Privacy Policy

This Privacy Policy explains how LovyDays ("we", "our", or "the app") handles your information. We built LovyDays to be private and simple: there is no account, no sign-up, and we collect as little data as possible. Everything you share is visible only to the one partner you pair with.

1. Information we collect

LovyDays does not ask for your email, phone number, or any password.

• Anonymous identifier. We use Firebase Anonymous Authentication to give your device a random ID. This ID contains no personal information and is only used to link two phones into one couple space. So that the same ID comes back when you reinstall the app or move to a new iPhone, the app also creates a sign-in credential for itself — a random address and password you never see or type — and keeps it in your iPhone's Keychain. Encrypted backups and Quick Start carry it to a new iPhone; it is never synced through iCloud Keychain and contains no personal information.
• Couple data (synced). When you pair with a partner, a shared "couple room" is stored in Google Cloud Firestore. It contains: the anonymous IDs of the two paired devices, your relationship start date, the display names you both chose, the optional avatar photo you chose (stored as a small image so your partner can see it), quick-touch events (which emoji was sent and when), your daily streak status, a 7-Day Recap summary built from those quick touches, your couple's time zone and the date you paired, and Couple Challenge questions and answers you chose to send. Only the two paired devices can read it.
• Little Notes (synced). A little note you send your partner is stored in your couple room: either the words you typed, or a voice recording you made, together with the emoji it was sent with and your partner's reaction. A voice note's audio file is stored in Google Cloud Storage. Only the two paired devices can read or play it.
• LovyDays Plus (synced). If you subscribe, we store which plan you bought, when it expires and whether it renews, so both of you get the Plus features, together with the App Store transaction reference. Payment is handled entirely by the App Store — we never see your card, billing address or any payment details. Apple receives a random account reference derived from your anonymous ID so that a purchase can be matched to your LovyDays profile. Your couple room also counts how many of the free first uses of Plus features (a Together Booth, a Love Letter, Little Notes) the two of you have used.
• Love Letters (synced). A letter you write is stored in your couple room: its text, who sent it to whom, whether it was sent at once or scheduled and for what time, your partner's time zone at that moment, and whether it has been delivered, cancelled, opened or saved to Memories. While a letter is scheduled or cancelled only you can read it; once delivered, both of you can. The notification your partner receives names you but never contains the text.
• Love Letter purchases (synced). If you buy a single letter, we store a record of the purchase — the product, the App Store transaction ID, its status, when it was credited, used or refunded, and which letter it paid for — and how many unused letters you have. As with Plus, Apple receives a random account reference derived from your anonymous ID, and payment is handled entirely by the App Store.
• Together Booth (synced). When you and your partner take a Booth together, each phone takes its photos with the front camera, re-encodes them as JPEG on the device with their metadata removed, and uploads them to Cloud Storage for Firebase. These source photos can be read only by our server, which joins them into one print showing your two display names and the date. The print can be read only by the two of you, and only for 24 hours after it is ready; save it to Memories to keep it. A Booth record in your couple room keeps the chosen style, the poses suggested, who joined and was ready, and when each photo was taken.
• Memories (synced). While you are paired, memories you add — their title, note, date, photos and, with LovyDays Plus, a short video — are stored in your couple room. Photos are re-encoded as JPEG on your device with their metadata (such as location and camera details) removed, then stored in Cloud Storage for Firebase. A video is re-encoded on your device to at most 1080p and stored in Cloud Storage for Firebase with a still frame used as its cover. A memory is shared with your partner when you add it; you can switch it to Only me, which keeps it in the room but readable only by you. Reactions to a memory and whether your partner has seen it are stored with it.
• Location for "Journey to You" (optional). When you tap Share my location, the app reads your device location once, at that moment, and stores that position (latitude, longitude, accuracy and time) in your couple room so your partner can see how far apart you are. Location is never read in the background and the app never asks for "Always" access. While a virtual Journey runs, a journey record (the two shared positions, the chosen ride and its progress) is kept in the couple room. If your partner asks you to share your location, that request is also kept there until you share or one of you leaves the room. See section 6 for how long this is kept.
• Device record for notifications. To deliver your partner's quick touches and Journey notices, we store a push token together with the platform, app version, language, time zone and your notification preferences. This record is keyed to your anonymous ID and contains no personal information. When your partner schedules a Love Letter for you, we use the time zone in this record to deliver it at your local time, and your partner's app shows that time; the app version tells us whether your app can receive letters.
• Usage & diagnostics. We use Firebase Analytics (usage events, e.g. which screens are opened or which ride was picked; distances are reported only as broad bands, never as coordinates). These events are linked to a user ID that is a one-way hash of your anonymous ID, never your name or contact details. Analytics never receives the text of your letters, notes or memories, or any photo; a letter is described only by a length range. We also use Firebase Crashlytics (crash reports and basic device information) to keep the app working and improve it.

