Tovari
Legal

Privacy Policy

Your trust is the product. Here's exactly what we collect, why, and the control you have. Last updated July 20, 2026.

1. Who we are

Tovari (“Tovari,” “we,” “us”) is an AI-powered compatibility and relationship platform. This policy explains how we handle your information when you use our website and apps (the “Service”). By using Tovari you agree to this policy.

2. Information we collect

To match you meaningfully, we collect:

  • Account — name, email, password, date of birth.
  • Profile & identity — gender identity, who you're interested in, relationship intentions, education, career, lifestyle, and financial-lifestyle preference. Your gender identity together with who you're interested in can reveal your sexual orientation, which is sensitive personal data; we process it with your consent and to match you, and both appear on your profile to other members. Our systems can also store an optional faith and political-values preference, though nothing in the app currently asks you for them.
  • Compatibility answers — your responses to questionnaire prompts, used to build your Relationship DNA and compatibility scores.
  • Location — the city you provide (geocoded to approximate coordinates) for distance-based matching. We do not track precise background location.
  • Photos & verification — profile photos you upload, and any selfie you submit for verification (verification selfies are private and used only to confirm identity).
  • Messages & activity — messages you send, matches, likes, RSVPs, and how you use the Service.
  • Payment — handled by Stripe; we receive subscription status, not your full card number.
  • Device & technical — IP, browser, and basic diagnostics.

3. How we use your information

  • Build your Relationship DNA and generate curated, compatibility-based introductions.
  • Power AI features you choose to use — coaching, the emotional translator, message feedback, and match explanations.
  • Keep the community safe (verification, moderation, reports, and blocks).
  • Provide events, video sessions, billing, and customer support.
  • Improve the Service and communicate with you about it.

4. AI processing

Some features send your content (for example, your compatibility answers, profile summary, or a message you ask us to review) to our AI provider, Anthropic, to generate guidance and compatibility insights. AI coaching is supportive reflection, not professional, medical, legal, or therapeutic advice, and compatibility is guidance, not a guarantee. We do not sell your data, and we do not permit your personal content to be used to train third-party models.

Some AI output is saved so we don't regenerate it — your Relationship DNA and each match explanation are stored with your profile and match record. Coach, Emotional Translator, and Before You Send conversations are not stored on our servers today; they exist only in your browser for the length of the session and are sent to Anthropic to generate each reply.

Automated safety screening of messages. Separately from the features above, and without you asking for it, the text of messages you send to another member is automatically sent to Anthropic to be classified for safety violations — scams and requests for money, threats, harassment, sexual pressure, and indications that someone may be under 18. This happens after your message is delivered; it does not read your messages to anyone else, it does not block or edit what you send, and no human sees a message because of it unless it is flagged. When something is flagged, a short excerpt of that message (up to 500 characters), together with the classification and the conversation it came from, is stored for our safety team to review. Screening covers message text only — not photos.

5. How we share information

We share information only as needed to run Tovari:

  • Other members — signed-in members can see your display name, age (not your date of birth), city, photos, bio, career, education, gender identity, who you're interested in, connection type, relationship goal, dating intention, whether you want children, your Relationship DNA and summary, and your verification badge.
  • What other members never see — your email address, your date of birth, your exact coordinates (only an approximate distance is derived), your plan, your financial-lifestyle preference, your faith or political values, your individual questionnaire answers, and your verification selfie. A match sees a summarized compatibility breakdown, never your raw answers.
  • Service providers — the processors named in Section 6. They process data on our behalf, for us, and not for their own purposes.
  • Legal & safety — when required by law or to protect members from harm.
  • We never sell your personal information.

6. Service providers we use

These are the companies that process member data on our behalf so Tovari can run. We do not share your data with anyone else for their own marketing or advertising.

