Here is what we keep about you, why we keep it, and what you can do about it.
Version: 21 October 2026
Mayfly is in open beta. Where this policy mentions week passes and credits, they apply when the beta ends.
1. Who we are and how to reach us
Here is who is responsible for your personal data, and how to reach us.
(a) We are Mayfly Dating, a Delaware corporation, 4516 South Compton Ave, 63111 St. Louis, Missouri. “Mayfly” is the app and the website we run, at mayflydating.com. You can reach us at privacy@mayflydating.com for privacy requests, and at team@mayflydating.com for everything else.
(b) We decide why and how we use your personal data.
(c) We have not appointed a data protection officer or an EU representative.
2. What this policy covers
This policy covers everything we do with your personal data through Mayfly.
(a) Mayfly gives you one match each week. We assign it to you: there is no feed, no swiping and no choosing.
(b) This policy covers the app and the Website, mayflydating.com. It applies to you if you have an account. It also applies if you gave us your details for the waitlist.
(c) The Terms of Use include this Privacy Policy, the Community Standards and the Safe Dating Practices. You can find all three in the settings of the app. There is no Cookie Policy, because we do not use cookies (section 13).
(d) Mayfly is in open beta in Milan and opens soon in Indiana and Wisconsin, in the United States. This policy applies the GDPR, and we handle personal data the same way for everyone, wherever they live.
(e) We use these words the same way in the Terms of Use and in this policy.
| Word | Means |
|---|---|
| Mayfly | The app, the Website and everything we provide. |
| Website | Our website, at mayflydating.com. |
| we, us, our | The company named in section 1. |
| you | A person who has an account or uses Mayfly. |
| other members | Other people who use Mayfly. |
| your match | The one member we assign you for the week. |
| your content | What you put into Mayfly: your profile information, photos, messages and survey answers. |
| chat | The private conversation between you and your match during the week. |
| AI processing | Automated processing of the text of your chats by an artificial-intelligence model. |
| derived metrics | The figures we make from your chats and keep about you. The list is in section 3 of the Privacy Policy. |
| Pulse Score | The behaviour score we keep for each member. |
| the weekly survey | The short survey we invite you to complete at the end of each week. |
| the week | The seven days a match lasts. |
| credit | One match. We take one credit from you for each match we give you. |
| week pass | A purchase you make in the app’s settings, through the App Store, that adds one credit to your account. |
| pause · deactivate · ban | The three account states: you pause, you deactivate, we ban. |
| personal data | Information that identifies you or can be linked to you. |
| Terms of Use | The document you are reading, or its companion. |
| Privacy Policy | The companion document about your personal data. |
3. What we collect
We collect what you give us, what the app records while you use it, and what others tell us about you.
What you give us
| What | What it includes |
|---|---|
| Account details | Your name, your email address and your sign-in details. |
| Profile information | Your date of birth, gender, the genders you are interested in, your age range, your bio, your height, your education and your preferences for a match. Sensitive items are in section 6. |
| Location | A named location and, if you allow it, your exact location. |
| Photos | The photos you upload, with their size, type and order. |
| Messages | Every message you send in a chat. |
| Survey answers | Your answers to the weekly survey, including the note you can add. |
| Pauses | When you pause, with the reason and the note you give. |
| Reports and blocks | The reports you make and the blocks you set, with the reason and any note. |
| Waitlist details | If you joined the waitlist: your name, email, city, age and gender. |
(a) At the end of each week your match ends and we invite you to complete a short survey about it.
(b) You can report and block other members. We may review a report. We keep reports and blocks.
(c) The law requires us to ask your age. The rest of what we ask for is needed to match you, except the sensitive items, which are optional. If you do not give us what we need, we cannot match you.
What the app records
| What | What it includes |
|---|---|
| Credits and week passes | Your credit balance, each credit you receive, buy or use, and the identifiers Apple and our payment provider give your purchases. |
| Activity records | What you do in the app, each request, session and action, with your IP address, the details your device sends and the page requested. |
| Device details | Your push-notification token, your device name and app identifier, and the kinds of notification you choose. |
| Bans | If we ban an account: that it is banned, why, and until when. |
| Derived metrics | The 16 personality scores and your bio intent, named below. |
(d) We keep a behaviour score for each member, the Pulse Score.
What others tell us
(e) Apple tells us who you are when you sign in with Apple.
(f) Another member can report you. We keep the report.
(g) Our payment provider tells us when you buy a week pass or Apple refunds one.
