Fiden Privacy Notice
Effective date: 25 August 2026
This Privacy Notice explains how we collect, use and share your personal data when you use Fiden at fiden.app (the "Service"), and what choices and rights you have. It is issued by Pink Elephant, Unipessoal Lda, the company that operates Fiden.
The key points
- Fiden is a relationship self-reflection tool for adults. It is not therapy, it does not provide medical or psychological advice, and it is not a crisis service.
- What you write in a session is private to you. We never show it to your partner, and we never contact your partner without your instruction.
- Some of what you tell Fiden is sensitive, including information about your sex life and how you feel. We process it only with your explicit consent, which you can withdraw at any time.
- To generate its questions and observations, Fiden sends what you write to OpenAI. This is how the Service works, and we explain it in Section 3.
- We do not sell your personal data.
- You can access, correct, export or delete your data, and reach us anytime at [email protected].
1. Who we are
Fiden is provided by Pink Elephant, Unipessoal Lda (NIPC 519056582), registered in Portugal, with its registered office at Edifício Amoreiras Square, Rua Carlos Alberto da Mota Pinto, no. 17, second floor, 1070-313 Lisboa, Portugal. We are the "controller" of your personal data under the GDPR.
You can reach us, including with any privacy question or request, at [email protected].
Because we are established in Portugal, the GDPR applies to our processing of your personal data, and our supervisory authority is Portugal's data protection authority, the Comissão Nacional de Proteção de Dados (CNPD).
2. What this notice covers
This Notice covers personal data we process through fiden.app, including the free relationship quiz, which does not require an account, and the Fiden app itself, which does.
Fiden is designed for adult users (18 and over). It is a self-reflection tool, not a medical, psychological or therapeutic service. It does not diagnose or treat anything, does not replace a therapist, counsellor or doctor, and is not equipped to respond to an emergency. If you are in crisis, or you or someone else may be in danger, please contact your local emergency services, or a crisis or domestic-abuse helpline.
3. Information we collect and how we use it
We collect different categories of personal data depending on which parts of Fiden you use.
The free quiz
When you take the quiz, we collect the answers you give, including the first names you enter for yourself and your partner, how you describe your partner, and your answers about how things are going between you. We use them to show you your result and, if you go on to subscribe, as the starting point for your relationship map. We also place an identifier in your browser so that you can come back to your result later, and so that we can recognize your quiz answers when you create an account.
The quiz asks about sensitive subjects, including your sex life and how you feel in your relationship. Section 4 explains how we handle this. Showing you your result is necessary to provide the service you asked for (Article 6(1)(b) GDPR).
Your account and sign-in
You give us your email address towards the end of the quiz, or when you sign in later. We use it to create and secure your account, to send you a one-time sign-in code or link, to keep you signed in, and to send you messages about your account and subscription. This is necessary to provide the Service (Article 6(1)(b) GDPR).
Your sessions with Fiden
A session is a written conversation. We process what you write, including everything you choose to tell Fiden about yourself, your partner and your relationship, in order to conduct the session, generate Fiden's questions and observations, and keep your session history so that you can return to it. This is necessary to provide the features you have chosen to use (Article 6(1)(b) GDPR), building on the consent described in Section 4.
To generate its responses, Fiden sends your messages and the relevant context from your relationship map to OpenAI. Without this the Service cannot function. OpenAI acts as our processor: it is not permitted to use your content for its own purposes or to train its models.
Your relationship map
After each session, we automatically extract a structured summary from what you wrote: facts you have shared, the areas of your relationship they relate to, and the guesses Fiden has made and whether you confirmed them. We store this map, and earlier versions of it, so that Fiden remembers what you have already told it and does not ask you the same things again. The map is built only from your own words.
Information about your partner and other people
Because Fiden asks about your relationship, what you write will include information about your partner, and may include information about family members, friends or others. Section 5 explains how we handle it.
