Privacy Policy
This policy covers the website blushnote.app (Part A) and the iPhone app "Blushnote" with its widgets and notification extension ("the App", Part B), both published by Eduard Bruch. Blushnote is an app for two people in a relationship: you pair your iPhone with your partner's, answer one question a day, send each other notes and photos that appear on the other's lock and home screens, see how far apart you are, and keep a shared journal.
Because the whole point is sharing with one other person, most of what you create in the App is stored on our server so your partner's iPhone can show it. This policy explains exactly what that is, who can see it, and how to remove it.
In short: no ads, no tracking across apps or websites, no third-party analytics or advertising SDKs, no data sold. Your partner sees what you share with them. Your exact position never leaves your iPhone — the App sends a position rounded to about 100 m, and your partner only ever gets the distance. You can export everything and delete your account in the App at any time.
1. Data controller
Eduard Bruch
Kleinfeld 28c, 21149 Hamburg, Germany
Email: support@blushnote.app
No data protection officer has been appointed, as there is no legal obligation to do so. You are not obliged to provide personal data; without an account, the App cannot be used. No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.
Part A: The website blushnote.app
2. Hosting
This website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. When you visit, technically necessary data is processed (IP address, date and time, requested URL, referrer, browser and operating system) to deliver the pages and keep the service secure. Legal basis: Art. 6(1)(f) GDPR; our legitimate interest is reliable and secure delivery of the website. Vercel acts as our processor under an agreement pursuant to Art. 28 GDPR. Server logs are kept only as long as needed for operation and security. Transfers to the USA rely on the EU-U.S. Data Privacy Framework (adequacy decision of 10 July 2023, Art. 45 GDPR), under which Vercel is certified. More: Vercel Privacy Policy.
3. Invite links
Invite links look like https://blushnote.app/j/ABC234. When someone opens one on an iPhone that does not have the App yet, the request is forwarded to our backend (Section 9, Supabase), which notes the time the invite was first opened (so the person who sent it can see "opened") and sends the browser on to the App Store. We store the invite code and that timestamp, nothing about the device that opened it. Legal basis: Art. 6(1)(b) GDPR (the pairing you asked for). If the App is installed, iOS opens it directly and the website is not involved.
4. Cookies, analytics and third-party content
This website sets no cookies, uses no analytics or reach measurement, and stores nothing on or reads nothing from your device. It embeds no advertising, social media plugins or external fonts. Links to the App Store take you to Apple; from there, Apple is the controller.
5. Contact by email
If you email us, we process your name, email address, your message and — if you write from the App — the line it adds (app version, iOS version, iPhone model) to answer your request. Our mailbox is operated through an email service provider. Legal basis: Art. 6(1)(b) GDPR where the request concerns your use of the App, otherwise Art. 6(1)(f) GDPR (interest in answering). We delete the correspondence once the matter is closed, unless statutory retention duties apply.
Part B: The App
6. Your account
You sign in with Sign in with Apple, Sign in with Google or with your email address and a one-time code we send you. With Sign in with Apple we receive an identifier from Apple, the email address you choose to share (which may be an Apple relay address) and, if you allow it, your name. With Sign in with Google we receive your Google account ID, your name and the email address of your Google account (and, if set, your profile picture link, which we do not use); we do not receive your Google password or access to anything else in your Google account. With email sign-in we store your email address. If you use more than one of these with the same verified email address, they lead to the same account. Your account has a random user ID. Legal basis: Art. 6(1)(b) GDPR (providing the App you signed up for).
7. What the App stores, and who sees it
| Data | What exactly | Who sees it |
|---|---|---|
| Profile | The name you choose (up to 24 characters), an optional profile photo, your colour and handwriting style, your time zone, the question topics you pick, and whether you confirmed you are 18+ for the "After dark" pack. | You and your partner |
| Pairing | Your invite codes and their status (created, opened, installed, joined), which two accounts are paired, unpair and undo dates. | You and your partner |
| Couple details | When you got together, your next visit, countdowns, special days, your shared streak, Streak Shields and streak repairs. | You and your partner |
| What you write and send | Daily answers (your partner sees yours once you have both answered), quiz picks, discussion messages and photos in them, notes (text or mood, including scheduled notes), photos for your partner's home screen with their caption, "home", "landed", "heading out", "thinking of you" and reminder pings. | You and your partner |
| Journal | Memories (photos, title, date, the place name you type, text) and special days. The journal is shared: both of you can see and edit it. | You and your partner |
| Distance (optional) | See Section 8. | Your partner sees only the distance, a "together" state and when it was last updated |
| Notifications and widgets | Your iPhone's push token from Apple, whether it is a development or production build, a random widget token, app version, language, time zone, when the App last connected, and your notification settings (which kinds, quiet hours, lock-screen previews). | Only us (technically) |
| Premium status | Whether your couple has Premium, until when, which plan and who bought it (from Apple via RevenueCat, Section 9). | You and your partner |
| Usage events | See Section 10. | Only us |
Photos are resized on your iPhone before upload (at most 2048 pixels) and stored in private storage that only you and your partner can access, through short-lived links. Photos you send to your partner's home screen show on their widget for 24 hours and stay in your shared photo archive afterwards.
Legal basis for all of the above: Art. 6(1)(b) GDPR — storing and delivering this content to your partner is the service. Where you share content about other people (for example in a photo), please make sure they are fine with it.
8. Location and distance (optional)
If you turn on "Share distance" and allow location access, the App uses your iPhone's location to show how far apart you two are and to keep the distance widget fresh. Before anything leaves your iPhone, the App rounds the position to a grid of about 100 m; the exact position is never uploaded or stored. Our server keeps only your latest rounded position (each update overwrites the previous one, there is no location history), calculates the distance between the two of you on the server, and gives your partner only that distance, whether you are "together" (within a few hundred metres) and the time of the last update — never coordinates, a map or an address.
