Zesty Privacy Policy

Effective date: August 8, 2025

Who we are: Zesty is a dating–profile review and optimization service operated by GODOFCONTRACTING SRL (Romania), sat Cărpiniș, comuna Crasna, jud. Gorj ("Zesty," "we," "us").

Contact: support@zestyus.com

Zesty is not a dating or matchmaking app. We do not match users. We help users improve their dating-app profiles through crowdsourced feedback, analytics, and AI-assisted photo and profile analysis.

This Privacy Policy explains what we collect, why, how we use and share it, and the choices you have. It applies to our iOS and Android apps and our presentation website at zestyus.com (together, the "Services").

1) Summary (the TL;DR)

We collect account info (email/name), basic demographics, profile content you provide, votes/feedback you give or receive, and analytics about how you use Zesty.

Photos you upload are analyzed for quality, composition, and dating-readiness (not biometrics). We use reputable cloud AI services for this processing. We do not use your photos to train or fine-tune AI models.

Voting includes demographic context (e.g., age band, region, archetype) to produce accurate statistics. When an account is deleted, we pseudonymize historical vote records to preserve aggregate system integrity.

You must be 18+.

Monetization is on-demand purchases (e.g., Fast Lane, advanced analytics, Premium VCI Report). In-app credits are not cash, non-transferable, and non-redeemable.

We do not sell your personal information or use it for cross-context behavioral advertising.

2) Personal Data We Collect

A. You provide directly

Identity & Contact: email, name (from social sign-in), phone number (for verification), username.

Profile Content: bio, profession, education, income range, city/region/country, age, gender, height, relationship goals, deal breakers, and other fields you choose to add.

Photos & Media: images you upload for review/analysis.

Personality/Vibes: up to 3 archetypes with relative weights you select.

Purchases: items bought, credit balance/usage (we do not receive your full card details for App Store/Google Play purchases).

B. Automatically collected

Device & App data: device type, OS version, app version, language, log files, crash reports, diagnostics.

Usage data: screens viewed, features used, clicks, session timing, referral source.

C. Interaction data

Votes & Feedback: ratings (our 4-level system), preset tags, free-text comments, and the demographic context of the voter (e.g., age band, region, gender, archetype).

Links/Sharing: creation and use of any Share Test Link (see §8).

D. AI-generated/derived data

Photo Analysis: quality scores, cropping/lighting suggestions, vibe descriptors.

Statistical Models: VCI (Vibe Compatibility Index) scores and related confidence measures; rankings; report insights.

Sensitive information: We do not ask for special-category data (e.g., health, religion, political opinions). If you choose to include sensitive details in a bio or image, you consent to our processing for profile-review purposes. You can remove it at any time.

3) Why We Use Your Data (Purposes) & Legal Bases

To provide and improve the Services

  • Account creation/login, phone verification, fraud/abuse prevention (GDPR: Contract; Legitimate Interests).
  • Displaying your profile and photos to other users for voting/feedback (Contract).
  • AI photo analysis for quality and dating-readiness (Contract; Legitimate Interests; where required, Consent).
  • Computing VCI scores, analytics, and Premium Reports (Contract; Legitimate Interests).
  • Processing purchases and credit usage (Contract; Legal Obligation for tax/records).

To communicate with you

  • Transactional messages (receipts, service notices, updates) (Contract/Legal Obligation).
  • Optional marketing with your consent (Consent; you may opt out).

To keep Zesty safe and fair

  • Moderation, anti-spam, and misuse detection; rate limiting; audit trails (Legitimate Interests/Legal Obligation).

Automated analysis & profiling

We create statistical profiles (e.g., VCI) to summarize crowd responses and photo quality. These analytics do not produce legal or similarly significant effects on you (GDPR Art. 22). You may ask for an explanation, contest a result, or disable future profiling that uses your content by contacting support@zestyus.com.

4) Google Sign-In & "Limited Use" (OAuth)

When you use Google Sign-In, we access your Google account's basic profile and email to create/log in to your Zesty account. We do not use Google data for advertising, we do not sell or transfer it, and we only use it to provide the features you requested. If you disconnect Google or delete your account, we delete associated Google-derived identifiers (subject to necessary records). We comply with Google's User Data Policy and Limited Use requirements.

5) AI Processing Details

We use reputable cloud AI services to analyze photo quality, composition, and dating-readiness and to generate text suggestions for your report.

No training or fine-tuning on your content. We do not build facial recognition or biometric templates.

Photos and outputs are stored only as needed to provide your analytics and reports; processing by AI providers is typically transient or retained for short diagnostic windows per their policies.

We apply technical and contractual safeguards to prevent misuse.

6) How We Share Data

We share data only as needed to operate the Service:

Processors/Infrastructure: Reputable cloud providers (hosting & AI), Firebase/Firestore, Crashlytics/Analytics, content delivery and image optimization, email/support tooling, and similar vendors.

Payments: Apple App Store and Google Play process purchases; we receive purchase confirmations and non-card identifiers.

Compliance & Safety: law enforcement requests (when legally required), fraud/abuse investigations, defense of legal claims, or corporate transactions (only with appropriate safeguards).

With your direction: e.g., if you enable a Share Test Link (see §8).

