What you record here is as private as it gets, so you are owed a straight answer instead of a reassuring slogan. This is exactly what happens to your entries.
Each entry is saved on your phone and also sent to the server. Without that copy, a lost phone would take it along, and it could never appear on a second device. The server keeps it without any name, email address or phone number attached.
Everything exchanged between you and your partner is encrypted. Our relay does nothing more than help your two devices locate each other, and we cannot read anything that goes through it. Entries themselves arrive at the server depersonalized.
You never give us an email, a phone number or a password. The app creates the account on its first launch, and that account contains only a technical marker. We keep no database of users where someone could look you up, and there is no password that anyone could reset.
The code you use to open the app, together with the TOTP secret behind it, is created on the device itself and kept in its secure keychain. It is not sent anywhere, ever.
Your entries: the date, how long it lasted, the tags and a note if you added one. Nothing else goes with them (no name, email address, phone number or date of birth), just a technical marker of the device. We also get anonymous crash reports with the device model, the OS and app versions and a technical trace of the error.
The entries on your phone are wiped. The server copy, which carries nothing that identifies you, stays: it is linked to no person, so a deletion request would have nothing to point to. The app has no separate button for clearing your data from the server.
Anyone who picks it up hits the passcode screen and sees none of your history. On a new phone, your entries are restored from the server copy using your pairing code rather than an email address or phone number, since we have neither.
Our privacy policy covers the same ground in legal terms.
Open the privacy policy