← Back

Privacy Policy

Version 2026-10-05

This policy explains what personal data LIKEM processes, why, on what legal basis, for how long, and the rights you have under the EU General Data Protection Regulation (GDPR) and Swedish law.

1. Who is responsible

The data controller is Swipe Solutions AB, 5593912347, Våglängdsgatan 19, 507 41 Borås, Sweden. Contact us about privacy at privacy@likem.se.

2. Sensitive data

Because LIKEM is an adult connection service, some information you give us can reveal your sex life or sexual orientation, which is a special category of data under GDPR Article 9. We only process it with your explicit consent, which you give separately when you join and can withdraw at any time in Account settings. Withdrawing hides your profile from discovery; it does not affect processing that happened before.

3. What we process, why, and our legal basis

DataPurposeLegal basis
Email, password (hashed), sign-in providerCreate and secure your accountContract (Art. 6(1)(b))
Age attestation, username, age, bio, photos, languagesShow your profile to other adultsContract
Gender, orientation, relationship status, intent, couple detailsMatching and discoveryExplicit consent (Art. 9(2)(a))
Verification selfie(s)Review that you are a real person, by a moderator or — if you allow it — an automatic check (AI image analysis via our processor) that looks for one live face, an adult appearance and a match with your profile photo. Unclear results always go to a person; no automatic rejections.Explicit consent (Art. 9(2)(a)) — separate opt-in for the automatic face check; you can choose manual review instead
Approximate location (≈1 km grid with a fixed offset), availability, nearby presenceShow approximate distance bandsExplicit consent
Interests, matches, messagesProvide consent-first chatContract
Blocks, reports, moderation recordsKeep members safe, handle abuse, meet legal dutiesLegitimate interest (Art. 6(1)(f)) and legal obligation (Art. 6(1)(c))
Usage events (pseudonymised)Reliability, abuse prevention, product statisticsLegitimate interest

We never sell your data, do not use advertising trackers, and do not make decisions with legal or similarly significant effects about you solely by automated means. Ranking of profiles is assistive; moderation decisions are taken by people.

4. Who can see your data

  • Other members see only your public profile and an approximate distance band — never your email, exact location or verification selfie.
  • Authorised moderators can see verification media and reports, under access controls and logging.
  • Processors acting on our instructions: our cloud hosting, database and storage provider, and Google if you choose Google sign-in. Each is bound by a data processing agreement.
  • Authorities, where we are legally required (for example a valid request from Swedish police).

5. International transfers

We aim to store data within the EU/EEA. Where a processor may access data from outside the EEA, we rely on an adequacy decision (such as the EU–US Data Privacy Framework) or the EU Standard Contractual Clauses with supplementary safeguards.

6. How long we keep data

DataRetention
Availability and nearby presenceExpire automatically (max 3 hours); swept every 10 minutes
Verification selfiesDeleted after review, at latest by the recorded retention deadline
Notifications180 days
Usage eventsUnlinked from your account after 90 days, deleted after 13 months
Recommendation logs30 days
Profile, photos, messagesUntil you delete your account
Moderation and consent recordsKept in minimal form after deletion for as long as needed to handle abuse, appeals and legal claims (normally up to 2 years)

7. Your rights

  • Access and portability — download your data in Account settings → Safety.
  • Rectification — edit your profile at any time.
  • Erasure — delete your account in Account settings.
  • Withdraw consent — in Account settings, at any time.
  • Objection and restriction — email us.
  • Complaint — you can complain to the Swedish Authority for Privacy Protection (IMY), imy.se, or your local EU supervisory authority.

We answer requests within one month.

8. Security

Data is encrypted in transit (HTTPS with HSTS) and at rest. Access is enforced in the database with row-level security; verification media sits in private storage reachable only through short-lived signed links. We apply strict browser security headers and will notify you and IMY of a personal data breach where the law requires.

9. Children

LIKEM is for adults aged 18 and over only. We remove accounts we believe belong to minors.

10. Record of processing (summary)

Categories of data subjects: members and people who contact us. Categories of recipients: moderators, processors listed above, authorities on legal request. Technical and organisational measures: see section 8. A full Article 30 record is kept internally.