## Controller
[LEGAL COMPANY NAME, ADDRESS, CONTACT] — complete after formation.
## What ELIVU processes
- Account data (email, auth identifiers, adult self-declaration, policy versions)
- Profile data (display name, age band, bio, interests, languages, intentions)
- Approximate neighbourhood and short-lived live location while Live is on
- Meetup coordination, QR presence proofs, and post-meet messages when enabled
- Profile photos and optional short introduction video
- Pair-bound five-second Living Portrait videos made when proposing or accepting a meetup
- Safety blocks/reports
- Private Elivu Mind conversations and optional voice transcription
- Technical logs needed to operate Azure Functions, Supabase, and app stores
## Current engineering facts
- Live coordinates are designed to expire in about 90 seconds and delete on stop
- Public profiles must not expose exact coordinates
- AI tools are designed not to receive live coordinates or private media URLs
- Shared Guide is deterministic and does not send the connection transcript to a model provider
- Current launch access and billing availability are server-controlled; the end of free access never starts a plan or charge automatically
- Identity verification is currently a development stub and must not be described as government ID verification
- Living Portrait is an interactive recognition aid, not legal identity, age, or safety verification; it is participant-only after mutual acceptance and designed to expire after 30 days
## Your rights
Access, correction, deletion, restriction, objection, portability, and complaint to a supervisory authority. Use Profile → Privacy & account for export/delete.