Privacy Policy for eve AI

This policy describes how eve AI treats your personal data when you use the app. The purpose is for you to quickly understand what data we handle, why we do it, and what choices you have as a user of our service.

WHO IS THE DATA CONTROLLER?

In brief: This section states who is responsible for the personal data and who to contact if you have questions or wish to exercise your rights.

Data Controller: Eve AI AB, reg. no. 559553-7555
Address: Kvisslingbyvägen 23, 184 91, Åkersberga, Sweden
E-mail: mio@eveai.app
Data Protection Officer (DPO): Anton Stock (E-mail: dpo@eveai.app)

WHAT PERSONAL DATA DO WE COLLECT?

In brief: We collect (1) data needed for the service to function, (2) data you voluntarily add to your profile, (3) data created when we improve matching with AI, and (4) data for marketing and tracking if you consent.

Basic data for the service to function

Contact details (e-mail and phone number): to create an account, manage login, and security.
Age and date of birth: to ensure the 18-year age limit and enable age filters.
Approximate geographical location (e.g., city): to show relevant matches nearby.
Device data and technical data (e.g., IP address, device ID, OS version): for security, spam prevention, and troubleshooting.
Payment data/payment history: to handle subscriptions/purchases (we do not store card numbers ourselves).

Tracking and Marketing Data

In brief: If you give us your permission, we collect data to measure the effectiveness of our marketing.

Device identifiers for advertisers (e.g., IDFA on iOS): Used to track you across apps and websites owned by other companies to measure the effectiveness of our marketing campaigns. This only happens if you actively grant us explicit permission via your device's "App Tracking Transparency" prompt.

Profile data that you choose to share

Profile pictures: displayed to others and may be used for AI analysis of style and interests.
Interests and hobbies: for matching and personalization.
Profession and education: displayed on your profile.
Physical attributes and lifestyle habits (e.g., regarding diet and exercise): to show on your profile and match preferences.

Special categories of personal data (Sensitive data)

In brief: Certain data has extra strong protection under GDPR and UK GDPR. We only process them if you actively choose to share them and give explicit consent (a specific, clear "yes").

Sexual orientation and sexual life: for matching based on orientation and preferences.
Religion and beliefs: for filtering based on your preferences.
Ethnicity/origin: for filtering based on your preferences.

You can withdraw your consent at any time (e.g., by deleting the data or changing settings where the consent is managed). Upon withdrawal of consent, this data is deleted immediately.

AI analysis and matching data

In brief: Eve AI uses AI to improve matches and provide match explanations. We analyze usage patterns and metadata, but never the content of your messages as part of this analysis.

Usage data and interaction patterns: to understand preferences and improve matches.
Conversation metadata (e.g., response rate, message length), not content: to analyze interaction patterns and optimize matching.
AI-generated insights (e.g., personality type, communication style): to improve the relevance of suggestions and content.
Image analysis: to improve matches based on visual preferences.
Onboarding answers (chat with Eve): to create a user profile and enable the core functionality of the service.

You should be able to see and influence the AI-generated insights about yourself.

WHY DO WE COLLECT YOUR PERSONAL DATA?

In brief: We use personal data to deliver the dating service (account, profile, matching), improve the experience (AI suggestions), measure marketing, and protect users and the platform (security/spam). We will only collect, process, use, or store personal data if we have valid and legal reasons to do so.

Purposes and legal grounds for processing

In brief: For every processing activity, we must have a legal basis according to GDPR and UK GDPR. The table below shows how the purpose, data, and legal basis are connected.

PurposePersonal DataLegal BasisCreate account, manage login, 18+, and show matches nearbyContact details, age/date of birth, approximate location (city)Performance of contractManage subscription/purchasePayment data/payment historyPerformance of contractProtect the service (security, spam prevention, troubleshooting)Device data and technical dataLegitimate interestAllow you to create and show profileProfile pictures, interests, profession/education, physical attributes & lifestyleConsentFiltering/matching based on sensitive data (only if you choose to)Sexual orientation/life, religion/beliefs, ethnicity/originExplicit consentAI support for matching and relevant suggestions (the core of the service)Usage data, conversation metadata (not content), AI insights, image analysis, onboarding answersPerformance of contractTracking and measurement of marketing campaigns (App Tracking)Device identifier for advertisers (IDFA)Consent (App Tracking Transparency)

What do the grounds mean in practice?

Performance of contract: needed to deliver the service you have chosen to use.
Legitimate interest: we process data for a legitimate interest (e.g., security) and must weigh it against your privacy. More specifically, this means we process data to keep the service secure, prevent abuse/spam, and improve features, and assess that these interests outweigh the intrusion into your privacy.
Consent / Explicit consent: You choose yourself if we may process your personal data and can change your mind and withdraw your consent at any time. If the processing concerns sensitive personal data, we need explicit consent, which means you give a particularly clear and active approval for that specific processing.

WHO DO WE SHARE YOUR DATA WITH?

