You & Yours — Privacy Policy

1. Who we are

You & Yours ("You & Yours", "we", "us") is a personal relationship and self- reflection companion app operated by [LEGAL ENTITY], [REGISTERED ADDRESS]. We are the data controller for the personal data described here.

Questions, or want to exercise your rights? Contact [PRIVACY CONTACT].

2. Our promise, in one line

Your data is private by default, yours to take or delete, and never sold. We do not run ads, we do not sell or rent your data, and we do not use your personal content to build advertising profiles. You & Yours only uses your data to run You & Yours for you.

3. What we collect

You give us:

• Account details — email address and password (passwords are handled by our authentication provider; we never see them in plain text).
• Your profile — name, age, and optional context like cultural background, beliefs, relationship stage, and pronouns.
• What you author in You & Yours — journal/diary entries, moods and mood notes, goals and weekly intentions, memories (including any photos you add), bucket-list items, reminders and saved dates, answers to the daily couple question, notes and details you record about a partner, your children, or family members (including health and wellbeing items you choose to track for yourself, a partner, or both of you), reflections on past relationships, and your answers on big future topics.
• Conversations with the companion — your chats (typed, or spoken and transcribed) are kept on your device, and are also backed up to your account so a new phone can restore them: a trimmed copy of your most recent chats on your account record, and the full chat history in a private storage area that only your account can read. Deleting a chat removes it from both copies (your account keeps only the ids of deleted chats, so a new phone doesn't bring them back). Your own words from a finished conversation are also kept as an entry in your journal. The private "Vent vault" is never backed up or filed: it is stored only on your phone while it's open, and is cleared when you lock it away, leave it, or start another conversation (what you say there is still sent to the AI to be answered). Replies are generated by Anthropic (see §5), and your conversations are not used to train AI models.
• What the companion keeps for you — in the guided chats ("Let's get into it", quick-fire and journal chats), things worth keeping (a date, a detail about someone, a goal, how you're feeling, a note about you) are kept automatically when the conversation ends, and you're shown what was kept, so you can remove it straight away or change it where it lives. Elsewhere the companion offers a save for you to confirm with a tap. A message to your partner, or your answer to the daily question, is only sent when you tap to send it. Kept items live in your account like anything else you author — seen by a linked partner only as described in §8 — and memories kept automatically always start private.
• About you and the companion's summary — notes about you, what you've asked of the companion, how you write (style notes and a few lines from messages you sent), and a short summary the companion writes so it can remember you over months ("What I've come to know"). All of it is shown under About you, where you can correct or remove any line, or turn the summary off (it is then deleted). Earlier versions of About you are not kept.
• Notes about your children — profiles you keep about your kids are part of your record. "Just between you" child notes are additionally restricted so a linked partner can never see them, even on a shared child profile. You & Yours collects data from you about your family — never from children directly (see §11).
• "Red lines" — highly private entries which are encrypted on your device and only ever revealed to a partner if you explicitly choose to share them — and you can take that back at any time. While sharing is on, a copy is kept in your account so your partner can read them; turning sharing off removes it. If you flag that a line was crossed, your partner sees only that line and your note.

Sensitive ("special category") data. Some of what you choose to record is health-related — your moods, optional menstrual-cycle dates, and any health/wellbeing notes you add. We treat this as special-category data and only process it with your explicit consent, given by choosing to enter it. You can delete it at any time, and you never have to provide it to use You & Yours.

Collected automatically:

• Anonymous usage analytics (off unless you turn it on — see §6): which features are used, coarse counts, and crash reports. This is tied to a random, per-install identifier, not to your account, name, or email.
• Basic technical data needed to deliver the service (e.g. device platform, and network information inherent in any internet request).

Photo locations. When you add a photo to a memory, the place it was taken (read from the photo itself, on your phone) is kept with the memory — a place name and its map position — and a linked partner sees it on a shared memory. We don't otherwise collect your location, and we never collect your contacts or advertising identifiers.

4. How we use your data, and our legal bases

You can withdraw consent at any time — turn a feature off, opt out of analytics, unlink a partner, or delete the data or your whole account.

5. AI features

Some parts of You & Yours — the in-app chat, reflections, message-framing, compatibility and horoscope readings — are powered by an AI model from Anthropic (the makers of Claude).

• What's sent: your message, the recent part of the conversation, and a trimmed picture of your account (your profile, the main things you've kept about you and the people in your life, your recent moods, and your summary), each part capped and shortened. You & Yours never sends your whole history. From a partner's side, only what is already shared with you.
• Web search: when you're planning something, the companion can search the web through Anthropic's search tool; it is told to search for the need only, never names or private details.
• The companion's summary ("What I've come to know"): a short summary of you written only from your own journal, goals, memories, bucket list, recorded conversations and recent chats (never from what a partner shared), refreshed about once a day and stored in your account. It's shown under About you, where you can correct or remove any line or turn it off; it's deleted with your account.
• Written for both of you: where the AI writes something you'll both read (the summary of a conversation you record together, a shared reading), it's written only from what you already share — never your summary, About you, health, family or moods.
• Not used to train AI models, and not used to build an advertising or marketing profile of you. The AI has no memory of you between messages except the context You & Yours supplies from your own account, which you can see and control.
• The AI credentials live only on our secure servers, never in the app on your phone.
• Retention at the provider: Anthropic doesn't train on what we send. It deletes inputs and outputs within 30 days, unless its automated safety checks flag them as possibly breaking its usage policy, when they can be kept for up to two years for review.

