Privacy Policy

Information we collect

Depending on how you use Ours, we collect account and authentication records, email, first name, time zone, profile photo, couple and invite records, partner email supplied by a user, prompt responses, journal entries, moods and mood notes, reassurance messages, love notes, game answers, drawings, memories, milestones, photos, notification preferences, push subscriptions, subscription records, support requests, and deletion requests. We also receive technical and usage information needed to operate and secure the service, such as browser and device information, logs, approximate location derived from technical data, page and funnel events, source tags, invite activity, partner connection, and subscription events.

How we use it

We use information to create and secure accounts; connect partners; provide requested features; store and display content to intended couple members; send account, invite, relationship, billing, and security notifications; process subscriptions; prevent fraud; measure performance; fix errors; answer support and data requests; comply with law; and protect users and the service.

Partner reveal and shared content

Some activities keep each person's response hidden until both partners complete the activity or another product rule unlocks it. After that rule is met, Ours may show a partner's response. A person who can view content may copy or photograph it.

Service providers and sharing

The repository integrates Supabase for app data and authentication, Stripe for subscriptions, Resend for email, Vercel Analytics for product analytics, Sentry for error and performance monitoring, and web-push infrastructure. Confirm production services, roles, locations, subprocessors, and retention settings before launch; this page is not a certification or final processor list. We may disclose information to providers acting for us, when required by law, to protect rights and safety, during a business transfer, or at your direction. We do not send relationship-content payloads to advertising vendors.

Analytics, Sentry, and storage

Ours uses essential storage for sign-in and app operation. Vercel Analytics is loaded globally. Sentry is configured for error and performance monitoring and browser replay; the reviewed browser configuration masks text and blocks media by default. Production behavior, consent requirements, data region, and retention require verification. We do not claim that the service is fully private, absolutely secure, end-to-end encrypted, HIPAA compliant, or certified.

Email and push

We send essential service messages such as account verification, password reset, invites, receipts, security notices, and requested feature notifications. Challenge or marketing messages require applicable consent and an operational unsubscribe path. You can manage available relationship-email preferences in Settings and block browser push through your browser or device. Unsubscribing from marketing does not stop essential service messages.

Retention, deletion, and rights

We keep information as long as needed for the purposes described here, or longer where required for law, disputes, security, accounting, or abuse prevention. Ours currently provides account deletion in Settings. A successful deletion removes the Auth account and unlinks the person from the shared space, changes the retained profile row's first name to [deleted], resets its time zone to UTC, clears its last-active timestamp, clears the avatar/photo URL, and removes that user's avatar object from the public avatar bucket. If avatar, profile, membership, or Auth cleanup fails, deletion stops and Settings directs the person to Support. The partner keeps access to shared memories and content as the current product describes. Exact retention schedules, backup expiry, verification, response timelines, and jurisdiction-specific rights require owner and counsel approval.

For a privacy or deletion request, use the configured contact on Support. Do not send passwords, payment-card numbers, invite tokens, or private relationship content.

Age, safety, and changes

Ours is not directed to children. Do not use it for emergency help, crisis response, abuse reporting, medical care, therapy, or a safety-critical decision. If you may be in immediate danger, contact local emergency services. The owner must set and publish the effective date and approved legal identity before launch.