Privacy Policy

The controller of your personal data is the operator with unpublished company details that will be added before Afterwink opens. Contact us about your data at [email protected]. We have not appointed a data protection officer.

Account and device data includes your email, password stored only as a hash, display name, date of birth, gender, city, language, and the time and version of the Terms of Service you accepted. We store your device name and type, sign-in tokens, including refresh tokens that expire after seven days, and a push token if you allow notifications. Server logs record the IP address of each request. Security records can contain an IP address and browser details.

Profile data includes the photos, bio and vibe tags you add. We remove location and camera details from photos when you upload them. People you have not matched with see a blurred version.

We store sensitive data only with your explicit consent. This includes your gender preference, intent, vibe and vibe tags, boundary card, intimacy card, and the fact that you use Afterwink. This data can reveal your sex life or sexual orientation. See Sensitive data below.

For Smart-ID verification, SK ID Solutions receives your personal identification code. We store the verification result and method, your date of birth from eID and a keyed hash of your personal identification code, or of the Finnish bank ID subject identifier if that method is switched on later. Your name from eID is shown to you during verification but is not stored. We do not store your personal identification code.

If you verify with Mobile-ID, you enter your phone number and personal identification code. SK ID Solutions receives both to confirm your identity. We hold them for at most 5 minutes during verification. We then keep only the same data as for Smart-ID: the result and method, your date of birth, and a keyed hash of your personal identification code.

Activity data includes your likes, matches, messages, private media and its expiry, plans with the time, place and whether the place is public or private, check-ins, events, whether you are live in Tonight, and the people you block.

Safety data includes your trusted contacts' names, email addresses and phone numbers if you add them, whether each contact confirmed, your check-in answers, and your emergency alerts (SOS). An alert includes your location only if your device shared it when you sent the alert. The location is not updated afterwards.

Moderation data includes reports and notices you send or that concern you, the part of a text stopped by our filter with the rule and where it happened, and warnings, suspensions and bans with their reasons.

We use your data to run your account and Afterwink. This includes showing your profile to verified members, matching you, carrying your messages, plans and events, and sending service emails such as password resets. The legal basis is our contract with you, Article 6(1)(b) GDPR.

We use your sensitive data for matching, to show your intent and vibe to verified members, and to share your boundary card and intimacy card only with the people you choose. The legal basis is your explicit consent, Article 9(2)(a) and Article 6(1)(a) GDPR.

We use eID to check that you are 18 or older and that each person has only one account. This keeps people under 18 and banned people off Afterwink. The legal bases are our contract with you, Article 6(1)(b) GDPR, because the Terms require verification, and our legitimate interest in keeping minors and banned people off Afterwink, Article 6(1)(f) GDPR.

We use your data to run check-ins, trusted contacts and emergency alerts (SOS). This includes your location when you send an alert and your device shares it. The legal basis for your data is our contract with you, Article 6(1)(b) GDPR. For your trusted contacts' data, it is your and your contact's legitimate interest in the alert reaching them, Article 6(1)(f) GDPR.

We automatically screen text, handle reports and notices, decide on and explain moderation actions, and keep evidence. The legal bases are our obligations under the Digital Services Act, Article 6(1)(c) GDPR, and our legitimate interest in keeping payment for sex, contact sharing and abuse off Afterwink, Article 6(1)(f) GDPR.

Before we store a photo you upload, we make hashes, or digital fingerprints, of it and check them against known child sexual abuse material through Arachnid Shield. If it matches, we keep the original encrypted as evidence and suspend the account until the person who moderates Afterwink reviews it. If a member reports child sexual abuse, the reported account's photos can also be set aside as evidence until that review. Our legal bases are our legitimate interest in protecting children, Article 6(1)(f) GDPR, and our legal obligation to act on illegal content we host, Article 6(1)(c) GDPR.

We use server logs, security records and limits on repeated attempts, such as sign-in tries, to keep Afterwink secure. The legal basis is our legitimate interest in protecting accounts and the service, Article 6(1)(f) GDPR.

Every day, we make an encrypted backup of the database and uploaded photos so we can restore Afterwink after a failure. The legal basis is our legitimate interest in keeping the service and your data available, Article 6(1)(f) GDPR.

We use data to meet legal duties and defend legal claims. This includes answering lawful orders and telling the police if we learn of a possible crime that threatens someone's life or safety, as Article 18 of the Digital Services Act requires. The legal bases are legal obligation, Article 6(1)(c) GDPR, and our legitimate interest in defending legal claims, Article 6(1)(f) GDPR.

We process your sensitive data only with your explicit consent under Article 9(2)(a) GDPR. At sign-up, you give consent with a separate, unticked box, apart from accepting the Terms. We record when you gave it and which version. You can use Afterwink without consent, and then we store none of these details. You can withdraw consent at any time in Settings. This immediately deletes your gender preference, intent, vibe, vibe tags, boundary card and intimacy card. Your account stays. Withdrawing consent does not affect processing before it.

Other verified members see your profile: display name, age, photos, blurred until you match, bio, vibe tags, intent and vibe. Your boundary card and intimacy card are shown only to the people you share them with. Members never see your legal name, personal identification code or email.

When you add a trusted contact, we store their name, email and phone number if you add it, and email them to confirm. Once confirmed, they receive your name and the plan's place and time by email if you miss a check-in or ask for help. When you send an emergency alert (SOS), they receive the alert by email with your location only if your device shared it at that moment. The alert also goes by SMS only to confirmed trusted contacts with a phone number.