Payments
If you subscribe, we process your subscription status, plan, and transaction records to administer billing and to meet our tax and accounting obligations (Articles 6(1)(b) and 6(1)(c) GDPR). Payments are handled by Stripe, and we do not receive or store your full card details. We use RevenueCat to keep track of subscription events such as renewals and cancellations.
Emails we send you
We send transactional emails through Resend: sign-in codes, payment receipts, and messages about your account. These are necessary to provide the Service (Article 6(1)(b) GDPR). If we later send you optional emails about the product, we will ask for your consent first and you will be able to unsubscribe at any time.
Analytics and product improvement
We collect pseudonymous analytics about how the quiz and the app are used, such as which screens you reach, where you stop, and which features you use, in order to understand usage and improve the product. We use Amplitude for this, hosted in the EU and keyed to a randomly generated identifier rather than to your name, and we may also use Google Analytics for the website. This is based on your consent, given through our cookie settings.
We do not use the content of your sessions for analytics.
Advertising measurement
If you reach fiden.app from one of our ads and you accept advertising cookies, the Meta Pixel reports to Meta Platforms that a page was viewed or an action taken, such as starting the quiz or subscribing, so that we can measure whether our advertising works. Meta may also use this data for its own purposes, as described in its own policies. This is based on your consent, given through our cookie settings, and our Cookie Policy explains it in more detail.
Security, diagnostics and support
We keep server and error logs, and any correspondence you send to our support address, in order to keep the Service reliable and secure, to fix problems, and to answer you. We rely on our legitimate interest in operating a secure and functioning service for this (Article 6(1)(f) GDPR). You can object to this at any time. See Section 11.
4. Sensitive information and your consent
Some of what Fiden processes is special category data under Article 9 GDPR, which receives extra protection under data protection law. In our case this mainly means information concerning your sex life, and anything you choose to write about your own or your partner's health, including mental health. We only process it with your explicit consent under Article 9(2)(a) GDPR.
You give that consent by choosing to provide this information: when you answer the quiz questions, and when you write in a session. It covers the quiz, your sessions, and the relationship map built from them. We do not require you to share anything in particular: you can skip any question, and in a session you decide what to write.
You can withdraw your consent at any time (see Section 11). Because this data is the substance of the Service, withdrawing your consent means we can no longer provide Fiden to you, and we will delete your quiz answers, sessions and relationship map.
5. Information about people who are not our users
Fiden only works if you can talk about your relationship, so the information you give us will include information about your partner, and sometimes about other people in your life. It is your account of them, in your words. We process it for one purpose only: to provide the Service to you.
We rely on our legitimate interest, and yours, in providing a private space in which you can reflect on your own relationship (Article 6(1)(f) GDPR). We consider this fair because the information stays private to you, is used only to serve you, and is no more than what you would tell a friend or a counsellor.
We do not contact your partner, we do not create an account for them, we do not build a profile of them for our own purposes, and we do not show them anything you have written. If we later introduce a feature that involves your partner directly, we will explain clearly what would be shared, and nothing will be shared without your instruction.
We do not notify the people you mention that you have written about them, because in almost all cases we have no way of identifying or reaching them, and doing so would in any event undermine the privacy of your own account (Article 14(5)(b) GDPR). If someone believes we hold information about them and wants to exercise their rights, they can contact us at [email protected], and we will respond in a way that does not disclose another person's private data.
6. Automated decision-making
Fiden does not make any decision about you using a fully automated process that has a legal or similarly significant effect on you. Fiden's questions, observations, guesses and the picture it shows of your relationship are suggestions generated from your own answers. They are not an assessment, a diagnosis or a finding of fact, they do not determine your access to the Service, and they are not designed to detect or respond to a crisis.
7. Who we share your information with
We share personal data only with our own staff who need it to do their jobs, and with the service providers below, each of which is only permitted to use your data to provide their service to us, under a data processing agreement.
- OpenAI Ireland Ltd powers our sessions: it generates Fiden's questions, observations and summaries, and extracts your relationship map. It is not permitted to use your content for its own purposes or to train its models, and keeps it only briefly for its own abuse monitoring. This may involve processing outside the EU/EEA, under the safeguards in our agreement with OpenAI.
