Privacy Policy
Your blueprint stays yours.
- Version
- v2.0
- Effective
- 2026-09-26
- Last updated
- 2026-09-26
- Controller
- Millijoin AB (org. nr. 559069-3593), trading as SIIIX
- Contact
- social@stiiicks.co
Millijoin AB
Mariestadsvägen 3
121 50 Johanneshov
Sweden
1. Who we are
This Privacy Policy explains how Millijoin AB ("we", "us", "Millijoin"), a Swedish Aktiebolag (org. nr. 559069-3593, registered office at Mariestadsvägen 3, 121 50 Johanneshov, Sweden), collects and uses personal data when you visit siiix.app, or use the SIIIX app for iOS.
SIIIX is a dating app for two people who have met in person. You meet someone out in the world and connect by scanning each other’s code, instead of swapping phone numbers, and SIIIX is where the two of you talk and plan dates from there. It is deliberately not a discovery app: there is no feed, no search and no way to browse strangers, because the matching already happened in real life. The whole product rests on one idea. You keep a private record of what you want, and the app only ever surfaces what you and a person you are connected with have in common. Nothing you hold alone is shown to anyone.
The legal entity that controls your personal data is Millijoin AB. You must be 18 or older to use SIIIX.
2. What we collect, why, and on what lawful basis
We apply data minimisation, meaning we collect the smallest set of data that lets the app work, and purpose limitation, meaning we use it only for the purpose it was collected for. Each activity below names its lawful basis under GDPR Article 6.
2.1 Visitors to siiix.app
| Data | Purpose | Lawful basis (Art. 6) | Retention |
|---|---|---|---|
| IP address, user agent, pages viewed | Serve the site and protect it from abuse | Legitimate interest, Art. 6(1)(f) | 30 days in server logs |
| Strictly necessary cookies | Make the site work | Legitimate interest, Art. 6(1)(f), exempt from consent under ePrivacy | Session |
| Email address you give the waitlist | Tell you when SIIIX opens | Consent, Art. 6(1)(a) | Until you ask us to remove it, or 24 months after launch |
We run no analytics, no advertising and no tracking cookies. See section 7.
2.2 People using the SIIIX app
| Data | Purpose | Lawful basis (Art. 6) | Retention |
|---|---|---|---|
| Apple account identifier, and your name and a relay email if you allow it | Create and sign you in to your account | Contract, Art. 6(1)(b) | Until you delete your account |
| Date of birth | Prove you are 18 or older. Enforced on our server, not just in the app | Legal obligation and legitimate interest, Art. 6(1)(c) and (f) | Until you delete your account |
| Display name, photos, pronouns, gender, city, relationship status, star sign | Your profile, and what a person you connect with sees | Contract, Art. 6(1)(b) | Until you delete your account |
| Who you are into | Match what you and a connection have in common. This is special category data, see 2.3 | Contract, Art. 6(1)(b), together with explicit consent, Art. 9(2)(a) | Until you delete your account |
| Your answers to question cards | Compute the overlap between you and a connection. Your own answers are never shown to anyone on their own | Contract, Art. 6(1)(b) | Until you delete your account, or you change the answer |
| Connections, messages, photos and voice notes you send, and dates you plan | Run your chats and plans | Contract, Art. 6(1)(b) | Until you or the other person deletes the connection or the account |
| Device token for notifications, and a record of what we sent | Send the notifications you asked for, and avoid repeating ourselves | Consent, Art. 6(1)(a), given on your phone | Until you turn notifications off or delete your account |
| Reports you make or that are made about you, and blocks | Keep people safe and act on abuse | Legitimate interest, Art. 6(1)(f), and legal obligation, Art. 6(1)(c) | Kept after the account is gone, see section 5 |
2.3 Special category data
Who you are into is data about your sexual orientation, which GDPR Article 9 treats as a special category. We process it only with your explicit consent, given when you fill in your profile, and we need that consent in addition to the Article 6 basis above, never instead of it. You can withdraw it by deleting your account, which erases the data.
SIIIX is built so this data can only ever be used one way. Every record is isolated to its owner at the database level, the overlap between two people is computed on our servers, and only the shared result is returned. One person can never read another person's answers.
A future version of SIIIX will add explicit questions about your sex life, behind a separate consent screen of its own. That part is not in the app today. When it ships, this policy, the App Store privacy label and the age rating are all updated in the same release, and nothing about your sex life is processed before you have given that separate consent.
