Couples — Privacy Policy

Effective Date: September 7, 2026

1. WHO WE ARE, AND WHAT THIS POLICY COVERS

Couples is a private, two-person space for a couple: gentle vibrations called Pulses, chat, shared memories, time capsules and small activities you do together.

This policy explains what the Application collects, why, who else can see it, and what you can do about it. It covers the Couples mobile application and the services behind it. It does not cover anything you do outside the Application.

The Application is developed and operated by its independent developer, based in Finland, who is the data controller for the purposes of the EU General Data Protection Regulation (GDPR).

Contact: baladream.help@gmail.com

2. WHAT WE COLLECT

Information you give us when you create an account:

• Your email address, used to sign in, to confirm your account, and to reset your password.
• Your password, which is stored only as a cryptographic hash by our authentication provider. We never see it and cannot recover it.
• The name you choose to display to your partner.

Information created by using the Application:

• A pairing code derived from your account identifier, so a partner can find you.
• Your partner link — which account you are paired with.
• Your language preference and your current mood, if you set one.
• The time of your last Pulse and a reminder counter, used only for the gentle reminder described in section 7.
• A notification token for your device, issued by Firebase Cloud Messaging, so notifications can reach it.
• Simple counts of shared activity, described in section 8.

The content you create, described in section 5.

What we do not collect. No advertising identifiers. No analytics. No location. No contact list or address book. No record of how long you use the Application or when you open it. No browsing or device fingerprinting of any kind. The Application contains no advertisements and no third-party trackers.

One legacy item, stated plainly. Much earlier versions of the Application asked for a phone number. Current versions never do, and never read one, but accounts created back then may still have that value stored. Deleting your account deletes it along with everything else.

3. WHY WE USE IT, AND OUR LEGAL BASIS

Under the GDPR we must tell you why we process your data and on what legal basis.

• Account details, pairing, and everything needed to deliver the service — to provide the Application you asked for. Legal basis: performance of a contract, Art. 6(1)(b).

• The content you create together — to store it and show it to you and your partner. Legal basis: performance of a contract, Art. 6(1)(b); and, for anything intimate you choose to share, your explicit consent, Art. 9(2)(a).

• Notification token and delivery — to deliver Pulses and notifications you have opted into. Legal basis: performance of a contract, and your consent given through the operating system's notification permission.

• Access rules, rate limits, and abuse prevention — to keep one couple's data out of another's reach. Legal basis: our legitimate interest in the security of the service, Art. 6(1)(f).

We never process your data for advertising, profiling, or automated decision-making, because we do none of those things.

A note about intimate content. This is an application for couples, and what you write, record or photograph may be personal. You choose what to put in it. By putting it there you are asking us to store it and show it to the one person you are paired with — that, and only that, is what we use it for.

4. PAIRING WITH YOUR PARTNER

To connect with your partner, the Application uses a unique pairing code. We do not access, collect, or upload your phone's contact list or address book.

Pairing links exactly two accounts. Once paired, each of you can see the content described in section 5 — that is the entire point of the Application, and it is worth being explicit that your partner can see what you put there. Either of you can unlink at any time.

5. CONTENT YOU CREATE TOGETHER

Everything you create in the Application is stored so that you and your linked partner — and only the two of you — can see it. This includes:

• Chat messages, including photos and voice notes
• Reactions you add to a message
• Memories and Occasions, including photos and dates
• Time Capsules, including any image, video or audio you attach
• Together activities and challenges you add
• Reveal questions and the answers you write
• Your mood, and the private nickname you may set for your partner

We access your camera, photo library or microphone only at the moment you choose to attach something, and only for that purpose.

6. HOW YOUR CONTENT IS PROTECTED — AND ITS LIMITS

Your content is protected in transit by TLS encryption, encrypted at rest on our provider's servers, and restricted by database access rules so that no other user of the Application can read it.

To be clear and honest about what this does NOT mean: your content is not end-to-end encrypted. We hold the keys to the database, which means it is technically possible for us, or for our infrastructure provider, to access stored content. We do not do so except where strictly necessary to operate or repair the service, or where required by law.

