FEMSY • Version dated 1 October 2026
Femsy is a dating and social-discovery service for adults. This policy explains how personal information is handled when you create an account, discover profiles, communicate with members, buy a subscription or contact us. It also explains visibility controls, account deletion and your privacy rights.
Our Terms of Use govern use of the service. Accepting those Terms or reading this policy does not, by itself, give consent to optional processing or to uses of sensitive information that require explicit consent.
The controller is Mohamed Ayad, entrepreneur individuel (a French sole proprietor), operating Femsy, SIREN 951467034. The controller determines why and how the personal information described in this policy is processed.
For privacy questions, requests or complaints, email support@femsy.app or write to Mohamed Ayad, FEMSY Privacy, 7 rue Beaugrenelle, 75015 Paris, France. You can use this contact even if you cannot sign in or have already requested account deletion.
Femsy is exclusively for people aged 18 or over. Your date of birth is mandatory at registration and is used to assess your declared eligibility. Declaring a date of birth does not mean that every member’s age has been independently verified. Photo verification is not a guarantee of age.
Where there is a reasonable concern that someone is under 18, we may restrict or suspend their account and request proportionate information to resolve the concern. Any additional collection for an age check must be explained before the information is requested. Do not send identity documents unless we request them through a suitable channel.
If an account belongs to a minor, we close it and delete the associated information, except limited records that must or may lawfully be retained for a specific safety or legal purpose. An account may also be removed if eligibility cannot reasonably be established. Report a suspected underage account through its profile or support@femsy.app. You may request human review of an eligibility decision.
We receive information from you, from your use of Femsy, from other members who contact us about you, and from the providers involved in operating the service. The categories are described below.
Account and sign-in information: your mobile number, date of birth, username, internal account identifier, session information and verification-attempt results. Sign-in uses a telephone number and verification code. We may also receive your email address when you contact support.
Profile information and preferences: display name, age derived from your date of birth, profile photographs, biography, gender information, dating preferences and the attributes or filters you choose to provide. Some of this information can reveal sexual orientation or sexual life.
Discovery and interactions: location used for nearby discovery, places selected in Explore, visibility settings, activity information, profile visits, favourites, Roses, text-only NOW posts and interactions needed to provide those features.
Communications: message contents and supported attachments, sender and recipient identifiers, timestamps, delivery or read information and location information you deliberately share in a chat. View-once photographs are included in this category.
Verification and moderation: material submitted for photo verification, the resulting status or decision, reports, relevant evidence, moderation results, account restrictions and requests for review.
Purchases: subscription product, transaction or purchase identifiers, entitlement status, purchase, renewal and expiry information, and store-related records needed to activate or restore paid access.
Technical information: IP address, device and app characteristics, session or app identifiers, connection records, errors and security events used to operate and protect the service.
Privacy choices and support: consent and withdrawal records, correspondence, account-deletion requests and information needed to handle requests concerning your rights.
Optional measurement: app-interaction events and identifiers used for optional analytics or attribution, subject to the separate information and choices described in section 10.
Provide accurate registration information and choose carefully what to include in optional profile fields. If information is needed to provide a requested feature, that requirement and the consequences of not providing it must be explained when it is requested.
Other members can supply information about you in reports or support correspondence. Apple and Google supply purchase-related information. Providers may return verification, technical or moderation results. Competent authorities may provide information in the exercise of their legal powers.
A dating profile, preference, message or interaction can reveal highly private information. Information about sexual life, sexual orientation, health, ethnicity and other categories protected by Article 9 of the GDPR needs an additional legal justification. We also handle gender information carefully; gender identity does not, by itself, establish someone’s sexual orientation.
For the sensitive profile information, preferences and content-sharing functions that rely on consent, we require specific, explicit consent before the relevant processing. This choice must be separate from acceptance of the Terms and from optional analytics consent. Merely registering, sending a message or completing a field is not blanket permission for unrelated uses.
You may withdraw consent by contacting support@femsy.app and identifying the processing concerned. You may also remove optional profile information and use any relevant privacy controls offered in the app. Withdrawal does not affect earlier lawful processing. We stop the processing covered by withdrawal and delete the relevant information unless a specific lawful exception permits or requires its retention.
