privacy policy

us. ("we", "us") is a private shared space for two people. This policy explains what personal data we collect, why, how long we keep it, and the rights you have. The data controller is Chukwuebuka Igwilo Nnadike. For any privacy question or request, email bukkyn@gmail.com.

WHAT WE COLLECT. Account: when you sign in with Google we receive your name, email address and profile picture. Content you create: your display name, accent colour, mood check-ins, shared note, photos, wishlists and date ideas, to-do lists, calendar availability and events, savings pots and ledger entries, and your answers to "the daily". Technical: a device push-notification token if you enable notifications, and basic usage/diagnostic data (see Analytics). Payments: if you subscribe, our payment processor handles your card details — we never see or store your full card number.

HOW IT'S USED AND THE LAWFUL BASIS. We process your content to provide the app to you and your partner (performance of our contract with you). We process diagnostic and analytics data to keep the app working and improve it (our legitimate interests, and your consent where required for analytics). We process payment and subscription data to take payment and manage your plan (contract and legal obligation). We send push notifications only if you opt in (consent).

WHO IT'S SHARED WITH. Your content is visible only to you and the partner you pair with — we do not sell your data or use it for advertising. We use a small number of processors who handle data on our behalf under contract: Supabase (database, authentication and file storage), Vercel (hosting), Stripe (payments), PostHog (product analytics), Sentry (error diagnostics) and a web-push service (notification delivery). Some of these may process data outside the UK/EEA under appropriate safeguards.

STORAGE AND SECURITY. Data is stored in access-controlled databases and private file storage; row-level security restricts every record to the couple it belongs to, and photos are served via short-lived signed links. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.

RETENTION. We keep your data while your account is active. If you delete your account (Settings → delete account) we remove your profile and personal data; shared content in a space you created with a partner is reassigned to your partner so their space keeps working, or deleted if you are the only member. Backups are cycled out on a rolling basis. We may retain limited payment records where the law requires.

YOUR RIGHTS. You can access, correct, export or delete your data, object to or restrict certain processing, and withdraw consent at any time. You can export your data and delete your account from Settings, or email us at bukkyn@gmail.com. You also have the right to complain to your data protection authority (in the UK, the ICO).

CHILDREN. us. is not intended for anyone under 16. If you believe a child has provided us personal data, contact us and we will delete it.

CHANGES. We may update this policy; we'll change the date above and, for material changes, tell you in the app. Questions: bukkyn@gmail.com.