Updated November 6, 2026 · Version 2026-11-06

Privacy Policy

We look out for one another. Here we explain exactly what data we process on the website and in the app, with what technology, for how long, and what your rights are in each country.

1. Who the data controller is

The controller of your personal data in IXIA (the website joinixia.com, the domain ixia.club, and the club.ixia.app mobile applications for iOS and Android) is Lake Valley LLC, a limited liability company organized under the laws of the State of Delaware, United States (“Lake Valley,” “IXIA,” or “we”).

For any privacy inquiry, or to exercise your rights of access, rectification, updating, portability, objection, or erasure, write to us at [email protected].

2. Data we process on this website (joinixia.com)

• Visit measurement (Google Analytics): we use Google Analytics to learn, in aggregate, how many people visit the site, from which country and type of device, which sections they view, and how many leave their email on the waitlist (never the email itself). To do so, Google places Analytics cookies in your browser and receives your IP address to estimate an approximate location. We do not use advertising cookies, we have disabled Google signals and ad personalization, and this data is not combined with your app account. You can prevent this by blocking cookies in your browser or by using the Google Analytics opt-out browser add-on.
• Your invitation code: when you open a link containing a pass (for example, IX-XXXX), the code is stored solely in your browser’s local storage in order to show it to you and make it easier for you to access the application.
• Technical delivery: the site is delivered through Cloudflare and loads fonts from Google Fonts, which receive your IP address and standard technical headers solely to serve the page securely.
• Requests via Instagram or the waitlist: if you request a spot or message us on Instagram, we use the data you provide solely to manage your admission and invitation to IXIA.

3. Data we process in the application and what we use it for

3.1 Your account access and identity

When you sign up or sign in, we collect your email address, your mobile phone number (when you choose SMS sign-in), and your date of birth:

• Twilio Verify receives your phone number solely to send you and verify SMS access codes.
• SendGrid and Google Cloud Identity Platform process your email address to send you access codes and manage your authenticated session.
• If you choose to sign in with Apple or Google, we receive that account’s unique identifier and the email address you authorize to be shared.
• Privacy by design: your email address, your phone number, and your exact date of birth are stored encrypted and are never shown on your public profile (other members see only your first name and your age in years).

3.2 Your first photo and initial profile suggestions

To spare you from filling out forms during sign-up, an artificial intelligence model from Google Vertex AI analyzes the first photo you choose in order to suggest an initial draft (approximate age, gender, interests, and city), and the system suggests your city and your status as a local or visitor based on your phone’s country calling code, time zone, and regional settings. You see all of these suggestions on screen and can freely correct them before saving your profile.

3.3 Voice greeting and the “About you” interview (Valentina)

• Voice welcome: when you enter for the first time, IXIA generates a brief personalized voice greeting (approximately 120 characters with your first name) using ElevenLabs. That audio is not stored on IXIA’s servers and is deleted from the provider’s history immediately upon being generated.
• “About you” interview: if you choose to talk by voice or by text chat with our virtual host (Valentina), she asks you questions to get to know you (what you do, what you enjoy, who you are and what you are looking for; she may also confirm your age and ask which month your birthday is in and whether you have or want children) to write your intro and build your private profile. The conversation is processed through ElevenLabs Conversational AI (with Anthropic Claude language models and real-time streaming over WebRTC/LiveKit), and Google Vertex AI (Gemini) then drafts your bio. The interview is configured without permanent audio recording and with a maximum technical retention of one (1) day at the voice provider. You always read and approve your intro before it is published on your profile.
• Your private profile: from what you shared in the interview, Google Vertex AI builds a profile (a summary of who you are, your interests and plans, what you value, what you are looking for, whether you have or want children, and keywords) that IXIA stores encrypted to describe you better and suggest compatible people. Other members cannot see it and it is never published. We do not keep the audio or the transcript: the transcript is kept encrypted only until the profile is built (a few hours at most) and is then deleted. Even if you mention them, the profile leaves out your address, workplace or school, contact details, income, health, religion, politics, ethnic origin, sexual orientation, sex life and ex-partners; about your children it only keeps whether you have them and whether you want them, never their names or other details. The age you confirm and your birthday month are stored with your private data (if you gave your date of birth, it prevails); if you state an age under 18 during the conversation, the account goes to review. Each new interview updates the profile; it is deleted with your account, and you can ask to see, correct or delete it by writing to [email protected].
• Introduction when you connect: when two people connect, IXIA uses Google Vertex AI to write a short introduction of each person for the other (first name, age, city, interests and the intro already visible on their profile) and a tip for starting the conversation, and ElevenLabs turns it into Valentina’s voice. The voice introduction is stored encrypted until you change your profile and is deleted with your account; the tip is not stored.

