Privacy Policy

Elara is a relationship platform operated by Axient AI Pty Ltd (ABN 21 688 793 151), trading as elaradating (“Elara”, “we”, “us”, “our”). We are based in Australia and this policy is written to meet our obligations under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where members are in other regions, we also aim to honour the core rights those regions expect, including access, correction, and deletion.

This policy covers our website, apps, and services (together, the “Service”). By using the Service you agree to the handling of your information as described here.

We only collect what the Service actually needs to work and to keep members safe.

• Identity & verification data. If you choose to ID-verify (optional — you can also be vouched for by people who've actually met you), we collect a government-issued ID and a live selfie/liveness check at that time, processed through a specialist identity-verification provider.
• Profile & compatibility data. The details you choose to share — photos, bio, preferences, and your answers to the short values/psychometric questions used for matching.
• Elara coaching conversations. If you use Elara, your conversations with her, and the notes she keeps to coach and match you. Elara is openly an AI — always declared, never a match.
• Usage & device data. How you use the Service, plus standard device/log data (device type, app version, IP, and similar) used for security and to keep the product working.
• Approximate location. Coarse location so we can introduce you to people you could actually meet.
• Payment data. If you subscribe, billing is handled by a third-party payment processor. We receive confirmation and limited details — we do not store your full card number.
• Communications. Messages you send us (support, reports, feedback) and safety reports you make about others.

Some of this is “sensitive information” under the Privacy Act (for example, government identifiers and information that may reveal aspects of your personal life). We collect it only with your consent and only for the purposes set out below.

• To verify that you are a real person and keep fake profiles, bots, and catfish off the platform.
• To introduce you to compatible people and power matching on substance rather than swiping.
• To provide Elara — your optional, openly-AI relationship coach — and to let her coach, remember, and match you at the depth you choose.
• To keep the community safe: to review reports, enforce our rules, and operate the community rating and three-strikes system.
• To process subscriptions and payments.
• To communicate with you about the Service, your account, and safety.
• To meet our legal obligations and enforce our Terms.

We do not sell your personal information, and we do not use your private conversations with Elara to advertise to you.

Verification is core to the promise that everyone you meet is real. Your ID and liveness check are used to confirm your identity and age (you must be 18+). We keep verification data only as long as needed to establish and maintain trust in your account and to meet legal record-keeping obligations, then we delete or de-identify it. We do not publish your ID, and other members never see it.

Elara is powered by a large-language-model provider that processes your conversations to generate her responses. She is designed as a mirror, not a health app: she is not a medical, mental-health, legal, or financial adviser. What Elara knows about you, you can see and edit. Nothing she learns is ever shared with other members, and you can delete her memory at any time — even if that means starting over.

We share personal information only in these limited ways:

• Service providers (sub-processors). Trusted vendors who help us run the Service — named in full below — bound by contract to protect your data and use it only for us.
• Other members. Only the profile information you choose to show. Never your ID, contact details, exact location, or your conversations with Elara.
• Legal & safety. Where required by law, or to protect the safety of members or the public — for example, responding to a valid legal request or acting on a serious safety report.
• Business transfers. If Elara is ever involved in a merger, acquisition, or sale, information may transfer as part of that transaction, subject to this policy.

Our current sub-processors are:

• Supabase — database, authentication and file storage (hosted on Amazon Web Services, Asia-Pacific / Sydney, Australia).
• Vercel — website hosting and content delivery (global edge network).
• Cloudflare — anti-bot verification (Turnstile) on our sign-in and sign-up forms.
• Stripe — payment processing and identity verification.
• Anthropic — the AI provider behind the optional Elara coach (United States).
• Resend — sending transactional and account emails.
• Google — only if you choose "Continue with Google" to sign in.
• PostHog — privacy-conscious product analytics (European Union region).
• Sentry — error and reliability monitoring (European Union / Germany region).

You can erase your account and Elara’s memory at any time. When you delete, we remove your profile, photos, and conversations from active use straight away, except where we must keep limited records to meet legal obligations or resolve an open dispute or safety report. We otherwise keep information only as long as we need it for the purposes in this policy. In practice, how long each category is kept:

• Profile, photos & account data. Kept while your account is active. Deleting your account removes your uploaded photos from storage and your profile immediately.
• Meet-up location. When you confirm you got home safe after meeting someone, that location is deleted automatically 48 hours later. If you don’t confirm, it’s deleted automatically after 7 days. Either way, an open safety dispute about that meet-up holds the deletion until the dispute is resolved.
• Elara coaching conversations. Raw conversation transcripts are kept for 24 months, then automatically deleted by a nightly process; a distilled summary of what Elara has learned to coach and match you may be kept longer, and you can clear it yourself at any time from your account.
• Safety & evidence records. If your account is deleted while a report naming you is still open, deletion is put on hold until that report is resolved. Separately, when any account is deleted we keep an internal, encrypted snapshot of safety-relevant records (reports, matches, and messages involving that account) for as long as needed to investigate open or subsequent reports and meet legal obligations. This snapshot is accessible only to our internal safety/legal review process — never to other members, and never used for any other purpose.
• Identity verification data. As described in section 4 — kept only as long as needed to establish and maintain trust in your account and meet legal record-keeping obligations, then deleted or de-identified.
• Payment records. Retained by our payment processor per their own obligations (typically several years, for tax and fraud-prevention law); we do not separately store your full payment details.

We use technical and organisational measures — encryption in transit, access controls, and vendor due diligence — to protect your information. No system is perfectly secure, but we treat your data as if it were our own, and we design for the least data necessary.

If we become aware of a data breach that is likely to result in serious harm to you, we will act under the Privacy Act’s Notifiable Data Breaches (NDB) scheme: we will assess the breach promptly, take steps to contain it, and — where the assessment confirms likely serious harm — notify both affected individuals and the Office of the Australian Information Commissioner (OAIC) as soon as practicable, describing what happened, what information was involved, and what steps we and you can take in response. We will contact affected members using the email address on their account, or another means we have on file if email isn’t available.

• Access the personal information we hold about you.
• Correct anything that is inaccurate or out of date.
• Delete your account and data, as described above.
• Withdraw consent for optional processing (for example, stop using Elara).
• Ask us how your information has been handled, and make a complaint.

To exercise any of these, contact us at privacy@elaradating.com.au. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Elara is strictly for adults. The Service is not directed at anyone under 18, and we do not knowingly collect information from minors. Every account is age-verified.

Your core data is hosted in Australia — on Supabase running on Amazon Web Services in the Asia-Pacific (Sydney) region. Some of our other service providers may store or process data outside Australia. Where that happens, we take reasonable steps to ensure your information continues to be protected to a standard consistent with the Australian Privacy Principles.

We use essential cookies to keep you signed in and the Service secure, and limited analytics to understand and improve how the product works. You can control non-essential cookies through your browser or our cookie settings where offered.

We may update this policy as the Service evolves. If we make a material change, we’ll let you know through the Service or by email. The “last updated” date above always reflects the current version.