We state this plainly rather than describing the Application as simply "encrypted", because that word is often understood to mean end-to-end, and here it does not.

If we ever become aware of a breach that puts your data at risk, we will notify the competent supervisory authority and, where the law requires it, you.

7. NOTIFICATIONS

We use notifications to deliver Pulses and to tell you when your partner has sent a message, saved a memory, added an activity, answered a reveal question, created or unlocked a Time Capsule, changed their mood, or when the two of you reach a shared milestone.

To deliver a chat notification, the message text is included in the notification payload so your device can display it. Reveal answers are never included in any notification.

The Application may also send a gentle reminder after a period of silence. This uses only the timestamp of the last Pulse — we do not monitor how long you use the Application, and we collect no analytics or advertising data of any kind.

You can turn notifications off at any time in your device settings. Pulses will stop arriving if you do; nothing else about your account changes.

8. MILESTONES

The Application keeps simple counts of shared activity — for example how many Pulses you have exchanged or memories you have saved — solely to celebrate milestones such as a hundredth Pulse or an anniversary.

These counts are visible only to the two of you. They are never used for analytics, never compared with other couples, and never shared with anyone.

9. DEVICE PERMISSIONS

The Application asks for these, and only when it needs them:

• Camera — to take a photo you are attaching.
• Photos and media — to pick a photo you are attaching, and to save one you have received.
• Microphone — to record a voice note.
• Notifications — to deliver Pulses and the alerts listed in section 7.
• Vibration — to play a Pulse. This one requires no permission prompt.

You can refuse or later revoke any of them in your device settings. The rest of the Application keeps working.

The Application does not use your device's backup service: its data is excluded from cloud backup and from device-to-device transfer, so a copy of your session and cached content does not travel off your phone that way.

10. WHO ELSE PROCESSES YOUR DATA

We rely on two providers to operate the Application:

• Supabase — account authentication, database and file storage
• Firebase Cloud Messaging (Google) — delivering notifications to your device

Both act as processors on our instructions and are bound by their own data-protection terms. Depending on where you live, this may mean your data is stored or processed in a country other than your own, including outside the European Economic Area. Where that happens, the transfer relies on the safeguards those providers offer, such as the European Commission's Standard Contractual Clauses.

We do not use advertising SDKs, analytics SDKs, or tracking of any kind. We do not sell your data, and we do not share it with anyone beyond the two providers above — except where we are legally compelled to.

11. HOW LONG WE KEEP IT, AND HOW TO DELETE IT

We keep your account and its content for as long as your account exists. We do not expire or archive it on a schedule; it is yours until you remove it.

Deleting individual items. You can delete individual messages and memories as you go, and you can unlink from your partner at any time without deleting your account.

Deleting everything. The Delete Account button in Settings removes your account and all data associated with it — messages, memories, capsules, activities, answers, milestones, stored files and pairing information — permanently, and without a waiting period.

If you cannot open the Application, email baladream.help@gmail.com from the address on the account and ask for deletion. We will complete it within 30 days and confirm when it is done.

After deletion, residual copies may remain briefly in our provider's routine backups before those are overwritten in the normal cycle. They are not accessible through the Application.

12. YOUR RIGHTS

If you are in the European Economic Area or the United Kingdom, you have the right to access your data, to correct it, to have it erased, to restrict or object to how we use it, to receive a copy in a portable form, and to withdraw consent at any time where our use rests on consent.

Most of these you can exercise yourself inside the Application. For anything else, email baladream.help@gmail.com. We will respond within 30 days, and we will not charge you or make the service worse for asking.

You also have the right to complain to your national data protection authority. In Finland, that is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto).

13. CHILDREN

The Application is intended for adults and is not directed at anyone under 18. We do not knowingly collect information from children. If you believe a child has created an account, email baladream.help@gmail.com and we will delete it.

14. CHANGES AND CONTACT

If this policy changes materially, the updated version will be published at this address and inside the Application, with a new effective date. Continuing to use the Application after a change means the updated policy applies to you.

For support, questions, or any request concerning your data:

baladream.help@gmail.com