Law-enforcement request guidelines — Eventide

Effective date: 2026-09-19 Last updated: 2026-10-14

Public guidelines. They set out in advance what we produce in response to each type of legal process, so that every request is answered under a written policy. They describe United States legal process; Eventide is a US service operated by Yonatan Demian, an individual.

¶How to reach us

Serve legal process by email to support@eventidedating.com with "Legal process" in the subject line, or by post to Yonatan Demian, Eventide, 4891 Taylor Circle, Collegedale, TN 37315. We accept service by email for speed; emailing us does not waive any objection. Requests should name the account as specifically as possible. An email address, or the member's first name plus church/conference, is more useful than a display name alone.

¶Records we hold

Eventide collects little data, and several common categories of records do not exist:

• We have no payment instruments. Apple processes every purchase; we hold a product id, a status, an expiry date and Apple's transaction identifier.
• We hold no coordinates finer than about a kilometre, and no location history. A member's profile stores one current coordinate pair rounded to a grid cell of roughly one kilometre (if they shared a location at all), overwritten on update and erased when they remove their location or delete their account. Nothing finer ever reaches our servers. The one exception in kind is Experience (Privacy Policy §3.9): a member with nothing to upload can ask to be checked in at an event's venue, which records the time the member's phone confirmed they were at that event, never a coordinate. That time is kept with our decision on the member's attendance, for 30 days after the decision if they were verified, or until the event's Experience closes if that comes first, and is cleared if they were refused.
• We have no message media. Chat is text only.
• We have no AI private answers to produce. The optional conversation starter's private questions and answers are encrypted and deleted when the starter is posted or within 24 hours. The posted starter is a message row flagged as generated by Eventide; it was written by neither member and should not be read as either member's words.
• Liveness-check evidence is short-lived. New members take a liveness check at signup (Privacy Policy §3.8). Its photographs, depth image or video, and measurements are deleted 30 days after the first decision on the member's profile, and within 90 days of the check at the latest, and sooner if the account is deleted. After that only the result (passed, not passed, or no depth camera), its reasons and dates remain. Members are told this evidence is never shared except where the law requires it, and we produce it only on a search warrant (below). It is not a faceprint, and we have no means of searching it, or anything else we hold, by face.
• Server logs contain IP addresses and request metadata and are kept without a fixed schedule (our Privacy Policy §7 says so); do not assume a log line from months ago still exists, or that it has been deleted.
• Deletion. When a member deletes their account, profile, photographs and the content of their messages are erased within 24 hours. A preservation request must reach us while the data still exists. Nightly database backups expire after at most 30 days and are used only to recover from a failure; nothing from the liveness check is in them.

The following records do exist: account records (email or Apple identifier, creation date, last-active time), profile content and photographs, likes/matches and their timestamps, messages between matched members, reports and moderation records, device push tokens, consent records, the result of a member's liveness check (with its evidence, for the short period above), and, for a member who uses Experience, the events they marked and the decision on each, with the check-in time above.

¶Required legal process

¶Emergencies

Where we believe in good faith that an emergency involving danger of death or serious physical injury to any person requires disclosure without delay, we may disclose necessary information voluntarily under 18 U.S.C. §2702(b)(8) (content) and §2702(c)(4) (records). Mark emergency requests clearly and include the facts that make it one; a person will act on it as soon as we can be reached. Experience location records may be disclosed in such an emergency like any other record. Liveness-check evidence is the one exception: we do not disclose it voluntarily, in an emergency or otherwise, and produce it only on a search warrant.

¶Child sexual abuse material

We report apparent child sexual abuse material to the National Center for Missing and Exploited Children's CyberTipline upon obtaining actual knowledge of it, as 18 U.S.C. §2258A requires, and we preserve the reported material as §2258A(h) requires (one year). We do not wait for legal process to do this.

¶Preservation

On a request under 18 U.S.C. §2703(f) we will preserve the specified records for 90 days, renewable once for a further 90 days. Note the deletion mechanics above: a §2703(f) request cannot resurrect data a member deleted before it arrived.

¶Member notice

Our policy is to notify a member before disclosing their information in response to legal process, unless we are legally prohibited from doing so (for example by an order under 18 U.S.C. §2705) or we believe in good faith that notice would create a risk of harm to someone, or the request concerns child exploitation. Where a prohibition is time-limited, we notify when it lapses.

¶Requests from outside the United States

We disclose member data to non-US authorities only through the mechanisms US law provides (for example a mutual legal assistance treaty request). Eventide is offered in the United States only.