Privacy Policy

1. Who we are

Intimacy is a private app for couples, published and operated by The Seidl Family LLC (“we”, “us”, “our”). This policy explains what information the Intimacy app and the website at ourintimacy.app handle, and why. For the purposes of data protection laws such as the GDPR, The Seidl Family LLC is the controller of the personal information described here.

You can reach us about anything in this policy at hello@ourintimacy.app.

2. What we collect

Account information

• Email address and password. You provide these when you create an account. Your password is stored only in hashed form by our authentication provider; we never see it in plain text.
• User ID. A random identifier assigned to your account.
• Session tokens. Signing in creates session tokens that keep you signed in on your phone.

Information our server can see

To store and sync your encrypted space, our server necessarily sees some technical information. It does not include the contents of anything you share. Specifically, it can see:

• that two accounts are paired with each other;
• which account uploaded or created an item, and when;
• the size of each stored file;
• which question IDs each partner has answered in Ask (but never the answers themselves);
• deletion records (item IDs and times), so your other devices know to remove items that were deleted.

Technical logs

Our authentication, database and storage provider, and our website host, may log IP addresses and request details (such as the time of a request and the type of device or browser) for security and to keep the service running.

When you contact us

If you email us, we receive your email address and whatever you choose to write, and use it to respond to you.

The website

This website uses no cookies, no analytics and no trackers. Our host may log IP addresses for security and operations, as described below.

3. What we can't see: your encrypted content

Before anything private leaves your phone, the app encrypts it with a key that only you and your partner hold, using XChaCha20-Poly1305 (via the libsodium library). We never have this key. That covers:

• all photos and videos, and their thumbnails;
• photo details: the date taken, location coordinates and place name, dimensions, and whether an item is marked sensitive;
• moments, including their titles, notes and dates;
• ideas;
• wishes;
• your answers to questions in Ask;
• display names.

We cannot read, view, scan or analyze any of this, and we could not hand it to anyone in readable form, because we don't have the means to decrypt it.

Your recovery phrase and key backup

When you set up Intimacy, you are shown a 24-word recovery phrase. It never leaves your phone unless you write it down. (On a phone where you are signed in, you can view it again in Settings.) So that you can restore your space on a new phone, we store an encrypted backup of your couple key. That backup is encrypted with a key derived from your recovery phrase (using Argon2id), so it is useless without the phrase.

4. What stays on your phone

• Device keys are kept in your phone's secure key storage (Android Keystore).
• Biometric sign-in. If you turn it on, your password is stored encrypted on your phone and can be unlocked only by your phone's own fingerprint or face check. Your biometric data never reaches the app or us; the check is handled entirely by your phone.
• Welcome screen. The email address and display name of whoever signed in last are kept on the phone to personalize the welcome screen.

Photo library

With your permission, the app can read your photo library so you can choose photos and videos to upload and, if you choose, remove the originals from your camera roll once they are safely encrypted in the vault. Nothing is uploaded unless you select it.

Camera

The camera is used only when you take a photo or video inside the app. It goes straight into your encrypted vault and is never saved to your camera roll.

Place names

When you upload a photo that has location data, the app may ask your phone's built-in geocoding service to turn the coordinates into a place name, such as “Asheville, North Carolina”. On Android this service is provided by Google, so that request includes the coordinates and is governed by Google's privacy policy. The resulting place name is then encrypted along with the rest of the photo details. If you would rather avoid this, don't upload photos that contain location data.

5. How we use information

We use the limited information we hold only to:

• create and secure your account and keep you signed in;
• pair you with your partner and store and sync your encrypted space between your devices;
• restore your space on a new phone when you use your recovery phrase;
• keep the service secure, prevent abuse, and fix problems;
• respond to your messages and requests;
• act on safety reports and meet our legal obligations.

We don't use your information for advertising, profiling, or selling, and we don't use any analytics or tracking tools.

