DAREDARE Privacy Policy
Last updated: September 29, 2026
Türkçesi (KVKK aydınlatma metni): https://getdareapp.com/tr/privacy
DARE (“we”, “us”) is a social app where friends do a daily dare and vote on each other’s proof. This policy explains what we collect, why, who gets it, how long we keep it, and your rights.
Who is responsible
DARE is made by Emre Halaman, an independent developer in Türkiye, who is responsible for your data (the “data controller” under the EU and UK GDPR and Türkiye’s KVKK). Contact: support@getdareapp.com.
What we collect
| What | Why | Where it’s stored |
|---|---|---|
| Email address (from Sign in with Apple, Google or an email code) | To sign you in | Our database (Supabase) |
| Username, display name, avatar emoji and colour | Your profile. The name is optional; Sign in with Apple can suggest yours the first time, and you can change it | Our database |
| Birthdate | To keep under-18 players safe (safer dares, private by default, stricter checks), to apply the minimum age, and to choose which ad rules apply to you. For ads, only your age group (18 or older, 16-17, 13-15) is used; your birthdate is never shown to anyone or given to Google. You must be 13+ (16+ in Australia and Brazil). | Our database, in a private area the app can’t read |
| Your App Store country (for example Australia), only when you create your profile | To apply the minimum age where you live (16 in Australia and Brazil) | Not stored |
| Country and city you type in | City and country leaderboards | Our database |
| Profile photo and squad photos (optional) | Shown on your profile and your squads, after an automated safety check | Our storage (Supabase) |
| Photos, videos (with their sound), reaction selfies and captions you post | To show your dare proof to friends, and to Discover if your account is public (reaction selfies: see “Who can see what”) | Our storage (Supabase) |
| Dares you send, votes, friends, follows, streaks, trophies | To run the game | Our database |
| Purchases (DARE+, shields, shop items, gifts) | To give you what you bought | Our database; payment is handled by Apple, we never see your card |
| Which DARE+ screen you opened (for example from “See who voted”) and whether a free trial or purchase followed | To see which parts of DARE+ people find useful. Our own database only: no outside analytics, never shared | Our database, deleted after 90 days; only anonymous totals are kept after you delete your account |
| Push notification token | To send the notifications you turned on | Our database |
| Crash and hang reports from iOS (what the app was doing when it crashed or froze, app and iOS version) | To fix bugs. Not linked to your account | Our database, deleted after 90 days |
| Your app’s language | To send notifications and the daily dare in your language | Our database |
| Your phone’s time zone (for example Europe/Berlin), its difference from UTC (for example +2 hours) and whether it shows 24-hour times | To put you in a Drop Zone (when the daily dare drops for you), to keep notifications out of the night, and to write times in notifications the way your phone does. Friends see your Drop Zone (for example “not dropped yet in the Americas”), never your time zone | Our database |
| When you last opened the app | To stop daily dare notifications when you haven’t opened DARE for a few days (you then get at most 3 come-back messages) and to show “Welcome back” when you return. Never shown to anyone | Our database |
| Your “Suggest me to friends of friends” setting, and people you hid from People you may know | To suggest you (or not) to friends of your friends and people in your squads, and to not show you people you hid again | Our database |
| Squad invite codes (the code in a squad’s invite link and QR code) | So people who get the link can join the squad. Its creator and admins can make a new one, and the old link stops working | Our database |
| Technical logs: your IP address, the time and what the app asked our server | Security (for example against abuse) and fixing problems | Our providers’ servers, for a few days |
We don’t sell your data for money (see “Ads” for what some US state laws count as “sharing”). The invite pages our links open (getdareapp.com/add and /s) use no cookies and no tracking.
Ads
If you don’t have DARE+, the Friends feed may show a few ads from Google AdMob between your friends’ posts, once we turn ads on (they’re off when DARE launches). Never in the first 3 posts, never more than 3 at a time, and never during your 30 minutes to post. DARE+ has no ads. Ads never change votes, points, rankings or dares, and there are no sponsored dares.
To show and count these ads, Google’s ad software in the app collects: your device’s advertising identifier (only if you allow tracking, see below), a rough location from your IP address, which ads you see and tap, and technical and diagnostic data about the app and your phone. Google uses this as described in its policy at https://policies.google.com/technologies/ads. We don’t give Google your name, email, birthdate, posts or friends.
