Salut! Privacy Policy
Effective 28 September 2026. Information updated 9 October 2026.
1. Who we are
Andrey Starostenko operates Salut! and is the controller of the personal data described here. Contact appsalut.fun@gmail.com for privacy requests. Salut is an adults-only dating and social app.
2. Data we collect
- Account and authentication data, including your phone number, Firebase Authentication identifiers, and account metadata.
- Profile data, including display name, date of birth, gender, bio, interests, nationality, profile photos, and similar profile details you choose to provide.
- Device location when you enable location. The app rounds coordinates to a privacy grid before sending them to Firebase; the server rounds again and stores the location fix's capture time. Nearby checks location when opened or resumed, requests a fresh fix every five minutes while visible in the foreground, and requests a fresh fix before starting or extending Go Live. A fix is accepted only when it is less than 10 minutes old, its reported accuracy is within 3 km, and the device does not mark it as simulated. The simulated-location check reduces basic spoofing but cannot detect every falsified location. This is foreground use, not continuous background tracking. An accepted location update also moves your Go Live ticket's saved location. Nearby calculates approximate distances on the server and sends other members a whole-kilometre distance, not your coordinates or a map pin. Distances below 3 km are displayed as 3 km; discovery is limited to approximately 25 km.
- Social and messaging data, including Saluts, matches, messages, activity participation, block lists, safety reports, and related timestamps.
- Device and app data, including a push token when push is on, app version, and security-related service metadata.
- Requests you make for data export, correction, deletion, or appeal, and the records needed to answer them.
3. Purposes, legal bases, and choices
| Purpose and data | EU legal basis and your choice |
|---|---|
| Phone sign-in, adult age gate, profile, photos, Saluts, activities, matches, and messages | Providing the service you request and enforcing its terms (GDPR Article 6(1)(b)). We also use the age gate and account checks to protect members (Article 6(1)(f)). |
| Nearby location and live discovery | Your affirmative use of location and live features (Article 6(1)(a)). You can deny device location permission, turn off live presence, or use Go Stealth. A locale-based fallback may be used on your screen when device location is unavailable; it is not published as your location. Reading Nearby or starting or extending Go Live requires a device fix captured less than 10 minutes ago. An existing live session can remain visible with its last saved position until it ends; turn off live presence or enable Go Stealth to hide it. |
| Personalized Discovery | Our legitimate interest in ordering relevant results (Article 6(1)(f)). When on, incoming Saluts appear first and shared interests may be highlighted. Turn it off in Settings for recent-activity ordering. This is not an automated decision with legal or similarly significant effects. |
| Showing “Dating” in your public profile | Your separate affirmative consent (Articles 6(1)(a) and, where this reveals special-category information, 9(2)(a)). Publication starts off. To withdraw, deselect Dating under Open to in your profile and save your choices. You can also request removal through appsalut.fun@gmail.com. |
| Optional push alerts | Your choice to receive them (Article 6(1)(a)). Turning push off clears the stored device token and stops our notification functions from using it. |
| Reports, blocking, investigation, fraud prevention, account restrictions, appeals, and legal requests | Member safety and service integrity (Article 6(1)(f)); compliance with specific legal duties when they apply (Article 6(1)(c)). Human operators make moderation decisions. We may preserve evidence where required by law. |
Analytics and marketing email features are not active for this release. We do not use your data for advertising or sell it.
4. How we share data
We do not sell personal data.
We use Google Firebase for authentication, database, file storage, cloud functions, and push delivery. Profile details you choose to publish, approximate distance, activities, and messages are shown to eligible members through the relevant features. Nearby does not return your stored coordinates to other members. Other members may save content they receive. We may disclose information to competent authorities when law requires it or where permitted for serious safety matters.
When you publish a scheduled Go Live post, eligible members can see its ticket and approximate distance before its scheduled start time. That distance is based on your last saved rounded device position, not the location of the future meeting. It may change when you next save a location. An existing live or scheduled ticket can remain visible at its last saved position until the session ends. Turn off live presence or use Go Stealth to hide it.
Firebase services and support operations may involve processing outside the European Economic Area, including the United States. Google's processing and transfer arrangements are described in its Firebase Privacy and Security information and Firebase Data Processing and Security Terms. Contact us for information about the safeguards applicable to your data.
5. Your controls
Settings includes Go Stealth, Personalized Discovery, Push Notifications, Download My Data, Correct My Data, and Delete Account. The Analytics & Tracking control is disabled for this release. Your profile's Open to choices control publication of Dating; deselect it and save to withdraw. Support can also handle a removal request.
For access, correction, deletion, portability, restriction, objection, or withdrawal of consent, use the corresponding in-app control or email appsalut.fun@gmail.com. We may need to verify your identity. We generally answer EU rights requests within one month. You can complain to your data protection authority, including the Spanish Data Protection Agency (AEPD).
6. Retention and deletion
Account, profile, photos, presence, Saluts, activities, and chat data are held while your account is active and removed through the account-deletion process. A completed deletion-job record becomes eligible for removal after 30 days. Generated data-export files become eligible for removal after 24 hours. A daily cleanup job removes eligible records and files, so removal occurs on a subsequent successful cleanup run. Export download links, including photo links in the export, expire after 15 minutes.
For discovery, the server also stores your last accepted rounded location and its acceptance time. It uses this location as the distance reference and normally accepts a changed reference at a 15-minute interval. This record also holds a short-lived request counter to limit rapid discovery and location-update calls. A reference becomes eligible for automatic deletion after about 30 days without discovery use; using discovery renews this period. The server also stores temporary pagination records, accessible only to the server, so larger feeds can be loaded without sending hidden members’ identifiers or coordinates to your phone. Pagination records expire after 30 minutes. Firebase TTL deletion is asynchronous, typically occurring within 24 hours after expiry. Account deletion removes the reference and its pagination records. Discovery hides expired live sessions immediately when calculating results. Distances are estimates based on saved locations; they may lag movement and are not travel distances or proof of someone's current whereabouts. Approximation reduces location precision but does not guarantee anonymity. Several observations or cooperating accounts can still reveal someone's approximate grid area.
Where justified, limited safety evidence may remain after account deletion in a restricted archive. It contains reported content, report details, and the identifiers necessary for investigation, including relevant reports submitted by the deleting account. We do not archive the whole account or every conversation. Ordinary report evidence becomes eligible for deletion 90 days after the report was created and is removed on a subsequent successful daily cleanup run. A documented preservation hold can extend retention where necessary for an investigation, legal obligation, or legal claim; holds require regular review and are released when no longer necessary. App accounts cannot directly access this archive. Firebase backups and service logs may persist for their provider-managed lifecycle. See Account Deletion for the process.
7. Security
We use modern transport security and Firebase platform protections to safeguard data in transit and at rest. No system can guarantee absolute security.
8. Children
Salut! is not for children. You must be at least 18 years old to use the app.
Our age gate uses a self-reported birthdate and phone authentication; we do not check identity documents. See the Safety Policy.
9. Contact
Use the public support page, the account-deletion page, or email appsalut.fun@gmail.com.