HERLI

Privacy Policy

Last updated: 25 August 2026

1. Who we are

HERLI is a women-only and LGBTQ+ dating app, operated by Klaudia Wojkowska, based in Poland. We are the data controller for the personal data described here. You can reach us at herliapp@outlook.com. The app is for adults aged 18 and over. Android package: com.KlaudiaWojkowska.herliapp.

2. Data we collect

Account: your email address, your password (stored only as a secure hash), and an email one-time code (OTP) used to verify your account.
Profile: display name, date of birth (to confirm your age and show it), sexual orientation, a short bio, your city and an approximate/coarse area only, and optional lifestyle details (relationship status, children, smoking, drinking, body type, height, love languages, languages, interests).
Photos: the profile photos you upload.
Identity verification: a selfie used once to confirm the account belongs to a real adult woman. It is checked by an automated service and stored securely.
Messages: messages you exchange with matches and in Blind Dates.
Technical: your IP address and basic device/usage information, used for security and to run the service.

3. What we don't collect

We do not collect precise GPS location (only a coarse, city-level area is used to estimate distance), payment/financial data, health data, your contacts, your calendar, or your browsing history.

4. How we use your data

To create and secure your account, verify identity, show and match profiles, run Blind Dates and chat, generate AI compatibility summaries (our "Compass" feature), keep the community safe (moderation, blocking, reporting), and meet our legal obligations.

5. Legal bases (GDPR)

Contract — to provide the app you asked for.
Consent — especially for your sexual orientation and your verification selfie, which are special-category data processed only with your explicit consent. You can withdraw consent at any time.
Legitimate interest — keeping members safe and preventing fraud.
Legal obligation — where the law requires it.

We do not sell your data or share it with third parties for their own purposes. We use trusted service providers who process data only on our behalf:

Supabase — database and file storage
Railway — backend hosting
Cloudflare — content delivery
Resend — sending verification emails
OpenAI — the automated selfie identity check and AI compatibility text

7. International transfers

Some of our providers are located in the USA, so some data is transferred outside the European Economic Area. Where this happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

8. Security

All data is encrypted in transit using HTTPS/TLS. Passwords are hashed, access is restricted, and only a coarse location is ever stored.

9. Data retention

We keep your data while your account is active. When you delete your account, your profile, photos, verification selfie, messages and matches are permanently erased. Anonymous aggregate statistics may be kept, and safety/abuse reports may be retained for up to 90 days for legal and community-safety reasons.

10. Your rights

Under the GDPR you have the right to access, correct, erase, restrict, port and object to the processing of your data, and to withdraw consent at any time. You can delete your account in the app (Settings → Delete account) or by emailing herliapp@outlook.com — see our account deletion page. You may also lodge a complaint with the Polish data protection authority (UODO).

11. Age (18+)

HERLI is for adults only. We do not knowingly collect data from anyone under 18.

12. Contact & changes

We may update this policy and will post the new date at the top of this page. For any privacy question or request, contact us at herliapp@outlook.com.