If information is genuinely necessary for a feature you request, withdrawing the relevant consent may make that feature unavailable. We explain that consequence. You do not have to delete your entire account just to withdraw an optional consent. Optional analytics or unnecessary disclosures are not conditions for access to the core service.
Consent between members to exchange intimate images is distinct from the legal basis Femsy needs to process those images. The Terms permit lawful, consensual adult nudity in private one-to-one chats and prohibit it on profiles and other non-private surfaces. Those rules do not authorise additional use of intimate content by Femsy or its providers.
With your permission, Femsy uses device location for nearby discovery and distance calculations. The location received can be more precise than the distance displayed to another member. Distances may be approximate or delayed; an approximate display does not guarantee that your whereabouts cannot be inferred from other information.
Without the required device-location access, nearby profiles cannot be displayed, but you can still use messaging. You can change permission in your device settings. Withdrawing permission stops further access under that permission; it does not automatically erase information already stored. Contact support@femsy.app to request deletion of stored location information.
Explore uses a place you manually select as a search reference. It does not establish that you are physically present at that place. If you deliberately share a location in a conversation, the recipient receives the information you choose to send. Consider whether it could identify your home, workplace or routine.
Device permissions apply to access from your device. They do not authorise unrelated location profiling, advertising use or disclosure. Any additional collection or use outside the discovery and sharing purposes described here requires its own explanation and lawful basis.
Profiles are accessible to signed-in members. Depending on the feature and your settings, members can see your display name, username, displayed age, profile photographs and details, NOW text, distance, activity information and verification status where displayed. Visits, Roses and read information can also be revealed through the corresponding features and access entitlements.
Your telephone number, full date of birth, authentication information, device identifiers and purchase records are not ordinary public profile fields. If you include such details in your biography or a message, the recipients can see what you disclose.
Incognito hides your profile from the discovery grid and prevents your profile visits from appearing in other members’ visit history. Members you message or send a Rose to can still see your profile. It does not erase earlier disclosures or messages, and it does not make your activity anonymous to Femsy.
Blocking makes the two accounts disappear from each other within the app. Blocking is not deletion of server records or copies already received. No visibility setting guarantees that a person cannot recognise you or preserve information outside Femsy.
Femsy and the providers that operate messaging and storage process conversations and attachments to deliver and store them, apply access controls and handle the safety and legal purposes described below. “Private” describes the intended audience; it does not mean that message content is outside this processing or guaranteed to be end-to-end encrypted.
Access by authorised personnel must be limited to what is necessary for a specific report, relevant support request, safety concern or legal requirement. We do not continuously read every conversation. Private conversation content is not used for advertising, and this policy does not grant permission to sell intimate images.
A view-once photograph can be consulted once for up to ten seconds. An unopened photograph does not automatically expire. Viewing it does not delete its server copy. The viewing restriction and the storage lifecycle are separate; account deletion, privacy requests and limited lawful retention are addressed in sections 14 and 15.
Femsy does not guarantee screenshot prevention or recording detection. A recipient can potentially capture content using another device. We cannot retrieve copies independently saved outside Femsy, but remain responsible for information within our own systems and those of our processors. The Terms prohibit redistribution of intimate content without the required permission and lawful basis.
Photo verification processes the material submitted for that check and its result. Before requesting verification material, we must explain the actual inputs, the method used, the recipients, whether a biometric template is created, the retention arrangements and the consequences of refusing or withdrawing consent. This policy does not, on its own, authorise biometric identification. Where explicit consent is required, it must be obtained separately before processing.
A verification status describes the check performed. It is not a guarantee of identity, age, background or future behaviour. You can contact support@femsy.app about verification information, withdrawal of an applicable consent or a disputed result.
Femsy uses automated checks for photographs. The service does not comprehensively screen all other content through an automated moderation system. Reports are reviewed by a person; the operator reviews reports daily and provides support in English. Automated results can be incorrect and may lead to review or protective action under the Terms.
To investigate a concern, we may process the report, relevant profile and account information, pertinent messages or attachments, associated technical records and moderation history. The in-app reporting route is profile-based. To identify a particular message, provide the account identifier, context and approximate date and time through support. Do not forward illegal imagery, especially sexual material involving children.
Account and device information, verification attempts and security events may be used proportionately to detect unauthorised access, prevent account abuse and investigate incidents. A security purpose does not authorise unlimited tracking or collection of unrelated device information.
