Privacy Policy
Relately · Last updated: 4 March 2026
Relately (“we”, “us”, “our”) operates the Relately mobile application (the “App”). This Privacy Policy explains what personal data we collect, why we collect it, where it is stored, and how you can exercise your rights over it.
By creating an account you agree to this policy. If you do not agree, please do not use the App.
1. Data We Collect
| Data Category | Specific Data | Collected By |
|---|---|---|
| Account & Identity | Phone number, Supabase User ID (UUID) | Supabase |
| Profile Information | Name, age, gender, city/location, bio, photos, dating preferences (interested-in, age range, max distance) | Backend |
| Personality Test Results | Big Five (OCEAN) scores, DISC profile, Enneagram type & instinctual variant, attachment style scores, values profile (Schwartz model) | Backend |
| Questionnaire Responses | Answers to lifestyle, interest, and compatibility questionnaires | Backend |
| Match & Interaction Data | Compatibility scores, match type, like/pass actions, match feedback & ratings | Backend |
| Chat Messages | Text messages sent between matched users, message read/delivered timestamps, message reactions | Backend |
| AI-Generated Content | Match explanations, personality insights, conversation starters, and intro lines, generated by Claude (Anthropic) | Backend |
| Device & Technical | Push notification token, preferred locale | Backend |
2. Why We Collect Your Data
| Purpose | Data Used | Legal Basis (GDPR) |
|---|---|---|
| Account creation & authentication | Phone number, User ID | Contract performance |
| Building your profile so others can discover you | Name, age, city, photos, bio, preferences | Contract performance |
| Personality-based compatibility matching | Personality test results, questionnaire responses, values profile. Our personality-based matching is for entertainment and compatibility purposes only and is not a clinical, medical, or diagnostic assessment. | Contract performance |
| Generating match explanations & personality insights | Personality data, match scores (sent to Anthropic Claude API) | Legitimate interest |
| Enabling conversations between matches | Chat messages | Contract performance |
| Sending push notifications (new matches, messages) | Push token, User ID | Consent / Legitimate interest |
| Improving matching quality & debugging | Agent logs (anonymised reasoning traces) | Legitimate interest |
3. Where Your Data Is Stored
Supabase (Data Processor)
- Role: Authentication provider & photo storage.
- Data held: Phone number, authentication session, Supabase User ID (UUID), uploaded photos.
- Region: EU (or as configured in our Supabase project).
- Details: supabase.com/privacy
Ruby on Rails Backend & PostgreSQL Database
- Role: Primary application server (Ruby on Rails) and data store (PostgreSQL).
- Data held: Everything listed in Section 1 except phone number (which lives in Supabase). The Backend stores your User ID (linked to Supabase via external_id), profile information, personality test results, questionnaire responses, matches, chat messages, and AI-generated insights.
- Hosted on: Fly.io, Amsterdam (EU) region.
- Details: fly.io/legal/privacy-policy
Anthropic (AI Sub-processor)
- Role: Generates match explanations, personality insights, and conversation starters.
- Data sent: Anonymised/pseudonymised personality scores and match data. No names, phone numbers, or photos are sent to Anthropic.
- Details: anthropic.com/privacy
React Native (Push Notification Sub-processor)
- Role: Delivers push notifications to your device.
- Data sent: Push token and notification content.
- Details: expo.dev/privacy
4. Data Sharing
We do not sell your personal data. Data is shared only with:
- Other users: your name, age, city, photos, bio, and selected personality/questionnaire insights are visible to users you are matched with.
- Service providers listed in Section 3, strictly to operate the App.
5. Data Retention & Deletion
Retention
We retain your personal data for as long as your account is active. Agent logs (matching debug data) are retained for a maximum of 90 days and then permanently deleted. Chat messages are retained for as long as the related match exists.
Account & Data Deletion
You may delete your account and all associated data directly from the Profile screen in the App. When you request deletion:
- Your Backend data — profile, personality results, questionnaire responses, matches, conversations, messages, AI-generated insights, agent logs, and push token — will be permanently deleted.
- Your Supabase account — including your phone number and authentication record — will be deleted.
- Your photos stored in Supabase Storage will be removed.
Deletion is permanent and irreversible. Processing of a deletion request may take up to 30 days. You may also contact us at the email below to request deletion manually.
6. Your Rights (GDPR)
If you are in the EU/EEA, you have the right to:
- Access — request a copy of your personal data.
- Rectification — correct inaccurate data (you can edit your profile in-app).
- Erasure — delete your account and data (see Section 5).
- Restriction — ask us to limit processing in certain circumstances.
- Portability — receive your data in a structured, machine-readable format.
- Object — object to processing based on legitimate interest.
- Withdraw consent — where processing is based on consent (e.g., push notifications), you can withdraw at any time.
To exercise any of these rights, contact us at the email address below.
7. Security
- All connections use HTTPS/TLS encryption in transit.
- Authentication is handled via JWT tokens issued by Supabase, verified on every API request.
- The database is encrypted at rest on Fly.io managed infrastructure.
- Phone-based OTP (one-time password) authentication — no passwords are stored.
8. Children
Relately is intended for users aged 18 and over. We do not knowingly collect data from anyone under 18. If we become aware that we have collected data from a minor, we will delete the account promptly.
9. Changes to This Policy
We may update this policy from time to time. If we make material changes, we will notify you via the App or push notification. The “Last updated” date at the top indicates the most recent revision.
10. Contact
If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:
Email: [email protected]