App Store

Privacy Policy

Last updated: October 2026

This translation is provided for convenience. The German version is legally binding.

Unveil Me is a dating app for people aged 18 and over. Because sensitive data is processed in the process (photos, details that may allow conclusions about sexual orientation), we deliberately keep data to a minimum and keep as much as possible within the EU. This policy applies to the app and to this website.

1. Controller

Robin Wichmann, Hauptstr. 58c, 21640 Bliedersdorf, Germany. For all matters relating to data protection: kontakt@robware.de.

2. Data processed in the app

Account and sign-in

Sign-in works via “Sign in with Apple”. We receive a pseudonymous user identifier from Apple and – only if you choose to share it – your name or an email address (which Apple may hide). We do not store a password. Purpose: providing your account. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Profile

For your profile we process the details you provide: display name, age (derived from your date of birth, minimum age 18), gender and genders you are looking for, skin tone, relationship and family wishes, short bio, values, “love languages”, humour, interests, prompt answers and an approximate location. Purpose: profile and compatibility matching. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Special categories (Art. 9 GDPR): Details such as gender and the genders you are looking for, as well as your photos, may allow conclusions about your sexual orientation. This processing is based on your explicit consent(Art. 9(2)(a) GDPR), which you give during registration and can withdraw at any time with effect for the future (e.g. by deleting your account).

Photos, comic veil and tile reveal

You upload up to ten photos; they are optimised on your device and then stored in a private object storage in the EU (data centre in Nuremberg). From one photo we generate a Pixar-style comic veil on our own hardware in the EU – no external or US-based AI is involved. Your original photo stays veiled: in a conversation it becomes visible only tile by tile and only to the person you unlock it for. We store which tiles have been released per match. Access to originals and tiles is protected on the server side. Legal basis: performance of a contract and your consent for the sensitive image data (Art. 6(1)(b), Art. 9(2)(a) GDPR).

Before saving, a local moderation service in the EU checks every photo for prohibited content. Here too, no image leaves our infrastructure.

Messages

Chat messages are stored on our server in plain text – there is no end-to-end encryption. This is necessary so that we can handle reports and stop abuse (required under App Store Guideline 1.2). You can report or block others at any time. Purpose: communication and safety. Legal bases: performance of a contract and legitimate interest in moderation (Art. 6(1)(b) and (f) GDPR).

Location

For the distance display we process your location only approximately (rounded to about 1 km) and never share your exact position with others. The basis is the location permission your device asks you for (consent), to provide the discovery feature (Art. 6(1)(b) GDPR).

Notifications

For push notifications we process a device identifier (APNs token from Apple). The basis is the push permission on your device.

Premium purchases

Optional paid features are handled through the App Store. We receive only the transaction or subscription status from Apple to unlock them – no payment details.

Advertising in the free tier

In the free tier, ad banners may be displayed in a few places (Discover, match list – never in the chat) via Google AdMob (Google Ireland Limited). The ads are served non-personalised; we do not pass any profile data to Google. Where consent is required based on your location, we ask for it via a consent form before the first ad is shown; you can change your choice at any time in the app settings under “Privacy settings for advertising”. In doing so, Google may process technical data (e.g. IP address, device identifiers); details at policies.google.com/technologies/ads. Premium is ad-free. Legal basis: consent (Art. 6(1)(a) GDPR) or legitimate interest in financing the free offering (Art. 6(1)(f) GDPR) for non-personalised ads.

Anonymous usage statistics (Matomo)

So that we can see which features are used and where things get stuck, the app sends a deliberately small set of anonymous usage statistics to a Matomo instance we run ourselves (matomo.dudehub.de, server in the EU). No third party is involved – the data does not leave our infrastructure. Only events such as “portrait requested”, “message sent” (whether text or emoji – never the content), “tile revealed” (count), “match created” or the outcome of the purchase flow are transmitted, along with device model, iOS version, app version and language. Exact numbers are grouped into rough ranges before sending; the IP address is anonymised in Matomo.

Never transmitted are messages, names, age, photos or portraits, match partners, location, the advertising ID (IDFA) or a device identifier – a blocklist in the app additionally filters out such values technically. There is only one random identifier per installation, which is deleted when you switch the statistics off. You can switch the statistics off at any time in the app (Settings → Privacy → “Anonymous usage statistics”) – with immediate effect. The legal basis is our legitimate interest in anonymous, aggregated usage analysis (Art. 6(1)(f) GDPR); the individual reports cannot be attributed to any person.

3. Data processed on this website

The website runs on a server in the EU. When you access it, the server processes technically necessary access data (requested page, time, browser type, truncated IP address) to deliver the page and secure its operation (legitimate interest, Art. 6(1)(f) GDPR). These logs are kept only briefly.

This website sets no cookies and embeds no analytics or tracking tools and no social media plugins. Fonts are bundled at build time and served from our own server – there is no request to Google Fonts or similar in the browser. So there is nothing to consent to and nothing to decline.

4. Recipients and processors

  • Hetzner Online GmbH (Germany) – hosting of the server and private object storage for the photos, data centres in the EU.
  • Apple – “Sign in with Apple”, push notifications (APNs) and processing of App Store purchases.
  • Google Ireland Limited – delivery of non-personalised ad banners (AdMob) in the free tier of the app.

Data processing agreements pursuant to Art. 28 GDPR are in place with our processors. Comic generation, moderation and the anonymous usage statistics (Matomo) run on our own infrastructure in the EU.

5. Storage location and transfers to third countries

Your profile data, photos, comics and messages are stored in the EU. Where a transfer to Apple or Google in the USA takes place in the context of “Sign in with Apple”, push, App Store purchases or ad delivery, it is based on the EU-US Data Privacy Framework or on standard contractual clauses.

6. Retention period

We store your account, profile, photos and comics until you delete your account. Messages are retained until the conversation or the account is deleted. Server logs are kept only briefly. After deletion, short technical lag periods may apply (e.g. backups), after which the data is removed.

7. Your rights

  • Access, rectification, erasure, restriction of processing
  • Data portability
  • Objection and withdrawal of consent given
  • Lodging a complaint with a supervisory authority

For all requests, a message to kontakt@robware.de is enough. The competent supervisory authority is the Landesbeauftragte für den Datenschutz Niedersachsen (LfD Niedersachsen), Prinzenstraße 5, 30159 Hannover, Germany.

8. Deleting your account

You can delete your account at any time directly in the app (Settings → Account → Delete account). This deletes your profile, your photos and comics and the associated data; individual data may lag briefly for technical reasons (e.g. backups).

9. Changes

As Unveil Me evolves, we will adapt this policy. The version published here applies at any given time; the “Last updated” date above shows the current version.