Privacy
Last updated 15 October 2026
This page separates two things: this website and the DUNVIND mobile app (currently a test version).
1. This website
The site uses no analytics or advertising tools and sets no cookies.
Hosting server logs. As part of normal operation, the hosting provider may process technical access logs — for example, the IP address, time of the request, page address and browser details. These logs are used for operation, troubleshooting and server security; we do not use them to track visitors or for advertising.
Waitlist
If you join the waitlist, we store your e-mail address, the language of the page, your optional answer to "What caught your attention most?", and the time you signed up and confirmed. We use them only to tell you when the DUNVIND campaign launches and when the app is released — at most one e-mail a month. Legal basis: your consent (Art. 6(1)(a) GDPR), which you give by confirming the link in our e-mail and can withdraw at any time.
The data is stored with our web hosting provider WebSupport s. r. o. in Slovakia. We don't pass it to anyone else, we don't use a bulk e-mail service, and we don't track whether you open our e-mails or click links. The waitlist is completely separate from the app — your e-mail is never linked to a DUNVIND account. Copies in the hosting provider's backups are deleted according to the provider's rules.
Unconfirmed addresses are deleted no later than 49 hours after the last confirmation e-mail was sent. Confirmed ones are kept until you unsubscribe, and no longer than 6 months after the app's public release. You can unsubscribe with the link in every e-mail or by writing to support@dunvind.com; unsubscribing deletes your address. We keep only a count of unsubscribes per calendar week — a single number, without your address or anything else about you.
2. The DUNVIND app (test version)
The app is currently a test version for a small group of users and runs on a test server. This section describes what applies today. Anything that will apply only when the public version launches is clearly marked.
In short
- What you and your partner send (signals, replies, a few words) is encrypted on your phone before it reaches the server. The server stores only encrypted data plus the technical data needed for delivery.
- No analytics, no ads, no third-party crash reporting.
- Your account has no e-mail, phone number or password. Access is protected by 12 words that only you hold.
- The encryption has not yet been reviewed by an independent auditor. Until it is, we claim no more than what is written here.
Data we process
Relationship content (signals, replies, words) is encrypted on the phone with a key that only the devices in the relationship hold. The server stores only the encrypted form.
Technical data on the server — the server sees and stores it because delivery is impossible without it:
- random account, device and relationship identifiers, device public keys, and signed records of devices being added and removed;
- when records arrive, their order and type (for example “content” or “relationship ended”), and the relationship state;
- how often and when devices ask for updates — including background checks for notifications (about every 15 minutes, network only) and more frequent syncing while the app is open;
- pairing invites (only a hash of the QR secret and its validity — 15 minutes) and sign-in sessions (a token hash, valid 30 minutes).
The server cannot see what a signal says or what name you give your partner. It can see that and when two devices exchanged something.
IP address — needed for the connection. App users’ IP addresses are not stored in the database and not written to logs; they are used only in memory for rate limiting (a 60-second window). Server system logs are kept for at most 7 days.
Account recovery (12 words) — your phone derives a key from the 12 words. The server keeps only an encrypted recovery record, never the words or the key itself. If you lose both the 12 words and the phone, nobody — including us — can recover the account.
Data on your phone only — the name you give your partner stays on your phone and is never sent anywhere. Data on the phone is stored encrypted, and the app turns off the system cloud backup.
Phone permissions — internet; camera (it starts only after you tap). The camera is used only to scan the QR invite. DUNVIND does not take or store a photo. Also notifications; system permissions for the scheduled background check. No location, contacts, photos or microphone.
Notifications
About every 15 minutes (when the system allows it) the phone asks the server whether there is anything new. A notification always has the same text — “Something for you.” — with no name and no content, also on the lock screen. We do not use Google Firebase or any other push service.
Why we use the data
Only to provide the service: delivering content between your devices, pairing, account recovery and abuse protection (rate limiting). We do not sell the data or use it for advertising or profiling. Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and, for abuse protection, legitimate interest (Art. 6(1)(f) GDPR).
Where the data is
The test server is operated by Marvell Service s. r. o. at Hetzner Online GmbH in Germany. We do not transfer data outside the EU/EEA. The HTTPS certificate is issued by Let's Encrypt, which does not receive your data.
When the public version launches: encrypted server backups will also be stored at a second location at WebSupport s. r. o. (Slovakia); the key to open them will not be on the server.
How long
- Relationship content — as long as at least one of you has it. After a relationship ends, the history stays read-only for both; once you have both deleted your accounts, the server deletes the relationship content.
- Test server backups — made once a day by the hosting provider, which keeps at most the last 7 backups.
- Server logs — at most 7 days. Invites — valid for 15 minutes; the server deletes an unpaired invite about a day after it expires. Sessions — 30 minutes.
When the public version launches: encrypted daily backups, deleted after 30 days; a deleted account’s data is gone from backups within 30 days, and restoring the server from a backup does not bring a deleted account back.
Deletion and your rights
- End a relationship — in the app (Settings → End relationship). Nothing is deleted; the history stays read-only for both.
- Emergency wipe of a phone — erases the keys and data on this phone, even offline. Your account stays.
- Delete your account — in the app (Settings → Permanently delete my account). Steps, and what is deleted and what stays: How to delete your account.
You have the right of access, rectification, erasure, restriction of processing, portability and objection, and the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic. Your account has no name or e-mail, so we can verify ownership of an account only through the app (your device or your 12 words). You delete your account directly in the app. For any other request, write to us at support@dunvind.com — we will agree on a procedure that makes sure we do not hand over or delete data for anyone else.
Age
The app is intended for people aged 18 and over. We do not verify age.
Security
Encryption uses the libsodium library: XChaCha20-Poly1305 (content), X25519 (passing keys between devices), Ed25519 (signatures), Argon2id (the 12 words). The protocol was reviewed internally during development; there has been no independent security audit yet — when there is, we will list it here. No system is 100% secure.
Changes
We will let you know in the app about any significant changes to this policy.
3. Questions
Questions about privacy: support@dunvind.com.