- Personalized ads only if you allow them. Ads are non-personalized unless you’re 18 or older and say yes when your iPhone asks whether DARE may track you (Apple’s “Allow tracking” question, asked right before your first ad in versions of DARE that ask it; the first version doesn’t). If you say no, you still see ads, just less personal ones, and the advertising identifier isn’t shared. You can change this any time in iPhone Settings → Privacy & Security → Tracking.
- If you’re in the EU, the UK or Switzerland, Google’s consent form asks you first what the ads may use (if you’re 18 or older). You can change your choice any time in Settings → Ad privacy choices.
- If you’re in the United States, personalized ads may count as “sharing” your data (for cross-context behavioral advertising) under some US state laws, such as California’s. You can opt out any time in Settings → Ad privacy choices (in the states where it applies) or by choosing “Ask App Not to Track” when your iPhone asks (or later in iPhone Settings → Privacy & Security → Tracking); you then get only non-personalized ads.
- If you’re under 18, you’re never asked about tracking and never see Google’s consent form: you only get non-personalized ads, marked for people under the age of consent, and only ads rated for teens (for general audiences if you’re under 16). For this, the app gets only your age group from our server (never your birthdate), and Google gets no age at all, only the “under the age of consent” mark.
The ad software only starts for people who can get ads (not DARE+, and only once we’ve turned ads on), and in the EU, the UK and Switzerland only after Google’s consent form.
Some things stay on your phone and never reach us: what your Home Screen and Lock Screen widgets show (your streak, today’s dare, and which friends did it with their names and emoji or profile photos; removed when you sign out), your Sounds and Haptics choices, and the reminder before a DARE+ free trial ends, which your phone schedules itself.
Safety checks
To keep DARE safe, dares, captions, names (display names, usernames and squad names), photos and still frames from videos are checked by an automated safety service before others can see them. We use OpenAI’s moderation service for this; it receives the content only to check it and doesn’t use it to train models. You agree to this when you first open DARE and when you create your profile. Content involving under-18 players is checked more strictly. Reported content is checked again by the same automated service, more strictly, and removed if it breaks the community rules; accounts that break the rules can be suspended automatically. These are automated decisions: if you think one was wrong, email us and a person will look at it.
Who can see what
- Friends see your daily proof once their own proof passed the safety check, and your friend dares and duels.
- Friends also see which Drop Zone you’re in (for example “Americas”) while the dare hasn’t dropped there yet.
- Everyone can see your daily posts on Discover only if your account is public. Accounts of people 18 and older start public, under-18 accounts start private, and you can change yours any time in Settings.
- Reaction selfies: an adult’s reaction selfie is seen by everyone who can see the post it’s on (for a public post on Discover, that can be anyone; the app says so before you take it). An under-18 can only react to friends’ posts, and only their own friends and the post’s author see that reaction.
- Profile photos: an adult’s profile photo is shown wherever their name is. An under-18’s profile photo is only shown to their friends; everyone else sees their emoji avatar.
- Hall of Fame only shows you if you said yes.
- Squads: people in a squad see each other’s names, avatars and weekly points on the squad’s leaderboard, friends or not (a squad doesn’t show them your posts; an under-18’s photo only shows to their friends). Anyone with a squad’s invite link can join; its creator and admins can reset the link and remove people, and anyone in a squad can report or block anyone in it. People who blocked each other don’t see each other in a squad. An adult and an under-18 who share a squad but no friend see each other without the option to add each other as friends there, and the app shows the adult only the under-18’s avatar and display name (no username or country). A squad’s name is checked by the automated safety check before people outside the squad (for example someone opening its invite link) see it.
- People you may know: DARE may suggest you to friends of your friends and to people in your squads (with your name, username and avatar), so they can send you a friend request. It never uses anyone’s contacts. An adult and an under-18 are only suggested to each other when they share at least 2 friends, or a squad and a friend, and an under-18 is never shown with their photo. It starts off for under-18s. You can turn it on or off in Settings → Suggest me to friends of friends.
- Blocked people can’t see you.
