Vernos · Buenos Aires
Privacy
What information we use, why, and what you can choose.
Current service information.
Who is responsible
Vernos's operator: Marcos Pozzi. For privacy, access, correction or deletion: marcos@vernos.org.
The beta waiting list
If you sign up, we receive your email, chosen area, phone type and confirmation that you are over 18 and agree to receive these messages. We store the registration date, confirmation and version of the information accepted. If you came from a campaign, we may store a source label, without an advertising profile.
We use this information to confirm your registration, organize testing groups and send beta news. Your email, area and registration are not published. You can stop receiving messages through the unsubscribe link or the contact on this page. Cleanup removes each registration 90 days after you sign up, or after you confirm it if you did; unsubscribing removes the active record sooner. If we send you a confirmation link, it expires after 48 hours.
Your account and app profile
Your account uses your email and, depending on how you sign in, a hashed password or Apple or Google identifiers. Your profile includes a display name, birth date, gender, biography, city, photos and discovery preferences. Age and preferences help limit connections to compatible adults. You can choose an area manually. For area selection and discovery, if you choose phone location, the app requests permission for a one-time foreground lookup and sends an approximate position to resolve the area and calculate proximity; this flow does not request precise location or background tracking. We retain the last approximate position you provided, not a movement history. Choosing an area manually later removes that position from your active profile.
Where the location screen explains it and you choose to continue, a reliably inferred neighborhood may appear on your profile. If it cannot be inferred, we show no neighborhood and do not publish your position. This does not publish positions saved before that choice. Without location, browsing defaults to CABA without distance filtering; manually choosing another area is optional.
Other compatible people can see the information you publish on your profile, such as photos, display name, age, biography and city. We do not publish your email or full birth date. Choose what to share in your biography; do not include details you don't want to share.
Sharing a plan with someone you trust (optional)
When this feature is enabled, you can share a confirmed meeting through a link that opens in a browser without an account or app download. It includes your display name, available photo and the agreed plan details. The other person's name and photo are included only if you turn that option on. Anyone with the link can open or forward it; we cannot prevent screenshots.
Live location is a separate choice, initially off. If you enable it and grant system permission, your phone sends your location—precise or approximate depending on permission—for the session, including in the background where the operating system permits, with a visible indicator or notification. We do not reuse your stored discovery position. We keep only the session's latest point, accuracy and capture/receipt times; we do not create a route history or send it to product analytics or content-review providers.
You choose 15 minutes to 12 hours and can edit the duration, stop location or close the link. Stopping location clears the point from the active record while keeping the plan until link expiry. Expiry, closure or loss of access to the meeting stops the link from showing details and clears them from the active record. Backups follow the retention periods below. The page shows the last signal time and hides details if it cannot verify access; a signal does not confirm arrival or safety. This is not an emergency service.
Ways to connect
You can choose phrases about your interests, write your own and enable comfort preferences, such as alcohol-free plans or a short first date. These are optional and visible to people allowed to view your profile. We do not infer personal traits or calculate compatibility or ranking from those phrases. They express personality and do not create matches on their own.
If you publish a date idea, eligible people can see its title, description, area, date and time if chosen, and your profile, for up to 14 days (or until 2 hours before its scheduled time), subject to moderation. Do not include a home address, phone number or private information. You can withdraw it earlier. Interest in that idea and the response are visible only to the two people involved and the team when needed to operate or moderate the service. Accepting creates a match without confirming a date; a dated idea may also send an invitation, confirmed only if the other person accepts. We retain these ideas and interests with the account even after they stop appearing in discovery; they are covered by the corresponding access and deletion features. Notification presentation depends on available settings and your preferences, as explained below.
Conversations and plans
We store mutual interests, messages, blocks, plans, dates, proposed places, changes and responses to provide these features. In a one-to-one conversation, messages and plan details are shared with the other match. Joining a group friendship plan requires accepting the shared chat; authorized members can see messages, participants and group agreements according to their access period. Leaving a group does not delete what you already shared or copies other members saved. You cannot read messages sent after you leave. Messages are not end-to-end encrypted: the service processes them to operate and handle reports. The typing indicator is temporary; we do not send or store draft text to display it.