Where a third-party AI service is used, the recipient, information transmitted and purpose must be disclosed before the transmission, together with any explicit permission required for that sharing. Providers must not receive a wider set of content than is needed for the stated task.
You may challenge a content or account decision and request human review at support@femsy.app within six months of notification, as explained in the Terms. Any additional legal safeguards for significant automated decisions remain available. We may preserve relevant evidence, respond to lawful requests and send necessary safety or fraud notifications, subject to a valid legal basis and limited disclosure.
Purchases are made through Apple’s in-app purchase system or Google Play billing. Those stores process payment. Femsy does not receive your full payment-card number or card security code through these purchases. We process transaction and subscription information to activate paid features, restore purchases, handle support and meet applicable accounting obligations.
We use the account category and subscription entitlements relevant to your offer to apply the disclosed access rules and allowances. Where an account has a three-new-conversation allowance, the start of the applicable 24-hour period and use of that allowance are processed to apply the limit. This does not require reading message contents to determine whether a new conversation has started.
Apple and Google also process information for their own store and payment purposes under their respective notices. Their role differs from a provider acting only on Femsy’s instructions. Prices, renewal and cancellation are addressed in the Terms rather than this policy.
Essential technical records help operate the service, diagnose faults and protect accounts. Optional usage analytics and identifiable attribution are separate purposes. Where those functions are enabled, we require the appropriate prior consent and an explanation of the events, identifiers, recipients and retention involved. They must remain inactive until any required consent has been obtained. You can withdraw the relevant consent through support@femsy.app and any corresponding controls offered in the app, without losing core access.
For measurement of conversations started through username search, the counting rule is one first conversation per sender-recipient pair, counted once for the recipient. Later messages do not each become a new conversion. Message contents are not read to calculate those totals. A linked event remains personal information even if the dashboard displays only a count. Optional identifiable measurement requires a distinct lawful basis and explicit consent where it reveals protected sensitive information.
This policy does not authorise sale of personal information or unrelated cross-company advertising use. Any proposed advertising or tracking processing must be described accurately before it starts, with the choices required by law and platform rules. Where Apple’s tracking permission is required, it must be obtained in addition to any separate legal consent. Permission does not authorise a prohibited tracking technique.
Push-notification services process a device token and the information needed to deliver an enabled notification. Notification previews can reveal information on a lock screen, depending on your settings. You can manage permission and previews in the operating system.
Camera, photo-library and microphone access, where relevant, relate to the feature you choose to use. You can change these permissions on your device. Permission is not consent to unrelated reuse. Session storage and similar technologies support necessary functions; optional analytics identifiers remain subject to the applicable consent requirements. An external website’s or store’s own processing is governed by its notice.
For processing governed by the GDPR, we use the following legal grounds. Information protected by Article 9 also requires an additional applicable condition; a contract or legitimate interest alone is insufficient.
Contract performance, Article 6(1)(b): creating and operating the account, authenticating access, delivering requested communications and manually selected Explore searches, providing subscriptions and applying the access rules necessary for the agreed service.
Consent, Article 6(1)(a): permission-based location processing and optional functions that rely on consent, including relevant verification, analytics and attribution. For sensitive profile, preference or content-sharing processing based on consent, Article 9(2)(a) requires explicit consent.
Legitimate interests, Article 6(1)(f): proportionate account security, abuse investigations, essential fault diagnosis and handling enquiries where these purposes are not covered by the contract. We must assess necessity and balance those interests against your rights and expectations.
Legal obligations, Article 6(1)(c): obligations that actually apply to Femsy, including relevant accounting duties and binding requests. A legal obligation must be specific; it is not a general justification for all retention or moderation.
Legal claims: establishing, exercising or defending a specific claim may rely on a legitimate interest or applicable legal duty. Where sensitive information is necessary for that claim, Article 9(2)(f) may provide the additional condition.
Processing sensitive information for safety purposes needs a separately applicable legal condition, and any offence-related information requires the authorisation and safeguards required by law. We cannot substitute a general reference to “security” for those requirements.
You may object to processing based on legitimate interests for reasons relating to your circumstances. We then stop unless we establish legally sufficient overriding grounds or the information is needed for legal claims. An objection to direct marketing does not require that balancing exercise.
