Privacy policy
Plain-language summary first. The formal policy text below is placeholder and will be replaced before public launch.
What is collected
Your email address, your date of birth (used once, to confirm you are 18 or over), your answers to question pack items, your private weekly check-ins, and your messages to the AI coach.
What your partner can see
Only items where you both answered Yes, you both answered Curious, or one of you said Yes and the other Curious — and only after you have each separately tapped Reveal.
Items you flagged as a hard limit appear on the reveal screen without being attributed to either person.
What your partner can never see
Every other answer. Anything you marked Not now, No, or Skip, and anything where you matched but they did not, is never sent to their device and is not derivable from anything that is. No counts, totals, percentages or progress indicators tied to pack length are shown after answering, and each couple receives a random subset of each question pool so set sizes cannot be compared.
Your weekly check-ins and your AI coach conversations are private to you, always.
The AI coach
The coach can see your own answers, the overlap the two of you have already revealed, and general guidance content. Your partner's unrevealed answers are never placed in its context.
Storage and security
Data is stored encrypted at rest and transmitted over TLS. Access rules are enforced in the database itself, not in the browser, so a user cannot read another person's answers by inspecting network traffic.
Consent
Consent to store intimate-preference answers is given separately from the terms, before the first pack, and can be revoked at any time from Account. Revoking stops further collection.
Export and deletion
You can export your own data at any time. An export never includes your partner's data. Deleting your account removes your profile, answers, check-ins, coach messages, and any couple link, permanently.
Formal policy
[Placeholder] This section will contain the full legal privacy policy, including data controller identity, lawful basis for processing special-category data, retention periods, sub-processors, international transfers, and contact details for data subject requests.