Privacy Policy

1. Information We Collect

We collect information that you provide directly to us when you create an account, configure your shared space, and use the interactive features of Both.

• Account & Profile Information: When you register for an account, we collect your email address, authentication credentials, and display name.
• User-Generated Content: To provide Both’s core features—including shared daily prompts, archive logs, and milestone tracking—we store the text entries, milestone notes, media, and responses you and your partner share within your private shared space.
• Subscription & Transaction Data: In-app purchases and monthly subscriptions are processed securely through the Google Play Store or Apple App Store. The price shown in the store listing at the time of purchase is the price you pay. We receive transaction status, subscription validation tokens, and renewal dates, but we do not store your raw credit card numbers or financial account details.
• Device & Usage Data: We collect standard technical logs, device identifiers, operating system versions, and app diagnostic data to monitor performance, fix crashes, and ensure app security.

2. How We Use Your Information

We use the information we collect to operate, maintain, and provide you with the features and functionality of Both, specifically to:

• Create and secure your user account and authenticate your connection with your partner.
• Sync daily prompts, milestone archives, and shared entries in real-time between linked partner accounts.
• Process subscription payments and manage access to premium features.
• Send critical account notices, security alerts, and customer support communications.
• Monitor app usage trends and technical performance to improve user experience.

3. Data Sharing and Third-Party Disclosure

We respect your privacy. We do not sell, trade, or rent your personal information or shared content to third parties.

We share information only with trusted third-party service providers who assist us in operating our app, conducting our business, or serving our users, subject to strict confidentiality obligations:

• Cloud Hosting & Database Infrastructure: Secure backend database and hosting providers that store encrypted user records and shared journal entries.
• Authentication & Notification Services: Secure API services used to deliver push notifications and manage user sign-ins.
• App Stores & Payment Processors: Google Play Billing and Apple App Store for processing subscription transactions.
• Legal Compliance: When required by law, subpoena, or court order, or to protect the rights, property, or safety of Obscura LLC, Both users, or the public.

4. Data Security and Retention

Security Measures: We implement industry-standard technical and organizational security measures—including encryption of data in transit via HTTPS/TLS and encryption at rest—to protect your personal information and shared archives from unauthorized access, alteration, disclosure, or destruction.

Data Retention: We retain your account information, shared entries, and milestone logs for as long as your account remains active. If you delete your account, your personal data and associated shared content will be permanently purged from our active databases in accordance with our data deletion schedule.

5. Your Privacy Rights and Choices

• Access and Update: You can view, edit, or update your account profile details directly within the Both app settings.
• Data Deletion: You have the right to request the complete deletion of your account and all associated shared journal entries. You can initiate account deletion directly within the app settings or by contacting Admin@obscuranyc.org.
• Subscription Management: You can manage or cancel your Both subscription at any time through your Google Play Store or Apple App Store account settings.

6. Children’s Privacy

Both is designed for adult couples and is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we discover that a user is under 18, we will take immediate steps to terminate the account and delete their personal data.

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we post changes, we will revise the “Effective Date” at the top of this policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

8. Backups and account deletion

Deleting your account removes your account and contributions from active Both storage, but does not immediately erase copies in earlier database backups. Lovable Cloud documents one automatic database backup per day, with up to roughly 14 days of daily backups. Older snapshots normally age out of that rolling window. This is the provider’s documented retention window, not a guaranteed deadline measured from your deletion; Both has not verified the current backup inventory or deletion-specific purge timing.

These database backups contain stored records, but do not include files in photo storage. Account deletion removes your uploaded photos separately from active photo storage. The database backup window does not establish how long any provider-internal file recovery copies remain; that timing has not been confirmed.

Both’ policy is to use retained backups only for disaster recovery, not to return deleted content to everyday use or reactivate a deleted account. Before reopening Both after a restore, the operator must reapply completed account deletions to any restored records and verify that deleted accounts and contributions are unavailable. This is a required manual recovery procedure, not an automatic safeguard currently implemented in the app.

Both does not promise immediate erasure of individual records inside an existing snapshot. Provider-specific expiry and purge behavior, and the recovery procedure, must be verified before store release. For questions about your deletion or backup copies, contact Admin@obscuranyc.org.

9. Contact Us

If you have questions, comments, or concerns about this Privacy Policy or our data practices, please contact:

• Developer: Obscura LLC
• Email: Admin@obscuranyc.org