Privacy Policy
Effective 30 October 2026
This policy explains how the PAI Matchmaker iOS app and this website (together, “PAI”) handle personal data. PAI is a personal matchmaking service for adults that suggests introductions and helps two people who both want to meet arrange a date at a public place.
1. Who is responsible
The data controller is Saroar Khandoker, Portugal. Contact for any privacy question or request: pai.support@byalif.app.
2. What we collect and why
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Sign in with Apple identifier (we do not store your email address), date of birth, time zone | Create and secure your account; confirm you are 18 or older | Contract (Art. 6(1)(b)) |
| Profile: first name, gender, relationship goal, bio, lifestyle answers (diet, smoking, drinking, wanting children, activity level) | Show your short profile to people you are introduced to; match you | Contract; explicit consent where answers are sensitive (Art. 9(2)(a)) |
| Partner requirements: genders, age range, distance, relationship goals and other preferences | Find people who fit you and whom you fit | Explicit consent (Art. 9(2)(a)) — you can withdraw it at any time |
| Approximate location (rounded to about 1 km, only when you allow it) | Respect distance limits for introductions and date places | Consent |
| Photos you upload | Your profile, and review by our team for authenticity and safety | Contract; legitimate interest in member safety (Art. 6(1)(f)) |
| Messages you type to the AI matchmaker | Suggest profile answers that you review and confirm | Explicit consent, given separately before the AI interview |
| Interest in introductions, shared available times, date plans, private post-date feedback | Arrange dates and improve your future introductions | Contract |
| Contact details you choose to share after a date | Passed to the other person only if you both agree | Consent |
| Reports, blocks and safety review records | Keep members safe and enforce our Terms | Legitimate interest in safety; legal obligation where applicable |
| Device push token (only if you turn notifications on) | Tell you when something useful happens | Consent |
| Technical server logs (IP address, request time) | Security and fixing errors | Legitimate interest |
Voice dictation uses Apple’s on-device speech recognition. Audio stays on your iPhone and is never sent to PAI.
We do not use your data for advertising, we do not track you across other apps or websites, we do not sell personal data and we do not score anyone’s appearance. The app contains no third-party analytics or advertising SDKs. This website uses no cookies and no analytics.
3. What other members see
People you are introduced to see your short profile, your reviewed photos and the reasons you may fit each other. They never see your private requirements, lifestyle answers you keep private, your conversations with the AI matchmaker, your feedback or your location. Contact details are shared only when both of you explicitly agree after a date.
4. Who processes data for us
- Hetzner Online GmbH (Germany) — server hosting in Helsinki, Finland (EU). All PAI databases and photos are stored there.
- OpenAI (USA) — only if you choose the AI matchmaker interview, the text you type is sent to OpenAI to generate suggestions. Transfers rely on the EU–US Data Privacy Framework / Standard Contractual Clauses. Declining the AI interview still lets you fill in your profile yourself.
- Apple — Sign in with Apple and, if enabled, push notification delivery.
Our team (the controller and any person working under their instructions) reviews photos, reports and date plans.
5. How long we keep data
- Unconfirmed AI interview drafts: 24 hours.
- Introductions and pending interest: up to 72 hours unless acted on.
- Shared availability: 7 days.
- Private post-date feedback text: 90 days.
- Shared contact cards: 30 days.
- Data export files: 72 hours after they are ready.
- Everything else: while your account is open.
6. Deleting your account
You can delete your account in the app under Menu → Privacy choices → Request account deletion. Your account is closed immediately and hidden from everyone. Your profile, photos, answers and other personal content are then permanently erased after a 30-day safety window, which lets us handle any open safety report or shared date first. We keep only minimal records where needed for the safety of other members or required by law (for example a record that a report was made), and remove them when no longer needed.
7. Your rights
Under the GDPR you can access, correct, export (the app provides a data export), delete, restrict or object to processing of your data, and withdraw consent at any time without affecting earlier processing. Email pai.support@byalif.app; we reply within one month. You may also complain to the Portuguese data protection authority, CNPD, or the authority where you live.
8. Age
PAI is only for adults aged 18 and over. We do not knowingly collect data from anyone younger and close such accounts when we learn of them.
9. Security
Data travels over encrypted connections, sign-in tokens are stored only as hashes, notification tokens and shared contact details are encrypted at rest, and access by our team is restricted and logged.
10. Changes
We will post updates on this page and tell you in the app before material changes take effect.