In brief: We use providers (data processors) to operate the app, enable AI features, handle payments, and improve stability/analysis. They may only process data according to our instructions and agreements.

A) Sub-processors (data processors)

Cloud and infrastructure providers: Google Cloud Platform (infrastructure and hosting) and Firebase (authentication, SMS verification, and storage).
AI providers: Google Gemini (for AI chat and match explanations) and OpenAI (for personality analysis and vector embeddings). We confirm that these third parties provide the same or equal protection of user data as stated in this policy.
Payment and distribution partners: Apple App Store, Google Play Store, and RevenueCat (for managing subscription status and receipts).
Analysis, troubleshooting, and communication services: PostHog (product analysis), Sentry (error and crash reporting), and Expo (infrastructure for push notifications).
Content Moderation: Google Cloud Vision API is used for the automated detection of inappropriate content in images.

B) Transfers to third countries

Some providers are based in the USA, which may involve the transfer of personal data to a third country. When this happens, we use appropriate safeguards according to Article 46 GDPR / UK GDPR, e.g., the EU–US Data Privacy Framework, the UK Extension to the EU-US Data Privacy Framework, and/or standard contractual clauses (SCC).

HOW LONG DO WE STORE YOUR DATA?

In brief: We store data as long as it is needed for the purpose, and sometimes longer when the law requires it or when it is needed to prevent abuse.

Account information & Profile data: As long as your account is active, and for a limited time after you have deleted your account.
Conversation metadata: For a limited time required to improve the service.
Payment history: 7 years according to the Swedish Accounting Act.
Technical logs and security data: For a limited time required for troubleshooting and security.
Data to prevent abuse: For a limited time after suspension/blocking (e.g., to be able to "ban devices," not just accounts).
Sensitive personal data: Deleted immediately upon account deletion or withdrawn consent.
Customer service cases: For the time required to handle your case, and for a limited time thereafter for quality assurance.
Backups: Deleted data may remain in backups for a limited time, after which they are permanently deleted.

YOUR RIGHTS

In brief: GDPR and UK GDPR give you rights so that you can have transparency and control over your data. You can exercise them by contacting us at mio@eveai.app.

Right of access: You have the right to know what personal data we process about you.
Right to rectification: You have the right to have incorrect data corrected.
Right to erasure: You have the right to have your data deleted under certain conditions.
Right to restriction: You have the right to request that the processing of your data be restricted.
Right to data portability: You have the right to receive certain data in a structured format.
Right to withdraw consent: When processing is based on consent, you can withdraw it at any time.
Right to object: You have the right to object to processing based on legitimate interest.
Right not to be subject to automated decision-making: See the section below.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) at www.imy.se, or if you are a UK resident, with the Information Commissioner's Office (ICO) at www.ico.org.uk.

SECURITY

In brief: We protect personal data with technical and organizational measures to reduce the risk of unauthorized access, loss, or incorrect use.

Encryption of data in transit and at rest.
Access control and role-based permissions.
Regular security testing and vulnerability analysis.
Incident management process including a 72-hour routine for reporting to the supervisory authority.

HOW OUR AI-BASED MATCHING WORKS

In brief: Eve AI uses AI to generate match suggestions and match explanations. This means that your data is analyzed automatically (profiling) and that suggestions are determined by algorithms (automated decision-making).

How AI is used in Eve AI

Profiling for matching: We create AI insights (e.g., communication style/personality type) to improve the relevance of match suggestions.
The logic behind our match suggestions: Based on how you use the app and your interaction patterns (which profiles you engage with, conversation metadata such as response rate/message length, not the content of your messages), onboarding answers, and profile data.

Your rights in automated decision-making

You have the right to receive information about how profiling affects you, request human review when automated decisions have significant effects (e.g., in case of suspension or incorrect image moderation), express your point of view, and contest automated decisions. To exercise these rights, contact us at mio@eveai.app.

SPECIFIC PROVISIONS FOR UNITED KINGDOM (UK) RESIDENTS

In brief: If you are a resident of the United Kingdom, this section applies to you and outlines your rights under UK data protection laws.

UK GDPR and Data Protection Act 2018

For users residing in the UK, we process your personal data in accordance with the UK GDPR and the Data Protection Act 2018. The legal bases for processing your data remain identical to those outlined under the GDPR sections above.

Our ICO Registration

Eve AI AB is registered as a data controller with the UK Information Commissioner’s Office (ICO).

ICO Registration Number: [Klistra in ert nummer här så fort betalningen är klar]

Your Right to Complain

If you are a UK resident and are unhappy with how we collect or use your personal data, you have the right to lodge a complaint directly with the Information Commissioner’s Office (ICO).

Website: www.ico.org.uk
Helpline: 0303 123 1113

CHANGES TO THE POLICY

In brief: If we change how we process personal data, we will inform you in the app and/or via e-mail before the changes take effect.

Last updated: May 22, 2026

CONTACT US

Eve AI AB, reg. no. 559553-7555

Address: Kvisslingbyvägen 23, 184 91, Åkersberga, Sweden

E-mail: mio@eveai.app