Privacy policy
Last updated Oct 19, 2026
Zap is operated by Postlister. This policy explains what we collect, why, who can see it, and how you control it.
The short version
- You decide who sees each detail of your profile: everyone, your matches, people you approve, people in one mode, or only you.
- We never sell your data and never share your profile details with advertisers.
- We never create fake profiles, fake likes or fake activity.
- You can delete your account and everything in it at any time, from the app or from our website.
What we collect
| Data | Why |
|---|---|
| Phone number or Google account | To sign you in and keep accounts unique. Stored encrypted; lookups use a keyed hash. |
| Date of birth | To confirm you are 18+ and show your age. Stored encrypted; your exact date is private by default. |
| Profile details and photos you add | To show your profile to the people you allow. |
| Identity details (gender, orientation, pronouns) | Optional. Used for matching. Private by default. |
| Approximate location | To suggest people nearby. Stored rounded to about 1 km; your exact location is never shown. |
| Messages and media | To deliver your chats. Message text is stored encrypted. |
| Verification selfies and ID images | To verify you. Deleted as soon as a decision is made. |
| Purchases | To provide Plus and coins. Card details are handled by Google Play or the payment gateway, never by us. |
| Device and usage data | To deliver notifications, keep the service secure and improve it. |
Who can see your information
Your privacy settings are enforced on our servers, so hidden details are never sent to other people's phones. Matching may use hidden details (for example, your preferences) without revealing them.
Advertising
Free users may see ads from Google AdMob. Ads are non-personalised by default, and we never pass your mode, gender, orientation or any profile details to ad partners. Plus members see no ads.
How long we keep data
- Passed profiles: 90 days. Messages of closed chats: 180 days after closing.
- Verification images: deleted right after a decision.
- When you delete your account we delete your profile, photos, messages, likes and devices immediately. We keep payment and safety-report records only as long as the law requires.
Your rights
You can access, correct, export and delete your data in the app (Settings), or by writing to support@postlister.com. Under India's Digital Personal Data Protection Act 2023 (and the GDPR, where it applies) you may also withdraw consent and complain to the relevant authority. See the grievance officer page.
Children
Zap is only for people aged 18 and over.