Legal
Privacy Policy
Last updated: October 9, 2026
Leeva Inc. ("Leeva", "we", "us") runs the Leeva dating app (iOS and Android), the leeva.io website, the partner venue portal and the coach console. This policy explains what data we process when you use these services, why, who we share it with, how long we keep it and how to exercise your rights. It applies wherever you are. Depending on where you live, the GDPR (European Union), the UK GDPR (United Kingdom), Law 25 (Quebec), Canadian federal law or certain US state laws protect your data. Where their rules differ, we say so.
A question or a request? Email us at support@leeva.io, or write to Leeva Inc., 651 Rue De La Montagne, 506, Montréal (Québec) H3C 0G2, Canada.
The short version
• We collect what we need to help you meet people: your profile, photos, preferences, location and messages. • Verifying your profile is required: with a face scan, with your explicit consent, or with a manual verification done by eye, with no facial recognition. The scan selfie is kept for up to 15 days so that a member of our team can check it is really you, then it is erased. • Sensitive details (religion, ethnicity, sexual orientation) are optional and subject to your explicit consent. If you withdraw it, they are erased. • No targeted advertising, no ad trackers, and we don't sell your data. • Our providers host your data in Canada; some processing happens in the European Union and the United States, with appropriate safeguards. • You can download all your data and delete your account right in the app. • We answer your requests within 30 days.
1. Who is responsible for your data
The data controller is Leeva Inc., a Quebec company (NEQ 1179571261), 651 Rue De La Montagne, 506, Montréal (Québec) H3C 0G2, Canada. The person in charge of the protection of personal information is Thomas Sebbane, President. You can reach him at support@leeva.io or at the postal address above, with "Privacy" in the subject line.
2. The data we collect
What you give us: • Your account: first name, last name, date of birth, gender, email address, phone number. • Your profile: photos, bio, prompt answers, interests, habits (smoking, drinking, exercise), family plans and what you're looking for (age, distance, gender of the people you want to meet). • Optional sensitive details (see section 3). • The messages you send to people you've matched with. • Your reports and your conversations with our support team. • Your Coach Review request, if you make one. What we generate when you use Leeva: • Your likes, passes, matches and dates, including dates set up at our partner venues. • Your location, if you allow it on your device. We keep your precise location to calculate distances; other members only see your city and an approximate distance. • The result of your profile verification (see section 4). • Moderation decisions that concern you. • Your purchases: product, price, date, transaction ID. We never see your card number. • Technical data: device model, app version, notification token, IP address, error reports. What we receive from other services: • If you sign in with Apple, Google or Facebook: an identifier, your email address and, depending on the service, your first name. With Facebook, we use Limited Login: no pixel, no event tracking, no advertising identifier. • If you make a purchase: the transaction confirmation from the App Store or Google Play.
3. Sensitive information
Some profile details are "sensitive" under the law: your religion and how you practice it, your ethnicity and your sexual orientation. They are optional. You only fill them in if you want to, after giving explicit, separate consent. They are used to fine-tune your recommendations, to filter your searches if you choose to and, where applicable, shown on your profile. The gender of the people you want to meet can also reveal your sexual orientation. This information is needed for the service to work: we use it only to suggest compatible profiles. We ask for your explicit consent before saving it. Since the service can't work without it, withdrawing this consent means deleting your account. You can withdraw your consent at any time in the app settings. Your religion, ethnicity, declared orientation and the search filters based on them are then erased. We don't share this information with partner venues, we don't pass it to the artificial intelligence tools that assist coaches, and we never use it for advertising.
4. Profile verification and facial recognition
Leeva dates happen in real life. To protect the community from fake profiles and scams, profile verification is mandatory to use the service. How it works: before the scan, a screen explains this processing and asks for your explicit consent. You then take a short camera check that confirms a real person is present, and your face is compared with your profile photos. This comparison uses biometric data. How the decision is made: the result is determined automatically. If the match is clear, your profile is verified; if it is clearly insufficient, the attempt is refused; in borderline cases, someone on our team reviews the attempt from its results and your profile photos. After 3 failures in 24 hours, you can ask for a manual review, done the same way. You can also contest a decision by writing to support@leeva.io. Who processes these images: a provider specialized in facial recognition, located in the European Union, acting only on our behalf. We never search for anyone's identity: the comparison is limited to your own photos. How long: your selfie is kept for up to 15 days, in private storage, so that a member of our team can check, if needed, that it is really you. It is never shown to other members. It is then erased automatically, or as soon as you delete your account. We keep the result (verified or not) and the verification scores. You don't have to accept the scan: you can choose a manual verification instead. You then take a photo of yourself making a gesture shown by the app, and someone on our team compares it by eye with your profile photos, with no facial recognition at all. This photo is deleted as soon as the decision is made, within 30 days of sending it at the latest.
