Privacy Policy

Personal Data / Personal Information: Any information relating to an identified or identifiable individual.

Sensitive Personal Data: Personal Data subject to heightened protections under applicable laws, including precise location data, government-issued identification, biometric data, sexual orientation, or information relating to intimate life.

Processing: Any operation performed on Personal Data, whether automated or manual.

User: Any individual who accesses or uses our Services.

Services: The Hven mobile application, website, matchmaking features, events, communications tools, and related offerings.

Account and Profile Information: Name, email address, phone number, date of birth, age, gender, preferences, biography, profile photos, and other information you choose to provide.

Sensitive and Optional Profile Information: Information that may reveal sexual orientation, dating preferences, or lifestyle choices, where voluntarily provided.

Communications Data: Messages, media, and other content exchanged through the Services. We do not routinely monitor private communications; however, content may be processed using automated systems, including artificial intelligence systems provided through third-party infrastructure such as OpenRouter, or human review where necessary to operate the Services, investigate reports, prevent fraud or abuse, comply with law, or enforce our Terms and Community Guidelines. AI processing of communications occurs only when required for specific features such as safety analysis or AI-assisted functionality.

Usage and Interaction Data: Matches, interactions, event participation, and feature usage — including growth activities such as which coach modules and articles you view, try, and rate — plus moderation actions, logs, and analytics.

Device and Technical Data: Device model, operating system, app version, IP address, device identifiers, language settings, crash reports, and diagnostics.

Location Data: Approximate or precise location data, collected only with your explicit permission and used for matchmaking, venue and event relevance, confirming arrival at a date you scheduled (check-in), and safety features.

Media Data: Photos, videos, and audio recordings you upload or create within the Services.

Verification and Biometric Data: Selfie images and, where offered, government-issued identification used for age, identity, and safety verification. Selfie verification derives a mathematical representation of your face (a “face embedding”) used to confirm you are a real person and that your photos are genuinely yours. See Biometric Information below.

Payment and Transaction Data: Subscription status, purchase history, and transaction confirmations. Purchases are billed by the Apple App Store or Google Play; we use RevenueCat to manage subscription status and never receive or store your full card details.

Safety and Moderation Data: Reports, complaints, behavioral indicators, enforcement decisions, and records necessary to maintain platform safety and integrity.

Some Personal Data processed by Hven may be classified as sensitive or special category data under applicable privacy laws.

This includes precise location data, government-issued identification, biometric or facial comparison data (where applicable), information relating to sexual orientation or intimate life, communications reviewed for trust and safety purposes, and moderation or enforcement records.

Where required by law, such data is processed based on explicit user consent, necessity to protect vital interests or user safety, performance of our Services, legitimate interests such as fraud prevention, or compliance with legal obligations.

You may withdraw consent for certain sensitive data processing at any time; however, this may limit or disable specific features of the Services.

To keep Hven real humans only, every member verifies with a selfie. Verification derives a mathematical representation of your facial geometry (a “face embedding”) from your selfie and compares it against your profile photos to confirm they are genuinely you.

Biometric identifiers are processed only with your separate, explicit consent, requested independently of your acceptance of the Terms, and withdrawable at any time in your settings or by contacting us. Withdrawing consent disables features that depend on verification.

We use biometric information solely for identity verification, impersonation and fraud prevention, and platform safety. We do not sell, lease, trade, or otherwise profit from biometric information, do not use it for advertising, and do not permit anyone to use it to train AI models.

Retention is strictly limited: verification imagery and face embeddings are kept only as long as needed for the purposes above and are permanently destroyed when your account is deleted, when you withdraw consent, or when the purpose has been satisfied — whichever comes first, and in all cases within the timelines required by applicable biometric privacy laws.

Hven is built to be judged in person, not by photo. Until you have completed a date with someone, other members see only a heavily blurred, reduced-resolution version of your photo. The blurring is applied to a downscaled copy on our servers, so your original image is never exposed and a face cannot be reconstructed from the blurred version.

Your full profile and photos, and the ability to chat, become mutually visible only after the two of you have completed a date together. This restriction is enforced by our systems — not by the app’s interface — and applies to everyone.

To provide, operate, and maintain the Services.

To create, manage, and personalize accounts, matches, recommendations, and experiences.

To facilitate communications and interactions between users.

To verify identity, confirm eligibility, and prevent underage access.

To promote safety, detect and prevent fraud, abuse, harassment, or other harmful conduct.

To enforce our Terms of Service, Community Guidelines, and related policies.

To analyze usage, conduct research, improve performance, and develop new features.

To send service-related notifications, support responses, and marketing communications where legally permitted.

To comply with legal obligations, regulatory requirements, and lawful requests from authorities.

To generate match suggestions, compatibility insights, and safety signals using AI systems based on your profile data, preferences, and interactions.

Hven uses automated systems and algorithms to suggest matches, events, and recommendations based on profile information, stated preferences, activity patterns, proximity, and engagement signals.

These processes may include artificial intelligence systems that analyze user data to improve compatibility and safety outcomes.

These processes are designed to enhance relevance, compatibility, and safety and do not produce legal or similarly significant effects without human involvement where required by law.

Depending on your jurisdiction, you may have the right to object to or request limitations on certain profiling or automated processing activities.

Hven uses artificial intelligence technologies to support matchmaking, safety analysis, content moderation, and certain in-app features.

AI processing occurs only when necessary to provide specific functionality, such as generating match suggestions, analyzing compatibility signals, detecting harmful behavior, or assisting with user interactions.

When these features are used, limited portions of user data may be transmitted to OpenRouter, which routes requests to large language models operated by third-party providers, including NVIDIA for the Free AiA feature described below.