We do not sell personal information and we do not share it for cross-context behavioral advertising (as defined by CPRA).

7) Retention

We keep data only as long as necessary for the purposes above:

  • Account & Profile: for your account's life; delete when you delete the account.
  • Photos & Reports: kept while your test/report remains available to you; removed on deletion.
  • Votes & Feedback: attached to your profile while active. Upon account/profile deletion, we pseudonymize related historical vote records (remove direct identifiers and unlink from your account) and retain them to preserve statistical integrity, prevent system gaming, and maintain aggregated analytics.
  • Logs & Diagnostics: typically 12–24 months.
  • Purchases & Tax Records: up to 10 years where required by law.
  • Aggregated/Anonymized Data: kept without time limit.

8) Share Test Link (Public Preview)

This optional feature (rolling out gradually) can generate a tokenized, time-limited URL with an aggregated results preview (no photos, names, or direct identifiers). Anyone with the link can view it until it expires or you revoke it in the app. We log link creation/use for abuse prevention. If you do not enable this feature, nothing is shared publicly.

9) Your Choices & Rights

In-app controls

  • Edit or delete profile fields and photos.
  • Manage notifications.
  • Delete account (removes personal data subject to §7 retention rules).

Privacy rights (EEA/UK/Switzerland and similar regimes)

  • Access, correction, deletion, restriction, portability, and objection.
  • Withdraw consent where processing is based on consent.
  • Object to profiling/automated processing; request human review/explanation for VCI.

Contact us at support@zestyus.com. You may also lodge a complaint with your supervisory authority. For Romania: ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal).

US residents (CA, CO, CT, VA, etc.)

  • Right to know/access, delete, correct, and portability.
  • Right to opt-out of sale or sharing of personal information (we don't do either).
  • Non-discrimination for exercising your rights.

Submit a request to: support@zestyus.com. We'll verify and respond within applicable timelines.

10) Children

Zesty is for adults 18+ only. We prohibit registration by anyone under 18 and block under-18 age ranges in targeting. If we learn we've collected data from a minor, we will delete it.

11) Non-Discrimination & Fairness

We do not use protected characteristics (e.g., race, religion, disability, sexual orientation) to determine access, price, or quality of our Services. Demographic segments shown in analytics are descriptive, not determinative, and exist to help users understand audience responses. Content and conduct that is harassing, hateful, or discriminatory violates our Terms and may be removed.

12) Security

We employ safeguards including TLS in transit, encryption at rest (Firestore/Cloud), role-based access, least-privilege service accounts, audit logging, rate-limiting, and regular reviews of access keys and security rules. No system is perfectly secure; if we learn of a breach, we will notify users and authorities as required by law.

13) International Data Transfers

As an EU controller (Romania), we may transfer data outside the EEA/UK when using global cloud providers. We rely on Standard Contractual Clauses and other lawful mechanisms, plus technical and organizational measures, to protect your data.

14) Payments, Credits & Refunds (Privacy Aspects)

Purchases are processed by Apple or Google. We receive receipts and limited transaction metadata. Zesty credits are a virtual product, not money, non-transferable, and not redeemable for cash. Where we "refund" activity, it is done in credits. We keep a credits ledger for fraud/chargeback and audit purposes.

15) Cookies & Tracking (Website)

Our site may use:

  • Strictly necessary cookies for security and basic functionality.
  • Analytics cookies to understand traffic and improve the site. In the EEA/UK we seek consent for non-essential cookies.

Browser "Do Not Track" signals are not universally supported; we respond according to local law and your cookie preferences.

You can control cookies via your browser settings and, where available, our consent banner.

16) Third-Party Links & User Content

Links to third-party sites are outside our control. Content you upload must comply with our Terms and the rights of others. Profiles and photos may be visible to other users for voting/feedback per your settings.

17) How to Exercise Your Rights

Email support@zestyus.com from the address associated with your account. For security, we may request additional verification. We aim to respond within 30 days (or the timeframe required by your law). If we can't honor a request, we'll explain why.

18) Changes to This Policy

We'll update this Policy as our Services evolve. We'll post the new version and update the Effective date. Material changes will be announced in-app or by email before they take effect.

19) Controller Details

GODOFCONTRACTING SRL

sat Cărpiniș, comuna Crasna, jud. Gorj, Romania

Email: support@zestyus.com

We have appointed a privacy point-of-contact reachable at the email above.

20) Region-Specific Notices

EEA/UK

GODOFCONTRACTING SRL is the data controller for your personal data. Our primary legal bases are contract, legitimate interests, consent (where used), and legal obligations.

California (CPRA)

Categories collected: identifiers, commercial information, internet/usage activity, geolocation (coarse), inferences (VCI/analytics), and user-submitted profile content.

We do not sell/share personal information. We do not use or disclose sensitive personal information for purposes other than those permitted by CPRA.

21) Additional Disclosures for Google User Data

  • Use limited to sign-in/authentication and account setup.
  • No transfer except to provide or improve user-facing features, comply with law, or as part of a merger/acquisition with notice.
  • No human reading of Google data except with your consent, for security (e.g., abuse/breach investigation), to comply with law, or for internal operations when strictly necessary and subject to access controls.

22) Questions?

If you have questions about this Policy or our data practices, contact support@zestyus.com. We're happy to help.