Privacy Policy

1. Controller and scope

Joseph Alai, trading as Sovrin ("Sovrin", "we", "us"), operates sovrin.co and the Sovrin iOS and Android applications and is the controller of personal information described in this Policy. Contact: support@sovrin.co.

This Policy covers visitors, registered users, subscribers, support contacts, and people who interact with our safety systems. Apple, Google, Stripe, RevenueCat, and other providers may separately control information they collect under their own notices.

2. Information you provide

• Account data: name, email, password hash, provider login IDs, verification status, age/date-of-birth information, and account preferences.
• Dating and social profile data: photos, biography, location, gender, sexual orientation, dating intent, relationship preferences, interests, occupation, goals, beliefs, manifestation content, and visibility choices.
• User content and communications: profiles, posts, comments, likes, matches, friend relationships, messages, call metadata, uploaded media, and content submitted to AI or generation features.
• Transactions: plan, product, purchase channel, provider customer/subscription/transaction IDs, status, price/currency, renewal/expiry, refunds, and entitlement history. We do not receive full card numbers or store-account passwords.
• Support and safety: support messages, reports, blocks, moderation decisions, appeals, evidence you submit, and records needed to investigate fraud, abuse, or legal concerns.
• Optional permissions: push token, camera/photo selections, and other device data only when you grant permission or use the relevant feature.

3. Information collected automatically

• Technical and security data such as IP address, device/browser type, operating system, timestamps, session and authentication records, crash/error information, rate-limit signals, and suspected abuse indicators.
• Usage data such as pages/screens viewed, feature interactions, referring URLs, and approximate location derived from IP or profile input.
• Optional web analytics after consent. We configure Google Analytics without Google Signals or advertising-personalization signals. Native Firebase Analytics is used for product telemetry without Android Advertising ID collection.
• Necessary local storage/cookies for login, security, CSRF protection, preferences, and service operation. These are not used to sell personal information.

4. Sensitive information

A dating service may process information that reveals sexual orientation, sex life, beliefs, health-related statements, ethnicity, or other sensitive/special-category traits. Most such profile fields are optional and are used to provide the matching, visibility, communication, safety, or content feature you request. Where law requires explicit consent, your voluntary submission and the relevant in-product choice provide that consent; you may withdraw it by removing the information, changing the setting, or deleting your account. Withdrawal does not affect earlier lawful processing.

Do not upload government IDs, financial documents, health records, intimate images, or another person’s sensitive information unless a clearly identified feature requires it and you are authorized to provide it.

5. Why we use information and legal bases

• Contract: create and administer accounts; show profiles according to settings; provide matching, messaging, calls, subscriptions, purchases, restores, support, and requested features.
• Consent: optional analytics cookies, marketing communications, device permissions, and sensitive information where consent is required. Consent can be withdrawn.
• Legitimate interests: secure the service; prevent fraud and abuse; moderate content; investigate reports; maintain reliability; understand non-advertising product performance; defend legal claims; and improve features, balanced against user rights.
• Legal obligations and vital interests: comply with tax, accounting, sanctions, law-enforcement, court, child-safety, consumer, and data-protection requirements and respond to credible threats to life or safety.

6. Profiles, visibility, and other users

Information you place in a profile or mark public/friends-only is displayed according to the selected audience and can be copied or shared by recipients. Messages are available to their participants. Blocking limits future interaction but does not erase copies already received. Review privacy settings before posting and do not share financial or highly sensitive details with matches.

7. Service providers and disclosures

We disclose information only as needed to operate, secure, bill, support, and improve Sovrin; to complete a user-requested feature; with your direction; or for legal/safety reasons. Provider categories and current examples include:

• Hosting and infrastructure: Hetzner, database/Redis services, and Google Cloud Storage.
• Identity, push, and product telemetry: Google Firebase and Google Analytics (web analytics only after consent).
• Payments and subscriptions: Stripe for web; Apple App Store and Google Play for native purchases; RevenueCat for entitlement synchronization.
• Communications: Sentanyl for transactional email and Agora for user-requested video calling.
• Safety, moderation, and support vendors where needed to review reports, detect abuse, or provide support.
• AI/content providers, including configured model, image, audio, or moderation vendors, only when a user invokes a feature that requires processing submitted prompts or media.
• Professional advisers, insurers, auditors, authorities, courts, or transaction counterparties where lawfully necessary, including a merger, financing, acquisition, or sale subject to appropriate safeguards.