3.4 Photo gallery, intro video, presence, and profile score

• Encrypted storage: you may upload up to six (6) photographs and one (1) short intro video with audio. Before being stored in a private Google Cloud Storage bucket in the United States (us-central1, with all public access blocked), images and videos are compressed and encrypted with AES-256-GCM. Every read goes through our API’s authorization.
• Presence (“Online”): while you use the app, we record your last activity (at most once per minute) to show other members whether you were active within the last five (5) minutes (“Online”) or how many minutes ago you went offline. We never show the exact time you were connected.
• Message delivered: when an approved message reaches your phone (you open the conversation or see it in Connections), we record that moment and show it to the sender with a double check mark. It does not indicate whether you read it; the push notification does not count. It is stored with the message and deleted with it and with your account.
• Private profile score (0 to 100): IXIA internally calculates a score from 0 to 100 based on how complete your profile is (up to 60 points for photos, intro, interests, video, and facial verification) and on the quality of how you treat others in the community (up to 40 points for responding to connection requests, chatting without rejected messages, and not accumulating blocks or reports). This score is used to order the “Discover” catalog, and only you can see it in your account. Your preferences for finding people are private and are never sent to the moderation models.

3.5 Artificial Intelligence review and human moderation

To keep IXIA free of harassment, explicit nudity, fraud, exploitation, or paid services:

• Review before delivery: every photo, bio, video (including frame sampling and the audio track), and chat message is reviewed on the server using Google Cloud Vision SafeSearch and Google Vertex AI (Gemini) before it becomes visible or is delivered to the recipient.
• Context in conversations and video calls between connections: when you send a message in a chat, the safety model evaluates that message together with up to the twelve (12) previous, already approved messages from that same conversation (6,000 characters maximum), sent in pseudonymized form (as “sender” and “recipient,” without account identifiers or access to other chats) in order to understand the context and to distinguish, for example, a person reporting a threat from the person making it. Likewise, when two people with a mutual connection make a video call within IXIA, the real-time audio and video are transmitted through IXIA’s own server (LiveKit on our Google Cloud infrastructure) using ephemeral per-room passes, the call metadata (start, answer, end, and participants) is recorded, and automated artificial intelligence monitoring is enabled from the server to protect the call against prohibited conduct. For this safety reason, messages and video calls are not end-to-end encrypted.
• Human operators and auditing: content flagged as questionable, reports between users, and appeals are reviewed by authorized IXIA operators through a restricted administrative console, where every access and decision is recorded in an audit log. Automated models can make mistakes: you can appeal any rejection from the app.

3.6 Live biometric verification and document verification

When the optional document verification of age of majority and identity is enabled, it is carried out through Stripe Identity. IXIA receives confirmation of age of majority and validity without publishing your document.

3.7 “No Surprises” feature (people you would rather not run into)

At the end of sign-up or from Settings, you may add up to four (4) people you know (indicating a name or nickname, a city, and, if you wish, a photograph) whom you would rather not run into on IXIA:

• If you do not upload a photo, the system looks for matches by name and common nicknames within that city.
• If you upload a photo, IXIA keeps only an encrypted crop of that person’s face, and Amazon Rekognition compares it in memory against the profile photos in that city. No facial template or vector is stored.
• If there is a match, both accounts are silently hidden from each other throughout the application (Discover and Radar): the other person is not notified, and it is not recorded as a block or a sanction.
• Isolation and immediate deletion: names are stored encrypted, the operators’ administration console has no read permissions on this table, and both the record and the face crop are deleted immediately as soon as you remove that person from your list or close your account.

