Security

What we don’t collect

The safest data is data we never hold. If a feature works without something, we don’t ask for it.

• No phone number. You sign in with Apple, so a phone number never ties your account to your real identity.
• No ID documents. We don’t collect them.
• No exact location. Your phone turns your position into a rough area before it sends anything. Our servers never receive your GPS coordinates.
• No location history. We keep only your current area, and replace it when you move.
• No ads and no trackers. The app has no advertising or analytics SDKs, and we don’t sell your data.

Your location

Researchers have found people on dating apps to within a few meters by asking for their distance from fake positions. We designed around that attack.

• The distance you see is never a true distance. It’s measured between two fixed, secret points, so asking again from a new account or a new spot doesn’t narrow it down.
• Nothing we send to other people contains coordinates or your area.
• You drop off the grid when you sign out, turn off location, or haven’t opened the app for 72 hours, so your last area, often home, doesn’t linger.
• You can turn off Show distance.
• We limit how often an account can change location, and automated tests run the published attack against our code on every change.

The honest limit: any app that shows useful distances can be narrowed down by someone determined. Turning off distance reduces what people learn, but it doesn’t make you invisible.

Your photos

• Photos are stored privately. There’s no public link to any photo; the app gets a link that stops working after 15 minutes.
• We re-encode every photo on our servers, which strips hidden details like where it was taken.
• Every photo, in profiles and chat, is checked against known child abuse material before anything else happens.
• Profile photos are screened for nudity before anyone else can see them. The check gets only the image, with nothing about who you are.
• If a check can’t finish, the photo stays hidden. We fail closed.

Your messages

Messages are encrypted on the way to our servers and while stored. They are not end-to-end encrypted. We made that choice so a report can include the messages that prove harassment or threats. We won’t describe chat as end-to-end encrypted unless that changes.

• Our moderation tools can’t browse chats. Staff see only what’s attached to a report, and every view is logged.
• Direct database access is limited to as few people as possible, behind multi-factor sign-in, with access to messages logged.
• Notifications don’t show who messaged you or what they said, so your lock screen doesn’t out you.

Who can reach your data

• Every table in our database is locked by default. The rules live on our servers, not in the app, so a modified app gets nothing extra.
• Automated tests check that strangers, blocked people, and suspended accounts can’t reach data they shouldn’t. A change that leaves a table unprotected fails our checks and can’t ship.
• Other people see you through an ID made just for them, so a scraper can’t match you across accounts. Browsing and profiles have strict limits.
• Apple’s device checks make it harder to run fake accounts or come back from a ban.
• Profile links like gayagendaapp.com/@name are optional. Every one shows the same page, real or not, so nobody can use one to check whether someone is on the app. There’s no handle search.

Blocking and reporting

• Blocking is instant and mutual. To the other person it looks the same as a deleted account, so they can’t tell they were blocked.
• Reporting saves the evidence, so someone can’t erase what they sent by blocking you or deleting their account.
• Reports about minors and threats go to the front of the queue, and a person decides every suspension.

Holding ourselves to it

• We keep a written incident plan: who responds, how we lock things down, and how we tell you if something happens.
• You can lock the app behind Face ID, so someone holding your unlocked phone still can’t open it.
• Our privacy policy names every service that handles your data.

We update this page whenever how we protect you changes.

Found a problem?

If you think you’ve found a security issue, email hello@gayagendaapp.com with “security” in the subject. Tell us what you found and how to reproduce it. Please don’t access other people’s data, and give us a chance to fix it before you share it. We’ll reply, keep you posted, and credit you if you’d like.