Legal bases (EEA and UK)

If you are in the European Economic Area or the United Kingdom, we rely on: performance of a contract to provide the service you sign up for; our legitimate interests in keeping the service secure and preventing abuse; compliance with legal obligations, such as responding to lawful requests and reporting child exploitation; and your consent where we ask for it, such as phone permissions, which you can withdraw at any time in your phone's settings.

6. Service providers

We use a small number of providers who process information on our behalf:

The app contains no third-party advertising, analytics or tracking SDKs, and no other third-party code that collects your data.

7. Sharing

We do not sell your personal information, and we do not share it for advertising. We share information only:

• with the service providers above, so they can run the service for us;
• with your partner, in the sense that the content you add to your shared space is visible to them (that is the point of the app);
• when required by law, or to protect the safety of people, including reporting child exploitation to the National Center for Missing & Exploited Children (NCMEC) and relevant authorities;
• as part of a merger, acquisition or sale of assets, in which case this policy would continue to apply to your information.

Because your content is end-to-end encrypted, anything we are ever required to provide can include only the account information and metadata we hold, not your photos or words.

8. Retention and deletion

• Deleting an item deletes it for both partners, and its encrypted file is deleted from storage.
• Unpairing permanently deletes all shared content for both partners.
• Deleting your account deletes your account information and, if you are paired, unpairs you, which permanently deletes all shared content for both of you.
• We keep account information for as long as your account exists.
• Minimal server logs kept by our providers may be retained for up to 90 days for security, and backups may take up to 30 days to roll off.

See Delete your account for step-by-step instructions, including how to ask us by email if you can't access the app.

9. Security

• End-to-end encryption with XChaCha20-Poly1305 (libsodium), using a key only you and your partner hold.
• Your key backup is protected by a key derived from your recovery phrase with Argon2id.
• Device keys are kept in Android Keystore.
• Data is sent over encrypted connections, and access controls on our database limit each account to its own couple's records.
• In the app, screenshots and screen recording are blocked on Android, and sensitive items re-blur when you leave the app.

No system is perfectly secure, but we designed Intimacy so that even in the worst case, what is stored on our servers is unreadable without your keys.

10. Your rights

Wherever you live, you can ask us to:

• access the personal information we hold about you;
• delete your personal information (or do it yourself in the app);
• correct information that is wrong.

EEA and UK

You also have the right to data portability, to object to or ask us to restrict certain processing, and to withdraw consent at any time. You can complain to your local data protection authority (in the UK, the Information Commissioner's Office), though we'd appreciate the chance to help first.

California and other US states

Residents of California and other US states with privacy laws have the right to know what personal information we collect, use and disclose; to delete it; to correct it; and to opt out of the sale or sharing of personal information or its use for targeted advertising. We do not sell or share personal information, and we do not use it for targeted advertising, so there is nothing to opt out of. We use account login information only to provide the service. We will not discriminate against you for exercising any of these rights. In the past 12 months, the categories of personal information we have collected are identifiers (such as email address, user ID and IP address) and limited technical information, from you and your device, for the purposes described above.

How to make a request

Email hello@ourintimacy.app from the email address on your account. We may need to verify your request before acting on it. You may use an authorized agent where the law allows. We aim to respond within 30 days, and always within the time the law requires. If we decline a request, we'll explain why, and where applicable you can appeal by replying to our response.

Keep in mind that we can't access or export your encrypted content for you, because we can't read it. You can view and save your own content in the app.

11. Children

Intimacy is only for adults 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, please tell us at hello@ourintimacy.app and we will delete it. See our Child Safety Standards.

12. International transfers

We are based in the United States, and our providers store data in the United States. If you use Intimacy from outside the US, your information will be transferred to and processed in the US. Where required, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses offered by our providers. Your encrypted content stays encrypted wherever it is stored.

13. Changes to this policy

If we change this policy, we'll update the effective date above. If a change is significant, we'll let you know in the app or by email before it takes effect.

14. Contact

The Seidl Family LLC
Email: hello@ourintimacy.app