Privacy Notice

Who is responsible

Tryfta Digital UG (haftungsbeschränkt), Georgenstraße 19, 80799 München, Germany, is responsible for your personal data. Contact us at [email protected].

Information we use

We use your email, account details, date of birth, country and any required age or adult-approval record to manage eligibility and protect age-separated spaces. Where adult approval is required, we retain the adult email and approval dates. Your profile may include a name, photos, interests, languages, prompts and a country you choose to show.

We process introductions, friendships, private messages, posts, stories, comments, reactions, blocks, reports and device notification identifiers to provide the features you choose. We also use limited security and connection information to prevent abuse and operate the service.

With Google or Apple sign-in, we use the account identifier and email address they provide to connect your Duorella account. Apple can provide a private relay address. We do not receive your provider password or copy its name or photo to your profile. Apple authorization credentials are stored encrypted to maintain and revoke the connection.

Why we use it

For adults, we use account and social information to provide Duorella under the Terms (GDPR Article 6(1)(b)). For under-18 users, profile, photo, friendship, post and message processing relies on consent (Article 6(1)(a)); a parent or guardian authorizes this below the applicable country age. Before that consent, we use minimal account, birthday, country and guardian-contact information to check eligibility and obtain permission (Article 6(1)(f)).

We use limited security information, reports and moderation records to prevent abuse and protect members (our legitimate interests, Article 6(1)(f)). We give extra weight to children’s rights. We also process information where a legal duty requires it (Article 6(1)(c)). Optional notifications and social-handle sharing depend on your choice and can be turned off (consent, Article 6(1)(a)).

Who can see your content

Eligible people in your age-separated space may see your discoverable profile. Friends-only posts and stories are for your eligible friends. Private chats are for the participants, but authorized staff can review content for safety and service operations. New photos and posts may require staff approval before they appear.

Eligible people who open your private invitation can see your name, approved profile photo and age. Both people must agree before connecting across age groups.

Messages are protected on our servers but are not end-to-end encrypted. Authorized administrators can review retained accounts, posts, photos, friendships and messages for safety and service operations; this access is restricted and logged. We do not use GPS or import your contacts for discovery. Optional public country and notification permissions are under your control.

Service providers support hosting, account email and security monitoring. If you enable notifications, Apple or Google also processes the device identifiers needed for delivery. We may disclose necessary information to authorities where legally required.

Google and Apple process sign-in under their own privacy terms. Google may also process account, device, approximate location and usage information to provide and improve its iOS sign-in service.

Retention and your choices

You can change profile visibility, block people, withdraw optional social-handle sharing and notification consent, or delete your account in settings. Ordinary account content is removed or anonymized on deletion. Limited reports, safety evidence and access records may be kept for their applicable retention period where needed to address abuse or legal obligations.

Stories expire after 24 hours. Other content remains while your account is active unless you remove it or it expires. Removing content does not erase a separate safety report; report records may remain while needed to handle the concern, prevent repeated abuse or meet a legal obligation. File cleanup runs on a schedule rather than instantly.

Contact [email protected] about privacy or safety concerns. Web analytics are not loaded while the friendship service is enabled.

You can manage connected sign-in methods in account settings. After Apple disconnection or account deletion, encrypted authorization data may remain for up to seven days while we retry revocation. Local account deletion does not depend on Apple responding.

Your privacy rights

Email [email protected] to request access, correction, deletion, restriction or a portable copy of your data, or to object to its use, where applicable. You may withdraw consent without affecting earlier lawful use. You can also complain to your data-protection authority.