1
It is pretty save to assume that they collect all the data, use it to monitor and evaluate performance, use it to further improve models, and so on. That‘s just standard procedure for building data driven products.
And yes, GDPR is to give people control for exactly this.