Last updated: 1 March 2026
Attune is operated by Cavefish, a company registered in England and Wales. We take your privacy seriously — especially because we handle something as personal as your emotional data. This policy explains what we collect, how we use it, and the rights you have over it.
Cavefish ("Attune", "we", "us") is the data controller for personal data collected through the Attune platform. Our registered address is Cardiff, Wales, United Kingdom. Contact our Data Protection Officer at privacy@attunechemistry.com.
When you register, we collect your first name, surname, email address, date of birth, and location (city level).
During onboarding, EchoDepth analyses your facial Action Units during a calibrated stimulus test entirely on your device. Before any stimulus is shown, a 30-second neutral baseline is captured. You rate each clip (like, neutral, or dislike); this label is stored alongside your AU time-series data as a matched pair. We never transmit or store raw video footage or images of your face at this stage. What we retain is an anonymised time-series emotional profile: a mathematical representation of your response patterns that cannot be reverse-engineered to reconstruct your image. This data constitutes special category biometric data under UK GDPR Article 9 and is processed only with your explicit consent.
Video dates are hosted inside the Attune platform. Before any video date begins, both participants are shown a plain-language consent screen and must explicitly agree to recording and post-session analysis. If either participant declines, the date proceeds but no recording or analysis occurs for that session.
When both participants consent, the session is recorded. After the session ends, the recording is processed to extract anonymised interaction features: AU expression patterns, emotional synchrony between participants, conversation balance (turn-taking and listen-to-speak ratio), and emotional trajectory across the date. Raw video recordings are permanently deleted within 48 hours of session end. The anonymised interaction features are retained alongside the private post-date outcome label (yes/no for a second date, double-blind) as a training data point. Neither participant's individual outcome response is stored in identifiable form.
Post-date outcome feedback is double-blind: neither response is revealed unless both participants say yes. The response mechanism is private and sealed by default.
This data constitutes special category data and is processed only with explicit informed consent given immediately before each session. You may withdraw consent for future sessions at any time. Withdrawal does not affect data already collected in previous sessions unless you exercise your right to erasure.
We collect standard usage data including app interactions, session times, and feature engagement to improve the product.
If you contact us or sign up to the waitlist, we store your name, email, and the content of your message.
We do not sell your data. We share data only with Cavefish (our technology partner), infrastructure providers under GDPR-compliant data processing agreements, and law enforcement only when legally required. Raw biometric data is never shared with third parties.
Under UK GDPR you have the right to access, correct, delete, restrict, port, or object to the processing of your data. Email privacy@attunechemistry.com. We will respond within 30 days. You may also lodge a complaint with the ICO.
See our Cookie Policy for full details. We use essential cookies and privacy-first analytics only.
Attune is strictly 18+. We do not knowingly collect data from minors. If you believe a minor has registered, contact safety@attunechemistry.com immediately.
Material changes will be communicated by email. Continued use after changes constitutes acceptance.