Privacy policy
Effective from 3 November 2026
1. Who we are
This policy explains how SIA Digiro (reg. no. 40203709265, Mednieku iela 18, Rūjiena, Valmieras novads, LV-4240) - “we” - processes your personal data when you use the Kopā app and the website digiro.lv/kopa. We are responsible for processing your data (data controller). For data questions: support@digiro.lv.
2. What data we process
- Account data: name, email address and account ID we receive when you sign in with Apple or Google.
- Profile data: first name, surname, date of birth (to check your age), gender, photos, interests, bio and who you’d like to meet (for example, an age range).
- Activity in the app: events you want to go to, invitations, agreed dates and date statuses (for example, “I’m coming”, “Running late”, “I’m here”).
- Safety data: reports about users, blocks and moderation decisions.
- Technical data: platform (iOS or Android), push notification token and server logs.
There is no private messaging in the app, so we do not store messages between users. The app does not use your location.
Special category data: who you want to meet
Who you want to meet (men, women or everyone), together with your gender, can reveal your sexual orientation. Under Article 9 of the GDPR, this is special category personal data.
- Legal basis: your explicit consent (GDPR Article 9(2)(a)). You give it when you tick “Piekrītu” (“I agree”) in your profile. We record when you gave it.
- Purpose: only to find people who suit you. We show you only people whose choice matches yours, and the other way round.
- Who sees it: only you. Other users do not see this choice.
- Who we share it with: no one. We do not send it to analytics, advertising or AI services.
- Withdrawing consent: you can change your choice in your profile at any time. To withdraw consent, delete your account (Profile → Settings → Delete account) or email support@digiro.lv. Without this information the app cannot find people for you, so when you withdraw consent we delete the account. Withdrawing consent does not affect processing before it.
3. Why, and on what legal basis
- To provide the service (performance of a contract): creating your account, showing your profile, running events and dates.
- To find matching people by who you want to meet (explicit consent, GDPR Article 9(2)(a)): see Special category data.
- For suggestions (performance of a contract): based on your bio and interests, we automatically suggest events and people (“Varētu interesēt”).
- For safety (legitimate interests): preventing abuse, reviewing reports, blocking fraudulent accounts.
- For notifications (consent): you can turn them off at any time in your phone settings.
- To meet legal obligations (legal obligation), for example when responding to requests from authorities.
4. What other users see
Other users see your name, age, photos, interests and bio. Your date status is visible only to the person you have a date with. Other users never see your email address, exact date of birth or who you want to meet.
5. Who we share data with
We do not sell your data. We share it only with service providers that help the app work, and only as much as needed:
- server and database hosting - a hosting provider in the European Union;
- push notifications - Google Firebase Cloud Messaging and Apple Push Notification service;
- sign-in - Apple (Sign in with Apple) and Google (Google Sign-In);
- app distribution - Apple App Store and Google Play.
When data is transferred outside the European Economic Area, we rely on the European Commission’s standard contractual clauses or other lawful safeguards. We share data with law enforcement only when the law requires it.
6. How long we keep data and how we delete it
- Profile and activity data - while your account is active.
- After you delete your account, we delete all data within 30 days.
- Reports and moderation decisions - up to 12 months, to prevent repeat abuse.
- Technical logs - up to 90 days.
How to delete your account, with or without the app: Delete account.
7. Your rights
You have the right to access, correct and delete your data, to restrict or object to its processing, to receive it in a portable format and to withdraw consent. Email support@digiro.lv - we will reply within one month. You can also delete your account yourself in the app (Profile → Settings → Delete account).
If you believe your data has been handled incorrectly, you can complain to the Data State Inspectorate of Latvia (www.dvi.gov.lv).
8. Age limit
Kopā is only for people aged 18 and over. If we learn that an account belongs to a minor, we delete it.
9. Data security
Data is transferred encrypted (HTTPS), and only authorised staff who need it for their work can access it.
10. Changes
If this policy changes significantly, we will let you know in the app. The current version is always on this page.