Privacy Policy

1. Who We Are & Scope

Onlycouplez is a private application for couples. This policy explains what personal data we collect, why we collect it, how long we keep it, and what you can ask us to do with it.

It covers the Onlycouplez web application and its backend services. It applies alongside our Terms of Service.

2. What We Collect

• Account data: name, email address, password (stored only as a bcrypt hash), date of birth (used to enforce our 18+ requirement), and an optional account recovery answer, also stored hashed.
• Relationship content: messages, letters, memories, photos, scheduled gifts, canvas drawings and call metadata shared between you and your partner.
• Imported chat history: if you choose to use the AI Companion, the chat export file you upload and the message content extracted from it.
• Mood check-ins: your selected mood, sub-mood, intensity, energy, stress, social battery, needs tags, and any note, voice note, selfie or song you attach.
• Cycle and wellness data: if you enable it, the period start dates and daily symptom logs you record. This is treated as sensitive personal data throughout.
• Mediation content: your private account of a disagreement, and the shared transcript of a mediation session.
• Technical data: device session records, IP address at the time of a request, and error diagnostics.
• Payment data: handled by our payment processor. We receive a subscription status and never see or store your card details.

3. Why We Use It

• To operate the shared space between you and your partner.
• To generate AI features you have explicitly opted into: the companion persona, mediation reflections, coaching, mood summaries and suggestions.
• To run safety checks on message content before it reaches an AI model, so we can surface crisis resources when they are needed.
• To enforce eligibility, subscription entitlements and usage limits.
• To diagnose faults and keep the service running.

We do not sell your personal data. We do not use your relationship content to train any third-party model.

4. Consent, and the Three Things We Ask Separately

Some processing needs specific permission rather than general acceptance of these terms:

• Persona consent: before an AI persona can be built that imitates you, you must consent. Your partner cannot enable this on your behalf.
• Coaching consent: recorded before your first coaching session, together with a disclosure that the coach is not a therapist.
• Cycle sharing: enabling cycle tracking for yourself and sharing derived signals with your partner are two separate switches. Enabling one never enables the other.

You may withdraw any of these at any time.

5. AI Processing & Third Parties

To provide AI features we send relevant content to third-party processors:

• Language model providers receive the prompt content needed to generate a reply, which may include retrieved excerpts of your conversations.
• An embedding provider receives message text in order to produce the vectors that make your history searchable.
• Media, notification, email, payment and error-monitoring providers each receive only the data needed for their function.

Your private mediation account is never placed in the same model request as your partner's. Cycle data is never sent to a model; only a general, non-identifying signal derived from it is used to adjust tone.

6. How Long We Keep It

• Uploaded chat export files are deleted once the import job finishes. We do not retain the raw export.
• Mood voice notes and selfies are automatically deleted 90 days after upload.
• Cycle data that you delete is removed immediately and permanently, with no grace period.
• On breakup, shared couple data is hidden immediately and permanently deleted after a grace period of 90 days. Reconnecting within that window restores it. Data belonging to you personally, including your cycle records and your own AI conversation history, is not deleted by your partner leaving.
• On account deletion, we remove the data we hold about you across all couple-scoped records.

7. Security, Stated Honestly

Passwords are hashed with bcrypt and never stored in a readable form. Traffic is encrypted in transit. Sessions use short-lived tokens with rotation, reuse detection, and the ability to revoke a device instantly. Access to a couple's data is checked on every request.

8. Your Rights

You may ask us to:

• Confirm what personal data we hold about you and provide a copy of it.
• Correct anything inaccurate.
• Delete your data, subject to anything we must keep for legal or accounting reasons.
• Withdraw a consent you previously gave, including persona, coaching or cycle sharing.
• Nominate another person to exercise these rights if you are unable to.

Requests can be made using the contact details in section 10. We aim to respond within 30 days.

9. Children

Onlycouplez is for adults. You must be at least 18 to hold an account. We do not knowingly collect data from anyone under 18, and we delete such an account if we become aware of it.

10. Contact & Grievance Officer

For any question about this policy, or to make a request under section 8, contact:

• Grievance Officer: [NOT SET — REQUIRED BEFORE LAUNCH]
• Email: [NOT SET — REQUIRED BEFORE LAUNCH]
• Entity: [NOT SET — REQUIRED BEFORE LAUNCH]
• Address: [NOT SET — REQUIRED BEFORE LAUNCH]

We acknowledge every complaint within 24 hours and aim to resolve it within 15 days. Reports of intimate images shared without consent are treated as urgent and actioned within 24 hours.

If you are not satisfied with our response, you may escalate to the relevant data protection authority.

11. Changes

We may update this policy. Material changes will be posted on this page with a revised date above, and where the change is significant we will notify you in the application.