Privacy Policy

Last updated 10 October 2026

Vimblu is a video-first dating app run by Tukbear Studios Ltd (“we”, “us”), a company registered in England and Wales under number 17478348, registered office 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. We are the controller of your personal data under UK and EU data protection law. You can reach us about privacy at hello@vimblu.com.

Dating is personal, and some of what you share with us — who you're interested in, and your face — is among the most sensitive data there is. This policy explains what we collect, why, who it goes to, how long we keep it and what you can do about it.

1. What we collect

• Account. Your email address. We send you a sign-in code rather than using a password.
• Profile. Your first name, date of birth, gender, height, your photos, and anything else you choose to add to your profile.
• Preferences. The genders, ages, heights and distance you're interested in. What you tell us about who you want to meet can reveal your sexual orientation, which the law treats as sensitive.
• Approximate location. Where you are, roughly, so we can suggest people within the distance you choose. We take it from your device with your permission, or estimate it from your IP address. It is never precise, and we keep only the latest.
• Your content. Your profile line, your messages to matches, any private note you write to yourself about a call, and your feedback to us.
• Plans with your matches. The times and places of calls or meetings you arrange with a match, and the neighbourhood on your profile if you add one.
• Verification data. See section 3.
• How you use Vimblu. Who you were paired with, whether you met, your decisions about people you met, who you have reported or blocked, and what our automated checks found. Technical information about your device, app and connection, including a token so we can send you notifications, and your time zone and language.
• Your settings, including whether you want notifications and when, and which matches may call you.
• Signup checks. When you sign up, a third-party service uses your IP address and information about your device to tell people from bots.
• Website visits. When you visit vimblu.com, our hosting records each request, including your IP address and browser, to keep the site working and secure and to count visits.
• Which ad brought you. If you came to Vimblu through one of our ads or links, the campaign it was tagged with is kept with your account.
• Cookies, on the website and web app: see our Cookie policy.
• App launch list. If you ask on our website to hear when an app is out: your email address, your first name if you give it, and your approximate country. We use it only to tell you.

We do not record calls, and we do not ask for your contacts, your ID document or payment details.

2. Video calls

Calls are carried by third-party providers and are not recorded. Your app checks the video it receives for nudity, on your device, and nothing from that reaches us unless a report is made. If a call is reported for sexual content, a short clip of video from each person's camera is sent to us, checked automatically, kept briefly so a moderator can review the case, and then deleted.

3. Face verification, and your age (biometric data)

Before you can make video calls you have to verify your face. You agree to this when you create your profile and accept this policy, which explains it. Your device records a short check that a real, live person is present. We then use an automated service to compare that face with your main profile picture, and to estimate whether it is old enough: if the estimate does not clearly place you over 18 we refuse the verification, and you can't make calls. The estimate is approximate, so you can be over 18 and still be refused; a refusal can only be cleared by a person, and you can ask us to look at it by writing to hello@vimblu.com.

We store the images from your most recent check, whether your picture matched, and the estimated age range. We do not use your face to train any model.

When we delete them. The images from an earlier check are deleted when you verify again, and we delete them when you delete your account — unless your account was restricted or somebody has reported you, in which case we keep them for up to two years after your account is deleted, so that we can investigate what happened, answer the authorities, and bring or defend legal claims.

If your account is restricted for breaking our rules, we keep the face from its verification on a private list and compare every new verification against it, so that someone whose account was restricted can't simply sign up again. A match restricts the new account too, and a person reviews it (section 7). The face is removed when the restriction is lifted, or two years after the account is deleted. Otherwise your face is only ever compared with your own main photo, and we don't use it to recognise you anywhere else.

What it proves. Only that the person who verified was really there and matched their main photo at that moment. It is not an identity check, and it says nothing about who is on camera during a later call.

Who can see them. No other user, ever. Our moderators can, to review a failed verification or a report about you.

If you'd rather not, you can keep a profile without verifying, but you can't make video calls. You can withdraw your agreement by deleting your account.

4. Photos

Your photos are checked automatically when you upload them, and are not shown to anyone else until they pass. We may refuse or remove a photo that breaks our terms; you can still see and delete your own refused photos. Photos are kept in private storage, and we remove the metadata your camera attaches, including any location, before storing them.

5. What others can see

People you are paired with see your first name, age, height, photos, profile line and roughly how far away you are, as a rounded distance. Your matches see the same, except the distance: instead they see your neighbourhood, if you've added one, and the plans you make together. Nobody sees your email address, your location, your date of birth, your preferences, your notes or your reports. Someone you report is not told who reported them.

6. Checks on what you write

Your profile line is checked before it is saved and your messages are checked before they are delivered, for content that breaks our terms. Some of these checks use AI services, which do not keep the text or use it to train models. Text that is refused is not stored; we keep only a record that a check acted, never what you wrote.