- DigitalOcean hosts our backend database and storage, within the EU/EEA.
- Stripe processes payments and handles card details directly, and does not pass full card details to us. This may involve processing outside the EU/EEA.
- RevenueCat records subscription events for our own reporting. This may involve processing outside the EU/EEA.
- Resend delivers our transactional emails, and may involve processing outside the EU/EEA.
- Amplitude provides our product analytics and is hosted in the EU. This data does not leave the EU/EEA.
- Google provides tag management and website analytics (Google Tag Manager and Google Analytics), which may involve processing outside the EU/EEA.
- Meta Platforms operates the advertising pixel we use to measure our marketing, and may use the data it collects for its own purposes. This may involve processing outside the EU/EEA.
Where any of the above involves sending data outside the EU/EEA, we rely on an appropriate safeguard under the GDPR, such as the European Commission's Standard Contractual Clauses or an adequacy decision. You can ask us for details of the specific safeguard that applies at [email protected].
We may also disclose personal data where required by law, to protect our rights, or as part of a merger, acquisition or sale of assets, in which case we will notify you of any change this brings.
8. How long we keep your information
We keep personal data only as long as we need it for the purposes described in this Notice.
Your account data, including your quiz answers, your sessions and your relationship map, is kept for as long as your account is active, and is deleted within 30 days of a confirmed deletion request. If you take the quiz but never create an account, we delete your answers after 12 months.
A few things are kept for shorter, specific periods: sign-in codes are invalidated as soon as they are used or expire; sign-in and session logs are kept for 12 months; server and error logs for 90 days; and analytics data for 24 months, after which it is deleted or fully anonymized. Support correspondence is kept for 24 months.
Billing records are kept for 7 years to meet our tax and accounting obligations under Portuguese law, and other subscription information for the life of your account plus 30 days.
9. Data security
We use encryption in transit (TLS 1.2 or higher) and at rest (AES-256) to protect Fiden's systems and data, restrict access to session content to the small number of people who need it to operate and support the Service, and back up our database daily. No system is completely secure and we cannot guarantee absolute security, but we work to protect your information appropriately.
10. Cookies
Our website uses cookies and similar technologies, including the identifier that lets you return to your quiz result, and the analytics and advertising technologies described above. Our separate Cookie Policy explains what we use, why, and how you can manage your preferences.
11. Your rights
Subject to the conditions in the GDPR, you have the right to:
- access the personal data we hold about you;
- correct inaccurate data;
- delete your data;
- restrict or object to certain processing;
- receive your data in a portable format, where applicable; and
- withdraw consent at any time, without affecting anything we did before you withdrew it.
Where we process your data based on our legitimate interest, which applies to the handling of information about other people described in Section 5, and to security, diagnostics and support, you can object to that processing at any time on grounds relating to your situation, and we will stop unless we have compelling grounds to continue or need the data for legal claims.
To exercise any of these rights, contact us at [email protected]. We may need to verify your identity first, and we will respond within one month, extendable by two months for complex requests, in which case we will let you know within the first month.
You also have the right to complain to the CNPD, Portugal's data protection authority (www.cnpd.pt), or to the supervisory authority where you live or work.
12. Children
Fiden is intended for adults (18 and over) and is not directed at children. We do not knowingly collect personal data from children. If you believe a child has given us personal data, please contact us at [email protected] so we can take appropriate action.
13. Changes to this notice
We may update this Notice from time to time. If we make a material change, we will let you know in an appropriate way, and we will always update the effective date above.
14. Contact us
If you have any questions about this Notice or how we handle your personal data, contact us at [email protected], or by post at Pink Elephant, Unipessoal Lda (NIPC 519056582), Edifício Amoreiras Square, Rua Carlos Alberto da Mota Pinto, no. 17, second floor, 1070-313 Lisboa, Portugal.