Privacy Policy
Last updated 17 September 2026 · Attune is operated from South Australia and this policy is written to the Australian Privacy Act 1988.
Attune asks you unusually personal questions, because that is how it matches people. This page is a plain account of what that means for your data. It is written against what the software actually does, not from a template.
1. Who we are
Attune is a small independent operation, not a company with a privacy team. Contact for anything on this page, including complaints: [email protected].
2. What we collect
| What | Why |
|---|---|
| Your email address | It is your login. We send a six-digit code to it; there is no password. |
| Age, gender, who you are looking for, age range, city, distance, intent, whether you want children | The hard rules for matching. Age also establishes you are over 18. |
| Height, diet, faith, politics, smoking, vaping, cannabis, other drugs, gambling, alcohol | Only for filters you or another person switch on. Never shown on a match card. |
| Your interview answers, in full | The whole basis of matching. Stored as written. |
| A profile derived from those answers — traits scored 0 to 1 across energy, personality, attachment, communication, values, life direction, finances, relationship dynamics and desires | What the matching actually compares. |
| If you opt in: responses about past hurt, triggers and boundaries | Conflict compatibility. Separate consent, asked separately, and you can decline. |
| If you opt in: responses about intimacy and relationship structure | Stored apart from your profile. Never leaves as anything but a one-word summary. |
| Still photographs from your liveness check | Confirming a live person, and estimating apparent age. |
| Messages with people you have matched with | So the conversation exists. |
| Reports and blocks you make or that are made about you | Moderation. |
| Login-code request counts, by email and IP address | Rate limiting, so the login route cannot be used to send mail at strangers. |
Sensitive information
Religion, political opinions, sexual orientation and practices, health-adjacent psychological material, and biometric information used for verification are all sensitive information under the Privacy Act, which needs your consent. You give that consent by choosing to answer. Every optional section can be skipped, and skipping costs you nothing but precision.
What we deliberately do not collect
- No health or STI screening. We considered it and dropped it: excluding people on that basis is very likely unlawful under the Disability Discrimination Act 1992.
- No criminal-history, credit, or financial checks.
- No income, job, wealth, race or ethnicity as matching factors. The engine refuses these by name.
- No date of birth from a document. We never see your ID.
- No tracking cookies, advertising pixels or third-party analytics. Your browser stores a login token and nothing else.
3. Your interview answers go to AI companies overseas
This is the disclosure that matters most, and the one a generic policy would bury.
To ask follow-up questions and to turn your answers into a profile, Attune sends the text you write to whichever of these is available:
| Provider | Where |
|---|---|
| Groq | United States |
| Cerebras | United States |
| Mistral | France |
| OpenRouter | United States |
Your email address and your name are not sent with it — the provider receives the text of your answers, not an identity. We do not control how each provider logs or retains what it receives; that is governed by their own terms. If your answers include something you would not want a third party to hold, do not write it.
Your liveness photographs are processed by Cloudflare Workers AI, not by the providers above.
4. Who else touches your data
| Who | What they handle | Where |
|---|---|---|
| Cloudflare | Hosting, the database, the liveness model | Global, including the United States |
| Resend | Sending your login code — your email address only | Tokyo |
| Stripe | Payment, once it is switched on. Card details go directly to Stripe and never reach Attune | United States |
We do not sell your data. We do not share it for advertising. There is no advertising.
5. What other people see
Attune shows compatibility before it shows a person. A match card carries a score, the reasons behind it, and where you might clash. It does not carry your interview answers, your trait scores, your habits, your trauma responses, or your photographs. Intimacy responses leave only as a single word such as "high". This split is enforced in code, not by policy.
6. How long we keep it
Until you delete your account, and then not at all. Deleting removes your user record, profile, interview transcript, intimacy responses, match cards, messages, blocks, verification record and liveness frame, waitlist entry, report feedback, rate-limit counters and payment entitlement.
Two deliberate exceptions, both about protecting someone else:
- Messages that are evidence in an open report survive your deletion and are removed when the report is resolved. Otherwise anyone could erase the proof of what they did by deleting their account.
- If your account was suspended, a one-way fingerprint of your email is kept so a suspended person cannot immediately return. It cannot be reversed into your address.
7. Your rights
- Delete everything — Account → Delete account, inside the app. It is immediate and it is not a soft delete.
- See or correct what we hold — email [email protected]. The end-of-interview report already shows you most of it, and there is a button to tell us it is wrong, which re-runs the interpretation.
- Withdraw consent to the optional sections at any time by deleting your account; there is not yet a way to remove one section and keep the rest, and that is a gap we intend to close.
- Complain — write to us first. If we do not resolve it, the Office of the Australian Information Commissioner takes complaints at oaic.gov.au.
8. Security, honestly
Data is encrypted in transit and at rest by our hosting provider. Login is a one-time emailed code, so there is no password to steal. Sessions are signed and expire. Admin access is restricted.
What we will not claim: that we are unbreachable, or that we have had a formal security audit. We have not. Attune is a small operation and you should weigh that against how personal the questions are.
9. Children
Attune is for adults. The minimum age is 18, and everyone passes an age check before they can be matched. If we learn someone under 18 has an account we delete it. Tell us at [email protected] if you believe that has happened.
10. Changes
If we change something that materially affects you, we will say so by email rather than quietly editing this page and changing the date.