3.8 Approximate location and Radar

• City detection on your device: when you tap “Detect my city,” the calculation of the distance to the nearest city is performed entirely on your phone (with precision reduced to several kilometers). Your city-detection GPS coordinates are not sent to or stored on IXIA’s servers.
• Temporary neighborhood Radar: when you voluntarily turn on Radar, you choose the neighborhood area in which you want to appear for a period of between 5 and 60 minutes. If you enable the proximity signal, the server calculates only a rounded distance and direction relative to other members who have Radar turned on at that time, without displaying or storing a history of exact locations. When the time you chose runs out (60 minutes maximum), Radar turns off on its own.
• The city your phone is in: if you enable location, when you open the app and every half hour while you use it, your phone calculates which IXIA city you are in (or whether you are outside of them) and sends only that city and the country, never your coordinates. We keep that city history for 180 days to detect fake profiles and protect the community (for example, an account that claims to live in a city but is never used there). Only the moderation team sees it, it is deleted along with your account, and you can turn off location at any time from your phone’s settings.

3.9 Technical data about your phone

When you create your account and each time you open the app, IXIA records technical data about the phone you sign in with, linked to your account, in order to understand the profile of the people who use IXIA: what devices they use, where they connect from, and how the service works on each one.

• Device and system: manufacturer, model, operating system and its version, IXIA version, and where you installed it from (App Store, TestFlight, Google Play, or another source).
• Capacity: RAM, number of processor cores, screen size and scale, and, on Android only, total and available storage.
• Settings: language, region, time zone, dark mode, text size, and whether you granted permission for notifications and location.
• Status and connection: battery level and status, power saving mode, connection type (Wi-Fi or mobile data), and, on Android only, the carrier’s name and country.
• Network: the IP address from which the app connects and its technical identifier (user agent).
• Installation identifier: a random code generated by the app to tell your phones apart. It is not the serial number, the IMEI, or an advertising identifier.

This data is not shown on your profile, is not sold or used for third-party advertising, and is seen only by IXIA’s authorized team in the administrative console. It is kept for as long as your account exists and is deleted along with it.

3.10 How you use the app

To understand how IXIA is used and to improve it, the app records, linked to your account, which screens you open and which sign-up steps you reach, with the date and time: for example, that you opened the app, that you went to Discover, to a conversation, or to someone’s profile, or that you reached the photo step. The platform (iPhone or Android) and the IXIA version are stored with each record.

• What it does not include: these records do not show whom you look at or whom you talk to, nor do they store what you write, your photos, or your taps on the screen. We do not record the screen or use third-party analytics tools: the records are stored on the same infrastructure as the rest of your account (section 4).
• Purpose: to measure how many people complete sign-up, at which step they stop, how many come back to use the app, and which sections are used most.

They are not shown on your profile, are not sold or used for advertising, and are seen only by IXIA’s authorized team in the administrative console. They are deleted after 180 days or, sooner, if you delete your account.

3.11 Subscriptions and payments (“Membership”)

If you purchase Membership from your iPhone or Android device, payment is processed by the Apple App Store or Google Play, and IXIA receives only the signed transaction identifier, the subscription’s validity status, and renewal or cancellation notices. If you purchase on joinixia.com, payment is processed by Stripe, Inc. under PCI-DSS security certification; IXIA does not store your card’s full number or its security code.

4. Infrastructure providers and international transfer to the U.S.

Because Lake Valley LLC is a U.S. company and our main infrastructure operates in the United States, by using IXIA you expressly and knowingly consent to the international transfer and processing of your data to the United States and to the operating regions of our technical sub-processors, all of which are subject to confidentiality, security, and encryption agreements in transit (TLS 1.2/1.3) and at rest (AES-256):

5. Data retention, account deletion, and security exceptions

Pausing and voluntary deletion: from My profile > Settings you can pause your visibility at any time or request the permanent deletion of your account (the steps, including without the app, are at joinixia.com/en/delete-account). When you confirm the deletion:

• Your profile, your private profile, sessions, membership, passes, preferences, “No Surprises” list, conversations, the technical data about your phones, and the record of how you use the app are immediately deleted from the active database.
• Your photographs and videos are revoked instantly and placed in an automatic cleanup queue that physically destroys the encrypted objects in Google Cloud Storage within a few minutes (with no versioning or additional retention in the bucket).
• The deletion of your identity in Google Cloud Identity Platform and, where applicable, in Stripe is automatically queued.
• Backups: for operational security, we keep seven (7) encrypted daily backups of the database, which are automatically overwritten and expire on a rotating basis after seven (7) days.