12. Partage avec des tiers
Other members receive information through your profile, messages, deliberate sharing and the visibility rules in section 6. Authorised personnel and providers may access information only for their assigned responsibilities and the purposes described in this policy. The relevant provider categories are:
Authentication and SMS-verification services, which handle telephone numbers, verification and delivery information and relevant technical records.
Database, hosting, storage and messaging services, which handle the accounts, profiles, communications and attachments needed to operate Femsy.
Map and place-search services, which handle relevant location or place queries and technical request information.
Photo-verification and moderation services, which receive the specific material and metadata necessary for the disclosed check.
Subscription-management services, which process app-user identifiers, transaction records and entitlement information.
Notification-delivery, operational diagnostics and security services, which receive the tokens, payloads, errors or security information needed for the function.
Optional analytics or attribution providers, only within the disclosed purpose and applicable permission arrangements.
Development and maintenance contractors, only where access to personal information is necessary and authorised.
Providers acting on our behalf must be subject to appropriate written confidentiality, security and data-protection obligations. We remain responsible for their selection and oversight. We limit the information shared and require appropriate restrictions on reuse. Contact support@femsy.app for information about recipients relevant to your data; notices at collection must identify specific recipients where required, including for verification or third-party AI processing.
We may disclose necessary information to competent authorities when legally required and to professional advisers for a specific legal or compliance matter, subject to confidentiality and a valid legal basis. Safety notifications to affected members must be limited to the relevant purpose.
If the service is transferred or restructured, information may be transferred only with applicable safeguards, notices and any required consent. A transaction does not itself permit unrelated reuse. Store processing by Apple and Google remains subject to their own responsibilities.
Service providers and authorised personnel may process or access information outside your country. An EU hosting location would not, on its own, exclude access from another country. We do not treat all recipients as covered by the same transfer mechanism.
For a transfer governed by the GDPR, the transfer must rely on an applicable adequacy decision or appropriate safeguards, such as the European Commission’s standard contractual clauses, together with assessment and supplementary protection where necessary. Any additional transfer requirements under the law applicable to your information must also be met.
You may request information about the destinations, recipients and safeguards applicable to your information, including a copy of relevant safeguards where available, from support@femsy.app. Necessary redactions may protect other people’s information or confidential contractual details.
Retention depends on the category of information, the purpose, account status and any specific legal requirement. Making information invisible is not necessarily deletion. We apply the following criteria; they do not authorise indefinite retention simply because storage remains technically possible.
Account, profile and preferences: while required to provide your active account, then through the account-deletion process and any specific lawful retention described below.
Messages and attachments: while needed for the conversation service and the relevant account, subject to deletion requests and limited safety or legal exceptions. View-once photographs do not expire automatically before opening and are not erased from servers merely by viewing them.
Deletion recovery: account information needed to permit recovery is retained during the 30 days following a deletion request. The consequences of logging back in are explained in section 15.
Verification inputs and results: only for the disclosed verification purpose, necessary review and any justified legal requirement. Original media, any biometric information and the verification result must have separately justified retention. The applicable arrangements must be given before verification material is collected.
Location and selected places: for the discovery or sharing function concerned, then subject to removal, consent withdrawal, account deletion and any specifically justified exception. Withdrawal of device permission does not itself erase previously stored records.
Security records and operational diagnostics: for investigation, remediation and a proportionate period needed to address recurrence or a documented legal claim; unnecessary personal content must be removed.
Reports, moderation decisions and evidence: while a matter is being handled and through the applicable challenge period, including the six-month review window in the Terms where relevant. Continued retention after that requires a separate, documented safety or legal justification; the whole account need not be preserved.
Optional analytics and identifiable measurement: for the disclosed measurement purpose under the relevant consent and retention arrangements; withdrawable consent must be respected. Only statistics that are genuinely and irreversibly anonymous fall outside personal-data retention rules.
Consent and rights-request records: limited information needed to demonstrate the choice, response or compliance obligation and address applicable claims. These records do not justify retaining an entire sensitive profile.
Accounting records subject to French statutory accounting retention: ten years from the end of the relevant financial year. That period does not apply automatically to photographs, profiles, conversations or all purchase telemetry.
