Privacy Policy

1. Data controller

The data controller responsible for your personal data is:

For any privacy question or to exercise your rights, contact us at [email protected] or [email protected].

2. The data we process

Depending on how you use the Service, we process:

• Account data: email address and, if you register with a password, a securely hashed password. If you use Sign in with Google, we receive the basic profile information you authorise on Google's consent screen (name, email address, profile picture). If you use Sign in with Apple, Apple provides your authorised name and email address, which may be a private relay address.
• Profile data: your name, an optional profile photo, date of birth, relationship (dating) start date, your chosen relationship focus, and your device time zone.
• Couple data: the link between you and your partner and the pairing codes used to connect your accounts.
• Conversations: your messages in the private AI chat, in the shared couple chat, and during onboarding and couple setup, together with the AI's responses.
• AI memory: summaries, facts, and characteristics that our AI derives from your conversations and from the activities you do together in the app (such as Moments, games, and Daily Catch-Up) to provide continuity, plus any corrections you make to them.
• Quiz & games data: your relationship-quiz results (such as love, conflict, and safety styles) and your answers and results in in-app couples games. These are also used to personalise the ideas, questions, and suggestions you and your partner receive.
• Moments: photos, reflections, and other content you choose to save in your shared couple space. If you choose to add a location, we store the location coordinates and place label with that Moment. You can remove or change its location using the in-app controls.
• Optional location: with your permission, we use your foreground device location or available photo location information to help you place Moments on a map. For nearby activity suggestions, we send only your approximate area (city, region, and country) to our backend and AI service. You can decline location permission and continue using the other features; we do not collect your location in the background.
• Feedback data: bug reports and feedback you submit, including any screenshots you choose to attach, the email address linked to your account, and the app version, device manufacturer and model, and operating system version of the device you sent it from.
• Notifications: if you allow notifications, an Expo push token linked to your account and notification payloads used to deliver app updates and reminders. You can disable notifications in your device settings.
• Technical & diagnostic data: limited app diagnostic logs, security and rate-limiting records, app version and build, platform, device manufacturer and model, operating system version, and activity records used to calculate streaks and insights. We do not collect your device's name or any hardware or advertising identifier.

3. Sensitive information and explicit consent

CoupleGoAI is about relationships. When you chat with the AI or play couples games, you may choose to share sensitive information — for example about your relationship, intimacy, sexual life, or emotional wellbeing. Under the GDPR this can be "special category" data.

We process this information only where you have given your explicit consent, and solely to provide the features you are using. Right before your first AI request, the app shows a short notice that names Google Gemini and the information sent, and asks you to choose Allow or Not now. Choosing Not now, or closing the notice, leaves AI features off while the rest of the app keeps working, and you can allow them later. Your choice is stored with your account on our servers, applies on every device you sign in on, and is enforced by our backend; it is not granted by merely acknowledging this policy or typing a message. Besides your chat messages, profile and quiz answers, AI memory, and approximate area, the AI may receive what you write in shared activities (such as Moment captions and written answers in shared game rounds) and a short summary of your couple's recent shared activity. Your own text is sent only while you have AI data sharing on. If the notice changes to cover new information, the app asks you again. You can turn it off under Profile → Settings → AI data sharing. Turning it off stops your content from being sent to the AI on any device, including in your partner's requests, and turns off Daily Catch-Up AI memory for your account; it does not recall data already sent or delete data stored in your account. You are never required to share sensitive information, and you can delete your conversations and account at any time. Please do not share information about other people without their knowledge. CoupleGoAI is not a medical or crisis service (see Section 4).

4. How our AI works, and its limits

The AI features are powered by Google's Gemini models, accessed through our own secure gateway hosted in the European Union (Google Cloud, Belgium). To generate a reply, the content of your relevant conversation is sent to this AI service, processed, and the response is returned to you.

• We do not use your personal data or conversations to train AI models, and our AI provider does not use your content sent through the Service to train its models.
• AI responses are generated automatically and can be inaccurate, incomplete, or unsuitable for your situation. Use your own judgement and do not rely on them as fact.
• CoupleGoAI is not therapy, medical care, or professional counselling, and does not provide medical, psychological, or legal advice. If you are in crisis or may be at risk, contact your local emergency services or a professional helpline.

