1.1. This document sets out the privacy policy applied by Amivo (hereinafter – the Privacy Policy) to all persons using the website and the services provided on it. Capitalised terms used in the Privacy Policy have the meaning given to them in the Amivo Terms of Use (hereinafter – the Terms), unless they are defined separately in this Privacy Policy. The Privacy Policy applies to the website www.amivo.lt (hereinafter – the Website).

1.2. For the purposes of this Privacy Policy, the services cover all actions that a person visiting the Website (hereinafter – the Visitor) can take on the Website: registration and profile creation, browsing profiles, dating features (likes and mutual matches), private messaging, and submitting and receiving photos and other information (hereinafter – the Services).

1.3. By using the Services, the Visitor confirms that they have read this Privacy Policy. Special categories of data are processed only with the Visitor's separate explicit consent (see clause 2.5). If the Visitor does not agree with this Privacy Policy, they should not use the Services.

1.4. The data controller is Darius Lukošius, S. Žukausko g. 19, Vilnius, Lithuania. Privacy contact: privacy@amivo.lt.

2.1. The information collected about the Visitor depends on the Services they use and on the information they provide themselves. Amivo collects information during registration, while the Visitor uses the Website, when contacting support, and by other means that do not contradict the law.

2.2. The following personal data (hereinafter – Personal Data) is processed:

• registration: nickname, email address, date of birth, country and city, password hash (the password is never stored in plain text);
• profile: gender, who you are looking for, relationship goal, bio, interests and photos;
• use of the Services: likes, passes, matches, messages, profile views and last activity time;
• consents and moderation: time and version of consents, profile and photo review status;
• technical: IP address (only its hash is kept for statistics), browser and device data, login date and time.

2.3. Personal Data is processed to provide the Services properly, ensure their quality, administer the Website, ensure security, prevent fraud, moderate content and send Service-related notifications (e.g. about new messages or profile views).

2.4. Personal Data is processed on the following legal bases: performance of a contract (the Terms) – registration, profiles, matches and messages; explicit consent (GDPR Art. 9(2)(a)) – gender and dating-preference data; legitimate interests – security, fraud prevention, moderation and incident investigation; separate consent – marketing cookies.

2.5. Gender and who the Visitor is looking for may reveal their sexual orientation, so this data is processed only with separate explicit consent given at registration. Consent can be withdrawn at any time by deleting the account or by emailing privacy@amivo.lt. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

2.6. By providing Personal Data, the Visitor:

• 2.6.1. agrees that their data will be stored and processed electronically;
• 2.6.2. understands that their profile (nickname, photos, age group, city, bio and interests) is visible to other logged-in members of the Website, but is not published publicly online and is not indexed by search engines;
• 2.6.3. knows that their email address is not shown to other members.

2.7. Amivo makes every effort to process Personal Data accurately, fairly and lawfully.

2.8. When processing Personal Data, Amivo:

• 2.8.1. will use Personal Data to provide the Services and improve the Website's functionality;
• 2.8.2. will not sell Personal Data or disclose it to third parties without a legal basis;
• 2.8.3. will use only the necessary data processors – hosting (server), email delivery, security, content-moderation (automated checks of photos and bios) and text-processing service providers, who receive only the data necessary to provide their service.

2.9. Personal Data may be transferred outside the European Economic Area only with the safeguards provided for in Chapter V of the GDPR (e.g. standard contractual clauses approved by the European Commission).

2.10. Direct marketing offers are sent only with the Visitor's explicit consent, and the Visitor may opt out at any time. Service-related notifications (e.g. about new messages) are not direct marketing.

2.11. When registering and logging in to the Website, the Visitor's IP address, an anonymous browser identifier (cookie) and the date and time of login are recorded for security, fraud-prevention and abuse-prevention purposes (e.g. creating multiple accounts). The IP address and identifier are stored only in hashed form.

2.12. The Website may contain links to third-party websites whose privacy policies Amivo does not control.

3.1. Amivo uses cookies and browser storage to keep the Website working and to improve the Visitors' experience.

3.2. Cookies may collect information about the IP address, browser type, device used, pages visited and login.

3.3. Cookies are used:

• 3.3.1. to recognise registered users (login session);
• 3.3.2. to ensure the Website's functionality (language choice, protection against request forgery, age confirmation, cookie choice);
• 3.3.3. for analysis and statistics (anonymised traffic statistics);
• 3.3.4. for marketing purposes – only if the Visitor chooses “Allow marketing”: in that case a registration-conversion signal (a random conversion ID, the registration event, IP address and technical browser data) is sent to TrafficJunky.

3.4. The Website uses the Google Tag Manager tag-management tool and a TrafficJunky (contentabc) technical script; marketing conversion data is sent only with consent.

3.5. The Visitor can change their choice at any time at the bottom of the Website (“Cookie choices”) or in their browser settings. If essential cookies are disabled, logging in to the Website will not work.

4.1. The Visitor can change their profile information (photos, bio, city, interests) at any time while logged in to the Website, and their password in settings.

4.2. The Visitor can delete their account and all associated data at any time (“Settings” → “Delete account”).

5.1. Amivo uses technical and organisational security measures to protect Visitors' information: encrypted connections (HTTPS), password hashing (bcrypt), protection against request forgery (CSRF), access restriction and content moderation.

5.2. The Visitor is responsible for the security of their own login credentials.

5.3. Amivo strives to protect Personal Data against unlawful use, loss or disclosure, and reports personal data breaches as required by law.

5.4. Data is kept for as long as necessary to provide the Services and to meet legal obligations: while the account is active. When an account is deleted, the data is removed from live systems immediately; it may remain in backups for up to 30 days (used only for recovery), and security logs are kept for up to 90 days unless the law or an incident under investigation requires longer retention.

6.1. The Website is intended only for adults (18+). The date of birth is checked at registration.

6.2. Minors are prohibited from using the Website. If we become aware of an account belonging to a minor, it is removed immediately.

7.1. The Visitor has the right to:

• access their Personal Data and receive a copy of it;
• request correction of inaccurate or incomplete data;
• request erasure of their data (“the right to be forgotten”);
• restrict the processing of their data;
• object to the processing of their data;
• data portability;
• withdraw consent at any time;
• lodge a complaint with the supervisory authority – the State Data Protection Inspectorate of Lithuania (vdai.lrv.lt).

7.2. Requests concerning the processing of Personal Data should be sent by email to privacy@amivo.lt.

7.3. Amivo responds to requests as required by law – no later than one month after receiving the request.

8.1. Amivo may update the Privacy Policy at any time.

8.2. The updated Privacy Policy takes effect from the moment it is published on the Website. Visitors are informed of material changes on the Website or by email.

8.3. By continuing to use the Website after changes have been published, the Visitor confirms that they have read the updated Privacy Policy.