Privacy Policy

This Privacy Policy explains how Aphrodite (“Aphrodite,” “we,” “us,” or “our”) collects, uses, shares, and protects personal data when you visit, register, or use our websites, applications, and services (collectively, the “Services”). By accessing or using the Services, you acknowledge that you have read this Policy. If you do not agree, do not use the Services.

We provide an adult-only social platform for couples and singles that includes profiles, messaging, community groups, events, location-based discovery, and account verification. Because of the nature of the platform, some of the data we process is sensitive (see “Sensitive Data” below) and we treat it accordingly: we minimise what we collect, restrict who can access it, and delete it when it is no longer needed.

1. Controller and Contact

The data controller is Aphrodite, based in Málaga, Spain. You can reach us on any privacy matter, including to exercise your rights, at aphrodite@aphrodite.is. Our Data Protection Officer can be reached at jon@aphrodite.is.

The controller is established in Spain (EU); our lead supervisory authority is the Spanish Data Protection Agency (AEPD), so no EU Article 27 representative is required. Users in the United Kingdom can contact us about any privacy matter at the address above, and have the right to complain to the UK Information Commissioner’s Office (ICO).

2. Information We Collect

• Account & profile data: name, nickname, date of birth, gender, email, phone, and profile content you add. Couple profiles may have a login and details for each partner.
• Verification data: to verify your account you provide a live selfie holding a passport or national ID, plus the details on it. See retention in §6 — we delete the ID image once verification is complete.
• Location data: If you give us permission, we can collect your geolocation (latitude and longitude) from your device. This is used for discovery, activity features, member proximity, and safety/evidence purposes. If you decline permission, features that rely on precise geolocation — the map, member and activity discovery, distance from other members — will not be available to you.
• Messages: direct messages are end-to-end encrypted; we cannot read their content. We process only the metadata needed to deliver them, plus anything you explicitly submit through reporting/SOS.
• Payments & transactions: subscription tier and billing status (via Stripe), and records of tickets, orders, and venue charges.
• Technical data: device identifiers, push tokens, and—when an administrator performs an action—the request IP address for security auditing.
• Usage statistics for partner content: when you are signed in and a partner club’s party flyer is shown to you, or you open one full screen, we count it so the club can see how many members its flyer reached. We store totals per flyer, never per member. So that you are not counted twice in one day, we store a short-lived marker that stands in for your account as an irreversible cryptographic hash — specific to that one flyer and that one day, with no other data attached — and delete it within 72 hours.

3. Sensitive Data

Given the nature of the Services, your profile and activity may reveal data concerning your sex life or sexual orientation, which is a special category of personal data under the GDPR. We process this data only with your explicit consent, which you give during registration and can withdraw at any time by editing or deleting your profile or account.

4. How We Use Information and Legal Bases

• Provide the Services (accounts, profiles, messaging, discovery) — performance of our contract with you; explicit consent for sensitive data.
• Verify accounts — our legitimate interest and legal obligations in keeping the platform adults-only and safe.
• Safety, moderation, fraud and abuse prevention — legitimate interests.
• Audience statistics for partner clubs (how many members saw or opened a club’s party flyer) — our legitimate interest, and the club’s, in showing partners the reach the platform gives them. What the club receives is aggregate totals that cannot identify you. You can object to this processing at any time at aphrodite@aphrodite.is.
• Payments and tax/accounting records — performance of contract and compliance with legal obligations.
• Service emails — contract; marketing/sign-up follow-up emails — consent.
• App-store review (letting Google Play and Apple App Store reviewers test our apps with a dedicated account on which other members' media and comments are hidden) — our legitimate interest in distributing the apps; your content is not disclosed to them.

5. Sharing and Sub-processors

We do not sell personal data. We share data only as needed to run the Services:

• Google (Firebase / Google Cloud Platform) — hosting, database, file storage, authentication, and push messaging (FCM). Our primary data region is the EU (europe-west4).
• Google Maps Platform — geocoding of addresses and map display for location-based discovery; relevant location/address data is sent to Google for this purpose.
• Google reCAPTCHA Enterprise — bot, fraud, and abuse prevention; processes device, network (including IP address), and interaction signals.
• Stripe — payment processing, subscription billing, and partner payouts (Stripe Connect).
• Resend — delivery of transactional account and notification emails.
• PostHog (EU Cloud) — product and subscription analytics (sign-up, activation, and subscription funnels). On-site behavioural analytics run only with your consent; aggregate subscription, verification, and account-lifecycle analytics are processed on a legitimate-interests basis. Hosted in the EU; identified only by a pseudonymous account ID, with no identity-document data.
• Partner clubs and venues — a club in our partner programme receives aggregate statistics for its own content, such as how many members saw or opened one of its party flyers. If you buy a ticket, join a waiting list or run a tab at a venue, that club sees the transaction and the name shown on your profile, and nothing else: never your real name, your email address or your phone number. A club is never given a list of the members who viewed or opened its content, and we have no way to produce one.
• Legal/regulatory authorities — where required by law or to protect rights and safety.
• Other users — to the extent you choose to share information through your profile or interactions.
• App-store reviewers (Google Play, Apple App Store) — to publish and update our apps, store reviewers sign in with a dedicated test account that we control. On that account, other members' photos, videos and comments are blurred or hidden; reviewers only see content we created for testing, never your profile media. The test account has no access to private messages.

