Privacy Policy

• ~Your email address (for login and account recovery).
• ~Your username and optional display name.
• ~Photos, captions, doodles, and reactions you create.
• ~Daily reflections (shown anonymously after 6 days).
• ~Optional avatar photo, timezone, birthday, and anniversary date.
• ~Custom special dates you create (labels, dates, and icons for milestones and memories).
• ~Comments on photos shared between you and your partner.
• ~Push notification token (if you enable reminders). This token is transmitted to Apple Push Notification Service (APNs) to deliver notifications to your device. You can disable push at any time in iOS Settings.

• ~To authenticate you and keep your account secure.
• ~To share photos between you and your partner only.
• ~To send optional reminder notifications.

If you're in the EEA, UK, or Switzerland, we rely on the following legal bases under GDPR / UK GDPR:

• ~Contract (Art. 6(1)(b)) — to provide the core diary service: account, photo sharing with your partner, calendar, comments.
• ~Legitimate interests (Art. 6(1)(f)) — to keep the Service secure, prevent abuse, and improve reliability.
• ~Consent (Art. 6(1)(a)) — for push notifications and any optional features you turn on. You can withdraw consent at any time in Settings.
• ~Legal obligation (Art. 6(1)(c)) — when we must retain or disclose data to comply with law.

You may object to processing based on legitimate interests at any time by emailing ul.asrokulov@gmail.com.

Your photos, doodles, and reactions are visible only to you and your partner. We do not sell, share, or expose your data to any third party. Ever.

Everything is stored securely on Supabase (hosted on AWS) with row-level security — meaning each user can only ever access their own data and their partner's shared content.

Our third-party service providers:

• ~Supabase — database, authentication, and file storage.
• ~Vercel — app hosting and serverless functions.

These providers act as data processors only and do not use your data for their own purposes. We do not sell or share your data with advertisers or any other third party.

Our service providers (Supabase, Vercel) host data primarily in the United States. If you access Us from outside the US, your data will be transferred to and processed in the US.

For transfers from the EEA, UK, or Switzerland, we rely on the European Commission's Standard Contractual Clauses (SCCs) and, where applicable, the EU-US Data Privacy Framework. You may request a copy of the safeguards by emailing ul.asrokulov@gmail.com.

We work hard to protect your data, but no service is 100% immune to risk. If a security incident affecting your personal data occurs, we will notify you and, where required, the relevant supervisory authority without undue delay — within 72 hours of becoming aware of the incident where required by law.

We keep your data only as long as your account is active.

When you delete your account, your data is removed from our active systems immediately. Residual copies may remain in our encrypted backups for up to 30 days, after which they are permanently purged on our standard backup rotation. Backups are encrypted, access-controlled, and never used to restore deleted accounts.

We may retain a minimal record of your account deletion (such as a hashed user ID and deletion timestamp) for up to 12 months to prevent abuse and comply with legal obligations.

Penalties in Us are purely symbolic and just for fun. They simply indicate an amount the couple can choose to spend together later — like a coffee date, a small treat, or anything that makes you both smile. No real money is charged.

You can delete your account and all associated data at any time from Settings > Delete My Account. Deletion is immediate and permanent — all your photos, reactions, doodles, reflections, special dates, comments, and profile data will be removed.

You can also reach out to us at ul.asrokulov@gmail.com for any data-related requests.

We store a small amount of non-personal data on your device (such as your dark/light theme preference) using local storage. This data never leaves your device and is not transmitted to any server.

Us is intended for users aged 17 and older.

• ~Under 13 (COPPA). We do not knowingly collect personal information from children under 13. If we learn we have collected such data, we will delete it promptly.
• ~Ages 13–16. We do not knowingly allow users under 17 to create accounts. Some jurisdictions (including parts of the EU and California, NY, Maryland, and other US states) provide additional protections for minors under 16 or 18; we honor those protections where they apply.

If you believe a minor has created an account, please contact ul.asrokulov@gmail.com and we will delete the account and all associated data.

Depending on your location, you may have the following rights regarding your personal data:

• ~Access — request a copy of your personal data.
• ~Rectification — correct inaccurate data.
• ~Erasure — delete your account and all data (available in Settings).
• ~Portability — request your data in a portable format.
• ~Opt-Out — we do not sell your personal information.

To exercise these rights, contact us at ul.asrokulov@gmail.com. We will respond within 30 days.

If you live in California, you have additional rights under the California Consumer Privacy Act (as amended by CPRA):

• ~Right to know what personal information we collect, use, and disclose. Categories we collect: identifiers (email, username, user ID), internet/electronic activity (app usage, push tokens), user content (photos, doodles, comments), and inferences only as needed to operate the service.
• ~Right to delete your personal information (use Settings → Delete My Account, or email ul.asrokulov@gmail.com).
• ~Right to correct inaccurate personal information.
• ~Right to opt out of sale or sharing. We do not sell or share your personal information, and we have not done so in the past 12 months.
• ~Right to non-discrimination — we will never charge you more or give you a worse experience for exercising your privacy rights.

To make a request, email ul.asrokulov@gmail.com. We may need to verify your identity by confirming access to your account email.

We may update this Privacy Policy from time to time. For material changes — like new categories of data, new third parties, or new uses — we will notify you in the app and, where required by law, ask for your consent before the change takes effect. The "Last updated" date at the bottom always shows the current version.