Privacy Policy

What we collect

• Account: Email address and a hashed password (if you sign up).
• Profile: Username, gender, age, and interests you choose to share.
• Technical: IP address, browser type, and device info for service operation and abuse prevention.
• Location: Approximate city and country derived from your IP address. GPS coordinates are used only during "Nearby" matching and are not stored.
• Call metadata: Timestamps, duration, and connection quality metrics. We do not record voice calls. Audio is transmitted in real-time and never saved.
• Analytics: Self-hosted, cookie-free usage analytics (page views, session flow) to improve the service.
• Payments: Processed by Stripe. We store only a customer reference ID — never card numbers or billing details.

How we use it

To operate the service (matchmaking, call routing), process payments, prevent abuse, and improve reliability. We do not sell or rent your personal information.

Who we share with

Only service providers under confidentiality agreements: DigitalOcean (hosting), Cloudflare (security), Stripe (payments). AI voice features use Deepgram (speech processing) and OpenAI (conversation) — audio is processed in real-time only, not stored. We may disclose data when required by law.

How long we keep it

Active session data is deleted within minutes of disconnecting. Call metadata and server logs are retained for a limited period for debugging and abuse prevention, then deleted. Account data is kept until you delete your account. Payment records are retained as required by tax law.

Your rights

You can access, correct, or delete your personal data. To delete your account, use the option in Settings or email [email protected]. We respond within 30 days.

Security

All connections are encrypted (TLS/HTTPS, DTLS for voice). Passwords are one-way hashed. No voice audio is ever recorded or stored.

Age requirement

HereSay is for users 18 and older. If you believe a minor is using HereSay, contact [email protected].

Data transfers

Data is processed on servers in the United States.

Changes

We may update this policy as our practices or legal requirements change. The date at the top reflects the latest revision.