Effective October 30, 2026 · AI4Friend is operated by Innowave Software Solutions and Consulting Inc., Langley, British Columbia, Canada.
The short version
We collect what you give us (name, e-mail, birth date, photo, bio, the interests you rate, messages) and your approximate location to show people and events nearby.
Other members see your first name, photo, bio, shared interests and your distance — never your exact location, e-mail or birth date.
We don't sell your data. We use a small number of service providers (hosting, e-mail, push notifications, AI processing of event listings) under contract.
You can see, change, export or delete your data from your account at any time. Deleting your account removes your personal data immediately.
We're in British Columbia, Canada and follow PIPEDA and BC's PIPA. Questions: [email protected].
1. Who we are
AI4Friend is operated by Innowave Software Solutions and Consulting Inc., Langley, British Columbia, Canada ("we"). We are the organisation responsible for your personal information under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act (PIPA). Our privacy officer can be reached at [email protected].
2. What we collect
Information you provide
Account: first name, e-mail address, password (stored as a one-way hash), date of birth (to confirm you're 18+ and to show your age range), city, preferred language.
Profile: photo(s), a short bio, search radius.
Interests: your ratings of interest cards (love / like / skip / dislike / not for me).
Activity: friend requests, invitations, plans, reviews you write, and messages you send to other members.
Support: anything you send us when you contact support or report someone.
Location
With your permission, the app reads your device's location once when you set or update it. We store a single point (latitude/longitude) and use it only to compute distances and find events within your radius. We don't track you in the background and we never show your coordinates to anyone; other members see a rounded distance (e.g. "2.4 km"). You can instead choose your city centre as your location.
Information collected automatically
Device and usage: device type, operating system, app version, language, IP address, timestamps of logins and actions, crash and error logs.
Push tokens: if you enable notifications, the token your device gives us for delivering them.
Cookies: on the website we use a session cookie to keep you logged in and a CSRF token for security. We also use Google Analytics on the website to understand which pages are visited (it sets its own cookies and collects IP address and device information; see Google's privacy policy). You can opt out with the Google Analytics opt-out browser add-on. We don't use advertising cookies.
Information from others
Other members may mention you in reviews or reports. Event information comes from public listings (venues, teams, theatres) and is not about you.
3. How we use it
To run the Service: create your account, show your profile to members within your radius, compute compatibility scores, suggest events and people, deliver messages and invitations.
To keep the community safe: review photos before they're shown, investigate reports, detect fraud, spam and abuse, enforce our Terms.
To communicate with you: account e-mails (verification, security), optional notifications about invitations, messages and suggested plans. You can turn notifications off in the app.
To improve the Service: aggregate statistics about which interests and events are popular. We don't use your messages to train AI models.
To comply with the law and respond to lawful requests.
We rely on your consent (which you give when you create an account, and separately for location and notifications), on the need to perform our agreement with you, and on our legitimate interests in security and improvement. You can withdraw consent at any time by changing a setting or deleting your account.
4. What other members see
Your first name, approved photo(s), bio, age range, city/neighbourhood label, distance from them, the interests you have in common, your compatibility score with them, and reviews you've received after completed plans. Your e-mail, exact birth date, exact location, phone, and your ratings of interests you don't share are never shown.
5. Who we share it with
We don't sell or rent personal information. We share it only with:
Service providers who process data on our behalf under contract: cloud hosting (DigitalOcean, Toronto, Canada), e-mail delivery, push notification delivery (Firebase Cloud Messaging — device tokens only), and AI model providers used to categorise public event listings (no member data is sent to them).
Other members, as described in section 4, and the people you message or invite.
Authorities when required by law, a court order, or to protect someone's safety.
A successor if we merge with or are acquired by another company, subject to this policy.
Some providers are located outside Canada (e.g. the United States). Where that's the case, your information may be subject to the laws of that country.
6. How long we keep it
Account data: while your account exists. When you delete your account we immediately delete your profile, photos, ratings, location, device tokens, friendships, conversations and messages, and anonymise the remaining record (e.g. reviews other people wrote appear as "Deleted user").
A hash of your e-mail is kept for 30 days after deletion to prevent abuse, then deleted.
Reports and safety records: up to 2 years, so we can act on repeat behaviour.
Server logs: 90 days. Backups: up to 30 days.
7. Your rights
You can access and correct your information in your profile settings. You may ask us for a copy of your personal information, to correct it, or to delete it, and you may withdraw consent, by using the in-app controls or e-mailing [email protected]. We'll respond within 30 days. If you're not satisfied you may complain to the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner for British Columbia. Residents of the EU/UK have the additional rights set out in the GDPR/UK GDPR, including portability and objection; we honour those on request.
8. Security
Connections are encrypted (HTTPS). Passwords are hashed. Access to production systems is limited to staff who need it, and photos are stored outside the public web root. No system is perfectly secure; if we learn of a breach affecting you we'll notify you and the regulator as the law requires.
9. Children
The Service is for adults 18+. We don't knowingly collect information from anyone under 18; if you believe a minor has an account, tell us at [email protected] and we'll remove it.
10. Changes
We'll post any changes here and update the effective date. For material changes we'll notify you in the app or by e-mail before they take effect.