Adding a plan to your calendar or opening directions transfers the information you chose to the app used for that action. That copy is under your control and may need to be changed or deleted manually.
Automatic review of public content
Before sending your public content to automatic review services, we show you the providers and ask for permission. You can choose team review and keep using your account. You can change this choice in Settings; if the provider or type of data sent changes, we ask again. Withdrawing permission prevents new automatic-review requests but cannot recall a request already sent. This choice does not enable analysis of your private chats.
We use DeepSeek to review public profile and plan-idea content. We send the display name and public profile text, profile photos, and the title, description, area, place and images included in a plan idea. Videos you select for a publication are uploaded with their audio. For review, we extract frames and send those images to DeepSeek. We transcribe audio using Whisper running on our infrastructure and send the resulting text to DeepSeek for content review; this flow does not send the audio file to DeepSeek or the OpenAI API. We do not store the transcript in moderation results or process logs. The hosted original video retains its audio. Audio signals considered uncertain leave the publication pending; automated checks can be wrong, so you can also report published content. This review does not send your private conversations, password, account email, internal identifiers or precise coordinates. If you write personal information in public content, it may also be included in the review.
When text, images and, for video, frame and audio checks pass, the profile or plan may be approved automatically. Signals of possible violations remain pending a team decision. A missing image or provider failure does not result in approval. This review does not verify identity, estimate age from a photo or grant the photo-verified badge. You can ask the team for a review.
The alternative assisted-review mode uses OpenAI for text and AWS Rekognition for images only when that mode is enabled; in that mode, decisions remain with the team. These providers may process information outside Argentina. We are confirming DeepSeek's specific terms for retaining, deleting and using Vernos members' data for training; we do not promise immediate deletion or exclusion from training where the provider has not confirmed it. See the DeepSeek API terms and OpenAI's business data information.
Vernos keeps detailed review results for up to 14 days. A minimal signal that a review is pending may remain while that same content is pending, to prevent it from being approved again without resolving the review. These results do not contain copies of the photos or text sent.
Feedback and reports
In this beta's configuration, post-meeting feedback goes to the Vernos team for safety work. It is not shown to the other person or on profiles. Profiles do not display personal scores, percentages, received reviews or feedback-derived badges, and feedback is not used to rank or recommend people. Safety reports are reviewed separately.
Reports, private notes and safety signals go to the authorized moderation team. They are used to investigate incidents, respond to appeals and take action. They are not published as profile comments.
If you delete your account, reports you submitted and reports about you are also deleted, along with their moderation notes. We do not retain reports or moderation notes identifying you. To repeat a deletion or moderation action after restoring a backup, we keep a pseudonymized record that it happened for up to 15 days, without your name, email or content. If your account is suspended or banned, sign in again to open restricted-account options: you can request a copy of your data or delete your account without regaining access to dating features. If access for these actions expires, sign in again or contact support.
Notifications, photos, videos and technical data
If you enable notifications and delivery is available for your account, we register a device token to send them through Apple's Push Notification service or Google's Firebase Cloud Messaging. The beta may limit delivery to a test group; permission does not guarantee all notifications are available. Depending on configuration and available choices, a notification may include the other person's display name and the plan title. Message text is included only if you choose an option that permits it; discreet mode hides names and titles. You can disable notifications on your phone. Local reminders also depend on device permissions and conditions.
We upload only photos and videos you select. The server resizes photos and removes image metadata when processing them. Profile photos are intended to be seen: someone with a photo's link can access it while it remains available. Approved plan attachments are shown to people who can view that publication; video may include voices and other sounds. Withdrawing the plan prevents public viewing within the service but does not delete external copies. Do not upload private material or someone else's material without permission.
We record technical data and events needed to operate the service, investigate failures and limit abuse. Optional usage metrics depend on your account's analytics preference; support diagnostic permissions can be withdrawn. Technical data may include account or installation identifiers, app version, operating system and delivery results. We do not use an advertising identifier or sell your data in this version. The landing page does not load advertising pixels or third-party analytics tools.
