Part 1. Vairify Privacy Policy

Effective date: [OPEN]. Version: [OPEN].

1. Who we are

Vairify [legal entity name and NIT, OPEN] is a company incorporated in Colombia and is the controller (responsable del tratamiento) of the data described here. This policy is Vairify's data treatment policy under Colombian Law 1581 of 2012 and Decree 1377 of 2013. It also covers the rights of users in the United States, the EU, the UK and other places where their laws apply.

Contact: [OPEN: privacy contact at vairify.io]. Postal address: [OPEN].

2. How Vairify is built

Vairify does not know your legal name and does not hold your government ID or your face template. ChainPass, a separate company, verifies your identity and holds that data under its own privacy policy. Vairify receives your V.A.I. number and the details listed in section 3. Members appear to each other by V.A.I. number and username.

3. What we collect

DataWhere it comes fromWhy
V.A.I. number, credential level and statusChainPass, at sign-up and at each checkTo admit you and show other members that your credential is active
Username, and email and/or phoneYou, collected for Vairify by ChainPassTo run your account and send you notices
A session keyChainPass, once, at sign-upHeld by Vairify as part of your account [OPEN item 3]
VAI-CHECK resultsChainPass face check at a meeting or loginTo confirm both parties are who their V.A.I. says. Vairify receives a yes/no or colour band, not your face template.
Profile content you add: photos, services, policies, availability, cityYouTo show your profile to the members you choose
Location: a city for the feed, a radius for Available Now, an approximate area for Invitations, an address for a VAIRIDATEYou, when you use each featureTo match and arrange meetings. Only VAIRIDATE carries an address.
Chat messagesYou and the member you write toTo deliver messages. Chat is text only.
TruRevu reviewsThe two parties to the same encounterTo build each member's reputation
Reports, blocks, dispute submissions and evidenceYouSafety and dispute panels
Mutual Consent Agreement records and encounter historyYou and the other party, administered through ChainPassProof of what both parties agreed
Council proposals and votesYou, if you hold a Council or cohort seatCommunity governance
Calendar entries, and Apple or Google calendar push if you turn it onYouScheduling. Vairify pushes out and never reads your personal calendar.
Notification settings and device push tokenYour deviceTo send the notices you turned on
Device and log data: IP address, browser, errorsYour deviceSecurity and operation

4. DateGuard and your guardians

DateGuard is free and stays free. When you add a guardian you give Vairify their name and phone number. Vairify sends that number one text to ask them to accept. A guardian's name, number and preferred language stay on your guardian list until you remove them.

When you start a DateGuard session, Vairify records your position, any note and any photo you add. If the alarm fires, Vairify records your phone's position as it updates and shares all of it with your guardians.

When you enter your deactivation code, Vairify permanently deletes every position, photo, note, and the guardian group chat when it closes. What remains is a record that the session took place.

5. Who sees what

RecipientWhat they see
Other membersYour V.A.I. number, username, profile and posts, under the visibility you set
The member you meetYour VAI-CHECK result and the VAIRIDATE address you share
Your guardiansDateGuard data during an alarm
Five randomly drawn panel membersEvidence you upload to a dispute. You are told before you upload. Panellists do not see your V.A.I. number.
ChainPassRequests to check your V.A.I., and records you sign through it
Service providers: hosting (Supabase, Amazon Web Services), SMS and push delivery [OPEN: name each]Only what each needs to deliver the service
AuthoritiesOnly when Colombian or other applicable law requires it, on valid legal process

Vairify has no third-party advertising and no ad network. Vairify does not sell personal data and does not share it with data brokers. Advertising inside Vairify uses Golden Roses, which Vairify runs itself.

6. How long we keep it

DataKept for
DateGuard positions, photos, notes and group chatDeleted when the session is deactivated, or one hour after a crisis ends
Account and profileWhile your account is open, then [OPEN]
Chat[OPEN]
ReviewsWhile the reviewed member's account is open. A review struck by a panel is removed.
Dispute files[OPEN] after the panel decides
Signed agreement recordsHeld by ChainPass. See the ChainPass Privacy Policy.
Logs[OPEN]

7. Your rights

Under Colombian law you may know, update and correct your data, ask for proof of your authorisation, be told how your data is used, revoke your authorisation and ask for deletion where no legal or contractual duty requires Vairify to keep it, and complain to the Superintendencia de Industria y Comercio. Users in the EU, UK and US states with privacy laws have the equivalent rights under those laws.

Vairify answers questions within 10 business days and complaints within 15 business days, as Colombian law requires. Send requests to [OPEN: privacy contact]. Because Vairify holds no identity, it confirms requests through your V.A.I. face check or recovery details.

Deleting your Vairify account does not delete your V.A.I. That is held by ChainPass.

8. Your email address

Nothing else Vairify holds ties you to your legal identity. Your email address can, if it contains your name. Vairify suggests you use a separate anonymous address for Vairify.

9. International transfers

Vairify's systems run in the United States. By using Vairify you authorise the transfer of your data there. Vairify uses contractual safeguards with each provider.

10. Age

Vairify is for adults aged 18 or older. Every member holds a V.A.I., which confirms age before entry.

11. Changes

Vairify posts changes here with a new effective date and asks you to accept a changed version on your next visit.