Privacy Policy

Last updated: 10 September 2026. This policy explains what Hej collects, why, who we share it with and what you can ask us to do about it.

1. Who we are

Hej is a speed dating app operated by SNWEB B.V., a company registered in the Netherlands. SNWEB B.V. is the controller of the personal data described in this policy.

You can reach us at support@hej.dating for any question about your data, and that is also the fastest route for a request to see, correct or delete it.

2. What we collect

Account

You sign in with Apple or with Google. We receive a stable account identifier from them, and an email address if you allow it. If you use Sign in with Apple you can hide your email address, and Apple gives us a relay address instead. We never receive your Apple or Google password.

Profile

Your first name, as you type it.
Your date of birth. We use it to check that you are 18 or older and to work out your age. Only your age is shown on your profile, never the date itself.
Your gender and who you are looking for.
Your photos, and anything you write about yourself.

Location

Hej pairs you with people near you, so the app asks for your location and stores an approximate position for your account. You choose the radius you want to be matched within. Other people never see your exact position, only an approximate distance. You can turn location permission off in your phone settings, but rounds will not work without it.

Messages and content in a round

Messages you send during a round and in a matched chat are stored so they can be delivered and so the chat is there when you open it again. That includes text, voice notes, photos and GIFs. GIFs are searched through Giphy, which receives your search terms but not your identity.

Calls

Matched users can start a voice or video call. Calls run peer to peer over WebRTC, with Twilio providing the connection service that lets two phones find each other through firewalls and mobile networks. We do not record calls and we do not listen in. We do store the technical record that a call happened, with its time and length, so we can handle abuse reports and show the call in the chat.

Device and usage

We collect the technical data an app needs to work and to be fixed when it breaks: device model and operating system version, app version, language, crash reports, and events such as a round starting or ending. We also store a push notification token so we can deliver notifications.

Support

If you email us, we keep the message and our answer so we can follow up and so we have a record of what was agreed.

3. Why we use it

To run the service. Pairing you with someone nearby, delivering messages and calls, keeping your matches and settings. Legal basis: performance of our contract with you.
To keep Hej safe. Verification, moderation, reports, blocks, spam and fraud detection, enforcing the house rules. Legal basis: our legitimate interest in a safe service and our legal obligations.
To comply with the law. Keeping records we are required to keep, and answering lawful requests. Legal basis: legal obligation.
To improve the app. Aggregated statistics, crash reports and performance measurement. Legal basis: legitimate interest.
To send notifications you asked for. Legal basis: consent, which you give in the app or in your phone settings and can withdraw the same way.

We do not sell your personal data. We do not use your data to serve you advertising from other companies, and we do not build advertising profiles.

4. Selfie verification

Everyone on Hej passes a selfie check before their first round. The check uses Amazon Rekognition Face Liveness, a service from Amazon Web Services. You record a short selfie video in the app. The service confirms that a live person is in front of the camera, and the result is compared with the photos on your profile.

This is biometric data, which the law treats as a special category. We process it only with your explicit consent, which you give by starting the check, and only for one purpose: confirming that you are a real person and that your photos are your own. You can refuse, but you will not be able to start rounds.

The selfie video is deleted once the check has run. What we keep is the outcome: whether you are verified, the date, and the badge that shows on your profile.

5. Calls and messages

Messages in a matched chat are stored on our servers until you or the other person deletes the chat, or until an account is deleted. A round that ends without a match leaves nothing behind: the conversation from that round is removed.

Messages are not end to end encrypted. They are encrypted in transit and at rest, and our staff do not read them, with one exception: when a message is reported, the reported content and a small amount of surrounding context are made available to our moderation team so the report can be judged.

6. Moderation and safety

Photos uploaded to Hej are checked by automated systems before they appear on a profile. Reports made in the app are reviewed by people. Both can lead to a photo being removed, a profile being put on hold, or an account being banned.

When we ban an account for a safety reason, we keep a limited record of that decision so the same person cannot immediately return with a new account. That record is kept separately from your profile and contains only what is needed for that purpose.

