Last updated: March 2026
Hey Carrie is operated by [YOUR COMPANY NAME], registered in England and Wales. For data protection purposes, we are the data controller. You can reach us at hello@heycarrie.io.
When you use Carrie, we collect and process the following data:
| Data | Why we need it | How long we keep it |
|---|---|---|
| Your phone number | To identify you on WhatsApp and deliver the service | Until you ask us to delete it or the beta ends |
| Your name, age, and city | Collected during onboarding so Carrie can personalise advice | Until you ask us to delete it |
| Your dating goals and deal-breakers | So Carrie can coach you based on what you actually want | Until you ask us to delete it |
| Your messages to Carrie | To generate AI responses and maintain conversation context | Active conversation history in cache (Redis) for up to 24 hours. Stored in our database for the duration of the beta. |
| Screenshots you send | Analysed by AI vision for profile audits, match analysis, and Shield Mode safety checks | Stored temporarily for processing (up to 7 days), then deleted from storage. AI analysis results are retained with your conversation history. |
| Your persona selection | To deliver coaching in the style you chose | Until you ask us to delete it |
| Which dating apps you use | So Carrie can give app-specific advice | Until you ask us to delete it |
Some of what you share with Carrie could be considered sensitive personal data under UK GDPR, including your dating preferences, relationship status, and anything you tell her about your personal life. We process this data on the basis of your explicit consent, which you give by choosing to share it in conversation. You're never required to share anything you're not comfortable with.
Your messages are sent to Anthropic's Claude API to generate Carrie's responses. Anthropic processes this data as a sub-processor on our behalf. Under Anthropic's API terms, your data is not used to train their AI models.
Screenshots are processed through AI vision (also via Anthropic's Claude) and temporarily stored in Cloudflare R2 object storage. They are automatically deleted after processing.
Your user profile and conversation metadata are stored in a PostgreSQL database hosted on a secure cloud server. Conversation cache is held in Redis and expires automatically.
Your conversations are private. We do not share, sell, or give your personal data to third parties for their own purposes. The only parties who process your data are:
Anthropic (Claude API) - processes your messages and screenshots to generate AI responses. They act as a data processor and do not use your data for model training.
Meta (WhatsApp Business API) - delivers messages between you and Carrie. Subject to Meta's own privacy terms for WhatsApp.
Cloudflare - hosts screenshot storage (R2) and provides infrastructure. Data processor.
Stripe - will process payments when we move to a paid model. Not active during the free beta.
We may review anonymised, aggregated patterns across conversations to improve the service (for example, understanding which coaching topics are most requested). We will never review your individual conversations unless you report a problem and ask us to look into it.
We process your data under the following bases (UK GDPR Article 6):
Consent - for sensitive personal data (dating preferences, relationship details). You give consent by choosing to share this information in conversation. You can withdraw consent at any time by asking Carrie to delete your data.
Legitimate interests - for operating the service, maintaining security, preventing abuse, and improving Carrie based on aggregated usage patterns. Our legitimate interest is providing the service you signed up for. We've assessed that this doesn't override your rights given the nature of the service and the controls available to you.
Contract - processing necessary to deliver the service you've requested by messaging our WhatsApp number.
Under UK GDPR, you have the right to:
Access your data - ask us what we hold about you. Message Carrie "what data do you have on me" or email us.
Delete your data - message Carrie "delete my data" and we'll remove your records within 30 days. This includes your profile, conversation history, and any stored screenshots.
Correct your data - tell Carrie to update any information that's wrong (name, city, goals) and she'll update it.
Port your data - request a copy of your data in a readable format. Email us at hello@heycarrie.io.
Object to processing - you can object to processing based on legitimate interests. Email us and we'll review your request.
Complain - if you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Your data is encrypted in transit (TLS) and at rest. Access to the database is restricted. We use environment variables for all credentials and follow security best practices for cloud infrastructure. Screenshots are stored in Cloudflare R2 with restricted access and automatic expiry.
Your data may be processed outside the UK by our sub-processors (Anthropic is based in the US, Cloudflare has global infrastructure). These transfers are covered by appropriate safeguards including Standard Contractual Clauses and the UK International Data Transfer Agreement where applicable.
Carrie is for adults only. You must be at least 18 to use the service. We do not knowingly collect data from anyone under 18. If we discover we've done so, we'll delete it immediately.
The Hey Carrie landing page does not use cookies or tracking scripts. If that changes, we'll update this policy and add a cookie consent notice.
If we make changes, we'll update the date at the top. For significant changes during the beta, we'll also let you know via WhatsApp.
Questions about your data or this policy? Email hello@heycarrie.io.