Your story deserves care

Privacy & data.

Who can open your space?

Each account can belong to one couple space, with at most two members. The server checks your membership before returning shared data. Invitations expire after 48 hours and can be revoked.

Where is your story stored?

The file preview stores accounts and couple data in a private local file on the development computer. The Atlas-backed preview stores them in MongoDB Atlas. Neither preview is a launched public service, and automatic recovery is not configured or guaranteed. Do not keep your only copy of important memories here.

What is protected today?

Passwords use salted bcrypt hashes. Invitation tokens are hashed at rest. Session cookies are HTTP-only and same-site. A partner's unrevealed Daily Question answer is excluded from your API responses and downloads until you have both answered.

Account security and limitations

Production access requires email verification before creating or joining a couple space. Verification and password-reset links are single-use and expire; resetting a password invalidates existing customer sessions. Local development previews may skip email verification and cannot send account emails. This beta is not end-to-end encrypted: the server operator can access stored relationship content. Managed backup restore testing, account deletion and partner unlinking are not complete. Do not store sensitive or irreplaceable material here yet.

A copy you can keep

Download your shared memories, milestones, notes and plans from your account or Settings. The JSON file also includes your own Daily Question answers and answers already revealed to both partners. It excludes your partner's unrevealed answers, passwords, sessions and invitation tokens. Keep the downloaded file private; it is not encrypted. Cloud photo files are not bundled, and importing a story copy does not restore Daily Question answers.

On your phone

The installable app caches only a generic offline page, its stylesheet and app icons. Private API responses, photos and relationship pages are not put in its offline cache. Installation does not create a cloud backup.

Feature requests

Ideas and follow-up messages are shared with your partner and the site operator for product feedback. Other couples cannot see them. This is not live chat, and submissions are not automatically emailed or sent to a third-party chat service. Please leave passwords and sensitive relationship details out of your requests. Feedback threads are separate from your downloadable relationship story.

Account emails

Verification and password-reset emails are delivered through Resend. That provider receives the destination email address and the email message, including its short-lived account link. Your relationship story and passwords are not included. Request a new link if one expires, and never share these links with anyone.

Product measurement

We record signup, pairing and activation dates, plus a daily activity record when you visit the account or shared-space pages in the foreground. These records use internal account and couple identifiers, not the content of your memories, notes, photos, answers or feature requests. The private owner dashboard reports aggregate acquisition and retention metrics. No third-party analytics tracker receives these events. Older visits are not reconstructed.