A current list of sub-processors and their roles is maintained on our sub-processors page.

6. Data Retention

We keep personal data only as long as needed for the purpose it was collected:

• Identity/passport images: deleted as soon as verification is approved or rejected — we keep only the fact that you were verified, not the image.
• Verification records: identifying details are removed within 90 days of the decision; only a minimal audit record remains.
• Incomplete sign-ups: if you started registering and gave consent, your email is kept up to 90 days, then deleted. Completed sign-up funnel records are kept up to 30 days.
• Unverified accounts: if you finish signup but do not complete ID verification within 30 days, the account and everything attached to it (profile, photos, messages, location, matches, etc.) is automatically deleted. The account name is released back to the pool. Because agreeing to receive Aphrodite emails is a mandatory part of signup, we keep your email address in a separate marketing-only list so we can continue to send you product news and reminders — you can unsubscribe from that list at any time using the link in every email, which removes the address entirely.
• Administrator security/audit logs (including IP): up to 12 months.
• Partner-content usage statistics: per-flyer totals are kept for as long as the flyer itself — up to 3 years after the party’s last day — and are deleted with it. The short-lived hashed markers that stop you being counted twice in a day are deleted within 72 hours.
• Location data: the day-to-day location history that powers discovery and activity features is kept for 90 days and then deleted automatically. If you file a safety report (SOS) that uses location as evidence, the report’s location snapshot is kept encrypted for up to 1 year after the report is closed, then deleted. Safety reports must be filed within 30 days of the incident.
• Payment and transaction records: retained for the period required by tax and accounting law (up to ~7 years). After you delete your account these are kept without your identifying details, then deleted.
• Account data: erased promptly when you delete your account (see §7); we keep only a minimal record that the account was deleted.

7. Your Rights and How to Exercise Them

You can view and edit most data in your account settings. You can delete your account at any time from Account settings; this permanently erases your profile, verification data and ID images, photos, and messaging keys (payment records are retained as described in §6).

Depending on where you live, you also have rights to access, correct, delete, restrict, object to, or port your data, and to withdraw consent. EU/UK users may lodge a complaint with their supervisory authority; California and other US-state residents have rights under applicable state laws (including access and deletion, and the right not to be discriminated against for exercising them). To make a request, contact aphrodite@aphrodite.is. We respond within the timeframe required by applicable law — generally within one month (EU/UK GDPR) or 45 days (California), and we will tell you if we need an extension permitted by law. You may also request a copy of your data in a portable format.

8. Security

We apply administrative, technical, and organisational safeguards, including access controls scoped to the account owner and administrators, encrypted direct messages (we cannot decrypt live chats; moderation access occurs only when a participant explicitly submits content through reporting/SOS), and identity documents restricted to the account owner and administrators and deleted after verification. No system is perfectly secure, but we continuously evaluate and improve our protections.

9. International Transfers

Our primary data region is the EU (europe-west4). Some providers process data in the United States — including Stripe, Resend, and Google services such as Maps Platform and reCAPTCHA Enterprise. Where data leaves the EU/UK, transfers are covered by appropriate safeguards, namely the EU Standard Contractual Clauses (and the UK International Data Transfer Addendum) and, where applicable, certification under the EU–US and UK Extension to the Data Privacy Framework. The current list of providers is on our Sub-processors page.

10. Cookies and Tracking

We use cookies and similar technologies for authentication, security, functionality, analytics, and marketing. Strictly necessary cookies (for example, your sign-in session and bot protection) are always active because the Services cannot work without them. Optional analytics and marketing cookies are used only with your consent, which you give and can withdraw at any time through the cookie banner. For a full list of the cookies and technologies we use, their purposes, and durations, see our Cookie Policy.

11. Adult-Only Services

The Services are restricted to adults aged 21 and over. We do not knowingly collect data from anyone under this age, and we do not knowingly collect data from children (and in particular comply with COPPA in the United States, which protects children under 13). If you believe a minor has provided data, contact us at aphrodite@aphrodite.is and we will take appropriate action. See also our Child Safety Standards.

12. Changes to This Policy

We may update this Policy to reflect changes in our practices or the law. Updates are posted here and the “Last updated” date is revised accordingly.