Legal

Privacy Policy

Parea App  ·  Last updated: 10 June 2026  ·  Version 1.1

1. Who We Are

Parea ("we", "us", "our") is a social event mobile application operated as a private individual from the Republic of Cyprus.

Data Controller: Pavel Averin
Address: Kalymnou 14, Limassol 3048, Cyprus
Contact: privacy@joinparea.app

We will respond to all privacy-related requests within 30 calendar days.

2. Who This Policy Applies To

This Privacy Policy applies to all users of the Parea mobile application. Parea is strictly for individuals aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we discover an account belongs to someone under 18, we will immediately terminate the account and delete all associated data.

3. What Personal Data We Collect

We collect only the data necessary to provide our service.

CategorySpecific Data
IdentityFirst name
ContactEmail address or phone number
DemographicsDate of birth, gender
VisualUp to 3 profile photos
PreferencesInterests, hobbies, music genres
LanguageLanguages spoken
LifestyleSocial energy level, drinks and smoking preferences, dealbreakers
LocationCity (Limassol, Nicosia, Larnaca, or Paphos)
TransportYour transport preference for events
CommunicationsChat messages sent and received within the app
UsageEvents you join or host, interactions within the app

We do not collect your GPS location, financial data, health data, political opinions, religious beliefs, or racial or ethnic origin.

4. How We Collect Your Data

5. Why We Use Your Data and Our Legal Basis

PurposeLawful Basis
Creating and maintaining your accountPerformance of contract (Art. 6(1)(b))
Showing you relevant events in your cityPerformance of contract (Art. 6(1)(b))
AI-powered matching and profile compatibility scoringYour explicit consent (Art. 6(1)(a) + Art. 22(2)(c))
Automated photo review for safetyLegitimate interest — platform safety (Art. 6(1)(f))
Real-time chat between usersPerformance of contract (Art. 6(1)(b))
Sending you push notificationsYour consent (Art. 6(1)(a))
Preventing fraud and abuseLegitimate interest (Art. 6(1)(f))
Complying with legal obligationsLegal obligation (Art. 6(1)(c))

You may withdraw any consent at any time in Settings → Privacy.

6. AI-Powered Features and Automated Decision-Making

What the AI does

Parea uses artificial intelligence to suggest compatible event companions and rank join requests. The AI considers your stated interests, languages spoken, city, social energy level, lifestyle preferences, and event history.

Who provides the AI

We use Claude Haiku, an AI model operated by Anthropic, PBC (United States), as our data processor. Anthropic processes your profile data solely on our instructions and does not use it to train its AI models.

Your rights regarding AI matching (Article 22 GDPR)

Photo review

Photos you upload are automatically reviewed by an AI system to check for content that violates our Terms of Service. If a photo is rejected, you may contact privacy@joinparea.app to request a human review.

7. Who We Share Your Data With

We do not sell your personal data. We share it only with the following service providers:

ProcessorPurposeLocationTransfer Mechanism
SupabaseDatabase, file storage, authenticationEuropean UnionEU data residency — no transfer
Anthropic, PBCAI matching and photo moderationUnited StatesStandard Contractual Clauses (EU Commission Decision 2021/914)
Apple / GoogleApp distribution and push notificationsUnited StatesStandard Contractual Clauses

8. International Data Transfers

Your data is stored on Supabase servers located within the European Union. When AI features are used, your profile preference data (not your name, phone, or email) is transmitted to Anthropic in the United States, protected by Standard Contractual Clauses (Module 2 — Controller to Processor).

9. How Long We Keep Your Data

Data TypeRetention Period
Account data (name, contact, date of birth)Duration of account + 30 days after deletion
Profile photosDuration of account + 30 days after deletion
Chat messages12 months from date sent, or until account deletion
Event activity and usage logs6 months
AI matching inputs/outputs30 days
Backup copiesUp to 90 days
Records of data subject requests3 years

10. Your Rights

RightWhat it means
Access (Art. 15)Request a copy of all personal data we hold about you
Rectification (Art. 16)Correct inaccurate data — most data can be updated directly in the app
Erasure (Art. 17)Request deletion of your account and all associated data
Restriction (Art. 18)Ask us to pause processing while a dispute is resolved
Portability (Art. 20)Receive your data in a machine-readable format (JSON)
Object (Art. 21)Object to processing based on legitimate interest, including profiling
Automated decisions (Art. 22)Request human review of AI matching outcomes
Withdraw consentWithdraw any consent at any time via Settings → Privacy

To exercise any right, email privacy@joinparea.app. We respond within 30 calendar days.

Cyprus Commissioner for the Protection of Personal Data
1 Iasonos Street, 1082 Nicosia, Cyprus
commissioner@dataprotection.gov.cy  ·  dataprotection.gov.cy

11. Security

In the event of a data breach, we will notify the Cyprus Commissioner within 72 hours and affected users without undue delay.

12. Changes to This Policy

If we make material changes, we will notify you via in-app notification at least 30 days before the changes take effect. The version number and date at the top of this page will always reflect the current version.

13. Contact

Email: privacy@joinparea.app
In-app: Settings → Help → Privacy