This Privacy Policy explains how Aihoy! ("Aihoy!", "we", "us", or "our") collects, uses, and protects your personal data when you use the Aihoy! mobile application and related services (the "Service"). Aihoy! is operated by an individual sole operator. If you have any questions, you can reach us at [email protected].
Registration on Aihoy! is open to people aged 18 and over. By using the Service you confirm that you are at least 18 years old. See section 11 and our Child Safety Standards for details.
The data controller is the individual operator of Aihoy!. Contact: [email protected].
Where the GDPR applies, we rely on the following legal bases:
Some features use a third-party AI provider (Anthropic, the "Claude" API) to generate short match introductions and trip descriptions, to power the in-app assistant, to check short public status texts against our rules before they are shown, and to help review safety reports (see below). Only the limited data needed for the feature (such as selected profile or mood attributes) is sent to the provider to produce the result. If you have switched on Secret Bay, this can include that a match is in a romantic context and the genders involved — only so that the text is phrased appropriately. This data is not used to train the provider's models for general use.
When someone reports a user, a trip or a message, our server asks the same AI provider (Anthropic) for a first assessment. For this it sends the report (the reason and the reporter's comment) and the reported content: the reported message together with the messages around it in the same chat (in a trip's group chat this can include messages from other participants), the reported trip, or the reported profile (texts and photos). For a reported user or trip it also sends the most recent messages that the reporter and the reported user exchanged with each other (in direct, booking or shared trip chats), and a short summary of earlier reports and moderation decisions about the reported user. A few photos from this material may be included. Other private conversations are not sent.
Message translation is provided by DeepL SE (Cologne, Germany). When you translate a chat message, only the text of that message and the target language are sent to DeepL through our server — not your name, profile or any other data. DeepL processes the text under its own privacy policy.
We do not sell your personal data. We use trusted service providers ("processors") to run the Service:
As part of the social features, other users can see your public profile information (such as your name, photo, and the details you add) and any content you share with them. Your email address and phone number are never shown to other users.
Any payments or donations are handled by external payment providers (such as Revolut). Aihoy! does not store your payment card details.
Some of our processors operate servers outside your country (including in the EU and the United States). Where data is transferred internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
We keep your personal data while your account is active. You can delete your account at any time in the app or as described on the Delete account page. When you do, your profile, photos, chat messages, trips, bookings, connections, location data, Terms-of-Use acceptance records and Secret Bay consent records are deleted.
30-day lock after deletion. Your birth date and gender can be set only once, because age- and gender-based safety rules (such as protecting minors and women-only trips) depend on them. So that these rules can't be bypassed by deleting an account and signing up again with different details, we keep the following for 30 days after an account is deleted: a one-way cryptographic fingerprint (SHA-256 hash) of the email address — not the address itself — together with the locked gender and birth year and month. If you sign up again with the same email address within those 30 days, these locked values are restored. After 30 days this record is deleted automatically. Legal basis: our legitimate interest in keeping the platform safe.
Safety reports — together with the moderation decisions and AI assessments made about them — may be kept for as long as needed to handle them and to prevent repeated abuse, and we retain records where the law requires us to.
Depending on your location, you may have the right to:
To exercise any of these rights, contact [email protected]. You also have the right to lodge a complaint with your local data protection authority.
We use industry-standard measures to protect your data, including encryption in transit and database-level access controls. No system can be guaranteed to be completely secure, but we work to protect your information and to respond promptly to any issues.
Registration is open only to people aged 18 and over. Your age is calculated from the birth year and month you enter when signing up, and our server rejects sign-ups below the minimum age. The birth date can't be changed later. We do not knowingly allow anyone under 18 to register.
As an additional safeguard, if an account turns out to belong to someone under 18, our server automatically applies youth-protection rules to it: the account is kept separate from adult users (adults and minors can't see each other on the Radar or contact each other outside a shared trip), can't join adults-only trips, can't use adult-only features such as the Secret Bay, and can't share public links. Accounts of anyone under 16 are deleted, and we may remove any account that appears to belong to a minor. See our Child Safety Standards.
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date above. When we make material changes, the app asks you to review and accept the updated terms before you continue.
Questions about your privacy or this policy?
Email: [email protected]