Your privacy is part of ELORA's core architecture.

The controller responsible for processing your personal data is:

ELORA Matchmaking
Berlin, Germany

Privacy inquiries and requests concerning your data-protection rights can be sent to privacy@elora.now.

Detailed provider disclosures and contact details are available in our [Legal Notice / Impressum](/impressum).

If ELORA formally appoints a Data Protection Officer, the Data Protection Officer's contact details will be provided here separately.

Depending on how you use ELORA, we may process:

• account and authentication information, including your email address, password hash, telephone number, verification status, login/session information and social-login identifiers;
• profile information, including your first name, age/date of birth, city or region, biography, prompts and profile preferences;
• photos and voice recordings that you choose to provide;
• matchmaking information, including relationship preferences, partner preferences, questionnaire responses, values, communication preferences and other compatibility information;
• information generated as part of matchmaking, including compatibility assessments, introductions and match status;
• communications and activity within ELORA, including private messages, date plans and feedback;
• safety and moderation information, including reports, blocks, moderation records and information necessary to investigate misuse or protect members;
• technical and notification information, including push-notification/device tokens and service activity;
• first-party usage analytics, including event information, a session identifier and, where you are signed in, an association with your account; and
• records relating to consent, account deletion, data exports and other privacy or account-management actions.

We do not store your account password in plaintext.

We process personal data as necessary to create and administer accounts, authenticate users, provide matchmaking and introductions, enable communications, deliver requested features, provide customer support and perform our contract with you. The applicable legal basis is generally Article 6(1)(b) GDPR.

We may process information where necessary to protect ELORA, our members and the integrity and security of the service. Depending on the processing concerned, this may be based on Article 6(1)(f) GDPR and our legitimate interests in platform security, fraud prevention, abuse prevention and enforcement of our rules.

Where processing requires your consent, we rely on Article 6(1)(a) GDPR.

Some questionnaire responses or preferences may reveal information that qualifies as special-category personal data under Article 9 GDPR. Where required, ELORA processes such information on the basis of your explicit consent under Article 9(2)(a) GDPR.

Where processing is required by law, Article 6(1)(c) GDPR may apply.

ELORA uses information you provide, including profile information, preferences and questionnaire responses, to evaluate compatibility and provide curated introductions.

The service may calculate internal compatibility indicators or scores. These internal values are not displayed publicly to other members.

ELORA does not guarantee that a compatibility assessment, introduction or recommendation will result in a conversation, date or relationship.

Where processing constitutes profiling or automated processing within the meaning of applicable data-protection law, ELORA provides the protections and information required by law. ELORA does not use compatibility scoring to make decisions producing legal effects concerning you or similarly significantly affecting you solely by automated means unless a lawful basis and the required safeguards apply.

Certain information used for matchmaking may reveal sensitive characteristics.

Where explicit consent is required, ELORA will request that consent separately from general acceptance of the Terms.

You may withdraw a consent you have given at any time through the controls made available by ELORA or by contacting privacy@elora.now. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

If information is necessary for a matchmaking feature that depends on your consent, withdrawing that consent may mean that the relevant feature can no longer be provided.

ELORA uses coarse geographic information, including postal-code centroids, to estimate proximity or travel distance for matchmaking.

ELORA does not use your device's GPS location for this purpose and does not store your residential address as a matchmaking location unless a particular feature explicitly requests it and informs you otherwise.

Precise postal information and internal location calculations are not displayed to other members.

Photos and voice recordings that you upload are stored using ELORA's configured media-storage infrastructure and are made available only as required to provide the relevant ELORA features.

Private messages and other member-generated content are processed to provide communications between members and, where necessary, to maintain safety, investigate reports, enforce ELORA's rules or comply with legal obligations.

Do not include information in messages, photos or recordings that you do not want ELORA and the intended recipient to process.

ELORA uses browser storage strictly necessary for operating the service.

This includes authentication and session cookies, language and appearance preferences, and temporary session information used during account and verification flows.

ELORA uses ephemeral, in-memory session identifiers and first-party usage events to understand how the service is used and maintain platform reliability. ELORA does not write analytics cookies or persist tracking identifiers in your device's local storage or session storage, and does not use third-party advertising cookies, trackers, or marketing pixels.

ELORA uses service providers where necessary to operate the service. Depending on the feature you use, recipients may include:

• Hetzner and configured S3-compatible infrastructure for hosting and media storage;
• Amazon Web Services / Amazon SES for transactional email delivery;
• Expo for push-notification delivery;
• Google when you choose Google social login; and
• Meta/Facebook when you choose Facebook social login.

These providers receive only the information necessary for the relevant service, subject to applicable contractual and data-protection requirements.

Personal data may also be disclosed where required by law, to establish or defend legal claims, or where necessary to protect users, ELORA or others from fraud, abuse or security threats.

ELORA does not sell your personal data.

ELORA's core application databases and servers are intended to be hosted in the European Union.

Some external service providers may process information through infrastructure or group companies located outside the European Economic Area.

Where personal data are transferred internationally and the GDPR requires transfer safeguards, ELORA uses an applicable lawful transfer mechanism, such as an adequacy decision or appropriate safeguards including standard contractual clauses, as applicable to the provider and transfer concerned.

The exact processing location may depend on the service provider and the region configured for ELORA's production account.

ELORA retains personal data only for as long as necessary for the purposes described in this Policy, including providing the service, maintaining security, resolving disputes and complying with legal obligations.

First-party analytics events are normally retained for up to 90 days, subject to ELORA's configured retention process.

Account and profile information is generally retained while your account remains active and during the account-deletion grace period described below.

Some safety, fraud-prevention, legal, accounting or security information may need to be retained for a longer period where necessary and legally permitted.

Technical logs are retained according to ELORA's operational and security retention schedules and should not intentionally contain passwords or authentication secrets.

When you request account deletion through your Account settings, ELORA pauses your profile and removes it from active discovery and messaging.

A 30-day grace period applies to allow restoration and to support account and platform safety. During that period you may restore your account by signing in where the restoration feature remains available.

ELORA may send a reminder shortly before final deletion.

After the grace period, account data scheduled for deletion is removed or anonymised in accordance with ELORA's deletion process. This includes profile media and account information that ELORA no longer has a lawful reason to retain.

Messages may be redacted or disassociated from your identity while portions of shared conversation history remain available to another participant where necessary to preserve that participant's conversation context.

Information that ELORA is legally entitled or required to retain may be excluded from immediate deletion for the applicable retention period.

ELORA does not publicly display your email address, telephone number, authentication credentials, raw questionnaire responses, internal compatibility scores, private date feedback or internal moderation records.

Information that is not publicly displayed may nevertheless be processed by ELORA or disclosed to the service providers described above where necessary for the relevant purpose.

Subject to the conditions and exceptions provided by law, you may have the right to:

• access your personal data;
• correct inaccurate personal data;
• request deletion;
• restrict processing;
• receive portable data;
• object to certain processing; and
• withdraw consent where processing is based on consent.

ELORA provides account controls for certain requests, including personal-data export and account deletion.

You may also contact privacy@elora.now.

You have the right to lodge a complaint with a competent data-protection supervisory authority.

ELORA uses technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration and loss.

No online service can guarantee absolute security. You are responsible for keeping your account credentials secure and should notify ELORA if you suspect unauthorised access to your account.

ELORA may update this Privacy Policy when the service, processing activities or applicable requirements change.

The current version is identified by the version information displayed with this Policy. Where required, ELORA will provide additional notice of material changes.