CloserDays Privacy Policy

What you can do without an account

You can set a reunion date, see the countdown and use the widgets without signing in. That information stays on your device (and in the shared app group used by the widgets) until you choose to pair with a partner.

An account is created only when you sign in with Apple or Google, which is needed to invite or join a partner and to sync moments between two phones.

Information we collect when you sign in and pair

Account. When you sign in with Apple or Google we receive a stable account identifier, the email address attached to that account (Apple lets you hide it behind a private relay address) and, if you allow it, your name. We never see your Apple or Google password. Google is used for sign-in only, and only if you choose it.

Profile. A display name, an optional nickname, an optional profile photo, and a setting controlling whether note text appears in your partner's notifications.

Pairing. Your couple space, its members, and the invite codes you create (a six-character code that expires after 48 hours and can be used once). Optional details such as an anniversary (“together since”) date and whether you are long distance.

Content you create. Reunion plans (title, city, date, time zone), moments (photos, notes of up to 500 characters, a mood, or a “thinking of you”), reactions to your partner's moments, and which moments you saved. Content is visible only to you and the one partner in your space.

Your local time. Your phone's time zone setting (for example “Europe/London”), so your partner can see what time it is for you. It is a time zone, not your location, and it is shared only with your partner. You can turn it off in Settings → Privacy, which removes it from our servers.

Photos. Photos are resized and re-encoded on your phone before upload, which removes camera and location (GPS) metadata. They are stored in a private storage bucket scoped to your couple and served only to the two of you through authenticated requests. The app only reads the specific photos you pick; it does not scan your photo library.

Notifications. If you allow notifications, we store your device's push token so your partner's moments can reach you. By default a notification says, for example, “Theo sent you a photo” and does not include note text; you can turn on content previews in Settings. Reunion reminders (a week before, the day before, and on the day) are scheduled locally on your phone.

Purchases. Payment is handled by Apple. Our subscription partner RevenueCat tells our server whether your CloserDays Pro entitlement is active, which product you bought, the store, the renewal date and whether it will renew. We store that status so Pro can be shared with your partner. We never receive your card or payment details.

Usage analytics. The app sends a short, fixed list of product events such as “onboarding completed”, “moment sent (photo)” or “paywall viewed”, together with a random install identifier, the app version, your device type and a timestamp. They never contain moment text, photos, names, locations or your partner's identity. Events are stored in our own database and in PostHog, a product-analytics service, under that random identifier; we link it to your account ID only after you sign in. We turn off PostHog's IP-based location lookup and do not use its screen recording, session replay or automatic event capture. You can switch all of this off at any time in Settings → Privacy, which also discards anything still queued on your device.

Support. If you email us, we receive your email address and whatever you include in the message.

What we do not collect

CloserDays does not collect your location, contacts, calendar, health data, or advertising identifiers. It contains no advertising SDKs, does not track you across other companies' apps or websites, and does not sell personal information. The only analytics tool it uses is PostHog, configured as described above.

How your data is used

We use the information above only to run CloserDays: to pair two accounts, sync and deliver moments and reunion plans between the two of you, render widgets, send notifications you asked for, honour your subscription for both partners, apply your plan's limits, improve the app using aggregate usage, prevent abuse, and answer support requests.

We do not use your content or identifiers for advertising, and we do not train artificial-intelligence models on your content.

Who else processes your data

Apple provides Sign in with Apple, in-app purchases and push notification delivery under Apple's own terms and privacy policy.

Supabase hosts our database, authentication and private file storage. Access is enforced per row and per file so that only the two members of a space can read its data, and all traffic uses HTTPS.

Google provides Google Sign-In, only if you choose it, under Google's own terms and privacy policy. Google learns that you signed in to CloserDays; it does not receive your content.

RevenueCat processes subscription status for purchase validation and restoration. It receives your purchase history and an app user identifier, not your moments.

PostHog (United States) stores the usage events described above, unless you turn analytics off. It never receives your moments, photos, names or location.

Each provider acts as a service provider to Amcle. Story images you export are shared by you, through the iOS share sheet, only when you choose to share them.

Our infrastructure providers operate data centres that may be located outside the country you live in, including in the United States.

How long we keep it

Your content is kept for as long as your couple space and account exist. Expired or used invite codes stop working automatically. Push tokens are replaced as your device re-registers.

Unlinking (Settings → Unlink) ends the space for both partners immediately and permanently deletes its moments, photos and reunion plans. Each person keeps their own account and can pair again later.

Deleting your account (Settings → Delete my account) unlinks your partner, deletes the shared moments and photos, removes your profile photo, device tokens and subscription record, disconnects your account from the analytics events it generated and resets the analytics identity on your device, revokes your Sign in with Apple connection, and then deletes the account itself. If you signed in with Google, you can additionally remove CloserDays from your Google Account's third-party access list. The in-app steps are described on the account deletion page.

Apple keeps its own App Store purchase records. RevenueCat may retain purchase records needed to restore purchases and for accounting and fraud prevention. Copies in encrypted infrastructure backups are removed as those backups age out.

Your choices and rights

You can edit or delete any moment you sent (it disappears for both of you), change your profile, turn notification previews or analytics off, unlink, and delete your account, all from inside the app without contacting us.

Depending on where you live (for example Canada under PIPEDA, the European Economic Area and the United Kingdom under the GDPR, or California), you may also have rights to access, correct, export or delete personal information, or to object to certain processing. To exercise them, email us. We will verify that the request comes from the account holder before acting on it.

Children

CloserDays is intended for adults and is not directed to children under 13 (or the higher minimum age that applies where you live). If you believe a child has created an account, contact us and we will delete it.

Security

Data is encrypted in transit. Database rows and stored photos are protected by access rules that are checked on every request, so a signed-in user can only reach their own space. No system is perfectly secure, and the privacy of a shared space also depends on the two people in it: anyone with access to your unlocked phone can see what is on it.

This website

The CloserDays website is a static site hosted on Vercel. It does not set tracking cookies and does not run third-party analytics. Vercel may keep standard, short-lived server logs (such as IP address and user agent) to operate the service. Invite links (/i/code) show the invite code in the page so you can enter it by hand; they are not indexed by search engines.

Changes and contact

If our practices change, we will update this page and its effective date, and we will tell you in the app for material changes.

Questions go to us by email or the support page. Please also read the Terms of Use.

Amcle IT Solutions Inc, Toronto, Ontario, Canada.