Providers and retention
This beta runs on Amazon Web Services (AWS Lightsail) in the São Paulo, Brazil region. The database and photo and video files are stored on the beta server. We make local backups and encrypted copies outside that server. Cloudflare manages the domain and DNS; services passing through its network may also process technical connection data. Apple and Google process social sign-in when you choose it. Apple and Google handle distribution through TestFlight and Google Play respectively, and feedback or diagnostics you share with those platforms under their own terms. This involves processing outside Argentina.
Recovery and beta emails depend on the sending service being enabled. If the app says recovery is unavailable or you cannot regain access, email marcos@vernos.org. Do not send your password.
We retain account data while the account is active. You can request a copy or delete it in the app. Deletion removes your profile, hosted photos and videos, individual messages, matches, publications and associated feedback from the active system, including linked reports and moderation notes. In groups, your messages and responses are deleted and your identity is unlinked; if you were the organizer, the group is closed and its texts and agreements linked to you are removed. Membership records without your identifier and other members' messages may remain. We cannot delete copies others saved outside Vernos.
Local database and file backups rotate within 14 days. Encrypted AWS S3 copies are configured to expire after 14 days; older versions expire one day after becoming noncurrent, and deletion also depends on AWS cleanup. We therefore do not promise that every external copy disappears at exactly 14 days. The pseudonymized deletion and moderation record is kept for up to 15 days to reapply those actions after a restore. Its external copies expire after 15 days, with the same extra day for older versions and AWS cleanup time. It contains no name, email or profile content. A backup does not reactivate a deleted account: recorded deletions and restrictions must be reapplied before service resumes after a restore.
If you signed in with Apple, encrypted data needed to complete access revocation with that provider may be kept temporarily. It does not keep your profile active. We do not state a general exception allowing indefinite retention of deleted information.
Your choices
You can edit your profile and preferences, block or report, disable notifications, request access or correction and delete your account. You can also leave the waiting list without creating an account. We will reasonably verify your identity before providing or deleting data; we never need you to send your password.
Optional photo verification
Photo verification is optional. If you choose it, the app asks for separate consent and camera permission to capture selfie images with gestures. On our infrastructure, we compare those images with your photos and calculate a numerical face template, which is biometric data. A team member reviews the case before granting the badge. The badge indicates a photo match; it does not verify identity, name or age.
Review images are private to the authorized team. They are deleted when the case is resolved or consent is withdrawn; pending cases or cases awaiting a first photo expire after 14 days and cleanup removes their files. The template may be retained while verification remains active to check changes to the main photo. Withdrawing consent in Settings deletes the active template and badge; attempt metadata stays with the account until deletion. Database backups may contain a previous template during their retention period. New file backups exclude private review images.
On Android, Google ML Kit guides gestures on the phone; ML Kit processes those images locally, but the SDK sends technical usage and performance data to Google. Google Play Integrity may process app and device integrity signals; iPhone uses Apple App Attest. These are technical checks, not identity verification. Additional selfie comparison through AWS Rekognition is not enabled in this beta. If that use changes, we will inform you before sending images to that provider.
Maps and images from other services
Embedded maps use MapLibre with OpenFreeMap maps. Opening them requests the displayed area's map from your phone or browser, and the provider receives connection data such as your IP address. This does not by itself activate location permission. Appearing on the people map requires a separate, revocable choice of neighborhood; it shows a reference area for that neighborhood, not your exact position.
If you choose to search Wikimedia Commons for a plan image, we send your search text to that service. Previews load from its servers, which receive the phone's request. When you import an image, we store the selected copy with its credits and license. You can use your own image instead.
Google Maps place search
When you search for a public place, we send Google the search text, area you enter and a temporary session identifier. We do not send your profile, messages or GPS location. Google's names and addresses are displayed temporarily; we store the place identifier and the meeting point you write, not its photos or coordinates. You can use the independent catalogue or choose a place manually. Opening Google Maps is subject to its Privacy Policy and Additional Terms.
Minors and changes
Vernos is only for people aged 18 or older. If you notice a minor's profile, report it. Read our child safety standards. When we change how information is used, we will update this page and communicate significant changes before applying them where required.