Privacy Policy

Your secrets stay yours.

Last updated: 3 October 2026. This policy explains what data the Secrets app ("Secrets", "we") collects, why, and what rights you have. It applies to the iOS app and this website.

1. Who is responsible

StoreData IP Ltd is the controller under the EU General Data Protection Regulation (GDPR). Secrets is a service for adults only (18+).

2. What we collect

What you give us

• Phone number to create and secure your account (one number, one account). We send a one-time code by SMS; we never show your number to other members.
• Profile: first name (shown only inside chats), pseudonym, year of birth, gender, who you are looking for, a short text, your preferences and limits, and your photos.
• Secrets: the texts and pictures you publish as secrets, their category and heat level, and whether they expire.
• Messages you exchange with other members, and reactions you send.
• Age verification and photo review results where required (see section 4).
• Support requests and reports you send us.

What we collect automatically

• Approximate location (city level) if you allow it, to show you people nearby. Other members only see a rounded, deliberately imprecise distance; we never share exact coordinates.
• Device and usage data: device model, OS version, app version, language, a random device identifier, crash reports and basic usage events (for example that a secret was revealed), needed to run and improve the app.
• Purchase data from Apple: which key pack or subscription you bought and when. Apple handles payment; we never see your card details.

3. Why we use it (legal bases)

• To provide the service (Art. 6(1)(b) GDPR): showing your profile and secrets to other members according to your settings, matching, chats, keys and premium.
• Safety and legal duties (Art. 6(1)(c) and (f)): keeping minors and illegal content out, acting on reports, preventing fraud and abuse, and complying with law and store rules.
• Improving the app (Art. 6(1)(f)): crash reports and aggregated usage statistics. We do not profile you for advertising and we do not sell your data.
• With your consent (Art. 6(1)(a)): location, push notifications, and seeing explicit content. You can withdraw consent any time in the app or your device settings.
• Preferences and secrets can reveal information about your sexual life. We process them only because you explicitly publish them in the app for the purpose of meeting people (Art. 9(2)(a) and (e) GDPR).

4. Automated checks

To keep Secrets safe we use automated systems, including AI models, to review photos and texts before and after they go live: for nudity rules, for signs that a person may be under 18, for hate, threats and spam, and to match images against known illegal material. Content that is flagged is checked by a trained person before any lasting decision about your account is taken. You can object to a decision by writing to legal@onlysecrets.app.

Velvet, our in-app assistant, helps you write your profile and secrets. What you type to Velvet is sent to our AI provider to generate a reply and is not used to train their models.

5. Who sees what

• Other members see your pseudonym, age, photos, text, preferences, the sealed version of your secrets (category, heat level, blurred preview) and an approximate distance. The content of a secret is only visible to members who revealed it or to whom you showed it. Your first name appears only inside a chat.
• Service providers that process data for us under contract: hosting in the EU (Hetzner Online GmbH, Germany), content delivery and email routing (Cloudflare, Inc.), transactional email (Mailgun Technologies, EU region), SMS codes (our SMS provider), AI moderation and assistant (Anthropic, PBC), crash reporting (Sentry), purchase management (RevenueCat, Inc.) and Apple for payments and push notifications. Providers outside the EU are bound by EU standard contractual clauses.
• Authorities, where the law obliges us, and anyone we must inform to protect members from serious harm.

We never sell personal data and we do not share your data with advertisers.

6. Screenshots and watermarks

Secrets you reveal are shown with a watermark that contains your account identifier, so leaked content can be traced to the account that leaked it. Taking screenshots or recording the app is against our Terms of Use.

7. How long we keep data

• Profile, secrets, photos, reactions and chats: until you delete them or your account. After account deletion, remaining data is erased within 30 days; backups are overwritten within a further 30 days.
• Expiring secrets are deleted when they expire.
• Reports, blocks and moderation decisions: up to 2 years, so repeat offenders cannot simply return.
• Purchase records: as long as tax and accounting law requires (typically 6 to 10 years).
• Technical logs: 30 days.

8. Your rights

You can access, correct, export and delete your data, restrict or object to processing, and withdraw consent. Most of this you can do directly in the app: edit your profile, delete secrets, or use Me › Settings › Delete account. For everything else, write to privacy@onlysecrets.app. We answer within one month. You also have the right to complain to a data protection authority, in Cyprus the Office of the Commissioner for Personal Data Protection (dataprotection.gov.cy).

9. Security

Data is encrypted in transit and at rest. Secret contents are stored separately from the public part of a secret and are only delivered to your device after we have checked that you are allowed to see them. Access to member data within our team is limited to what support and moderation require.

10. Children

Secrets is not for anyone under 18. We remove accounts that we suspect belong to minors and we report child sexual abuse material to the authorities.

11. Changes

If we change this policy in a way that matters to you, we will tell you in the app before the change takes effect.