Privacy Policy

Tovely.ai is based in Quebec, Canada, and initially serves Canada and the United States. The service is operated by [REGISTERED LEGAL ENTITY NAME, IF DIFFERENT FROM TOVELY.AI], at [MAILING ADDRESS], Quebec, Canada. “Tovely,” “we,” and “us” refer to that operator. Privacy Officer: [TITLE / NAME], reachable at [PUBLIC PRIVACY EMAIL].

This policy covers the Tovely website and matchmaking service. Draft prepared September 4, 2026. Effective date: [TO BE CONFIRMED].

Account information includes your name, email address, authentication records, and information received from Google if you choose Google sign-in. Session records may include an IP address and browser or device information.

Profile and preference information includes your date of birth, gender, selected location and its coordinates, photos, family circumstances, religious identity and practice, and relationship preferences. Some of this information reveals religious beliefs or other sensitive characteristics. Mapbox processes location searches. If you choose “use my location” and grant browser permission, your device coordinates are sent to Mapbox to resolve a place; Tovely stores the returned place coordinates for distance matching.

We store your AI interview conversation and generate summaries, personality and values assessments, profile text, supporting excerpts, compatibility scores, and match explanations. These are inferences and may be inaccurate.

We also store match choices, messages, shared activity answers, venue selections, date check-ins, feedback, reports, blocks, support requests, and account settings. Other members may provide information about you through interactions, feedback, or reports.

We use information to create and secure your account, conduct and resume interviews, prepare your profile, assess compatibility, suggest introductions, support member conversations, and provide date prompts and guidance.

We also use relevant information to handle support and safety reports, administer the service, troubleshoot problems, understand site usage, and meet applicable legal obligations. Where payment features are offered, we use relevant billing records to administer them.

Some profile and preference information is needed to provide matchmaking. You can choose not to share optional information or stop an interview, but this may limit the features available to you. Avoid including another person’s private details in your conversations.

Tovely sends interview content and relevant profile information to Anthropic to support AI interviews, profile generation, compatibility analysis, and guidance. Where enabled, Google Gemini receives structured profile summaries and conversation topics to generate icebreakers and explanations for date suggestions. Google Places receives a venue search and location to help find places to meet.

Matching uses practical preferences alongside inferred personality and values information. These automated assessments influence which introductions you see. Scores do not establish facts about a person or predict relationship success.

Review your generated profile before accepting it. If an assessment is inaccurate or you want to question a recommendation, contact us. Accepted profile text is currently locked for ordinary editing; correction may require support or a fresh interview.

[BEFORE PUBLICATION: Confirm each AI provider’s production configuration, retention, model-training terms, processing locations, and contractual protections. Add the verified explanation here.]

Members shown a potential match may see identifying profile information such as your name, age, location, religious observance, biography, photos, and compatibility explanations. Explanations can include selected excerpts from your interview. This sharing can occur before both members express interest.

Messages and shared activity answers are visible to the other participant. Private check-in conversations and pass reasons are not displayed to the other member as raw feedback. Structured check-in information may inform future matching, and patterns from multiple members’ feedback may be used to generate general guidance for another member.

No platform can prevent a recipient from taking a screenshot or keeping information you share. Uploaded photos currently use public file URLs: someone who obtains a URL may be able to view the image outside the signed-in interface.

The current implementation uses Neon for database storage, Cloudflare R2 for photos, Anthropic for AI processing, Mapbox for location search and optional device-location lookup, Google services for optional sign-in and configured AI or venue features, Resend for configured email delivery, and Vercel Web Analytics for site usage measurement. Polar handles payments when payment features are enabled. Hosting and infrastructure providers also process information needed to deliver the service.

Relevant information may be accessed by authorized staff handling service operations, support, and safety. We may disclose information when required by applicable law or where reasonably necessary to address fraud, abuse, or threats to safety. If the service changes operator, we will explain any resulting material changes to data handling.

[BEFORE PUBLICATION: Confirm the live provider list, any additional recipients, and whether any activity constitutes sale, sharing, or targeted advertising under applicable law. Do not infer these answers from installed software packages alone.]

Tovely uses authentication cookies to keep you signed in and local browser storage for preferences and app features. The site includes Vercel Web Analytics to measure usage. Your browser lets you manage cookies and local storage; disabling essential storage may prevent sign-in or other features from working.

[BEFORE PUBLICATION: Document the production analytics configuration, information collected, retention, and any consent or opt-out mechanism required in launch markets.]

Pausing membership does not delete your information. You can request account deletion through account settings. The current account-deletion process removes the account and related database records, including profile, interview, match, message, and check-in records. Shared match conversations are also removed from the other participant’s account.

Removing a photo from your profile currently removes its profile reference, but does not itself erase the stored image file. The account-deletion route likewise does not currently remove stored photo files. Contact [PUBLIC PRIVACY EMAIL] for assistance with retained files.

[BEFORE PUBLICATION: Complete and verify file deletion, then update the preceding paragraph. Set specific retention periods or criteria for active and inactive accounts, backups, logs, safety records, email providers, AI providers, and billing records; explain exceptions and deletion timelines.]

You can review your profile, adjust available preferences, pause membership, block or report members, and delete your account through the service. For corrections that account controls do not support, or other privacy requests, contact [PUBLIC PRIVACY EMAIL]. This contact must remain available even if you no longer have an account.

Depending on applicable law, you may have rights to access, correct, delete, or receive a portable copy of your information; restrict or object to processing; withdraw consent where processing relies on it; or complain to a privacy regulator. We may need proportionate information to verify a request.

For Quebec residents, you may request access to and correction of your information and, where applicable, a portable copy of computerized information collected from you. We will respond to access and correction requests within 30 days as required by Quebec law. You may contact Quebec’s Commission d’accès à l’information about a privacy concern; federal or other provincial regulators may also be relevant.

Where a decision about you is based exclusively on automated processing, applicable Quebec rights include information about the data and principal factors used, correction of the information, and an opportunity to submit observations to a staff member able to review the decision. Contact the Privacy Officer to make a request.

US state rights depend on your residence and whether the relevant law applies to Tovely. These may include access, correction, deletion, portability, appeal of a denied request, and applicable opt-outs. [BEFORE PUBLICATION: Assess the launch states and applicability thresholds; add required notices and working request, appeal, and opt-out methods. Do not claim blanket US compliance.]

Where we rely on your consent, you can ask the Privacy Officer to withdraw it, subject to legal or contractual restrictions. We will explain the effect on the service. Pausing membership alone does not withdraw all processing consent. [BEFORE PUBLICATION: Implement and verify express consent for sensitive information and clear notices before interview excerpts are shared.]

We use account authentication and access controls to help protect information. No online service can guarantee complete security.

Providers may process information outside Quebec and Canada, including in the United States, where laws and access by authorities may differ. [BEFORE PUBLICATION: Verify actual processing locations, complete the required assessment before entrusting information outside Quebec, and document contractual protections and access safeguards.]

Tovely is intended for adults aged 18 and over. If you believe a child has provided personal information, contact [PUBLIC PRIVACY EMAIL] so we can investigate and take appropriate action.

We will update the dated version of this policy when our practices change and provide any notice or consent process required by applicable law.