Privacy

Privacy Policy

Your privacy is at the core of Aivelyn. Here we openly explain what data we collect, why, how we protect it, and the rights you have.

Last updated: September 17, 2026

Overview

What you should know

Aivelyn is an AI-driven matchmaking service for serious relationships, based in Stockholm. To match you with meaningful encounters we need to understand you — your personality, values and what you're looking for. This policy describes how we handle your data under the GDPR and applicable data protection law.

Aivelyn Relationship Platform AB is the data controller for the processing of personal data described in this policy.

We never sell your data to third parties. You decide what is shared with other users and can request an export or deletion of your data at any time.

1. Data collection

What data we collect

We only collect the data needed to offer meaningful matchmaking and a safe experience:

  • Profile information: name, age, gender, location (city), interests and a short bio you write yourself.
  • Onboarding answers: your answers to our questions across dimensions such as values, personality, love languages, communication, life goals, closeness and attraction.
  • Photos and video: profile photos and an optional short video intro you upload.
  • Contact details: email address and, when needed, a phone number for verification.
  • Usage data: how you interact in the app — messages, matches, post-date feedback and check-ins in Relationship mode.
  • Voice and transcription: audio you actively record using the microphone, a machine-generated transcript, and any edits you make before approving an answer. The microphone is activated only after you choose voice mode and grant permission.
  • Technical data: device and session information and cookies (only with your consent, see cookie settings).

We do not collect sensitive data about health, religion or political opinion beyond what you voluntarily share in onboarding or in a conversation with Evelyn. Onboarding answers are used for the feature you selected and are never shared in plain text with other users. If an Evelyn conversation clearly indicates immediate danger, self-harm, violence or abuse, the information is used to provide a predefined safety response.

2. Purpose

Why we use your data

We use your data for the following purposes:

  • Matching: to compute compatibility and suggest a limited selection of relevant matches.
  • Communication: to enable messaging with the people you match with.
  • Support and guidance: to tailor exercises, conversation guides and check-ins in Relationship mode based on your answers.
  • AI and voice features: to transcribe a recorded answer, interpret it into profile values that you can review, and read Evelyn's response aloud using the selected voice.
  • Safety: to prevent and investigate reports of inappropriate behaviour and, when Evelyn receives clear high-risk information, to provide a safety response and create a content-free safety signal for specially authorised staff review. Aivelyn is not an emergency service and the signal does not mean that the conversation is monitored in real time.
  • Improvement: to improve the matching algorithm and app experience — in aggregated, anonymised form.

Our legal basis for processing is partly contract (to deliver the service you asked for) and partly your consent for analytics, cookies and marketing. You can withdraw your consent at any time.

3. Storage

How long we keep your data

We keep your data for as long as your account is active. If you request deletion of your account, all profile information, answers, photos, video and conversations are permanently removed within 30 days.

Some anonymised statistics may be kept longer to improve the algorithm, but they can no longer be linked back to you. Data required for accounting or legal obligations may be retained according to applicable law.

Raw voice recordings are held temporarily in the app's protected local storage and sent over an encrypted connection for transcription. Aivelyn does not store the raw audio file in the profile database. The local file is removed after successful processing, when you discard it, on logout, or during automatic cleanup. The transcript is shown to you first; only text that you confirm or correct is saved as an interview answer.

4. Service providers

AI, voice and infrastructure providers

We use carefully selected providers to operate the service. They process data on Aivelyn's behalf and may not use it for their own marketing:

  • Supabase/Lovable Cloud: account, authentication, database, file storage and server functions.
  • Deepgram: converts a voice recording into text. Aivelyn uses Deepgram's EU endpoint for this processing.
  • Lovable AI Gateway and Google Gemini: process confirmed answer text and relevant interview context to create structured suggestions and the next question.
  • ElevenLabs: converts the text of Evelyn's response into speech. The generated audio is returned for playback and is not stored as a user file in Aivelyn's database.

Providers may process technical logs and request content according to their agreements, security settings and legal obligations. Where processing occurs outside the EU/EEA, we use applicable safeguards for international transfers. Contact us for current information about subprocessors or transfer mechanisms.

5. Visibility

What is shared with other users

You decide what is shown to others. Matches see a compatibility result and the parts of your profile you choose to share — bio, photo(s) and the dimensions you've shared — but never your exact answers to individual questions.

Aivelyn shows dimension summaries (e.g. "Communication: 88%") and explains why you match, without revealing the underlying answers. You can see exactly which fields are shared in Your Profile and in Settings.

We do not sell your data. Optional advertising measurement shares limited technical data with Meta only with your consent, as described below. Our optional partner for Concierge/Relationship mode only handles what you have expressly agreed to share.

6. Security

How we protect your data

All data is stored encrypted and access is restricted through role-based permissions. We use row-level security (RLS) so only you can read your own data, and only authenticated users reach the app's content.

Only a limited number of people on the Aivelyn team have access to the system, and all access is logged. In the event of an incident, we inform affected users as soon as possible and in line with applicable law.

