Privacy Policy

Vula ("we", "us") is a dating platform operated for users in Zambia. We are committed to protecting your privacy and complying with the Zambia Data Protection Act, 2021 and applicable international standards (GDPR-aligned best practice).

• Account data: email address, password (hashed), email-verification status.
• Profile data: nickname or real name (your choice), age, gender identity, sexual orientation, intent ("looking for"), city, bio, profile and album photos.
• Activity data: swipes (likes / dislikes), matches, messages you send, groups you join.
• Payment data: mobile money phone number, plan chosen, transaction reference. Card / wallet details are handled by our payment partner (Lipila) and never stored on our servers.
• Technical data: sign-in timestamps, device type, browser, IP address (collected by our hosting provider for security).

• To create and operate your account and profile.
• To match you with compatible people and show you in discovery.
• To enable chat and group conversations between matched users.
• To process subscription payments via Lipila mobile money.
• To prevent fraud, abuse, harassment, and illegal activity.
• To respond to your support requests and legal obligations.

We do not sell your personal data to advertisers or third parties.

We process your data on the basis of (a) the contract you accept when signing up, (b) your explicit consent for sensitive data such as sexual orientation, (c) our legitimate interest in keeping the platform safe, and (d) compliance with the law.

You can choose an anonymous profile (nickname only) or a real profile (real name shown). Your email address is never shown to other users in either case.

We share data only with:

• Lipila — to process mobile money payments.
• Our cloud database & hosting providers — under strict data-processing agreements.
• Law enforcement — only when required by Zambian law or a valid court order.

Under the Zambia Data Protection Act you have the right to:

• Access the personal data we hold on you.
• Correct inaccurate data (you can edit your profile at any time).
• Delete your account and personal data ("right to be forgotten").
• Object to or restrict certain processing.
• Export your data in a portable format.
• Withdraw consent at any time.

To exercise these rights, email privacy@vula.app.

We keep your account data while your account is active. When you delete your account, your profile, photos and chats are removed within 30 days. Limited transaction records may be retained for up to 7 years to comply with Zambian tax and anti-fraud laws.

Passwords are hashed, traffic is encrypted in transit (HTTPS/TLS), database access is restricted by row-level security, and photo storage uses signed URLs. No system is 100% secure — please use a strong, unique password.

Vula is strictly for adults aged 18 and over. Accounts found to belong to minors are deleted immediately.

We use only essential cookies / local storage required to keep you signed in. We do not use advertising or tracking cookies.

We may update this policy. Material changes will be announced in the app and by email at least 14 days before they take effect.

Data Protection Officer · privacy@vula.app