Derived metrics
What is saved. We store your messages in plain text. At the end of each week, the third-party AI service reads and categorises your chats to help us derive a score about you for each of 16 personality traits. We save those scores and use them to match you. The 16 traits are: Adventurous, Flirty, Lowkey, Open-Minded, Bubbly, Charming, Confident, Funny, Attentive, Humble, Social, Decisive, Kind, Authentic, Smart and Ambitious. We also save your bio intent, which comes from your bio. No third party has access to our matching software. The AI service does not keep the text we send it, and it does not use that text to train its models.
(h) In this policy your derived metrics are the 16 personality scores and your bio intent, named in the box above. The Pulse Score is separate (d).
4. Why we use your personal data
We use your personal data to operate, protect and improve Mayfly.
(a) This table gives each purpose, the data it uses and the legal basis for it.
| Purpose | Data used | Legal basis |
|---|---|---|
| Run your account and give you your match each week | Account details, profile information, location, photos | Contract (Article 6(1)(b) GDPR). For the optional sensitive items, also your explicit agreement (Article 9(2)(a)): see section 6. |
| Sell you week passes and keep your credit balance | Credit balance and history, purchase identifiers | Contract (Article 6(1)(b)). |
| Keep Mayfly safe: reports, blocks and bans, including reading a message that a report says contains something unlawful | Reports and blocks, ban records, activity records, the reported message | Legitimate interests (Article 6(1)(f)). |
| Analyse your chats with the third-party AI service | Messages | Contract (Article 6(1)(b)). |
| Send you email | Your email address | Contract (Article 6(1)(b)). |
| Keep records of activity | IP address, device details, requests, sessions | Legitimate interests (Article 6(1)(f)). |
| Hold waitlist details | Name, email, city, age, gender | Your consent (Article 6(1)(a)). |
| Keep your survey answers, your Pulse Score and your derived metrics, and use your derived metrics to match you | Survey answers, Pulse Score, derived metrics | Contract (Article 6(1)(b)). |
| Send you push notifications | Your push-notification token | Contract (Article 6(1)(b)). |
| Develop our own matching algorithm | Your personal data | Legitimate interests (Article 6(1)(f)). |
| Disclose personal data to an authority or a court, including a message the law requires us to give | The data the request or the risk concerns | Legal obligation, where the law requires it (Article 6(1)(c)). Vital interests, where someone’s safety is at risk (Article 6(1)(d)). |
(b) Where we rely on our legitimate interests, they are keeping members safe, keeping Mayfly secure and developing our own matching algorithm so that matches get better.
(c) We use your email to sign you in and to send you messages about your account. We use it for nothing else.
(d) How your match is chosen. An algorithm chooses your match. It compares the profile information and the personality scores of members and pairs the people who look most likely to get on. A third-party AI service reads and categorises your chats to help us derive the scores for 16 personality traits, and we use the scores to match you. No third party has access to our matching software. The algorithm decides who you are matched with and whether you are matched at all. No person makes that decision or reviews it unless you ask (section 9). It is the whole of the service, and the consequence of it is that you receive a match, or none, and that the match is the person it picks. We do not describe the prompts, how the scores are worked out or how they are weighed.
(e) We send push notifications only about Mayfly itself. We send no marketing messages unless you agree to them first.
(f) Your right to object. To object to how we use your personal data, email privacy@mayflydating.com. Three of the purposes above rest on our legitimate interests, and you can object to those on grounds relating to your situation (section 9).
5. AI processing of your chats
A third-party AI service reads your chats to help match you, and you agree to that when you create your account.
(a) We use a third-party AI service to read and categorise your chats. It helps us derive your personality scores, which we use to match you.
(b) You agree to this in a step when you sign up. It is its own step: accepting the Terms of Use or this policy is not that agreement. It is a condition of using Mayfly, because we cannot match you without it. If you do not agree, you can leave Mayfly. You can ask us to stop by emailing privacy@mayflydating.com.
(c) The agreement is an act you take yourself. Nothing is agreed for you, and a box, if there is one, starts unticked. We do not send your chats to the AI service until you have agreed.
(d) The legal basis for the analysis is in the table in section 4.
(e) The third-party AI service we use is TypeSafe. It receives the text of your chats and, through its Jev model, reads and categorises them to help us derive your scores. No third party has access to our matching software. The AI service does not keep the text we send it, and it does not use that text to train its models.
(f) What we save from the analysis is in section 3. How long we keep it is in section 8.
(g) We use your personal data to develop our own matching algorithm. The AI service does not keep the text we send it, and it does not use that text to train its models.
(h) Matching depends on the analysis, so we cannot match you without it. If you want it to stop, email privacy@mayflydating.com and ask us to delete your data. We do it by hand and tell you when it is done.
(i) What you write in a chat can be sensitive. The agreement in (b) covers the analysis of your chats. Sensitive items in your profile are in section 6.