6. Your rights and Country-Specific Legal Annex (Latin America and the U.S.)

Regardless of the city in which you use IXIA, you may exercise, free of charge, your rights of Access, Rectification, Updating, Erasure (Cancellation), Objection, Portability, Restriction of Processing, and Withdrawal of Consent directly from the tools in My profile in the app or by writing to [email protected] from the email address associated with your account (or by attaching a reasonable means of verifying your identity). We will respond to your request within the legal time limits of your jurisdiction:

• Argentina (Personal Data Protection Law No. 25,326): you may exercise the right of access free of charge at intervals of no less than six (6) months (unless a legitimate interest is shown) and request rectification, updating, or erasure, which will be resolved within ten (10) calendar days (access) or five (5) business days (rectification/erasure).
  Mandatory legal notice (AAIP Resolution No. 14/2018): “THE AGENCY FOR ACCESS TO PUBLIC INFORMATION, in its capacity as the Supervisory Body of Law No. 25,326, has the authority to handle the complaints and claims filed by those whose rights are affected by non-compliance with the regulations in force on the protection of personal data.” Website: argentina.gob.ar/aaip.
• Uruguay (Law No. 18,331): you may exercise your rights of access, rectification, inclusion, or erasure with us within a maximum period of five (5) business days, and seek recourse with the Unidad Reguladora y de Control de Datos Personales (URCDP).
• Chile (Law No. 19,628 and Law No. 21,719): you have the rights of access, rectification, erasure, objection, and portability (ARSOP rights), as well as the right not to be subject to decisions based solely on automated processing without the possibility of human review (available through the appeal button in the app), and you may seek recourse with the Agencia de Protección de Datos Personales (Personal Data Protection Agency).
• Colombia (Statutory Law 1581 of 2012 and Decree 1377 of 2013): as the data subject, you have the right to know, update, and rectify your personal data, request proof of the authorization granted, revoke the authorization, and request the deletion of the data (we handle inquiries within a maximum of 10 business days and claims within 15 business days); we remind you that providing sensitive or biometric data is optional, except where it is essential to verify human presence in the community. Supervisory authority: Superintendencia de Industria y Comercio (SIC).
• Peru (Law No. 29733 and its Regulations): you may exercise your ARCO rights (Access, Rectification, Cancellation, and Objection) with respect to our database managed by Lake Valley LLC, with cross-border flow to the United States, and seek recourse with the Autoridad Nacional de Protección de Datos Personales (ANPDP) of the Ministry of Justice and Human Rights.
• Mexico (Federal Law on the Protection of Personal Data Held by Private Parties — LFPDPPP): this document constitutes our Comprehensive Privacy Notice (Aviso de Privacidad Integral). You may exercise your ARCO rights, withdraw your consent, or limit the use or disclosure of your data by sending your request to [email protected]; we will notify you of our determination within a maximum period of twenty (20) business days.
• Panama (Law 81 of 2019) and Costa Rica (Law No. 8968): you may exercise your ARCO / informational self-determination rights within the legal time limits by writing to [email protected]; the supervisory authorities are ANTAI in Panama and PRODHAB in Costa Rica.
• Brazil (Lei Geral de Proteção de Dados Pessoais — LGPD, Lei nº 13.709/2018): the processing of your data is based on the performance of a contract (Art. 7, V), fraud prevention and the security of data subjects in identification and authentication processes (Art. 11, II, “g,” for live biometric verification), and your express consent (Art. 7, I and Art. 11, I). You may exercise all of the rights under Art. 18 of the LGPD (confirmation, access, correction, anonymization, portability, deletion, and revocation) by writing to our Encarregado/DPO at [email protected], and seek recourse with the Autoridade Nacional de Proteção de Dados (ANPD).

7. Changes to this policy

If we make material changes to this Privacy Policy, we will update the date at the top and notify you within the application before applying the new processing. If you have any questions, you can always write to us at [email protected].