → Delete account. This triggers the schedule above immediately.
Your rights.
Under GDPR, you have the right to:
- Access — request a copy of all data we hold about you.
- Rectification — correct inaccurate data.
- Erasure — delete your account and all associated data.
- Portability — receive your data in a machine-readable format.
- Restriction — ask us to stop processing your data in specific ways.
- Object — object to processing based on legitimate interest.
To exercise any right, email privacy@ohrny.app. We respond within 30 days. No fees.
Security.
We take security seriously:
- All data in transit is encrypted with TLS 1.3.
- Messages are end-to-end encrypted — not readable by Ohrny employees.
- Passwords are hashed with bcrypt (cost factor 12). We never store plaintext passwords.
- We operate a responsible-disclosure programme. Report vulnerabilities to security@ohrny.app.
In the event of a data breach affecting your rights, we'll notify you and the Dutch DPA within 72 hours of discovery.
Contact & DPA.
Data controller: Ohrny BV, Postbus 41, 1011 AA Amsterdam, The Netherlands.
Privacy questions: privacy@ohrny.app
Security issues: security@ohrny.app
Supervisory authority: Autoriteit Persoonsgegevens (AP), The Hague. You have the right to lodge a complaint with the AP at any time, though we'd appreciate the chance to resolve your concern first.
Material changes will be emailed at least 14 days in advance. Minor corrections (typos, clarifications) are made without notice. Version history is available on request.