Privacy Policy

Effective date: 20 April 2026

This Privacy Policy explains how Vybe sp. z o.o. (“Vybe”, “we”, “us”, or “our”) collects, uses, stores, shares, and protects personal data when you use the Tonight mobile application and related services (the “App” or “Service”).

Tonight is a social discovery and meetup app that allows users to create profiles, discover nearby users, match with other users, and participate in meetup zones. When two users mutually agree to a meetup inside a meetup zone, the App enables real-time location sharing between those users for the duration of that meetup.

By using Tonight, you acknowledge that you have read this Privacy Policy.

1. Who We Are

Data Controller:
Vybe sp. z o.o.
Fasolowa 45 / 12
02-482 Warszawa
Poland

VAT / Tax ID: PL5223292597
Email: contact@vybe.social

2. Who Can Use Tonight

Tonight is intended for users who are at least 16 years old.

You must not use the App if you are under the minimum age permitted by applicable law in your country or region to use this type of service. We may take steps to verify age and to restrict, suspend, or remove accounts that do not meet our eligibility requirements.

3. What Data We Collect

Depending on how you use Tonight, we may collect the following categories of personal data.

A. Account and Profile Data

When you create and maintain an account, we may collect:

• your name
• date of birth
• profile photos
• bio
• interests
• account identifiers
• selfie verification data
• preferences you choose to provide, including profile-related preferences

B. Sensitive and Special-Category Data

Because Tonight is a profile-based social discovery app, certain profile or usage information may reveal or relate to sensitive personal data, including:

• sexual orientation
• gender identity
• biometric or facial verification-related data, where used for selfie verification

We only process such data as necessary to provide the Service, verify authenticity and safety, prevent fraud and abuse, comply with legal obligations, or where otherwise permitted by applicable law.

C. Location Data

We collect location data in different ways depending on the feature being used:

Approximate background location

• used to detect whether you are entering or exiting a meetup zone

Precise background location

• collected only after two users mutually accept a meetup
• shared with the other meetup participant during the meetup
• used for the full duration of the meetup until the meetup ends or is cancelled

If you cancel a meetup, real-time location sharing for that meetup stops.

D. Usage and Device Data

We may collect technical and usage information such as:

• device type
• operating system
• app version
• language
• IP address
• approximate region
• crash logs
• diagnostic data
• app interaction events
• feature usage information
• notification tokens

E. Safety and Moderation Data

We may collect:

• reports submitted by users
• block lists
• moderation decisions
• fraud and abuse signals
• verification outcomes
• account restriction or ban history

4. How We Collect Data

We collect personal data:

• directly from you when you create an account or edit your profile
• from your device when you use location-enabled or notification-enabled features
• automatically through analytics, diagnostics, and security tools
• from moderation, verification, fraud-prevention, and abuse-detection processes
• from other users when they report or block you

5. How We Use Your Data

We use your personal data to:

• create and manage your account
• display your profile to other signed-in users nearby
• enable matching and swiping features
• determine whether you are in or near a meetup zone
• suggest meetups within meetup zones
• enable and maintain real-time location sharing during an active meetup
• stop location sharing when a meetup is cancelled or ended
• send push notifications, including:
  • new matches
  • meetup suggestions
  • meetup zone entry and exit
  • safety notifications
  • secret event invites
• verify that users are real people and reduce impersonation
• moderate profiles, photos, and behavior
• detect, prevent, and investigate fraud, abuse, harassment, ban evasion, and other harmful activity
• respond to user reports and safety issues
• monitor app performance, fix bugs, and improve the Service
• comply with legal obligations and enforce our Terms

6. Legal Bases for Processing

Where the GDPR or similar laws apply, we rely on one or more of the following legal bases:

• Performance of a contract: to provide the core functionality of Tonight, including accounts, profiles, matching, meetup zones, meetup suggestions, and active meetup location sharing
• Legitimate interests: to protect the safety, security, integrity, and performance of the Service; prevent fraud and abuse; moderate content; and improve our systems
• Consent: where required by law, including for certain permissions, such as device location permissions and notifications
• Legal obligation: where processing is necessary to comply with applicable law, regulatory requirements, law enforcement requests, or legal claims

7. How Profile Visibility Works

Your profile, including your photos, name, age or date-of-birth-derived age, bio, and interests, may be shown to other signed-in users nearby.