Why we’re allowed to use your data
| What for | Legal basis (GDPR Art. 6, KVKK Art. 5) |
|---|---|
| Your account, profile, posts, friends, dares, duels, squads, Drop Zones, purchases and the notifications you turned on | Our contract with you: it’s what DARE is |
| The age rules (your birthdate, the minimum age by country) | Our contract with you, and our legal obligations |
| The automated safety check, reports, strikes and bans | Our legitimate interest, and yours, in a safe app, especially for under-18s |
| Crash and hang reports, and which DARE+ screens were opened | Our legitimate interest in fixing bugs and improving DARE+ |
| People you may know | Our legitimate interest in helping friends find each other (you can turn it off) |
| Personalized ads, tracking and push notifications | Your consent, which you can take back any time |
| Keeping evidence of sexual content involving a minor, and answering the authorities | Our legal obligations |
Who we share it with
- Supabase (database, sign-in, storage): servers in Frankfurt, Germany (EU)
- OpenAI (the automated safety checks)
- Resend (sends the sign-in code emails)
- Apple (Sign in with Apple, In-App Purchases, push notifications)
- Google (Google sign-in, if you choose it; Google AdMob for the ads in the Friends feed, if you don’t have DARE+, once ads are on)
- GitHub (hosts our website, getdareapp.com)
- The authorities, only when the law requires it (for example a report of sexual content involving a minor)
Each of them gets only what its service needs and must protect it at least as well as this policy does. Supabase, OpenAI and Resend work for us and use your data only to provide their service to us; Apple and Google also follow their own privacy policies for their sign-in, purchase, notification and ad services.
Sending data abroad
Our database is in the EU (Germany). OpenAI, Resend, Apple, Google and GitHub may process data in the United States and other countries. When data leaves the EU, the UK or TĂĽrkiye, we rely on the safeguards the law provides: the EU-US Data Privacy Framework where the company is certified, or standard contractual clauses (for TĂĽrkiye, the standard contracts under KVKK Article 9). Email us for a copy of the safeguards.
How long we keep it
We keep your data while you have an account. When you delete your account (Settings → Delete account), we delete your profile, posts, photos, videos, votes, dares and everything else linked to it. Backups are removed within 30 days. Apart from that, two things are kept:
- the record of which DARE+ screens were opened and whether a trial or purchase followed, with nothing linking it to you any more: it counts only towards anonymous totals, and is deleted after 90 days like everyone else’s;
- if the safety check finds sexual content involving a minor, a copy of it and the account’s id, in a locked area only the server can read, to report it to the authorities (for example NCMEC’s CyberTipline). It’s deleted one year after we reported it (the time US law asks us to keep it), or one year after it was found if it was never reported (for example because it was a mistake).
Crash and hang reports aren’t linked to anyone and are deleted after 90 days.
Your rights
You can see and change your profile in the app, delete posts, make your account private, turn notifications off, turn off People you may know, and delete your account at any time. You also have the right to:
- access your data and get a copy of it in a common format (portability);
- have it corrected or deleted;
- restrict or object to how we use it (for example our legitimate interests);
- take back your consent at any time (ads, tracking, notifications), without affecting what happened before;
- ask a person to look at an automated decision (for example when the safety check removed something or suspended you);
- if you’re in Türkiye, every right in KVKK Article 11, including knowing who in Türkiye or abroad received your data and asking for compensation for unlawful processing.
Email support@getdareapp.com from the email address of your account and we’ll answer within one month (30 days under KVKK). You can also complain to your data protection authority: in the EU your country’s authority, in the UK the ICO, and in Türkiye the KVKK Board (Kişisel Verileri Koruma Kurulu), after first writing to us.
Children
DARE is for people 13 and older (16 and older in Australia and Brazil). If you believe a child under the minimum age has an account, email support@getdareapp.com and we’ll delete it.
If someone gives a birthdate under the minimum age when signing up, no profile is made and their sign-in account is deleted automatically within a day. So they can’t just try again with another birthdate, we keep only a scrambled fingerprint (a salted hash) of the account’s email, which can’t be turned back into the email, until the birthday that would let them in (the 13th, or the 16th in Australia and Brazil). Then it’s deleted too.
Our website
getdareapp.com is hosted by GitHub Pages, whose servers log visitors’ IP addresses for security. The website sets no cookies and loads nothing from other companies (no web fonts, no analytics, no tracking).
Changes
If we change this policy we’ll update the date above and, for big changes, tell you in the app.