Privacy Policy

Last updated: July 2026

Aureve is operated by ARVV LLC, a Wyoming limited liability company with its registered office at 30 N Gould St, Ste R, Sheridan, WY 82801, United States ("ARVV LLC," "Aureve," "we," "our," or "us"). ARVV LLC is the data controller for the personal data processed through Aureve. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Aureve mobile application and website, and describes your rights.

This policy is written to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and, where applicable, the EU GDPR. If you are located in the United Kingdom or the European Economic Area (EEA), the sections on legal bases, special category data, international transfers, and your rights apply to you.

1. Information We Collect

We collect information you provide directly to us when you create an account, complete your profile, use safety or verification features, use our AI features, or communicate with us, as well as information generated as you use the service.

• Account information: email address and/or phone number, display name, date of birth, gender, and account identifiers.
• Profile information: photos, private photos, bio, prompt answers, height, body type, ethnicity, education, occupation, city, dating intentions, who you are interested in, and other profile fields you choose to share.
• Special category (sensitive) data: because Aureve is a dating service, information you provide can reveal your sexual orientation (for example, the genders you are interested in) and your racial or ethnic origin (if you share ethnicity). Photo and liveness verification involves biometric data. We treat all of this as special category data — see Section 3.
• Communications: messages with other users and messages you send to our support, safety, or privacy teams.
• AI interaction data: when you use Aria, our AI matchmaking assistant, your messages to Aria, profile text, and photos are processed to generate recommendations (see Section 4).
• Usage and device data: interactions with profiles, likes, passes, matches, device type, operating system, crash diagnostics, performance data, push notification tokens, and app activity.
• Location data: your city and precise GPS coordinates, collected with your permission, to show relevant profiles nearby. You can turn location access off in your device settings.

2. How We Use Your Information and Our Legal Bases

Under the UK GDPR we must have a lawful basis for each purpose for which we process your personal data. Our purposes and the corresponding legal bases (Article 6) are:

• Providing the service — creating and operating your account, matching you with other users, and enabling messaging, likes, and matches: performance of our contract with you (Article 6(1)(b)).
• Keeping the service safe — moderation, reporting, blocking, fraud and spam prevention, verification checks, security, and enforcing our Terms: our legitimate interests, and those of our users, in a safe platform (Article 6(1)(f)).
• Optional features you switch on — AI matchmaking (Aria), photo/liveness verification, precise location, and product analytics: your consent (Article 6(1)(a)), which you can withdraw at any time.
• Notifications — service and safety notifications: performance of our contract, or your consent via device notification permissions.
• Legal compliance — complying with legal obligations, responding to lawful requests, and establishing, exercising, or defending legal claims: legal obligation and legitimate interests (Articles 6(1)(c) and 6(1)(f)).

Where we rely on legitimate interests, we have carried out a balancing assessment; you can ask us for details at privacy@aureve.app.

3. Special Category Data and Explicit Consent

Some of the data we process is "special category" data under Article 9 of the UK GDPR — in particular data that can reveal your sexual orientation, data revealing racial or ethnic origin, and biometric data used for verification. We only process this data with your explicit consent (Article 9(2)(a)), which you give when you create your profile, choose to share these details, and use verification. Providing this information is your choice; you can edit or remove optional fields, decline verification, and withdraw your consent at any time by editing your profile, using the in-app controls, or contacting privacy@aureve.app. Withdrawing consent does not affect processing carried out before withdrawal, and some features may not work without the relevant data.

Biometric verification images (for example, a verification selfie) are used only to confirm that you match your profile photos and are deleted shortly after the check completes; we retain only the verification result.

4. How We Share Your Information

We do not sell your personal data. We share it only as described below.