Data transmitted may include profile attributes such as age, preferences, and interests, and, where relevant, portions of messages or user-generated content required to perform the requested feature.

Data is transmitted only at the time of the AI request and is not continuously shared.

For Free members, AiA text conversations use NVIDIA Nemotron 3 Ultra Free through OpenRouter. NVIDIA states that sessions sent to this Free endpoint may be logged or recorded for security purposes and used to improve NVIDIA products and services, and advises users not to submit confidential or personal information.

Free AiA does not accept image uploads. Plus and Pro AiA image inputs, and Hven's other AI routes, are requested through OpenRouter with no-data-collection routing, which limits those requests to eligible providers under OpenRouter's provider policies.

Do not submit confidential information, another person's private information, or content you do not want processed under the applicable provider terms. Free AiA is optional; you may avoid this processing by not using the feature.

Hven does not sell AI request content or use it for advertising. Provider handling of Free AiA content is governed by the disclosures above and the applicable provider terms.

UAE (PDPL): Consent, contractual necessity, legitimate interests, or legal obligation.

EU / UK (GDPR & UK GDPR): Consent, performance of a contract, legitimate interests, compliance with legal obligations, and protection of vital interests.

United States (CPRA/CCPA, VCDPA, CPA, and similar laws): Notice, consent where required, and rights to limit or opt out of certain data uses.

Canada (PIPEDA): Express or implied consent, legitimate business purposes, and legal compliance.

Other Jurisdictions: Processing is conducted in accordance with applicable local laws and generally accepted privacy principles.

Personal Data is retained only for as long as necessary to fulfill the purposes described in this policy.

Account and profile data is retained while your account remains active and deleted or anonymized within a reasonable period following account deletion, subject to legal, safety, or fraud-prevention requirements.

Verification data is retained only as long as necessary to complete verification and comply with regulatory obligations.

Safety, moderation, and enforcement records may be retained for extended periods to prevent repeat violations and protect users.

System logs and backups are retained on a limited rolling basis and securely deleted according to internal retention schedules.

Depending on your location, you may have the right to access, correct, update, delete, restrict processing, object to processing, withdraw consent, or request data portability.

You may opt out of marketing communications at any time through in-app settings or unsubscribe mechanisms.

You may designate an authorized agent to submit requests on your behalf where permitted by law.

Certain rights may be limited where fulfilling a request would infringe on the rights of others, compromise safety, interfere with investigations, or violate legal obligations.

You may lodge a complaint with your local data protection authority.

To exercise your rights, contact us at [email protected].

Hven does not sell Personal Data.

Hven does not share Personal Data for cross-context behavioral advertising without consent where required by law.

Residents of certain US states may have the right to limit the use of sensitive personal information, opt out of certain processing, and request information regarding data disclosures in the preceding 12 months.

Hven does not discriminate against users for exercising privacy rights.

Where applicable, Hven honors recognized opt-out preference signals such as Global Privacy Control (GPC).

Your information may be transferred to and processed in jurisdictions including the United Arab Emirates, European Union, United Kingdom, United States, and Canada.

Where required, we rely on adequacy decisions, Standard Contractual Clauses, UK International Data Transfer Agreements, or equivalent safeguards.

Additional technical and organizational measures, including encryption and access controls, are applied to protect transferred data.

Where AI processing involves infrastructure in other jurisdictions, the same safeguards and protections apply.

Encryption of sensitive data in transit and at rest.

Role-based access controls and authentication mechanisms.

Regular security monitoring, audits, and infrastructure hardening.

Incident detection, response, and breach notification procedures.

While no system can guarantee absolute security, we employ reasonable and industry-standard safeguards.

We may share Personal Data with trusted service providers supporting hosting, analytics, communications, customer support, trust and safety, identity verification, payment processing, marketing, and artificial intelligence processing.

Partners on Hven: When you book a venue, order during a date, or engage a coach, we share the limited information they need to provide that service — a venue receives your booking details; a coach you follow or work with sees your interactions with their content and your messages to them. Partners never receive your contact details, verification data, or matching information.

Service providers we currently use include: cloud hosting and storage providers; Zoho (transactional email); Cloudflare (content delivery and security); Google Analytics, PostHog, and Sentry (analytics, performance, and error monitoring); Apple App Store, Google Play, and RevenueCat (billing and subscription management); and OpenRouter and its routed model providers, including NVIDIA for Free AiA (AI processing, as described above).

AI processing requests are transmitted through OpenRouter to third-party model providers. Hven requests no-data-collection routing for its other AI routes, but the Free AiA exception may be logged or used by its model provider as described in the Artificial Intelligence section above.

Service-provider obligations and retention practices vary by service and feature. We require appropriate safeguards where applicable, subject to the specific Free AiA provider practices disclosed above.

We may disclose information to regulators, courts, or law enforcement where legally required or permitted.

We use cookies, SDKs, device identifiers, and similar technologies to enable functionality, enhance security, analyze performance, and personalize experiences.

Where required by law, we obtain consent before deploying non-essential tracking technologies.

Users may manage tracking preferences through device settings, browser controls, or in-app options.

The Services are intended solely for individuals aged 18 and older.

We do not knowingly collect Personal Data from minors.

If underage use is identified, we will delete associated data and terminate the account.

Providing false age information violates our Terms of Service.

We may update this Privacy Policy periodically to reflect legal, regulatory, or operational changes.

Material updates will be communicated through the Services or by email.

Continued use of the Services after updates constitutes acknowledgment of the revised policy.

For privacy inquiries, rights requests, or complaints, contact [email protected].

Business Address: Hven Co. FZE LLC, Amber Gem Tower, Sheikh Khalifa St., United Arab Emirates.