Authorised support and safety staff may, for a specific support or safety case, view limited account status, product access and content-free technical errors. Exact onboarding answers, private messages, Evelyn conversations, audio and transcripts are not shown in the standard support view. Specially authorised safety staff may view a content-free Evelyn signal containing user ID, risk category, time, delivery status and review status, but not the conversation text. Access requires 2FA and is audited. The signal is removed when the account is deleted. Diagnostic error events are deleted after 30 days.

7. Rights

Your rights under the GDPR

You have the right to:

  • request access to the data we hold about you ("Download my data" in Settings),
  • request correction of inaccurate data,
  • request deletion of your account and associated data,
  • restrict or object to certain processing,
  • withdraw consent for cookies and analytics at any time,
  • lodge a complaint with the supervisory authority if you believe we breach the rules.

To exercise your rights, use the controls in the app under Settings or contact us at support@aivelyn.se.

8. Cookies

Cookies and measurement

Optional measurement on our public website requires your consent. Analytics and marketing are separate choices, disabled until you choose them. Rejecting does not prevent you from using Aivelyn. We ask again after 180 days or when the information changes materially. Withdrawing stops future optional measurement; it does not undo processing that already occurred.

Google Analytics 4 receives page visits, technical information and browser identifiers for statistics. Meta Pixel receives visits and successful expressions of interest to measure and improve advertising. These providers can process identifiers and technical connection data; this is not anonymous measurement. We do not send your profile answers, relationship answers, chats or coaching content to these tools. They are not loaded in the signed-in product, account flows or native iOS app.

We use consented website analytics to understand which search engines, AI search services, referral websites and campaigns bring visitors to Aivelyn, which public pages they land on and which links or interest forms they use. An AI referral identifies a traffic source; it does not give us access to your conversations with that service.

Authorised staff can view aggregate website and search reports in our protected admin dashboard. These include Google Analytics and Google Search Console reports, such as visits, clicks, impressions, landing pages and search queries supplied by the search engine. We may also save aggregate Bing citation reports and our own general AI-search test questions and observations. The reporting feature does not add visitor cookies or send visitor data to AI search services. Private conversations and information identifying individual visitors must not be entered in these manual observations.

The search dashboard retrieves Google reports for the selected period without creating a separate database copy of visitor-level Analytics data. Manually saved citation totals and general search observations are retained for comparisons over time and are not linked to visitor accounts. Linking a website visit to an individual account, registration or payment is not part of this search reporting feature. Before introducing such a link, we will explain the data, purpose and retention and obtain any consent required.

Our Google Analytics settings retain event-level data for two months and user-level data for 14 months. The retention period for a user identifier restarts when new activity is recorded, so it may be retained longer than 14 months from the first visit. Google deletes expired data in its monthly deletion process. These settings do not determine cookie lifetimes and do not remove standard aggregate reports, which can remain available longer. Google Analytics retention information

With analytics consent, Aivelyn keeps a source, medium and campaign label locally in the current browser tab for up to 30 minutes. At signup you can separately choose to link these labels to your new account. This voluntary first-party measurement counts registration, verified email and completed onboarding, without sending the account link to Google or Meta. The link expires after 90 days and is removed by an hourly cleanup. Withdraw and delete it in Settings. Signup without consent works normally and appears as unknown source in aggregate reports. App Store downloads are not linked to individual accounts.

  • aivia-consent: necessary local storage for your choices, timestamp and notice version. Valid for 180 days; an expired choice is not used to allow tracking.
  • _ga, _ga_*: Google Analytics browser/session identifiers, only with analytics consent. Google's default lifetime is up to two years and can renew on use; browser restrictions may shorten it.
  • _fbp, _fbc: Meta browser/advertising-click identifiers, only with marketing consent; normally up to 90 days. _fbc is relevant when a Meta click identifier is present. These are first-party cookies used to share measurement with Meta.

Google and Meta are recipients of optional measurement data. Their processing and storage are governed by the applicable service terms and privacy information. Processing may take place outside the EU/EEA. Aivelyn must assess the applicable transfer safeguards before extending data sharing; EU hosting alone does not prevent onward transfers. Cookie lifetimes are not the same as a provider's server-side retention.

Google privacy information · Meta privacy information

Server-side Google Tag Manager and Meta Conversions API are being prepared and are not activated by this policy update. Email matching is not enabled. Before any expansion, we will explain the actual fields and processing and request a new consent; existing consent will not automatically authorise it.

9. Changes

Changes to this policy

We may update this policy as the service evolves. For material changes we notify you in the app and update the date at the top of this page. Continued use is not consent to new processing. Where new consent is required, we request it separately.

Contact

Questions about your privacy?

We're happy to help. Email support@aivelyn.se or return to the app via Settings.

Polls and activity suggestions

For the Circles poll, we store your answer with a random browser ID to limit repeat votes. The ID is also saved in your browser. Only aggregate results are shown publicly. Optional activity suggestions and city information are used by Aivelyn’s team to plan Circles and are not published. No name or contact details are required. Please avoid sensitive information in free text. Contact us with questions or deletion requests; your browser ID can help us locate the response.

When you're ready

Let your next step begin here.

Create your profile through the form or download Aivelyn from the App Store.