Backups: restricted copies must expire through the applicable backup lifecycle. Deleted information must not return to ordinary use through restoration; deletion instructions must be reapplied where recovery is necessary.
Where a particular legal obligation, investigation or claim justifies longer retention, we limit it to the information needed, restrict access and delete it when the justification ends. Fraud prevention is not an unlimited exception to deletion. Identifiers, hashes and pseudonyms remain personal information if they can still be linked to a person.
You can ask support@femsy.app for the retention arrangements applicable to a particular category or request erasure. We will explain a lawful reason for retaining information where an erasure request cannot be fully fulfilled.
You can request account deletion using the account-deletion option in Settings. There is a 30-day account-recovery period after the request. Logging back in during that period reactivates the account and cancels the pending deletion request. If you want deletion to proceed, do not log back in during the recovery period. Contact support if reactivation occurred by mistake.
After that period, the account is no longer recoverable through this process and deletion must proceed for the account and associated personal information and content in our systems, with corresponding instructions to relevant processors. Only information covered by a specific lawful retention ground may be retained, with restricted use and access. The recovery period does not mean that every active-system and backup copy is erased at the same instant.
The deletion process must explain the expected completion arrangements and any retention exceptions. You can contact support@femsy.app about the status of a request or to exercise a right to earlier deletion where applicable. The recovery arrangement does not remove statutory rights.
Uninstalling Femsy does not delete an account. Account deletion does not automatically cancel an Apple or Google Play subscription; manage renewal separately through the store. You may request deletion without waiting for the paid period to end.
Deletion cannot retrieve copies that another member has independently saved outside Femsy. It does not relieve us of our obligations for hosted content and processors, or give recipients permission to misuse your information.
We are responsible for applying security measures appropriate to the sensitivity and risks of the information processed. These include proportionate access restrictions and measures to protect transmission, storage and incident handling. No system or transmission method can guarantee absolute security, and this policy does not promise end-to-end encryption or protection against every form of copying.
If a personal-data breach occurs, we assess and document it and make the notifications required by applicable law. Under the GDPR, a notifiable breach must be reported to the competent authority without undue delay and, where feasible, within 72 hours after awareness. Where a breach is likely to create a high risk to individuals, we also inform affected people without undue delay, subject to the legal exceptions.
Report suspected unauthorised access or disclosure to support@femsy.app. Never send your sign-in verification code, password or full payment-card details in a privacy request.
Subject to the law applicable to you and its conditions or exceptions, you may:
Request access to your personal information and a copy, and correct inaccurate information.
Request erasure or restriction of processing.
Receive information you provided in a portable, commonly used, machine-readable format where automated processing is based on consent or a contract.
Withdraw consent and object to processing based on legitimate interests or to direct marketing.
Exercise applicable safeguards for solely automated decisions producing legal or similarly significant effects, including human intervention and the opportunity to contest a decision.
Give instructions concerning your information after death where French law provides that right, and exercise any additional rights available under the law of your residence.
Email support@femsy.app or use the postal address in section 1. Explain which right you wish to exercise and provide enough information to locate your account. An export can be requested by email; you do not need an automated export button. We may request proportionate information to verify identity where there is reasonable doubt, to protect against disclosure or deletion for the wrong person.
For requests governed by the GDPR, we respond without undue delay and normally within one month. If the complexity or number of requests justifies an extension, up to two additional months may be used, with an explanation within the initial month. Any different applicable legal deadline or additional local right remains effective. Requests are generally free; we explain any lawful exception for a manifestly unfounded or excessive request.
You may complain to the French data-protection authority, CNIL, or another competent authority, including the authority in the EU country where you habitually live, work or where the alleged infringement occurred. You do not have to contact us first. Nothing in the Terms’ choice of law removes mandatory privacy rights in France, the United Kingdom, the United States or another jurisdiction where they apply.
We may update this policy when the service, processing or applicable requirements change. We provide appropriate notice of material changes and advance notice where required. If a new use requires consent, we must obtain it before that processing begins; continued use of Femsy does not substitute for consent.
The version date above identifies this text. For questions or to exercise your rights, contact support@femsy.app or Mohamed Ayad, FEMSY Privacy, 7 rue Beaugrenelle, 75015 Paris, France.
FEMSY
FEMSY •