5. Why we use your data, and on what basis
If you live in the European Union or the United Kingdom, each use relies on a legal basis: • Performing our contract with you: creating and managing your account, showing your profile, recommending profiles, handling likes, matches, messages and dates, processing your purchases, sending service emails and notifications, delivering your Coach Review if you ask for one. • Your explicit consent: optional sensitive details and facial verification (biometric data). • Your consent: marketing emails, technical error monitoring on the website, device permissions (location, notifications, camera, photos). • Our legitimate interest, balanced against your rights: member safety, moderation, preventing fraud and the return of banned accounts, fixing bugs and improving the service technically, anonymized statistics. • Our legal obligations: keeping billing records, age verification, proof that you accepted our terms, responding to requests from authorities. In Quebec and elsewhere in Canada, we collect your consent for these uses and we don't use your data for other purposes without telling you. You can withdraw a consent at any time; this doesn't affect what was done before. We don't sell your data, we don't do targeted advertising and we use no ad trackers.
6. What other members, partner venues and coaches see
• Other members see your profile: first name, age, photos, bio, prompts, city, approximate distance, verification status and anything else you choose to add. They don't see your precise location, your email address or your phone number. • Your messages are only visible to the person you're talking to. They may be analyzed automatically for safety, and reviewed by our moderation team if someone reports them (see section 7). • Partner venues: when you set up a date at a partner venue, and with your agreement, the venue receives only your first name, age and first photo, so they can welcome you. Partner venues also receive anonymized, aggregated statistics about their Leeva guests (age ranges, trends), never individual data, and only above a minimum number of people. • Coaches: if you request a Coach Review, the assigned coach sees your first name, age, photos (through temporary links), bio, prompts and request. They access it only to write your review and are bound by confidentiality. The coach may use an artificial intelligence tool: we then send it a pseudonymized version of your profile (no first name, an age range instead of your age, no contact details, no photos and no sensitive information). A coach always reviews and approves the final content. • Authorities: we may disclose data when the law requires it or to protect someone's safety, within the limits set by law. • Corporate transactions: in a merger, acquisition or sale of assets, your data could be transferred to the buyer, who would remain bound by this policy. We would let you know.
7. Moderation, safety and automated decisions
To keep Leeva safe, we combine automated tools with a human team: • Photos are analyzed automatically to detect nudity, violence and prohibited content. • Text (bio, prompts, messages) may be analyzed automatically to spot harassment, scams, hate speech or attempts to share outside contact details. • Reports are reviewed by our team, with help from artificial intelligence tools. Some decisions can be fully automated, for example rejecting a photo, blocking a message or the facial verification result. You can ask for the main factors behind a decision, have a person review it, share your point of view and challenge it by emailing support@leeva.io. You can also appeal a sanction. To prevent banned people from coming back and to handle complaints, we keep a moderation record (sanctions, reports) in pseudonymized form for 3 years, including after an account is deleted.
8. Artificial intelligence
We use artificial intelligence services from providers located in the United States to: • moderate messages and handle reports; • help you write your bio and prompts, if you use that feature; • answer your questions through our support assistant; • help coaches write and translate Coach Reviews, using pseudonymized data without sensitive information. Only text is sent to these services, never your photos. Our artificial intelligence providers don't use your data to train their models, under their commercial terms. They may keep it briefly, usually up to 30 days, to detect abuse.
9. Our service providers
We work with providers who process data on our behalf, only on our instructions and under contractual confidentiality and security commitments: • hosting and database (Canada); • application servers (North America); • content delivery network and security (global network); • identity verification by facial recognition and photo moderation (European Union); • artificial intelligence (United States); • sending emails and receiving support emails (United States); • technical error monitoring (United States); • push notifications (United States); • subscription and payment management (United States); • maps and place search (United States). Services you choose yourself also process some of your data under their own policies: Apple, Google and Facebook if you use them to sign in, and the App Store and Google Play for your purchases. The detailed list of our service providers is available on request at support@leeva.io.
10. International transfers
Your data is mainly hosted in Canada. Some of it is processed in the European Union (facial verification and photo moderation) and in the United States (see section 9). • From the European Union and the United Kingdom: Canada benefits from an adequacy decision. For the United States, we rely on the Data Privacy Framework when the provider is certified, and otherwise on the European Commission's standard contractual clauses, with the UK addendum. • From Quebec: before communicating personal information outside Quebec, we carry out a privacy impact assessment and put a written agreement in place. You can get more information about these safeguards by emailing support@leeva.io.
11. Cookies and trackers
In the app: no ad trackers, no advertising identifier (IDFA or AAID), no social media pixel, no third-party audience measurement. If the app crashes or hits an error, a technical report is sent to our error monitoring tool with an opaque identifier, never your email address. On mobile, this report may include a replay of the screen at the time of the error, fully masked: no text or images appear in it. On the website: we only use storage that is strictly necessary for the site to work, such as remembering your consent choice. Error monitoring only turns on if you click "Accept" in the banner; if you click "Decline", it stays off. To change your mind, clear the site's data in your browser and the banner will reappear.
12. Emails and notifications
• Service emails (confirmation, security, dates, receipts): these are needed for your account to work. • Marketing emails (news, offers): only if you opt in. This is off by default. You can unsubscribe at any time with the link in every email or in the app settings. • Push notifications: only if you allow them on your device. You can turn them off at any time in your phone settings.