7. Automated decisions

Some decisions about your account are made automatically: whether a photo is approved, whether your verification and age check pass, whether a new verification matches the face of an account restricted before, whether a profile line or message is refused, whether your device hides or ends a call and reports the other person, and whether your account is restricted from pairing after reports about you or after images from your own camera are confirmed explicit.

These can significantly affect you, so a person reviews every automatic restriction and lifts it if it was wrong. You can also ask for a person to review any of these decisions, put your side, and contest it, by writing to hello@vimblu.com.

8. Who we share data with

We do not sell your personal data, and we don't share it for cross-context behavioural advertising.

Other users see what section 5 describes.

Service providers, who may only use it to provide their service to us, for: cloud hosting, storage and databases; sign-in and email; carrying video calls; delivering push notifications; automated checks on photos, faces, profile lines and messages; bot protection at signup; place and map information, which receives what you search for and an approximate location, never your name; website analytics, subject to your cookie choices. Most of this is in the EU; some providers are in the US. We'll tell you who they are if you ask.

Authorities and others, where the law requires it, to report child sexual exploitation and abuse, to protect someone's life or safety, or to bring or defend legal claims.

If Tukbear Studios Ltd or Vimblu is sold, merged or reorganised, your data may transfer to the new owner. They must keep to this policy, and may use your data only for the purposes it describes. Your face verification data transfers only to keep the same safety checks running, and is never used for anything else. We'll tell you before your data transfers, so you can delete your account first if you prefer.

9. International transfers

We are in the UK and your data is stored mainly in the EU, which the UK recognises as providing adequate protection, though call traffic may be routed wherever is nearest to the people on the call. Where data goes to the US, it is protected by the EU–US Data Privacy Framework and its UK Extension where the recipient is certified, or otherwise by the standard contractual clauses approved by the UK and the European Commission. Ask us for a copy of the safeguards.

10. Why we use your data, and our legal basis

Where we rely on consent you can withdraw it at any time, without affecting what we did before.

11. How long we keep data

• Your account and everything in it — profile, photos, profile line, neighbourhood, preferences, settings, location, matches, notes, chats and plans — for as long as your account is open. Chats, plans and notes about a match also go when the match ends.
• Verification images, as section 3 describes.
• Images from a reported call: 30 days.
• Records that keep other people safe — reports, blocks, the outcome of a report, records that an automated check acted, and what a moderator did — for up to a year after your account is deleted, because they are about how people were treated rather than about you alone.
• Technical and usage records: 90 days.
• Website request records: 14 days.
• Email you send us: up to two years.
• App launch list: until we have told you, and no longer than a year.
• Otherwise we keep personal data only while we have one of the purposes in section 10, and delete or anonymise it after that.

When you delete your account we delete your sign-in, profile, photos, profile line, matches, notes and chats. What stays is listed above.

12. Security

We encrypt data in transit and at rest, restrict who can reach it, and keep photos and verification images in private storage. No system is perfectly secure; if a breach puts you at risk we will tell you, and the regulator, as the law requires.

13. Your rights

You can ask us to access your personal data, correct it, delete it, send it to you or somebody else in a portable form, restrict or object to what we do with it, withdraw consent, and have an automated decision reviewed by a person (section 7).

Write to hello@vimblu.com. We will answer within a month, or sooner where your local law says so, and we may have to check it's you first. Exercising your rights costs you nothing and changes nothing about how we treat you. If we refuse a request you can ask us to look again.

If you're unhappy, tell us first. You can also complain to the UK Information Commissioner's Office at ico.org.uk, or to the data protection authority where you live.

14. Additional information for your region

EU and EEA. You can complain to your local supervisory authority.

United States. We do not sell or “share” personal information as US state privacy laws define it, and we do not use sensitive personal information to infer characteristics about you beyond providing the Service. Our website does not respond to Do Not Track signals beyond the cookie choices it offers.

States with biometric privacy laws. We collect face verification data only with your written consent, use it only to check that you match your main photo and are old enough, never sell, lease, trade or profit from it, and destroy it when that purpose is met or within three years of your last interaction with Vimblu, whichever is first.

Australia. We handle personal information in line with the Australian Privacy Principles, and you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Canada. You can complain to the Office of the Privacy Commissioner of Canada.

Brazil. You have the rights the LGPD gives you, and can contact the ANPD.

15. Children

Vimblu is for people 18 and over. You tell us your date of birth when you create a profile, and the check in section 3 has to see a face old enough before you can call anyone. We don't knowingly collect data from anyone younger; if we learn an account belongs to someone under 18 we close it and delete its data, except what we have to keep or report by law.

16. Changes to this policy

If we make a material change we'll tell you in the app or by email before it takes effect, and ask for your consent again where the law requires it.

Contact

Tukbear Studios Ltd, 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. Email hello@vimblu.com.