With "While using the App" permission, a position is taken when you open the App. With "Always", iOS also wakes the App after significant moves or visits so the widget stays current. You can pause sharing at any time (your partner sees "paused"), switch it off in the App, or change the permission in iOS Settings. Legal basis: Art. 6(1)(a) GDPR (your consent, given by turning the feature on and granting permission); you can withdraw it at any time with effect for the future. Turning sharing off stops uploads; deleting your account deletes the stored position.
9. Service providers and recipients
- Your partner receives what Section 7 says they see. That is the purpose of the App.
- Supabase, Inc. (USA) hosts our database, sign-in, file storage and server functions in the EU (Frankfurt, Germany). Supabase is our processor under a data processing agreement pursuant to Art. 28 GDPR; where data is accessed from outside the EU/EEA, Standard Contractual Clauses (Art. 46(2)(c) GDPR) apply. Supabase Privacy Policy.
- RevenueCat, Inc. (San Francisco, USA) checks purchases with Apple and tells our server when Premium starts, renews or ends. RevenueCat receives your account's user ID, the purchase and transaction data Apple provides, your display name, your couple's ID, the tag of the invite campaign you came from (if any), and technical data its software needs (such as app version, iOS version, language and App Store country). It does not receive anything you write, send or upload. Legal basis: Art. 6(1)(b) GDPR. Transfers to the USA rely on the EU-U.S. Data Privacy Framework. RevenueCat Privacy Policy.
- Google (Google Ireland Limited, Ireland, and Google LLC, USA) handles the sign-in if you choose Sign in with Google: you sign in on Google's page, and Google tells us who you are (see Section 6). Legal basis: Art. 6(1)(b) GDPR. Transfers to the USA rely on the EU-U.S. Data Privacy Framework. Google Privacy Policy.
- Apple processes payments (we never see your payment details), Sign in with Apple, and delivers push notifications. A notification about your partner's note or answer contains their name and, unless lock-screen previews are switched off in the App, the note text. Apple Privacy Policy.
- Vercel Inc. serves this website and forwards invite links (Sections 2 and 3).
- Instagram (Meta) only if you choose to share a card to Instagram Stories; the App then hands the image to the Instagram app, and Meta is responsible from there.
We do not sell or rent personal data and do not share it with advertisers or data brokers.
10. Usage events (first-party analytics)
To learn which parts of the App work and which don't, the App records events such as "screen opened", "question answered", "note sent", "paywall shown" or "purchase started", with a few details (for example which pack or paywall), the time, app version, iOS version and the App's visual style. They are linked to your user ID and couple ID and stored only in our own database at Supabase. There is no third-party analytics SDK, no advertising identifier and no tracking across other apps or websites. Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in improving the App). You can object at any time by emailing us; we then delete your events and leave your account out of any further analysis. When you delete your account, your events are kept only without your user ID. Events are deleted automatically after 24 months.
11. Device permissions
- Notifications — to tell you when your partner answers, sends a note, arrives home, and similar. Optional.
- Location — distance and "arrived" pings, Section 8. Optional.
- Camera — to take a photo for your partner's home screen, your journal or your profile, only when you tap to take one.
- Photos — the App uses Apple's photo picker, so it only receives the photos you pick. "Add to Photos" is used only when you save a share card or export.
- Clipboard — when you paste an invite code. The App checks whether the clipboard looks like a link without reading it, and reads it only when you tap Paste.
12. Storage on your iPhone
The App keeps a local copy of your couple's data so it works offline and the widgets can show it, in the App's private container and a container shared only with its own widgets and notification extension. Sign-in tokens are kept in the iOS Keychain. Deleting the App removes the local copy.
13. How long we keep data, and how to delete it
- Delete account (Us → Data → Delete account) deletes your sign-in account, your profile and profile photo, your daily and quiz answers, discussion messages, notes, photos you sent, pings, your position, your devices and push tokens. Journal memories you added to the shared journal stay with your partner, without your name attached; if nobody else is left in your couple, the whole couple and its journal are deleted. Deleting the account does not cancel a subscription — do that in iOS Settings.
- Unpair (Us → Data → Unpair) separates your accounts. Either of you can undo it for 30 days; your shared journal stays with your partner.
- The activity feed that triggers notifications is deleted after 60 days.
- Usage events (section 10) are deleted after 24 months.
- Everything else is kept while your account exists, because it is your shared history.
- Deleted data can remain in our provider's encrypted backups until they rotate out, at most 30 days.
- Where statutory retention duties apply (e.g. tax law for purchase records), we keep the data required for that period.
Export: Us → Data → Export my data creates a ZIP with your journal, answers, notes and photos.
14. Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)). Email support@blushnote.app. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your residence, your place of work or the place of the alleged infringement (Art. 77 GDPR).
15. Children
Blushnote is not directed at children under 16, and you need to be at least 16 to create an account. The "After dark" pack is hidden until you confirm you are 18 or older.
16. Security
All connections use HTTPS (TLS). Access in our database is enforced per row: only the two members of a couple can read their couple's data, and no App user — including your partner — can read your stored position. Files are kept in private storage and handed out only through short-lived signed links.
17. Changes
We update this policy when the App or the law changes; the date at the top shows the current version. If a change affects how we use data you already gave us, we let you know before it applies (in the App or in the update notes).
18. Contact
Eduard Bruch · Kleinfeld 28c, 21149 Hamburg, Germany · support@blushnote.app