Privacy Policy

Last updated: 1 March 2026

Attune is operated by Cavefish AI Ltd, a company registered in England and Wales. We take your privacy seriously — especially because we handle something as personal as your emotional data. This policy explains what we collect, how we use it, and the rights you have over it.

---

1. Who we are

Cavefish AI Ltd ("Attune", "we", "us") is the data controller for personal data collected through the Attune platform. Our registered address is Cardiff, Wales, United Kingdom. Contact our Data Protection Officer at privacy@attunechemistry.com.

2. What data we collect

Account data

When you register, we collect your first name, surname, email address, date of birth, and location (city level).

Emotional profile data

Our core technology — EchoDepth — analyses your facial expressions during a short video session entirely on your device. We never transmit or store raw video footage or images of your face. What we retain is an anonymised emotional vector: a mathematical representation of your emotional response patterns that cannot be reverse-engineered to reconstruct your image.

Usage data

We collect standard usage data including app interactions, session times, and feature engagement to improve the product.

Communications

If you contact us or sign up to the waitlist, we store your name, email, and the content of your message.

3. Legal basis for processing

• Contract performance — to provide the Attune matching service.
• Legitimate interests — to improve the platform, prevent fraud, and ensure safety.
• Consent — for marketing communications, withdrawable at any time.
• Legal obligation — where required by law.

For emotional profile data, which may constitute special category data under UK GDPR, we rely on your explicit consent given at onboarding.

4. How we use your data

• To generate your emotional profile and find compatible matches.
• To operate, maintain, and improve the platform.
• To communicate with you about your account and updates.
• To detect and prevent fraud and safety violations.
• To comply with legal obligations.

5. Who we share data with

We do not sell your data. We share data only with Cavefish AI Ltd (our technology partner), infrastructure providers under GDPR-compliant contracts, and law enforcement only when legally required.

6. Data retention

Account data is retained while your account is active. Emotional vectors are deleted within 30 days of account deletion. Waitlist data is purged at public launch or converted with your permission.

7. Your rights

Under UK GDPR you have the right to access, correct, delete, restrict, port, or object to the processing of your data. Email privacy@attunechemistry.com. We will respond within 30 days. You may also lodge a complaint with the ICO.

8. Cookies

See our Cookie Policy for full details. We use essential cookies and privacy-first analytics only.

9. Children

Attune is strictly 18+. We do not knowingly collect data from minors. If you believe a minor has registered, contact safety@attunechemistry.com immediately.

10. Changes

Material changes will be communicated by email. Continued use after changes constitutes acceptance.