Privacy Policy.

1. Introduction

Welcome to You& ("we", "us", "our"). We are committed to protecting your personal information and being transparent about how we collect, use and store it.

This Privacy Policy applies to all users of the You& platform and covers how we handle your personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By using You&, you agree to the collection and use of your information as described in this policy.

2. Who We Are

You& is operated by 8.13 Elevata, based in Australia.

If you have any questions about this policy, contact us at: team@813elevata.com

3. What Information We Collect

When you use You&, we collect the following personal information:

Account information

• Name
• Email address
• Password (stored as a secure hash — we never store your plain-text password)

Onboarding information

• A short personal introduction (your "intro")
• Your responses to our 5-question personality quiz
• A free-form message describing a problem, idea or situation you want to explore ("your message")

Conversation information

• Messages you send within conversations on the platform
• The opening message shared with your match

Technical information

• Match status and conversation activity
• App usage and log data
• Session cookies for login management

We do not collect your phone number, location, date of birth, or any government-issued identification unless you choose to include this in your intro or message.

4. How We Use Your Information

We use your personal information to:

• Create and manage your account
• Match you with compatible users based on your quiz responses and message content
• Enable async conversations between matched users
• Send you transactional emails (e.g. match notifications)
• Improve our matching algorithm and platform experience
• Comply with legal obligations

We do not use your information for advertising, and we do not sell your data to third parties.

5. How Matching Works

Our matching algorithm uses two inputs:

• Quiz responses — your answers to 5 personality questions are converted into a numerical score vector
• Message embedding — your free-form message is processed by an AI model (OpenAI) to generate a semantic vector that represents the meaning of your message

These two vectors are compared against other users' vectors using a similarity algorithm. The content of your message is used solely for matching purposes and is not read by our team unless you report a concern.

6. Where Your Data Is Stored

Your data is stored and processed by the following services:

Important notice for Australian users: Your personal data is stored on servers located in the United States. By using You&, you consent to your information being transferred to and stored in the United States. We take reasonable steps to ensure your data is handled securely by our third-party providers.

Important notice for EU/UK users: We are not currently certified under the EU-US Data Privacy Framework. If you are located in the European Union or United Kingdom, please be aware that your data will be transferred outside the EEA. We rely on your explicit consent as the legal basis for this transfer.

7. Third-Party Services

We share limited personal data with the following third parties solely to operate the platform:

OpenAI

Your free-form message text is sent to OpenAI's API to generate a matching vector (embedding). OpenAI's privacy policy applies: openai.com/policies/privacy-policy. Your message is not used to train OpenAI's models under our API usage agreement.

Resend

Your email address and basic match notification data are processed by Resend to deliver transactional emails. Resend's privacy policy applies: resend.com/legal/privacy-policy.

Lovable Cloud / Supabase

Your account data, messages, and match data are stored in a managed database provided by Lovable Cloud, built on Supabase and hosted on AWS. Supabase's privacy policy applies: supabase.com/privacy.

We do not share your personal information with any other third parties without your consent.

8. Data Security

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access. These steps include:

• Encrypted data transmission (HTTPS/TLS)
• Hashed password storage
• Row-level security policies that ensure users can only access their own data and the data of users they are matched with
• Access controls limiting who within our team can access user data

No method of transmission over the internet is 100% secure. If you believe your account has been compromised, contact us immediately at team@813elevata.com.

9. Data Retention

We retain your personal information for as long as your account is active. If you delete your account:

• Your profile, quiz responses, and message content will be deleted within 30 days
• Your conversation history will be deleted within 30 days
• Aggregated, anonymised data (e.g. match scores with no identifying information) may be retained for research and product improvement purposes

Some information may be retained longer where required by law.

10. Your Rights

Under the Australian Privacy Act, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your personal information
• Complain about how we have handled your information

EU/UK users have additional rights under GDPR including the right to data portability, the right to restrict processing, and the right to withdraw consent at any time.

To exercise any of these rights, contact us at team@813elevata.com. We will respond within 30 days.

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

11. Cookies and Tracking

You& uses essential cookies to manage your login session. We do not use advertising cookies or third-party tracking cookies. We do not use Google Analytics or similar tracking tools at this time.

12. Children's Privacy

You& is not intended for users under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, please contact us at team@813elevata.com and we will delete the account promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and notify registered users by email if the changes are material.

Your continued use of You& after any changes constitutes your acceptance of the updated policy.

14. Contact Us

For any privacy-related questions, requests or complaints:

Email: team@813elevata.com

Operator: 8.13 Elevata, Australia