2.4 AI-assisted features
When two people connect, SIIIX writes a short summary of what they have in common, called the read. The wording is generated by Anthropic (Claude), reached directly from our servers.
| What we send | What comes back | Who sees it |
|---|---|---|
| The findings the two of you already share, as short topic lines. Never your profile, never your name, never anything either of you holds alone | A few sentences of wording for those same findings | The two people in that connection |
Lawful basis: contract, Art. 6(1)(b), for a feature that is the point of the product. Anthropic processes this on our instructions, retains it for up to 30 days under its standard API policy, and does not train models on it. If the wording step fails, the read falls back to plain wording generated on our own servers. We send no personal data to any AI provider for advertising.
No decision about you is automated. The read describes what two people have in common. It decides nothing, grants nothing and denies nothing.
3. Who we share it with, and our subprocessors
Each processor below is bound by a data processing agreement and, where data leaves the EEA, by the European Commission's Standard Contractual Clauses.
| Subprocessor | Purpose | Country | Transfer mechanism |
|---|---|---|---|
| Supabase Inc. | Database, authentication and file storage. All SIIIX data lives here | EU, Ireland, AWS eu-west-1 | Stays in the EU; EU SCCs as a backstop |
| Apple Inc. | Sign in with Apple, and delivery of notifications | USA | EU SCCs |
| Anthropic PBC | Wording for the read, see 2.4 | USA | EU SCCs |
| Vercel Inc. | Hosting for siiix.app. The app itself does not touch Vercel | USA, with EU regions for compute | EU SCCs |
We do not sell your personal data, we do not share it with advertisers or data brokers, and we never share it with other members except through the mutual overlap the two of you create by connecting.
4. International transfers
Your data is stored in the European Union. Some of our processors are in the United States, and for those transfers we rely on the European Commission's Standard Contractual Clauses together with encryption in transit and at rest. A copy of the relevant clauses is available on request from social@stiiicks.co.
5. How long we keep it
Retention is listed next to each kind of data in section 2. In short, we keep your data while your account exists. You can delete your account from inside the app at any time, which removes your profile, your photos, your answers, your connections and the messages and voice notes in them, and your login itself. It applies on our servers and not only on your phone, there is no deactivated state and no waiting period, and it cannot be undone.
Two things outlive the account, on purpose:
- A report made about an account survives that account being deleted, because otherwise deleting your account would erase the evidence against you.
- A report you made about somebody else survives, but your identity is removed from it.
Beyond that we keep only what a law requires, for no longer than it requires. Backups are held by our database provider in the EU and are overwritten on a rolling basis.
6. Your rights
Under GDPR you have the right to:
- Access a copy of the personal data we hold about you;
- Rectify data that is wrong or incomplete;
- Erase your data, which you can do yourself from inside the app;
- Restrict or object to processing based on legitimate interest;
- Portability, meaning a machine-readable copy of what you gave us;
- Withdraw consent at any time where consent is the basis;
- Complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY, imy.se) or to the supervisory authority where you live.
Email social@stiiicks.co to exercise any of them. We answer within 30 days of a verifiable request, in line with Art. 12(3). We may need to confirm it is really you, so that nobody can ask for your data by pretending to be you. The first copy is free.
7. Cookies
siiix.app sets no non-essential cookies and runs no analytics or marketing tracking, so there is no cookie banner. The SIIIX app itself uses no cookies and no advertising identifier. If that ever changes, this policy is updated and a consent surface ships before the feature does.
8. Security
We protect your data with measures appropriate to how sensitive it is: encryption in transit and at rest, row-level isolation in the database so one person cannot read another's records, private file storage reachable only through short-lived signed links with no public URLs, and least-privilege access.
If we become aware of a breach likely to put your rights at risk, we notify the supervisory authority within 72 hours in line with Art. 33, and you directly without undue delay where the risk is high.
9. Children
SIIIX is for adults, 18 and over. It is not directed at children. Your date of birth is checked when you create your account and a date under 18 is refused by our server, not only by the app. We do not knowingly collect personal data from anyone under 18. If you believe someone under 18 has an account, write to social@stiiicks.co and we will remove it.
10. Changes to this policy
We post any material change here, update the version and dates at the top, and where the change affects an activity you have an account for, we tell you in the app before it takes effect.
Version history
| Version | Date | Summary |
|---|---|---|
| v2.0 | 2026-09-26 | Rewritten to the standard Millijoin AB publishes for EVERTIN. Adds per-activity lawful bases, the named subprocessor table, international transfers, security and children. Discloses Anthropic as the processor behind the read, and voice notes and notification tokens, none of which the previous version named. Records that the explicit part of the app is not shipping yet. |
| v1.0 | 2026-08-10 | First policy, published with the site. |
Contact
Millijoin AB, Mariestadsvägen 3, 121 50 Johanneshov, Sweden. Org. nr. 559069-3593. Email social@stiiicks.co. The fastest way to reach us is the SIIIX Support chat inside the app. See also our Terms.