Privacy
7 November 2026
What we store
Your email, a hashed password, the language you chose, your profile photo if you upload one, your credit balance, the country you access from (read from your internet address, without cookies, for security, the payment methods shown and usage statistics), the messages you exchange, facts and summaries taken from conversations to keep memory, your device's notification subscription and campaign measurement data when you accept it. We do not store card numbers or bank data. Pix and card payments are processed by our payment provider, LofyPay; card details are typed into the secure fields of Stripe and reach us only as a token. We keep the status, amount, currency and reference of each payment. In Brazil the provider may ask for tax ID, phone and billing address to process a card payment, and they go to the provider for that purpose.
Who is responsible
EllaDate is the controller of your personal data under the Brazilian General Data Protection Law (LGPD) and, for people in the European Economic Area and the United Kingdom, under the GDPR. Contact for anything about your data: [email protected].
Why we store it, and the legal basis
To run your account and deliver what you paid for (performance of the contract: LGPD art. 7, V; GDPR art. 6(1)(b)). To keep security, prevent fraud and abuse and keep payment records (legitimate interest, and legal obligation for tax records: LGPD art. 7, II and IX; GDPR art. 6(1)(c) and (f)). To measure campaigns, send notifications and keep memory between visits when you allow it (consent, which you can withdraw at any time: LGPD art. 7, I; GDPR art. 6(1)(a)).
Conversations
Your messages are sent to our language model provider to produce replies. They are not sold, and they are not used to identify you to anyone else. Your data is processed in Brazil and may be processed by providers in other countries (payments, e-mail, hosting) under contractual data protection clauses, as the LGPD (art. 33) and the GDPR (chapter V) require.
Measurement and ads
Only if you accept cookies, we use Google Analytics and the Meta Pixel, and we send Meta (Meta Platforms) the events account created, checkout started and credits purchased, with the amount, your email as an irreversible SHA-256 hash, an internal account id also hashed, your IP address, browser, the Meta cookies (_fbp, _fbc) and the campaign tags (UTM) of the link you came from. This is used to measure and improve our ads. Nothing from your conversations is ever sent. Even without acceptance we record, in our own database only, which ad a visit came from (the campaign tags of the link and the entry page), without identifying you and without sending anything to third parties. Without acceptance nothing is sent, and you can withdraw consent at any time from the site footer.
Emails about your account
When a companion sends you a message and you do not have the app installed and have no notifications turned on, we may email you "{name} was thinking about you and sent you a message" with the first line of her message (text only, never photos or adult content) and a button to reply. It is a service notice about your account, not marketing: at most one a week, only when a message has been unread for 30 minutes or more, and never at night in your time zone. Every email has a one-click link to stop them, and you can turn them off or back on at any time under Account, Notifications. We record whether the email was sent, opened and clicked, only to limit how many we send and to measure whether it helps.
Your rights
You can ask to confirm that we process your data, to access it, correct it, receive a copy in a portable format, restrict or object to its use, have it deleted, and withdraw consent, by writing to [email protected]. We answer within 15 days. You can also delete your account yourself under Account, Security. If you think we handled your data badly, you may complain to the Brazilian authority (ANPD) or, in Europe, to the data protection authority of your country.
Retention
Conversations are kept while the account exists. Payment records are kept for the period tax law requires, even after deletion.