The member who proposed a plan gets their own check-in when the plan's check-in is on. At a private place, both of you get your own check-in. If the other member misses their check-in, asks for help or sends an emergency alert (SOS) during the plan, their confirmed trusted contacts receive the plan's place, its address if one was given, and its time by email. This can be a private place you gave, such as your home. These emails do not include your name.

SK ID Solutions AS (Estonia) runs Smart-ID and Mobile-ID. It receives your personal identification code, and for Mobile-ID also your phone number, to confirm your identity and returns the result to us.

Resend (United States) sends our emails, such as password resets, trusted contact confirmations and safety alerts.

Twilio (United States) sends SMS alerts to trusted contacts who have a phone number.

Google Firebase Cloud Messaging (United States) delivers notifications in the Afterwink app if you allow them.

Cloudflare (United States) carries all traffic to Afterwink and protects it from attacks. It handles your IP address and the data you send.

Cloudflare also stores our daily backups in Cloudflare R2, in data centres in the EU. Each backup is encrypted on our server before upload. The key that opens it is kept off the server.

Hetzner Online GmbH (Germany) hosts our servers and database in the EU.

When text screening is on, TypeSafe AI, Inc. (255 California St, Suite 1300, San Francisco, CA 94117, United States) checks the note you add to a like and the title you give a plan for offers of payment and contact details that move the conversation off Afterwink. TypeSafe receives only that text, never your name, email or account, and processes it on servers in the United States as our processor. Text it flags is refused. Text it is unsure about goes to the person who moderates Afterwink.

The Canadian Centre for Child Protection in Canada runs Arachnid Shield. For each photo you upload, it receives only the photo's hashes, never the photo, and says whether they match known child sexual abuse material. When the person who moderates Afterwink confirms a match, the report goes to the police or to the Vihjeliin hotline run by Lastekaitse Liit.

The police and other authorities receive data when the law requires it, for example under a lawful order, or when we learn of a possible crime that threatens someone's life or safety, as required by Article 18 of the Digital Services Act.

Resend, Twilio, Google and Cloudflare are in the United States. We transfer data to them on the basis of their certification under the EU-US Data Privacy Framework and the EU standard contractual clauses in their data processing terms. When text screening is on, TypeSafe AI, Inc. in the United States also receives the text it checks. This transfer relies on the EU standard contractual clauses in TypeSafe's data processing addendum.

Afterwink sends photo hashes, never photos, to Arachnid Shield, which the Canadian Centre for Child Protection runs in Canada. The European Commission's adequacy decision for Canada, Decision 2002/2/EC, covers organisations under Canada's private-sector privacy law. We are still checking whether it covers this charity. If it does not and the hashes count as personal data, we will add the EU standard contractual clauses.

Your account data is kept while your account exists. When you delete your account, you are signed out and your profile is hidden at once. After 30 days, we erase everything, including photos, messages, plans, check-ins, alerts and trusted contacts. If a report about your account is still open, erasure waits until it is closed.

Sensitive data is deleted at once when you withdraw consent.

A banned account is kept for 180 days after the ban and then erased, including the identity hash. If a report about the account is still open, erasure waits until it is closed.

If eID shows you are under 18, we close your account and keep it with the identity hash so the same ID cannot open another account.

Reports you file stay after your account is erased, without your identity. Reports about an account stay after that account is erased, linked only to an internal ID, as evidence for legal claims.

We keep evidence of suspected child sexual abuse material until the person who moderates Afterwink decides, with no end date before that decision. Confirmed evidence is deleted 365 days after confirmation. If review finds that a photo is not child sexual abuse material, its evidence copy is deleted at once and the review record is deleted after 90 days. This evidence stays after the account is erased and is never included in backups.

Each backup is deleted after 30 days. Data erased from Afterwink can remain in an encrypted backup until that backup is deleted, for up to 30 days.

Security records, including filter hits, are deleted after 90 days. Server logs are kept for at most 90 days.

Private media sent with an expiry is deleted when it expires.

Sign-in tokens expire after 7 days and end at once when you sign out or delete your account.

When text screening is on, TypeSafe keeps the text it checks for as long as necessary for that purpose and as the law requires, as stated in its data processing addendum, which sets no fixed period.

We set one cookie, NEXT_LOCALE, only when you choose a language. It holds only that choice and lasts one year. Your sign-in tokens and a few settings, such as a dismissed notification prompt, are kept in your browser's local storage until you sign out or clear them. We use no advertising or analytics cookies.

You have the right to access your data, correct it, have it deleted, restrict its use, object to its use based on legitimate interest, and receive it in a machine-readable format. In the app, download a copy with Export My Data in Settings, correct your profile yourself, or delete everything with Delete Account. For anything else, write to [email protected]. We answer within one month.

You can withdraw your consent to sensitive data at any time with Withdraw consent in Settings. This does not affect what happened before you withdrew it. If you think we handle your data wrongly, you can complain to the Estonian Data Protection Inspectorate, Andmekaitse Inspektsioon, at Tatari 39, 10134 Tallinn, [email protected], or to the data protection authority in the EU country where you live or work.

To use Afterwink, you must give us your email, a password, your date of birth and your city, and complete eID verification. The contract cannot work without them. Everything else is optional, including sensitive data, photos, your bio and trusted contacts. Without a confirmed trusted contact, no one receives check-in alerts or SOS alerts.

We do not score members. The feed shows verified members in your city whose preferences match yours. Two checks run automatically during eID verification. If eID shows that you are under 18, the account is closed. If your ID is already linked to another account, verification is refused. The text filter automatically stops text that matches its rules, but it never makes decisions about your account. If you think an automated check got it wrong, write to [email protected] and a person will look at it.