Privacy Policy

1. In short

If you only read this section, you already know the essentials:

• There is no account. Couplift never asks for an email, a phone number, a username or a social login. You open the app and start.
• Sensitive content never leaves the device. Diagnosis answers, diary entries, pacts, progress, the names you type and any free text you write are stored only in your phone’s local storage.
• We do not sell data. We do not sell, rent, lease or trade personal data with advertisers, data brokers or any third party for marketing purposes.
• The purchase goes through the store. To process payment and recognise that you already bought the app, the App Store or Google Play — and our subscription infrastructure provider — process transaction data. See section 4.
• You erase it whenever you want. Uninstalling the app removes everything stored on the device. We keep no copy.

2. Who the controller is

The controller of the personal data processed by Couplift, under art. 4(7) of the EU General Data Protection Regulation (“GDPR”) and art. 5, VI of the Brazilian General Data Protection Law (Law 13.709/2018, “LGPD”), is:

• Legal name: {{RAZAO_SOCIAL}}
• Company registration: {{CNPJ}}
• Address: {{ENDERECO}}
• Email: {{EMAIL_CONTATO}}
• Data protection contact: {{EMAIL_ENCARREGADO}}

This policy covers the Couplift mobile app (iOS and Android) and the website couplift.app.

3. What stays on your device

Couplift is a local-first app: everything you produce while using it is written to the device’s own storage and is never transmitted to us or to any server under our control. That includes:

• your answers to the 6-pillar diagnosis and the result computed from them;
• the names you type (yours and your partner’s) and how long you have been together;
• your answers to the open questions during onboarding;
• diary entries, including any free text;
• pacts, the days-strong count and the history of how they went;
• the generated plan, cycles, completed steps, streaks and achievements;
• app preferences, such as language and reminder time.

We have no access to any of it. We cannot read your diary, recover it if you change phones, or restore it if you uninstall the app — because we never had a copy.

4. What goes through third parties

There are three situations — and only three — in which data leaves the device.

4.1. Purchase and purchase restoration

Couplift is sold as a one-time in-app purchase. Payment is processed by the Apple App Store or Google Play, depending on where you downloaded the app. We never receive, see or store card details.

To validate the purchase and recognise on any of your devices that lifetime access has been paid for, we use RevenueCat, Inc. as a processor. That operation involves: an anonymous identifier generated by the app, the purchase receipt issued by the store, the product identifier, the store country, the device model and the OS version. None of it identifies you by name, and no diagnosis or diary content is sent.

4.2. Crash reports (technical diagnostics)

When the app hits a serious error it may send a technical crash report so we can fix the problem. That report contains the stack trace, the app version, the device model and the OS version — not the contents of your screens, your diagnosis or your diary. Processing is carried out by Functional Software, Inc. (Sentry).

4.3. External links

The app opens links to this website (terms, privacy, support) and to the app stores. Once you follow a link, the destination site processes your data under its own policy.

4.4. What does not exist

To leave no doubt about what Couplift does not do:

• no ads and no ad-network SDK;
• no cross-app tracking and no use of the IDFA;
• no pixels, third-party cookies or fingerprinting inside the app;
• no sale or sharing of personal data for marketing purposes;
• no product-analytics provider is wired up in this version — the events exist in the code, but the default sink sends nothing off the device in production.

5. Processing table

A summary of processing operations, with purpose and legal basis (GDPR art. 6; LGPD art. 7).

6. Notifications

Couplift’s daily reminder is a local notification: the device itself schedules and fires it, at the time you chose. We do not use remote push, no notification token is sent to us, and no server decides when you get the reminder.

You can turn notifications off at any time in the app or in your system settings. The program works without them.

7. Children and teenagers

Couplift is about adult romantic relationships and is rated 12+ in the app stores. It is not directed at children, does not knowingly collect data from anyone under 13, and does not profile any user.

Because the app collects no identifying data, we have no technical means of determining a user’s age. If a parent or guardian believes a minor in their care used the app and wants guidance, write to {{EMAIL_CONTATO}} — in practice, uninstalling the app already erases everything that was stored.

8. Retention and deletion

• Data on the device: kept for as long as the app is installed. You can wipe it inside the app (Settings → Delete my data) or by uninstalling Couplift.
• Purchase record: Apple, Google and RevenueCat retain the transaction record for the tax and accounting periods that apply to them. That record is what lets you restore your purchase on a new device; we cannot delete it.
• Crash reports: when enabled, retained for up to 90 days and then discarded.
• Support emails: kept for up to 24 months as a support history.

Step-by-step instructions are on the Data deletion page.

9. Your rights

The GDPR (arts. 15–22) and the LGPD (art. 18) give you, among others, the rights of access, rectification, erasure, restriction, portability, objection, and the right not to be subject to solely automated decisions.

There is an honest nuance here: because the content you produce never reaches us, you exercise access, rectification and erasure of that content yourself, inside the app, without needing us. The data is on your device and under your direct control.

For data that does pass through third parties (purchase and crash reports), send your request to {{EMAIL_ENCARREGADO}}. We answer within 15 days. You may also lodge a complaint with your national supervisory authority in the EEA/UK, or with the Brazilian data protection authority (ANPD).

10. International transfers

Apple, Google, RevenueCat and Sentry are US-based companies and may process data outside Brazil and the European Economic Area. Those transfers rely on the standard contractual clauses adopted by each provider and on art. 33 of the LGPD.

11. Security

Couplift’s design is itself the main security measure: data that is never collected cannot leak from a server of ours. On the device, data lives in the app’s private storage, protected by iOS and Android app sandboxing.

Physical security of the device is yours: we recommend keeping a screen lock and device encryption enabled. If someone else has unlocked access to your phone, they have access to what is in the app.

12. Changes to this policy

If this policy changes materially — for example, if a future version starts sending some new piece of data — we update the date at the top of this page and highlight the change in the app’s release notice before it takes effect. Previous versions can be requested by email.

13. Contact

Questions, data subject requests or anything else about this policy: {{EMAIL_CONTATO}}.