Because this is a core feature of the Service, you should only upload content that you are comfortable sharing with other users of the App.

8. How Meetup Location Sharing Works

When two users mutually agree to a meetup:

• precise real-time location is shared between those two users
• sharing continues for the duration of that meetup
• either user may cancel the meetup at any time
• when a meetup is cancelled, real-time location sharing for that meetup stops

A user may also opt out of matching after entering a meetup zone, in which case the user will no longer participate in meetup matching within that zone, subject to any already active meetup session until ended or cancelled.

9. Verification, Moderation, and Safety

To promote user safety and platform integrity, we may use:

• selfie verification
• automated fraud, abuse, and moderation systems
• manual review of profiles and photos
• user reporting and blocking tools

These measures help us detect fake accounts, impersonation, prohibited content, harassment, misuse, and ban evasion.

We may remove content, restrict features, suspend accounts, or permanently ban users when we determine that this is necessary to protect users or enforce our rules.

10. Third-Party Service Providers

We may share personal data with service providers that process data on our behalf to operate, host, secure, analyze, map, moderate, and support the Service. These providers may include:

• Supabase – database, backend, and infrastructure functions
• PostHog – product analytics
• Sentry – error monitoring and diagnostics
• Vercel – hosting and delivery infrastructure
• Mapbox – maps and location-related services
• OpenAI – moderation, fraud, abuse-detection, or safety-support functions where applicable

We may also share data:

• when required by law
• to respond to valid legal requests
• to protect rights, safety, and security
• in connection with a merger, acquisition, restructuring, financing, asset sale, or similar corporate transaction

We do not sell your personal data, and we do not use third-party advertising in the App.

11. International Data Transfers

Because Tonight is offered worldwide, your personal data may be processed in countries other than the country where you live.

Where required by applicable law, we take steps intended to provide appropriate safeguards for international transfers, such as contractual protections or other lawful transfer mechanisms.

12. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, including to provide the Service, maintain safety, prevent fraud, resolve disputes, enforce our agreements, and comply with legal obligations.

Account Data

We keep your account and profile data while your account remains active.

Account Deletion

You can delete your account from within the App settings. You can also request deletion outside the App at:

https://tonight.zone/delete-account

When you delete your account, we delete your account data immediately, except where we need to retain certain data for legitimate safety, fraud-prevention, ban-evasion prevention, legal, or compliance reasons.

Facial Features / Verification Data

Certain facial feature or verification-related data may be retained for longer after account deletion where reasonably necessary to:

• prevent ban evasion
• detect repeated fraud or abuse
• protect the safety and integrity of the Service
• comply with legal obligations

Where retained for these purposes, we limit use of that data to those purposes.

Reports, Safety, and Enforcement Data

We may retain reports, blocks, moderation outcomes, and enforcement records for a longer period where needed to investigate abuse, support appeals, protect users, or comply with legal obligations.

13. Your Rights and Choices

Depending on where you live, you may have rights to:

• access your personal data
• correct inaccurate data
• delete your data
• object to or restrict certain processing
• withdraw consent where processing is based on consent
• request portability of certain data
• lodge a complaint with a supervisory authority

You may also:

• edit your profile information in the App
• opt out of matching after entering a meetup zone
• cancel a meetup at any time to stop real-time location sharing for that meetup
• disable location permissions through your device settings, although some features may stop working
• disable push notifications through your device settings

To exercise privacy rights, contact us at contact@vybe.social.

14. Security

We use reasonable technical and organizational measures intended to protect personal data against unauthorized access, loss, misuse, alteration, and disclosure.

However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

15. Children

Tonight is not intended for children below the minimum permitted age. If we learn that we have collected personal data from a user who is not eligible to use the Service, we may delete the account and associated data, subject to any retention necessary for safety, abuse-prevention, or legal reasons.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

If we make material changes, we may notify you through the App, by email, or by other appropriate means. The “Effective date” at the top of this Privacy Policy indicates when the latest version took effect.

17. Contact Us

If you have questions, requests, or complaints about this Privacy Policy or our privacy practices, contact:

Vybe sp. z o.o.
Fasolowa 45 / 12
02-482 Warszawa
Poland
Email: contact@vybe.social