Draft. Written as a starting point from how the product actually works. It has not been reviewed by a lawyer and is not legal advice — get it reviewed before launch.
Privacy Policy
Last updated: 15 October 2026
Alva works by reading one thing: a description of you written by an AI you already use. That is unusually personal material, so this policy tries to be specific rather than generic about what happens to it.
Who we are
Alva (“we”, “us”) operates alvaaaa.com. For data protection purposes we are the controller of the personal data described here. You can reach us at hello@alvaaaa.com.
What we collect
- The text you paste. The full response your AI wrote about you. We store it as you sent it. This is the most sensitive thing we hold and it often contains psychological detail you did not write yourself.
- Facts we derive from it. We use an AI model to turn that text into structured statements about you — your values, lifestyle, personality, interests, relationship history and dealbreakers — each with a confidence score.
- Profile details. First name, date of birth, gender identity, what you are looking for, your pace, your social life, height, and your city (and approximate coordinates, used only to calculate distance).
- Preferences. Who you want to meet, your age range, and maximum distance.
- Photos. Stored in a private bucket. They are served through links that expire after an hour, so a photo URL that leaks stops working.
- What we read from your photos. An AI model looks at your photos and notes your appearance — things like hair, eye colour, build, style, skin tone and apparent ethnicity — each with a confidence score. It describes only you, never the people in your photos with you. Nobody sees these notes, you included; they are only used to suggest people you are likely to find attractive, and who are likely to find you attractive.
- Who you are drawn to. From what your AI wrote and what you tell Alva, we infer what you tend to find attractive. Like the notes above, this is never shown to anyone and only nudges matching.
- Conversations. Your messages with Alva, and messages you exchange with a match.
- A mathematical representation of your profile (an embedding), which is what actually powers matching.
- Account and technical data. Email address, sign-in method, and ordinary server logs.
What we use it for
- Building your profile and the summary we show you.
- Finding people you should meet, and writing the explanation of why.
- Letting you and a mutual match talk.
- Sending you email that the product depends on: verifying your address, telling you about a match, and telling you about a message.
- Keeping people safe (see below).
We do not use your data to train our own models, and we do not build advertising profiles.
We do not sell your data
We do not sell, rent or trade your personal data, and we do not share it with advertisers or data brokers. If that ever changes it would require your explicit consent first — not a quiet update to this page.
Who else processes it
We use a small number of providers to run the service. They process data on our instructions only:
- Anthropic — the AI that reads your pasted text and your photos, talks to you as Alva, and writes match explanations.
- Voyage AI — turns your profile into the embedding used for matching.
- Google Cloud — hosting and private photo storage.
- Resend — sends our email.
- Google — only if you choose to sign in with Google.
- Meta — only if you accept cookies; see below.
- Microsoft — only if you accept cookies; see below.
Some of these are outside the UK/EEA. Where that is the case, transfers rely on standard contractual clauses or an equivalent safeguard.
Cookies
If you accept cookies, we load Meta’s pixel. It tells Meta (Facebook and Instagram) which pages you visit here, and when you confirm your email and finish signing up, so we can see which of our ads work. It does not receive anything you write or upload. Meta may combine it with what it already knows about you, under its own privacy policy.
Accepting also turns on Microsoft Clarity, which records how pages are used (taps, scrolling, where people leave) so we can make sign-up easier. Everything after you sign in is masked in those recordings, and what you type is never captured.
If you decline, neither loads. Signing in uses your browser’s local storage, which is needed for the service to work and is always on.
What other people see
Other users never see your pasted text, your raw extracted facts, your email address or your exact location. A match sees your photos, your first name, age and city, roughly how far away you are, a short description of you, and the explanation of why the two of you were put together.
Safety
We automatically check messages for signs that someone is in crisis or at risk. If something is flagged, a member of our team may read that conversation in order to respond, and we will show you support resources. This is the one case where a human may read your messages without you asking us to.
How long we keep it
We keep your data while your account exists. If you delete your account we remove your profile, facts, embedding, photos, what we read from them, messages and pasted text. Some records may persist briefly in encrypted backups before ageing out, and we may retain the minimum needed to meet a legal obligation or to stop a banned user returning.
Your rights
If you are in the UK or EEA you have the right to access, correct, delete, export or restrict the processing of your data, and to object to it. You can also withdraw consent at any time. Email hello@alvaaaa.com and we will respond within one month. You also have the right to complain to your local data protection authority.
Children
Alva is for people aged 18 and over. We do not knowingly collect data about anyone younger, and we delete it if we find it.
Changes
If we make a material change we will tell you by email before it takes effect, rather than silently updating this page.