Legal information
Privacy Policy
Version 1.0 · Effective since July 4, 2026
This translation is provided as a courtesy. In case of discrepancy, the Spanish version prevails.
1. Data controller
WooW Noves Tecnologies SL, tax ID B72887128, registered office at Carrer Nostra Senyora de Montserrat, 2, 43883 Roda de Berà (Tarragona), España. Privacy contact: privacy@hadyx.com. Data Protection Officer: not designated.
2. What data we process
- Account data: email, phone, password (encrypted), declared country of residence, preferences.
- Profile data: profile name, biography, physical attributes, gender, orientation, photographs and videos you choose to publish.
- Content and activity: posts, messages, events, connections, ratings.
- Technical data: IP address, device, access logs and records of acceptance of the terms.
- Payment data: managed by our external processor (CCBill); HADYX does not store card numbers.
- Age verification data: the verification result (of legal age), the provider used and the date. We do not store your identity document or your facial image; these are handled by the verification provider as a data processor.
- Location data: your device coordinates (GPS), only if you choose to share your location. Stored in your profile to sort discovery by proximity; shown approximately unless you enable "exact position". If you turn on "share live position", they are updated periodically while you use the app. They are not stored in cookies. You can turn this off or delete them from your location settings.
3. Special categories of data
Due to the nature of the platform, your profile data may reveal your sexual orientation or sex life (art. 9 GDPR). We only process it on the basis of your explicit consent, which you give when creating your profile and publishing content, and which you can withdraw at any time by deleting the content or your account.
4. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Provide the service (account, profiles, content, messaging) | Performance of the contract (art. 6.1.b) |
| Data revealing orientation or sex life | Explicit consent (art. 9.2.a) |
| Security, moderation and fraud prevention | Legitimate interest (art. 6.1.f) |
| Record of acceptance of legal terms | Legal obligation and legal defence (art. 6.1.c and f) |
| Service communications | Performance of the contract (art. 6.1.b) |
| Payment processing | Performance of the contract (art. 6.1.b) |
| Age verification and protection of minors | Legal obligation and legitimate interest (art. 6.1.c and f) |
| Sorting discovery by proximity and computing distances | Consent (art. 6.1.a) |
We do not use your data for advertising nor do we sell it to third parties. We do not make automated decisions with legal effects on you.
5. Recipients
Strictly necessary processors: providers of hosting, media storage, email delivery, payment processing (CCBill) and age verification. Public authorities when a legal obligation so requires.
6. Retention
- Account and profile data: while the account is active. After deactivation we apply logical deletion and erasure or anonymization within a maximum of 12 months, except where there is a legal retention obligation.
- Records of acceptance of the terms: for the duration of the relationship and the legal limitation periods (contractual liability).
- Technical security logs: a maximum of 12 months.
- Location data: while you keep it active; deleted when you turn location off, delete it in settings, or close your account.
7. Your rights
You can exercise at any time your rights of access, rectification, erasure, objection, restriction and portability by writing to privacy@hadyx.com from your account email. You can also download your data from the settings (export) and delete your account. You have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. International transfers
Our providers operate preferentially in the EU. When a processor handles data outside the EEA, it will do so under Standard Contractual Clauses or another valid GDPR mechanism.
9. Security
We apply encryption in transit, short-lived httpOnly session tokens, layered access control (authentication, per-resource policies and output filtering), watermarks on private media and short-expiry signed URLs for all multimedia content.
10. Minors
HADYX is prohibited to those under 18 years of age. If we detect a minor's account we will delete it immediately.
11. Changes to this policy
We will publish any change on this page with a new version number and effective date, and we will notify you. Previous versions are archived and remain available for consultation.