2. Information that stays on your device

The following is stored only on your phone and is never uploaded to our servers or shared with your partner:

• Memories you create while you are not paired, and the copies you choose to keep when a couple room ends — their titles, notes, dates, and any photos or videos you attach. Such a memory leaves your phone only if you choose to share it into a couple room.
• Your theme and other app settings.
• The "Share this moment" card at the end of a Journey is created on your device and is saved to your photo library only when you tap Save.
• Drafts of Love Letters you have not sent yet. A draft is removed when you send or discard the letter, or when you leave the couple room.

The Couple Cat animation on the Home screen is purely visual and stores nothing about you.

3. Permissions we may ask for

• Location (While Using the App). Only for Journey to You, read once each time you tap Share. Optional — the app works without it.
• Camera. To scan your partner's pairing QR code, and to take Together Booth photos while a Booth's camera screen is open. Optional.
• Photos. To pick an avatar or add photos and videos to a memory, and to save a Journey or 7-Day Recap card or a Together Booth print you choose to keep.
• Microphone. Only while you are recording a voice little note, and only from the moment you tap the record button. We never listen in the background. Optional — notes can be typed instead.
• Notifications. For your partner's quick touches, new memories and reactions from your partner, "On This Day" memories, "your Journey is ready" notices, a reminder your partner can send you to share your location, a Love Letter from your partner or a reply to yours, an invitation or reminder to join a Together Booth, and local daily streak reminders. Optional.

4. How we use information

• To run the core features: the day counter, pairing, quick touches, daily streak and 7-Day Recap, shared memories and "On This Day", Couple Challenge, Journey to You, Love Letters, Together Booth, notifications, and the Home Screen widget.
• To compose the Together Booth print from the two partners' photos on our servers.
• To deliver a scheduled Love Letter at the chosen time in the receiver's local time.
• To verify Plus and Love Letter purchases with Apple and to handle refunds.
• To draw the Journey route: for road rides we send the two shared positions (reduced to roughly 100 m precision) to the Google Routes API to get a road path. The result is cached for up to 30 days without any link to who requested it. Flying rides use a straight line and no routing request is made.
• To understand general usage and fix crashes and bugs.

We do not sell your data, and we do not show third-party advertising.

5. Third-party services

We rely on Google Firebase (Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Cloud Messaging, App Check, Analytics, and Crashlytics) as our backend and infrastructure provider, and on Google Maps Platform (Maps SDK for iOS and the Routes API) to display the Journey map and compute road routes. Your synced couple data, memories and their photos and videos, Together Booth photos, letters, shared positions and diagnostics are processed by Google on our behalf. App Check uses Apple's App Attest to confirm requests come from a genuine copy of the app. Purchases are verified with Apple through the App Store Server API. See Google's Privacy Policy at policies.google.com/privacy.

6. Data retention & deletion

• Local data (on-device memories, settings) is removed when you delete the app from your device.
• Memories in a couple room. When you delete a memory, it disappears from the room at once and its photos and video are removed from storage right after, or at the latest by the next daily cleanup. When a couple room ends, its memories stay readable to the two of you for 30 days so each of you can keep a copy on your phone; after that they and their photos and videos are deleted from our servers.
• Shared location stays in your couple room until you tap Stop sharing, or until you leave the room — either action removes it. A finished Journey record is deleted automatically about 24 hours after it completes.
• Little Notes. A note you keep becomes a memory, and from then on it follows the rule for memories above — including being deleted 30 days after a couple room ends. A note that is not kept, and its voice recording, currently stay in your couple room until you ask us to delete them; they are not removed automatically, not even when a couple room ends. To have them deleted, contact us at the email below.
• Love Letters. Letters stay in your couple room while you are paired. A letter saved to Memories becomes a memory and follows the rule above. When a couple room ends, letters that were not saved can no longer be read by either of you and are deleted from our servers together with the room's memories, 30 days later. A letter still waiting to be delivered is not delivered, and the purchased letter or free reply it used is given back.
• Together Booth. The source photos and the print are deleted from our storage within two days after a Booth ends, whether or not you saved it; a finished Booth ends when its 24-hour window closes. A print you saved to Memories became a memory and follows the rule for memories above. The Booth record is deleted 7 days after the Booth ends.
• Purchase records for Plus and Love Letters are kept for as long as we need them to honour your purchases, handle refunds and meet accounting obligations.
• Pairing invitations (QR codes) expire after 72 hours and are purged automatically.
• Couple data in Firestore remains until you ask us to delete it, so that your couple room and profile can be restored if you reinstall the app. From Manage Relationship you can disconnect from your partner at any time. To request deletion of your couple room, contact us at the email below and include the relationship start date.

7. Security

Data synced to the cloud is transmitted over encrypted connections and protected by Firebase security rules so that only the paired devices in a couple room can access its data. Memory photos have no public link: each one can be read only by the people allowed to see that memory. Together Booth photos have no public link either: the source photos can be read only by our server code, and the print only by the two of you during its 24-hour window. Memories, Together Booth records and Journey records are written only by our server code, never directly by another device.

8. Children

LovyDays is intended for users aged 13 and older and is not directed to children under 13. We do not knowingly collect personal information from children.

9. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect any changes. This version reflects LovyDays 1.11.0, which added Together Booth and free first uses of LovyDays Plus features.