(j) If you pause your account, the AI analysis of your chats is paused too, and we keep your data and your scores. If you deactivate your account, we freeze your profile until you reactivate and keep your data. If you delete your account, we delete all your data. The one exception is a joint score, which stays until both members have deleted their accounts. Section 10 has the detail.
6. Special categories of personal data
Some of what you tell us is sensitive, and all of it is optional.
(a) You can give us these sensitive items: your race, your political alignment, your religious affiliation and, if you choose, your sexuality. The genders you are interested in can also show your sexual orientation. We hold each item you give us, and every one is optional.
(b) We ask for your explicit agreement each time you are about to enter one of these items. You can say no and still use Mayfly. We match you the same way.
(c) You can ask us to remove any of these items at any time. To do it, email privacy@mayflydating.com.
(d) What you write in a chat can be sensitive too. The analysis of your chats is described in section 5.
7. Who sees it and who we share it with
Only your match sees your profile. A small set of services handles the rest, and we do not sell your personal data.
(a) The member we assign you for the week can see your profile. No other member can.
(b) We do not read your messages as a matter of routine. We may read a message, and we keep the right to, where we need to in order to keep members safe, to enforce the Terms of Use or where the law requires it. Our staff can see the demographic details of your profile in an admin tool.
(c) These companies handle personal data for us.
| Company | What it does for us |
|---|---|
| TypeSafe | Receives the text of your chats and reads and categorises it to help us derive your scores (section 5). |
| DigitalOcean | Hosts Mayfly and stores what we hold about you. |
| Apple | Sign in with Apple, push notifications and App Store payments |
| RevenueCat | Records week-pass purchases |
| Resend | Sends our email, such as sign-in links |
(d) We do not sell your personal data.
(e) We host Mayfly with DigitalOcean, on servers on the US East Coast. That is outside the EU. DigitalOcean and Resend say they are certified under the EU–U.S. Data Privacy Framework, which the European Commission has found gives adequate protection (Article 45 GDPR). Apple, RevenueCat and TypeSafe may also process data outside the EU.
(f) We disclose personal data to an authority or a court only where the law requires it, or where someone’s safety is at risk.
8. How long we keep it
Here is how long we keep each kind of data.
| Data | How long |
|---|---|
| Your profile information | We keep your profile information until you delete your account. |
| Your messages | We keep your messages until you ask us to delete them, or you delete your account. |
| Derived metrics and the Pulse Score | We keep your derived metrics and your Pulse Score until you delete your account. A joint score is computed from the derived metrics of two members. We keep it until both members have deleted their accounts. |
| Your survey answers | We keep your survey answers until you delete your account. |
| Pauses and deactivated accounts | We keep a record of your pauses and deactivations until you delete your account. |
| Credits and week passes | We keep your credit balance and its history until you delete your account. Apple keeps its own record of what you bought. |
| Activity records and sessions | We keep your activity records until you delete your account. |
| Waitlist entries | We keep your waitlist details until you ask us to delete them. |
| Chat text held by the AI service | The AI service does not keep the text we send it, and it does not use that text to train its models. |
(a) If you pause your account, the AI analysis of your chats is paused too, and we keep your data and your scores. If you deactivate your account, we freeze your profile until you reactivate and keep your data. To have your data deleted, delete your account.
(b) Each period above ends on something you do: you delete your account, or you ask us to delete the data. The exception is a joint score, which ends when both members have deleted their accounts.
9. Your rights
You have rights over your personal data.
(a) To use a right, email privacy@mayflydating.com. We reply within one month.
(b) We handle requests about your personal data by hand.
(c) If we cannot do what you ask, we tell you why, and that you can complain to a supervisory authority. You can also go to court (Article 12(4) GDPR; section 15).
(d) Requests are free of charge. If a request is clearly unfounded or excessive, we may refuse it (Article 12(5) GDPR). We may ask you to confirm who you are before we act on a request (Article 12(6) GDPR).
Access (Article 15 GDPR). You can ask us to confirm whether we process your personal data, and to give you a copy and the information about how we process it. To do it, email privacy@mayflydating.com. We reply within one month. The copy includes the scores we keep about you, such as your derived metrics and your Pulse Score. A copy must not adversely affect the rights and freedoms of others.
Rectification (Article 16 GDPR). You can ask us to correct personal data about you that is wrong, and to complete data that is incomplete. To do it, you can edit your profile in the app. For anything else, email privacy@mayflydating.com. We reply within one month.
Erasure (Article 17 GDPR). You can ask us to erase your personal data in the cases Article 17 sets out. To do it, email privacy@mayflydating.com. Deleting your account is the easiest way to have your data removed (section 10). We reply within one month. In some cases the law lets us keep data (Article 17(3) GDPR).
