Privacy Policy

Last updated: 26 September 2026

venbi is a small, friends-focused social network. This policy explains what personal data we collect, why, who we share it with, how long we keep it, and the choices you have. We keep it short because we collect little.

Who is responsible

Adam Jacobsen runs venbi and is the data controller. Contact us at hello@venbi.app for anything about your data.

What we collect

Account details: your name, username, email address and a securely hashed password (we never store your password itself).
Profile: the bio, profile photo and cover photo you choose to add.
Content you create: posts, photos, captions, locations you type in, comments, likes, reposts, messages (including photos), groups and friend connections.
Settings: privacy, notification and appearance (dark/light) preferences.
Technical data: your IP address and basic request details appear briefly in server logs and are used for security and abuse prevention (for example limiting repeated login attempts).
Reports: if you report something, or someone reports you, we keep the report and a copy of the reported content for moderation.

Photos are re-saved on our servers, which removes hidden metadata such as GPS coordinates. Locations on posts are only the text you type. We don't collect your device location.

Why we use it

To provide venbi to you: sign-in, showing your content to the friends you choose, messaging and notifications (contract).
To keep venbi secure and free of abuse: rate limiting, moderation, investigating reports (legitimate interests).
To send essential emails: confirming your address, password resets and security notices (contract / legitimate interests).

We don't sell your data, show ads, build advertising profiles, or use your content to train AI models.

Who can see your content

Only the people you allow, as set by each post's audience and your privacy settings. Photos are stored privately and are only served to people signed in to venbi. Direct messages are visible to the people in the conversation. Messages are not end-to-end encrypted: the person running venbi could technically access stored data, and will only look at content when it is reported or needed to keep the service safe or to comply with the law.

Services we use

We use a few providers to run venbi. They process data only on our instructions:

one.com (Denmark/EU): the server that runs venbi and holds the database.
Backblaze (storage): stores uploaded photos and encrypted backups, in an EU data centre.
Resend: delivers our emails (your email address and the message).
UptimeRobot: checks that the site is up. It does not receive user data.

Where a provider is outside the EU/EEA, transfers rely on the safeguards required by GDPR, such as Standard Contractual Clauses.

Cookies

venbi only uses essential cookies: one keeps you signed in, and one remembers your dark/light theme. We don't use tracking, analytics or advertising cookies, so there is no cookie banner.

How long we keep data

Your data is kept while your account exists. Stories disappear after 7 days.
When you delete your account, your profile, posts, comments, likes, photos and connections are deleted straight away. Your messages are deleted too, and one-to-one conversations you were in are removed for both people.
Encrypted backups are overwritten on a rolling basis, so deleted data disappears from backups within 30 days.
Server logs are kept for up to 30 days. Moderation reports and the moderation log may be kept longer where needed to protect other users.

Your rights

You can, at any time:

see and correct your information in Settings;
download a copy of your data in Settings → Your data;
delete your account in Settings → Delete account;
ask us to restrict or stop processing, or object to it, by emailing us.

You also have the right to complain to your data protection authority. In Denmark that is Datatilsynet (datatilsynet.dk).

Age

venbi is for people aged 13 and over. If you believe a younger child has an account, contact us and we'll remove it.

Security

Connections are encrypted (HTTPS), passwords are hashed, access to content is checked on the server for every request, and backups are encrypted. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as required.

Changes

If we make important changes to this policy we'll tell you in the app or by email before they take effect.