We do not sell personal information. We do not share personal information for cross-context behavioural advertising. We do not provide user messages or dating profiles to advertisers.

8. International transfers

Sovrin is operated from the United States and uses providers in the United States, United Kingdom, European Economic Area, and other locations. Information may therefore be processed outside your country. Where required, we rely on adequacy decisions, contractual safeguards such as standard contractual clauses or the UK addendum, provider certification frameworks, or another lawful transfer mechanism. Contact us for information about applicable safeguards.

9. Retention

We keep account and service information while an account is active and as reasonably needed to provide the service. After deletion, we delete, aggregate, or de-identify information on an operational schedule, while encrypted backups age out through their normal cycle.

We may retain transaction/tax records, consent and contract records, security logs, reports, moderation decisions, blocked-user relationships, dispute evidence, and legal requests for the period required by law or reasonably necessary for fraud prevention, safety, accounting, enforcement, or legal claims. Other users may retain messages or content already shared with them.

10. Security

We use access controls, encrypted transport, private storage, credential separation, logging, rate limits, backups, and other administrative and technical safeguards appropriate to the service. No online system is perfectly secure. Use a unique password, protect your device, and report suspected compromise to support@sovrin.co.

11. Your choices and rights

• Access and correct profile/account data through Settings or request a copy from support.
• Change profile visibility, messaging, push, and other privacy preferences in the app.
• Withdraw optional analytics consent using the cookie preference control; declining analytics does not prevent account use.
• Delete your account through Settings → Deactivation. Cancel an Apple/Google subscription separately before deletion.
• Depending on your location, request access, correction, deletion, portability, restriction, objection, withdrawal of consent, or review of certain automated decisions.
• Opt out of non-essential marketing using the message link or by contacting support.

We may verify identity before acting on a request. Authorized agents must provide authority and may still require identity confirmation. We will not discriminate for exercising applicable privacy rights.

12. UK/EEA complaints and United States disclosures

UK users may complain to the Information Commissioner’s Office at ico.org.uk; EEA users may contact the supervisory authority where they live or work. Please contact us first if you would like us to address a concern.

Residents of US states with applicable privacy laws may have rights to know, access, correct, delete, or obtain a portable copy of information and to opt out of sale, targeted advertising, or certain profiling. Sovrin does not sell personal information or use it for cross-context targeted advertising. Submit requests to support@sovrin.co.

13. Children

Sovrin is strictly for people aged 18 and older and is not directed to children. If you believe a minor has created an account or personal information relating to a child appears on Sovrin, report it immediately through the app or support@sovrin.co. We will investigate and remove it where appropriate.

14. Cookies and analytics choices

Sovrin uses necessary cookies and local storage for authentication, security, fraud prevention, CSRF protection, preferences, and core operation. These cannot be disabled through our banner because the requested service cannot operate reliably without them.

On the web, Google Analytics is optional. We do not load the Google Analytics tag until you select "Allow analytics". You may decline and continue using Sovrin. Your choice is stored locally and can be reset by clearing site data; a dedicated preference control may be added as the service evolves. Native product telemetry is configured without advertising-ID collection and is used for service analytics, subject to platform settings and applicable law.

15. Automated tools and AI features

We may use automated systems to detect spam, fraud, unsafe media, policy violations, and security threats and to rank or recommend content and profiles. AI features may transform prompts or media you intentionally submit. Do not submit confidential information or third-party content without permission. We do not make solely automated decisions that produce legal or similarly significant effects without the safeguards required by applicable law.

16. Changes and contact

We may update this Policy as services, providers, or laws change. We will post the effective date and provide additional notice for material changes when required.

Privacy requests, questions, and complaints: support@sovrin.co. General support and safety reports may also be submitted through the in-app support/reporting tools.