• With other users: your profile information — display name, photos, prompts, bio, city, and the fields you choose to show — is visible as part of the service. Private photos are shared only with users you approve.
• With processors acting on our instructions: Supabase (hosting, database, and storage, in the EU region), Mixpanel (product analytics), Sentry (crash diagnostics), Expo (push notification delivery), Amazon Web Services / AWS Rekognition (photo and liveness biometric verification), and Twilio (SMS one-time passcodes, where used).
• With AI providers, when you use Aria: your Aria messages, profile text, and photos may be sent to Anthropic (Claude — conversational matchmaking) and OpenAI (text embeddings and image understanding via a vision model) to generate recommendations. These providers act as our processors and do not use your data to train their own models. If you decline the AI consent prompt, this processing does not take place.
• With verification and check providers: where you use them, background/financial-check providers such as Checkr or Plaid — only where you initiate that specific check.
• For legal and safety reasons: where required by law, or where necessary to protect our rights, your safety, or the safety of others.
• In a business transfer: as part of a merger, acquisition, financing, or sale of assets, subject to this policy.

5. International Data Transfers

ARVV LLC is based in the United States, and several of our processors (including Anthropic, OpenAI, Amazon Web Services, Mixpanel, and Sentry) process data in the United States. This means your personal data may be transferred outside the UK/EEA.

Where we transfer personal data outside the UK or EEA, we rely on appropriate safeguards under Article 46 of the UK GDPR — the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, and the EU Standard Contractual Clauses for EEA data — together with any additional measures needed to protect your data. You can request a copy of the relevant safeguards by contacting privacy@aureve.app.

6. Data Retention

We keep personal data only for as long as we need it for the purposes above. In general:

• Account, profile, photos, messages, and matches: retained while your account is active and deleted when you delete your account (see Section 7). Backups are overwritten on a rolling basis, normally within 30 days.
• Verification (biometric) images: deleted shortly after the verification check completes; only the verification result is retained while your account is active.
• Operational data: skipped-profile and view records and rate-limit records are kept for short periods (typically hours to 30 days) and then removed automatically.
• Crash and reliability diagnostics: retained for a limited period (typically up to 90 days).
• Safety records: a limited set of records needed to keep banned or unsafe users off the platform, and to meet legal obligations, may be retained after account deletion for as long as necessary for those purposes.
• Analytics: retained according to provider settings; the in-app analytics control affects future collection from the device where you change it.

7. Your Rights

If you are in the UK or EEA, you have the following rights over your personal data:

• Access — request a copy of the personal data we hold about you.
• Rectification — correct inaccurate or incomplete data (you can edit most of this in the app).
• Erasure — delete your account and personal data (available in Settings, or on request).
• Restriction — ask us to limit how we use your data in certain circumstances.
• Portability — receive certain data in a portable, machine-readable format.
• Objection — object to processing based on our legitimate interests.
• Withdraw consent — for any processing based on consent, at any time, without affecting prior processing.

To exercise any of these rights, contact privacy@aureve.app or use the in-app controls. We will respond within one month. You will not usually have to pay a fee. If you are unhappy with how we handle your data, you have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or, in the EEA, to your local data protection authority — though we would welcome the chance to resolve your concern first.

8. Your Controls and Choices

Aureve provides privacy and account controls inside the app, including discovery visibility, online status, read receipts, and hidden profile views.

• Request a copy of your data: contact privacy@aureve.app.
• Delete your account: Settings > account deletion.
• Manage analytics: Settings > Privacy > Analytics & Personalization.
• Manage AI features: decline or stop using Aria at any time.
• Manage notification and location permissions: in your device settings.

9. Data Security

We use appropriate technical and organizational measures to protect your data, including encryption in transit, encrypted storage for sensitive credentials, and row-level security on our database. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a personal data breach is likely to result in a risk to your rights, we will notify the relevant supervisory authority and, where required, affected users.

10. Children's Privacy

Aureve is only for adults aged 18 or over. We do not knowingly process the personal data of anyone under 18. If we learn that an underage person has created an account, we will remove it and delete their data.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you in the app, by email, or by updating this page, and we will update the "Last updated" date above.

12. Contact Us and Representatives

For any privacy question or to exercise your rights, contact our privacy team at privacy@aureve.app.

Data controller: ARVV LLC
30 N Gould St, Ste R
Sheridan, WY 82801
United States

UK and EU Representative (Article 27): if you are located in the UK or EEA and have any question about how we handle your personal data, you can contact our privacy team at privacy@aureve.app, who will deal with your request in accordance with the UK GDPR and, where applicable, the EU GDPR. Where we are required under Article 27 to designate a representative in the UK or EEA, we will publish their name and contact details on this page.