Restriction (Article 18 GDPR). You can ask us to restrict how we use your personal data, for example while you contest that it is accurate. To do it, email privacy@mayflydating.com. We reply within one month.
Portability (Article 20 GDPR). You can ask us for the personal data you gave us, in a structured, commonly used and machine-readable format, and ask us to send it to another controller. It applies where we process the data on your agreement or to carry out our contract with you, by automated means. To do it, email privacy@mayflydating.com. We reply within one month.
Objection (Article 21 GDPR). You can object, on grounds relating to your situation, to processing we base on our legitimate interests. You can always object to direct marketing. To do it, email privacy@mayflydating.com. We reply within one month.
Withdrawing an agreement (Article 7(3) GDPR). You can withdraw an agreement you gave us at any time, and you can ask us at any time to remove an optional sensitive item you gave us (section 6). It is as easy to withdraw as to give. To do it, email privacy@mayflydating.com. We reply within one month. Withdrawing does not affect what we did before. If you ask us to stop the analysis of your chats, we can no longer match you (section 5).
Who received your data (Article 19 GDPR). If we correct, erase or restrict your data, we tell each company we gave it to, unless that is impossible or takes disproportionate effort. You can ask us who they are. To do it, email privacy@mayflydating.com. We reply within one month.
Automated decisions (Article 22 GDPR). An algorithm chooses your match, and no person makes or reviews that decision (section 4(d)). We do it because Mayfly cannot work without it: it is the service you signed up for (Article 22(2)(a)). You can ask us to have a person look at a match decision, tell us your point of view and contest the decision. To do it, email privacy@mayflydating.com. We handle it by hand and reply within one month. Some of the optional sensitive items you give us can be used in matching, and we use them only where you have agreed to hold them (section 6).
Complaint (Article 77 GDPR). You can complain to a supervisory authority, in particular in the EU Member State where you live or work or where you believe the infringement happened. To do it, see section 15.
10. Deleting your data and leaving Mayfly
You can pause, deactivate or delete your account, and you can ask us to delete your data.
(a) You can pause or deactivate your account. Deactivating ends your membership until you reactivate.
(b) If you pause your account, the AI analysis of your chats is paused too, and your data is kept. We keep your profile and a record of the pause, with its dates and reason.
(c) When you deactivate, we freeze your profile until you reactivate. We keep your data while it is frozen. To have your data deleted, delete your account.
(d) If we ban your account, we keep a record of the ban and why.
(e) If you delete your account, we delete all your data. That includes your chats, so your match no longer sees them. We keep activity statistics without your identity. The one exception is a joint score, which stays until both members have deleted their accounts.
(f) You can also ask us by email to delete your data. We handle requests by hand. Deleting your account is the easiest way to have your data removed.
11. Age
You must be old enough to use Mayfly.
(a) You must be at least 18 to use Mayfly.
(b) We ask for your date of birth when you sign up. We do not check it against any document.
(c) If we find that an account belongs to someone under 18, we ban it.
12. How we protect it
Here is how we protect your personal data.
(a) We use row-based access control to limit who can read your data. Everything between the app and our servers is encrypted in transit. We do not encrypt your messages in our database: they are stored in plain text.
(b) We do not sell your personal data.
(c) If you find a weakness in our security, tell us at team@mayflydating.com.
(d) Our development team handles a personal data breach. If a breach of security is likely to put your rights and freedoms at high risk, we tell you without undue delay. Where the law requires it, we tell the supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of the breach (Article 33 GDPR).
13. Cookies and similar technologies
Mayfly does not set cookies.
(a) We do not use cookies or similar technologies on any web property.
(b) You choose which kinds of push notification you get. How we use push notifications and marketing messages is in section 4.
14. Changes to this policy
We tell you in the app when this policy changes in a way that matters.
(a) If we change this document in a way that matters, we tell you in the app. The change applies one week after we tell you. The date at the top shows the latest version.
(b) If we want to use personal data we already hold for a new purpose, we tell you about the new purpose before we do (Article 13(3) GDPR).
(c) Changes to this policy ship with app updates.
15. Contact and complaints
You can reach us about your personal data, and you can complain to a regulator.
(a) Questions about your personal data, and requests about it: privacy@mayflydating.com. Everything else, including a security problem: team@mayflydating.com.
(b) You can complain to the supervisory authority of the country where you live or work, or where you think the infringement happened (Article 77 GDPR). In Italy, that is the Garante per la protezione dei dati personali (garanteprivacy.it).
(c) You also have the right to an effective judicial remedy where you consider that your rights under the GDPR have been infringed (Article 79 GDPR).