Voice. On iPhone, the phone's speech recognition produces the live transcript and may use Apple's servers. With Clearer listening on, a recording of each turn is sent to OpenAI to be written out accurately (with the first names of you, your partner and your children); OpenAI keeps nothing from transcription and doesn't train on it, we don't keep the recordings, and the phone deletes each one once it's sent. With Natural voice on, the text of the companion's replies is sent to OpenAI to be voiced; OpenAI may keep that text up to 30 days to check for abuse and doesn't train on it. Both can be switched off in Tools → App & data.

See docs/ai-privacy.md for the full plain-language detail.

6. Analytics and crash reporting

Analytics are off unless you turn them on. If you do, You & Yours uses TelemetryDeck for privacy-first, anonymous analytics.

• Tied to a random per-install id, never your account or email.
• We send only event names and small counts (for example: onboarding completed, a screen opened, a crash occurred) — never your journal text, your moods, notes, messages, which private areas you open, or anything about the people in your life.
• You can turn it off any time in Tools → App & data → Your data.

7. Who else processes your data (sub-processors)

We use a small number of trusted providers to run You & Yours. Where they process personal data, they do so under data-processing agreements and only on our instructions:

• Anthropic — powers AI replies and web searches (see §5).
• OpenAI — powers the companion's spoken voice and voice transcription only: the text of a reply is sent to be voiced, and a short recording of what you said is sent to be transcribed. Clips and text are processed to produce the audio or transcript and are not used to train models; we do not store the recordings.
• Supabase — hosts our database, your files, and the server functions that call the AI. Data is stored in Seoul, South Korea.
• Apple — app distribution, in-app subscription billing, speech recognition on iPhone, and push notifications.
• Google — speech recognition and push notifications (Firebase Cloud Messaging) on Android.
• Resend — delivers account emails (confirmation, password reset). Sees your email address only.
• Expo (EAS) — delivers app updates, and relays push notifications to your partner's device (it sees the notification's text).
• TelemetryDeck — anonymous analytics (only if you turn it on). -

8. Sharing with a partner

• Your data is private to your account by default.
• If you link with a partner, each of you keeps a separate account. Your chats with the companion, its summary of you, and About you are never shown to them. Most things stay private until you choose to share them, item by item. While you're linked, a few things are shared automatically because they're usually about you both: your name, when you were last in the app, whether you've answered today's question and when you've read their message; birthdays, anniversaries and countdowns on your dates (the name and day only, never your notes — including ones saved before you linked and your family's birthdays); your pets; children you add from Your kids (each can be made private); your moods from the past month if you share moods (the word — the reason only if you choose); new memories if you choose "Joint"; and conversations you record together in Talk it through.
• A partner link is made only when the person you invited enters your code. When you unlink, sharing stops both ways at once and the link can't be switched back on. You each keep your own data, including notes about each other; messages and red-line flags you'd already sent each other stay with you both, and can't be changed.
• Notes you keep about another person are part of your record and stay private to you unless you share a specific item.
• If you share your mood with a linked partner, they see the mood you pick; the note behind it stays private unless you choose to share it for that mood.
• In Repair, your side of the conversation is kept only on your phone (it goes to the companion only to be answered). Your partner sees only the message you choose to send, and the repair itself is named only by its date.

We never sell or rent your data, and we do not share it for anyone else's advertising.

9. How long we keep it

• We keep your data for as long as your account is active.
• Delete your account (Tools → App & data → Your data) and we erase your account and everything in it straight away — your profile and About you, the companion's summary, your diary, moods, memories, photos, partner notes, chat backup and settings — and then your login. If you're linked, it also ends the link and removes what only existed between you (both people's daily-question answers, Repair, the messages you sent each other, red-line flags, and the notes your partner kept on children you added). If deletion can't finish, the app tells you what was already removed, and trying again finishes it.
• Anonymous analytics are retained per TelemetryDeck's retention settings and can't be tied back to you.

10. Your rights

Depending on where you live (including under UK/EU GDPR), you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data (much of it is directly editable in the app).
• Delete your data ("right to be forgotten").
• Export / port a copy in a portable format.
• Object to or restrict certain processing, and withdraw consent.
• Complain to your local data-protection authority.

You can export a full copy of your data, or delete your account and everything in it, yourself at any time from Tools → App & data → Your data. For any other request, contact [PRIVACY CONTACT] — we'll respond within the time the law requires.

11. Children

You & Yours is not for children. You must be at least [MINIMUM AGE] (we recommend

1. to use it. We don't knowingly collect data from anyone under that age; if you believe a child has given us data, contact us and we'll delete it.

12. Security

• Data is encrypted in transit (HTTPS/TLS).
• Red lines are encrypted on your device and only revealed by your explicit action.
• The AI credentials are a server-side secret, never shipped in the app.
• Access to production systems is limited. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.

13. International transfers

Your data may be processed in countries other than [JURISDICTION] by our providers (see §7). Where it is, we rely on appropriate safeguards (such as standard contractual clauses or an adequacy decision) as required by law.

14. Changes to this policy

We may update this policy as You & Yours evolves or the law changes. For material changes we'll give reasonable notice (for example, an in-app notice). The current version is always the one published in the app and on our website.

15. Contact

Privacy questions or requests: [PRIVACY CONTACT]. General support: [SUPPORT EMAIL].