5. Why we process your data and our legal bases

We process personal data on the following GDPR legal bases:

• Performance of a contract (Art. 6(1)(b)): to create and secure your account, connect you with your partner, and provide the AI chat, games, insights, and other features you request.
• Explicit consent (Art. 6(1)(a) and Art. 9(2)(a)): to process any sensitive information you choose to share in conversations and games. You may withdraw consent at any time by deleting the relevant content or your account.
• Legitimate interests (Art. 6(1)(f)): to keep the Service secure, prevent abuse and fraud, run rate limiting, fix bugs, and improve reliability, balanced against your rights.
• Legal obligation (Art. 6(1)(c)): to comply with applicable law.

6. Couple linking and shared content

CoupleGoAI has a private space and a shared space. Your private AI chat and personal profile are yours. When you link with a partner and use the shared couple chator play games together, that shared content is visible to both partners in the couple. Shared AI memory is derived from the couple's shared interactions. If you disconnect from a partner, shared Moments become unavailable and their photos and thumbnails are queued for deletion. Shared AI memory is cleared. To erase your remaining account data, use account deletion (Section 9).

Your private quiz answers and the likes and dislikes you mention in your private AI chat may shape the ideas and questions your couple receives and how the coach approaches you both. This uses only general categories and levels: your partner is never shown your answers or your private chat, and that text is never sent to the AI in the shared space.

7. Who we share data with (processors)

We do not sell your personal data and we do not use it for advertising. We share data only with the service providers that help us run CoupleGoAI, acting as our processors under data-processing agreements:

• Supabase — database, authentication, file storage, and backend functions. Your primary data is hosted in the EU (Ireland).
• Google (Google Cloud / Gemini) — AI processing via our EU-hosted gateway, and Sign in with Google authentication.
• Expo — delivery of optional push notifications, including push tokens and notification payloads, through Apple and Google notification services.
• Zoho (ZeptoMail) — sending transactional emails such as account confirmation and password reset.
• Apple and Google Play — distributing the app and processing app installs; Apple also provides Sign in with Apple authentication.

We may also disclose data where required by law, court order, or a valid government request, or to establish, exercise, or defend legal claims.

8. International transfers

We host your primary data and run AI processing within the EU/EEA. Some providers (for example Google and Zoho) are global organisations and may process limited data outside the EEA. Where that happens, transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.

9. How long we keep your data, and deletion

We keep your personal data for as long as your account exists. When account deletion succeeds, your account and database records are removed from active systems, including your profile, conversations, AI memory, quiz and game data, feedback, device logs, and shared Moments (captions, reactions, reflections, and location pins). Shared Moments become unavailable immediately. Their photos and thumbnails are queued for deletion, with retries every five minutes if needed. There is no intentional additional retention of this content in active systems. Isolated database backups may contain earlier copies for up to 30 days before rolling expiry; they are not used to operate the app. If a backup is restored, deletion requests must be reapplied before service resumes. If deletion fails or remains incomplete, contact [email protected]. Ordinary device logs expire after 30 days and rate-limit records after 48 hours.

You can delete your account at any time in the app under Profile → Delete account, or without installing the app at couplegoai.com/delete-account.

10. Security

We take appropriate technical and organisational measures to protect your data, including:

• Encryption of data in transit (HTTPS/TLS).
• Encryption of your chat messages at rest using AES-256-GCM. Because the AI must be able to read your messages to reply, this is server-side encryption managed by us, not end-to-end encryption — CoupleGoAI can technically access message content to provide the Service.
• Access controls and row-level security so that users can only access their own data and the content they share within their couple.
• Authentication tokens stored in your device's secure storage.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• rectify inaccurate or incomplete data;
• erase your data ("right to be forgotten");
• restrict or object to certain processing;
• data portability — you can export your data in the app under Profile → Export;
• withdraw consent at any time, without affecting processing already carried out;
• lodge a complaint with a supervisory authority.

To exercise these rights, use the in-app controls or contact us at [email protected]. You also have the right to complain to the Danish Data Protection Agency (Datatilsynet), datatilsynet.dk.

12. Children

CoupleGoAI is intended only for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we learn that we have done so, we will delete the account and the associated data.

13. Cookies

We do not use advertising or tracking cookies. Our website uses only any cookies that are strictly necessary for it to function, and the mobile app does not use cookies to track you. To keep you signed in, the app stores an authentication token in your device's secure storage.

14. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version here with a new "Last updated" date and, for significant changes, notify you in the app or by email.

15. Contact us