13. Payments
In-app purchases (subscription, Coach Review) go through Apple's App Store or Google Play, which handle your payment. We only receive your Leeva identifier, the product, price, currency, date and transaction ID. We never see or store your card number. For coaches and partner venues, payments and payouts go through specialized payment providers, which may verify your identity under their own legal obligations. We keep billing records for 6 years, as required by our tax obligations in Quebec.
14. How long we keep your data
• Account, profile, photos, preferences: as long as your account exists, then erased no later than 30 days after you delete it. • Optional sensitive details: until you withdraw your consent or delete your account. • Facial verification selfie: kept for 15 days at most, then erased automatically. • Manual verification photo: deleted as soon as the decision is made, within 30 days of sending it at the latest. • Messages: deleted 90 days after the conversation expires, and no later than 30 days after you delete your account. • Moderation record (sanctions, reports): 3 years, in pseudonymized form. • Billing records: 6 years. • Support conversations: 24 months. • Email and notification delivery history: 12 months. • Technical error reports: 90 days. • Unsubscribe links: 90 days. • Backups: a few days, on automatic rotation. Statistics that have been made anonymous, and can no longer identify you, may be kept indefinitely.
15. How we protect your data
We protect your data with appropriate technical and organizational measures: encryption in transit, encryption at rest with our hosting provider, access controls so each member can only reach what concerns them, team access limited to what is strictly necessary, private storage for verification images, server-side age checks. No system is perfectly secure. If a privacy incident puts you at risk, we will tell you and notify the relevant authorities, as the law requires.
16. Your rights
Depending on where you live, you have the right to: • access your data and get a copy; • have it corrected; • have it erased; • receive it in a structured format and pass it to another service (portability); • object to processing based on our legitimate interest, and to any marketing use; • ask us to restrict processing; • withdraw your consent at any time; • not be subject to a fully automated decision that significantly affects you without being able to get a person involved; • in Quebec, ask us to stop disseminating information about you or to de-index it. Right in the app, you can: • download all your data as a JSON file, from the settings; • edit your profile and preferences; • withdraw your consent for sensitive details or marketing emails; • delete your account (see section 17). For any other request, email support@leeva.io. We may ask you to confirm your identity. We answer within 30 days. If you're not satisfied with our answer, you can complain to: • the data protection authority of your country in the European Union (in France, the CNIL); • in the United Kingdom, the Information Commissioner's Office (ICO); • in Quebec, the Commission d'accès à l'information (CAI); • elsewhere in Canada, the Office of the Privacy Commissioner of Canada.
17. Deleting your account
You can delete your account at any time from the app settings. Your account is immediately anonymized and no longer visible. Your data (profile, photos, verification images, messages, preferences) is then permanently erased within 30 days. We only keep: • the moderation record, pseudonymized, for 3 years, to prevent banned accounts from coming back and to handle complaints; • billing records for 6 years, for our tax obligations. A subscription bought on the App Store or Google Play must be cancelled from your store: deleting your account doesn't cancel it automatically.
18. Minors
Leeva is only for people aged 18 and over. Your age is checked from your date of birth when you sign up, and we delete any account we learn belongs to a minor. If you think a minor is using Leeva, let us know at support@leeva.io.
19. Partner venues and coaches
If you use the partner venue portal or the coach console, we process the data needed for your professional account: name, email address, phone, venue or business, role, activity history, and billing or payout details. We use it to manage your account, dates, billing and payments. We keep it for as long as we work together, then 6 years for billing records. The rights described in section 16 apply to you too.
20. United States residents
If you live in a US state with a privacy law (for example California, Colorado, Connecticut, Virginia, Texas or Oregon), you have the right to know what data we process and access it, correct it, delete it, receive it in a portable format, and opt out of its sale, its sharing for targeted advertising and profiling that produces significant effects. Categories collected in the past 12 months: identifiers (name, email, phone, online identifiers); protected characteristics (age, gender); commercial information (purchases); biometric information (facial verification); activity on the service; geolocation; photos; inferences (dating preferences); sensitive information (precise geolocation, biometric data, sexual orientation and, if you provide them, religion and ethnicity). Their sources, uses, recipients and retention periods are described in sections 2 to 14. We don't sell or share personal data as defined by US laws, and haven't done so in the past 12 months. We don't do targeted advertising. We use sensitive information only to provide the service, keep it safe and comply with the law. Biometric data: collected only after your prior consent, used only to verify your profile, never sold, and kept for 15 days at most. To exercise your rights, email support@leeva.io. You can use an authorized agent. We will verify your request and won't treat you differently for exercising your rights. If we deny your request, you can appeal by replying to our decision; if the appeal is denied, you can contact your state's attorney general.
21. Changes to this policy
We update this policy when our services or the law change. The date at the top of the page shows the current version. If we make an important change, we'll let you know in the app or by email before it applies, and ask for your consent again when the law requires it.
22. Contact us
Leeva Inc. Attn: Thomas Sebbane, Person in charge of the protection of personal information 651 Rue De La Montagne, 506 Montréal (Québec) H3C 0G2, Canada support@leeva.io