7. Purchases

Hej Plus and coins are sold through the App Store and Google Play. We never see your card details. Apple or Google handles the payment and tells us, through RevenueCat, that a purchase or a renewal happened and what it was for. We store your subscription status, your coin balance and the transaction identifiers we need for support and for refunds.

8. Analytics and notifications

We use Google Firebase for the app backend, for crash reporting and for analytics about how the app is used. Analytics events tell us things like how many rounds are started or where people stop during sign up. We use this to fix and improve the app, in aggregate, not to profile individuals.

Push notifications are delivered through Apple Push Notification service and Firebase Cloud Messaging. You control which notifications you get in the app settings, and you can turn them all off in your phone settings.

We use a small set of service providers. They act on our instructions, under a data processing agreement, and they may not use your data for their own purposes.

Google (Firebase, Google Cloud): database, file storage, authentication, notifications, crash reporting and analytics.
Amazon Web Services: the selfie liveness check.
Cloudflare: delivery of photos and of this website, and protection against attacks.
Twilio: the connection service that lets a call between two matched users get through.
RevenueCat: handling subscription and purchase status.
Apple and Google: sign in, payment, app distribution and notification delivery. They are independent controllers for the parts they handle, under their own privacy policies.
Giphy: GIF search. Giphy receives the search term and the technical request, not your account.

Beyond this, we share personal data only when the law requires it, when it is needed to establish or defend a legal claim, or to protect someone from serious harm.

Other users see what you put on your profile: your first name, your age, your photos, what you wrote, your approximate distance and your verification badge.

10. Where data is stored

Your data is stored on servers in the European Union. Some of our providers are based in the United States and may process data there or elsewhere for support and operations. Where that happens, the transfer is covered by the European Commission's standard contractual clauses or by an adequacy decision, and by additional technical measures such as encryption.

11. How long we keep it

Your profile and your chats: for as long as your account exists.
A round that ends without a match: removed after the round.
Selfie verification video: deleted as soon as the check has run. The outcome is kept while your account exists.
Reports and moderation decisions: up to two years after the decision, so repeat behaviour can be recognised.
Purchase records: as long as tax and accounting law requires, which in the Netherlands is seven years.
Crash and technical logs: up to twelve months.

12. Deleting your account

You can delete your account yourself, in the app, under Settings, then Account, then Delete Account. There is no form to fill in and you do not need to ask us.

When you delete: your profile, your photos, your matches, your chats, your verification result and your settings are removed. Everything is permanently deleted within 30 days, including from our backups as they roll over. What survives is only what the law makes us keep, such as purchase records, and the limited safety record described in section 6 if your account was banned.

If you cannot reach the app, email support@hej.dating from the address on the account and we will do it for you. See the delete account page for the full steps.

13. Your rights

Under the General Data Protection Regulation you have the right to:

ask what data we hold about you, and get a copy;
have data corrected if it is wrong;
have your data deleted;
ask us to limit what we do with it;
object to processing we base on a legitimate interest;
receive your data in a portable format;
withdraw a consent you gave, such as for verification or notifications, without that affecting what happened before.

Write to support@hej.dating and we will answer within one month. If you think we have handled your data badly, you can complain to the Dutch data protection authority, Autoriteit Persoonsgegevens, or to the authority in the country where you live.

14. Age limit

Hej is for adults. You must be 18 or older to create an account. We ask for your date of birth at sign up and refuse anyone younger. If we learn that an account belongs to someone under 18, we delete it. If you believe a minor is using Hej, report the profile in the app or write to support@hej.dating.

15. This website

This website sets no cookies, runs no advertising trackers and does not profile visitors. It is served through Cloudflare, which processes request data such as your IP address to deliver the pages and to block attacks. Fonts are loaded from Google Fonts, which receives the request for the font file.

16. Changes

We update this policy when the app changes. The date at the top always says when. If a change matters to you, we will tell you in the app before it takes effect.

17. Contact

SNWEB B.V., the Netherlands.
Email: support@hej.dating

This policy is published in English. Where a translation exists, the English version prevails.