Privacy Policy

HalfYours · Last updated: 4 August 2026

HalfYours is a private ritual for two people. This policy explains, without evasion, what the app stores, where it lives, who can see it, and how to make it disappear.

1. Who is responsible

The data controller is HalfYours (New Zealand). Questions, requests and complaints: waiheke.nz@yahoo.com.

2. What we collect

Only what the app needs to work. There is no advertising, no tracking, no third-party analytics SDK, and no data broker of any kind. The only usage data we collect is described below, it is minimal, and it never includes what you write.

Data	Why
Your first name and your partner's first name	To address you, and so the app can say who filed what
Relationship start date	The settlement countdown
Daily missions filed, weekly challenges, vault draws	The shared record — the constellation and the estate
Flash question answers	The core ritual. These can be personal or intimate. They are stored so your partner can read them after answering.
Sealed letters (Sealed Evidence)	Stored until their opening condition is met
Couple code, device identifier, anonymous account identifier	To link two phones to one shared file
Push notification token	To notify you when your partner has filed. Only if you allow notifications.
Anonymous usage events	Six named events only (app opened, day filed, question asked, question answered, reveal viewed, vault sealed), with your couple code, the date and the app version. Never the content of anything you write. Used solely to understand whether the app works.
Crash reports	If the app crashes, a technical report (error message and stack trace — never your answers or letters) is stored so we can fix the bug.
Email address (optional)	Only if you choose to secure your account for recovery. We never send marketing email.

What we never collect: location, contacts, photos, microphone, health data, advertising identifiers, browsing behaviour, or anything about what you do outside HalfYours.

3. Where it is stored

On Google Firebase (Firestore, Authentication, Cloud Functions), hosted in the australia-southeast1 region (Sydney, Australia). Google acts as our processor and does not use your data for its own purposes. Data may be processed in other countries where Google operates infrastructure; where you are in the EEA or the UK, such transfers rely on the European Commission's Standard Contractual Clauses.

4. Who can see it

Your partner. By design. The record is shared: the app is built so that both of you see the same file. Anything you enter into the shared record is visible to them.
Nobody else among users. Security rules restrict every couple's file to that couple's two accounts.

An honest disclosure. As the operator of the database, we hold the technical ability to access stored content, including flash question answers and sealed letters. We do not read them, and we access user content only where strictly necessary to fix a fault you have reported, to comply with a legal obligation, or to protect someone's safety. We tell you this because a privacy policy that quietly omits it would be dishonest — not because it is something we do.

5. Legal bases (EEA / UK)

Performance of a contract — the shared record, the rituals, the couple link: the app cannot function without them.
Consent — push notifications, and linking an email address. Both are optional and can be withdrawn at any time.
Legitimate interests — keeping the service secure and preventing abuse.

Some answers you write may reveal information about your relationship or your intimate life. We do not ask for such information, we do not analyse it, and we do not use it for any purpose beyond showing it to your partner within the app. You decide what you write.

6. How long we keep it

For as long as your account exists. Delete your account and the shared record is erased — see below. Backups and logs are cleared on a rolling basis within 90 days.

7. Deleting everything

In the app: Settings → Danger Zone → Delete my account. This erases the couple's file and all of its contents (daily record, flash answers, sealed letters, vault draws, device tokens), the account itself, and everything stored on the phone.

The record belongs to both of you and cannot be divided. Deleting it removes it for your partner as well. There is no way to split a shared conversation in half, and we will not pretend otherwise. The app warns you twice before proceeding. If you would rather keep the record and simply stop, delete the app instead — nothing further will be collected.

8. Your rights

You may request access to your data, correction, deletion, a portable copy, restriction, or object to processing. Write to waiheke.nz@yahoo.com and we will respond within 30 days. If you are in the EEA or the UK you may complain to your local supervisory authority; in New Zealand, to the Office of the Privacy Commissioner.

9. Age

HalfYours contains suggestive adult content and is rated accordingly. It is not intended for anyone under 17, and we do not knowingly collect data from children. If you believe a minor is using the app, contact us and we will delete the account.

10. Security

Traffic is encrypted in transit (TLS) and at rest by our provider. Access to each couple's file is enforced by server-side security rules. No system is perfect; if a breach ever affects your data, we will notify you and the relevant authority as required by law.

11. Changes

If this policy changes materially, we will tell you in the app before the change takes effect. The date at the top always reflects the current version.