DATA PROTECTION & PRIVACY

Privacy Policy

Last revised: August 27, 2026

This Privacy Policy explains how NevetsInc ("we", "our", or "us"), founded and operated by Birloi Eduard Ștefan & Patrinoiu Calin, collects, uses, stores, and protects personal data across our services, including Spark, NevOS, and NevAI.

1. Data Controller

NevetsInc (founded by Birloi Eduard Ștefan & Patrinoiu Calin) is the official data controller responsible for the personal data processed through our platforms:

2. Data We Collect

We collect only the minimum information necessary to provide a secure, authenticated, and enjoyable experience:

  • Account Credentials: Email address and encrypted authentication tokens. Passwords are salted and hashed cryptographically and are never visible in plain text.
  • Profile Information: Display name, age/birthdate, bio, gender, school/city, interests, friend code, and profile photo.
  • Verification Artifacts: Selfies or photo proofs submitted during account verification, stored in dedicated, access-controlled encrypted storage accessible only to moderators.
  • Communication Data: Chat messages, voice notes, attachments, and 24-hour temporary statuses delivered securely to conversation participants.
  • Audio & Video Calls: Media streams flow encrypted peer-to-peer (P2P) via WebRTC. Call audio and video streams are never recorded or stored on our servers.
  • Desktop Native Activity: Optional Rich Presence detecting running games/apps when using the official desktop application, synced exclusively to matched friends according to user privacy settings.

3. Zero Third-Party Ads & Zero Data Selling

NevetsInc operates on a transparent, privacy-first model:

  • We never sell, rent, or trade personal user data to third-party brokers or advertisers.
  • We do not embed third-party tracking scripts, advertising SDKs, or behavioral profiling tools.
  • No user profiles, messages, or matches are ever exposed through public search indexes or open APIs.

4. Legal Bases under GDPR (EEA/UK)

For users in the European Economic Area (EEA) and the United Kingdom, data is processed under the following lawful bases:

  • Contractual Necessity (Art. 6(1)(b)): To operate your account, deliver messages, and enable peer-to-peer calls.
  • Legitimate Interests (Art. 6(1)(f)): Platform security, fraud prevention, identity verification, and anti-harassment enforcement.
  • User Consent (Art. 6(1)(a)): For optional permissions such as push notifications and live rich presence.
  • Legal Obligation (Art. 6(1)(c)): To comply with mandatory statutory compliance and child safety reporting obligations.

5. Your Privacy Rights & Account Deletion

You have complete control over your personal information:

  • Access & Export: Request a complete machine-readable copy of your personal data at any time via Support.
  • Instant Self-Deletion: Delete your profile and account directly from the Settings page inside Spark.
  • 30-Day Erasure Guarantee: Submitted data deletion requests are permanently purged from active databases within 30 days.
  • Right to Rectification & Restriction: Edit your profile information, change visibility to invisible/DND, or withdraw consent at any time.

6. Data Retention & Infrastructure

We retain active user data only as long as your account remains open. We utilize enterprise infrastructure with Row-Level Security (RLS) policies and HTTPS/TLS encryption for all data in transit and at rest.

7. Contact & Inquiries

For any privacy inquiries or to exercise your GDPR rights, submit a request via our Support Center.