  • Supabase — our database, authentication, and file storage (profiles, answers, messages, photos, verification selfies).
  • Vercel — application hosting. Vercel processes request metadata such as IP address, user agent, and URL in its operational logs.
  • Stripe — subscription payments, taken on our website only. Stripe receives your email and payment details directly; we store only your subscription status and Stripe identifiers, never card numbers.
  • Anthropic — the AI provider behind Relationship DNA, match explanations, and the coaching features. Anthropic also receives the text of messages you send to other members, automatically and without you asking, so it can be classified for safety violations. See Section 4.
  • 8x8 (Jitsi / meet.jit.si) — the third-party video service used for virtual events and speed dating. When you join a video room, your audio, video, and display name are handled by that service under its own terms.
  • BigDataCloud — reverse geocoding. If you use “use my location,” approximate coordinates (rounded to roughly 100 metres) are sent to BigDataCloud to get a city name back.
  • Open-Meteo — geocoding. If you type a city, that city name is sent to Open-Meteo's geocoding API to get approximate coordinates back.
  • Apple (APNs) and Google (Firebase Cloud Messaging) — delivery of push notifications to the Tovari app, only if you turn notifications on. They receive a device token and the notification text, and a new-message notification includes the sender's name and a short preview of the message. Browser (web) notifications work differently: the payload is encrypted so the browser's push service cannot read it. If you'd rather not have previews leave Tovari, turn push notifications off.

7. Cookies and similar technologies

Tovari uses essential cookies only. We set cookies to keep you signed in and to keep your session secure. We do not use advertising cookies, cross-site tracking, third-party analytics, or advertising pixels, and we do not sell or share your information for targeted advertising. Because our cookies are strictly necessary to provide the Service you asked for, we do not show a consent banner; blocking them in your browser will sign you out and prevent Tovari from working.

8. Your choices and rights

Today, from inside Tovari, you can:

  • Edit your profile — your intentions, pace, connection type, city, match radius, and photos — from your Profile.
  • Export a complete copy of your data as a JSON file from your Profile.
  • Permanently delete your account and its data from Profile → Delete account.
  • Turn photo verification, push notifications, and location sharing on or off — each is optional and off until you choose it.

Two AI features — the Emotional Translator and Before You Send — work on messages another person wrote to you. Before either will run, we ask for your explicit consent, and you can withdraw it at any time; withdrawal takes effect on your very next request, and both the grant and the withdrawal are recorded.

We want to be accurate about what does not exist yet. Beyond that consent, Tovari does not currently offer granular privacy toggles — there is no per-field switch controlling which profile details other members see, and no control over whether insights draw on your history. Those are planned, and this page will be updated when they ship. In the meantime, the fields other members can see are fixed and listed in Section 5. The AI features described in Section 4 process only content you actively submit to them, with one exception you cannot turn off: the automated safety screening of messages described at the end of Section 4. That screening is how we catch scams and threats, so it is not optional while you use Tovari to message people.

Some fields — including your display name, bio, education, career, faith, political values, financial lifestyle, and questionnaire answers — cannot yet be edited in the app after onboarding. Email us at privacy@tovariworld.com and we will correct or remove them for you.

Depending on where you live (e.g., GDPR/UK GDPR, CCPA/CPRA), you may also have the right to access, correct, export, or delete your data, to withdraw consent, and to appeal a refused request. Contact us at privacy@tovariworld.com to exercise these rights; we will not discriminate against you for doing so.

9. How we protect your data

  • Private messages are encrypted at rest.
  • Row-Level Security isolates each member's data at the database layer.
  • Verification selfies are stored privately and reviewed only by authorized staff.
  • Access is limited and transmitted over encrypted connections.

No method of storage or transmission is 100% secure, and we cannot and do not guarantee absolute security. To the fullest extent permitted by law, we are not liable for unauthorized access, use, or disclosure resulting from events beyond our reasonable control, and any liability is subject to the limitations in our Terms of Service. Information other members provide (profiles, messages) is theirs — we do not verify or guarantee its accuracy.

10. Data retention

We keep your information while your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account, your profile, photos, verification selfies, messages, answers, matches, and subscription record are removed from our live systems immediately, and any active subscription is cancelled.

Two things persist briefly after that. Our operational database backups are kept for 14 days and then deleted, so a deleted account can remain inside a backup file for up to 14 days. Our hosting and payment providers keep their own logs and financial records under their own retention schedules and legal obligations — for example, Stripe retains transaction records it is required by law to keep. We may also retain limited records where we must by law, or to resolve a safety report or legal claim.

11. Age requirement

Tovari is only for adults 18 and older. We do not knowingly collect information from anyone under 18, and we remove such accounts.

12. International users

We may process and store your information in countries other than yours, including the United States. Where required, we use appropriate safeguards for international transfers.

13. Changes to this policy

We may update this policy as Tovari evolves. We'll post the new date here and, for material changes, notify you in the app.

14. Contact

Questions about your privacy, or want to exercise a data right? Reach us at privacy@tovariworld.com. For account, billing, or safety help, use support@tovariworld.com.