Your relationship is not our data.

Who we are

acoupl is a private app for committed couples. We are operated as a sole trader based in Melbourne, Victoria, Australia. You can reach us at hello@acoupl.com.

This policy covers the acoupl mobile app (Android) and the acoupl.com website, including the waitlist. By using acoupl, you acknowledge that you have read and agree to this Privacy Policy.

Not medical advice

acoupl is a relationship wellness app, not a medical device, medical service, therapy service, or relationship counselling service. Nothing in the app — including cycle tracking features, journal features, or any other content — constitutes medical advice, psychological advice, relationship advice, or a substitute for professional consultation. You use the app at your own discretion. We are not liable for any decisions you make based on information or features within the app.

What we collect and why

We collect only what is necessary to make acoupl work. Here is exactly what that is:

• Email address and display name — used to create and identify your account. We do not require your real name.
• Partner relationship data — the invite code you use to link with your partner, and the fact that you are linked. We do not store the content of any private messages between partners.
• Desire signals — the value you set each day. This is stored on our servers and used to detect when both partners are aligned. Only the fact that a match has occurred is shared with your partner — neither partner can see the other's individual signal value.
• Cycle data (sensitive health information) — if you choose to use the cycle sync feature, we store the date and length information you manually enter. This is optional. It is health-related information and is treated with heightened care. It is used only to display your cycle phase within the app and is never shared with third parties or used for advertising.
• Journal entries — text you choose to log. Stored on our servers. Private to you and never accessed by acoupl staff except as required by law.
• Push notification token — a device token used to deliver notifications to your phone. We store it solely to send you app notifications.
• App activity events — anonymised usage events (e.g. screen views, feature interactions) used to understand how the app is being used and to improve it. These events are associated with an internal user ID only — not your email address or name.
• Subscription status — whether you are on a free or paid plan. Managed by RevenueCat. We do not store payment card details — those are handled entirely by Google Play.
• Waitlist email — if you joined the waitlist at acoupl.com before downloading the app, we stored your email for that purpose only.

What we do not collect

• We do not collect your location.
• We do not access your contacts, camera, or microphone.
• We do not collect biometric data.
• We do not use advertising SDKs or tracking pixels of any kind.
• We do not build advertising profiles or sell your data to anyone, ever.

How we use your data

• To operate the app and deliver the core features you signed up for.
• To send you push notifications when a match occurs or when your partner checks in.
• To process your subscription through Google Play and RevenueCat.
• To understand how the app is used so we can improve it (anonymised analytics only).
• To respond to support requests you send us.

We never use your data to serve ads, sell to third parties, or for any purpose outside of operating acoupl.

Third-party services and international data transfers

We use a small number of carefully chosen third-party services. By using acoupl, you consent to your data being transferred to and processed in the countries where these services operate, including the United States. Each service has access only to the data it needs:

• Supabase (Australia) — database and authentication. Stores account data, signals, cycle data, and journal entries. Primary data region: Sydney, Australia (ap-southeast-2). Supabase maintains GDPR and Australian Privacy Act compliance.
• Expo / Firebase / Google (United States) — push notification delivery. Your device push token is passed to Expo's push service, which routes delivery via Google Firebase Cloud Messaging. No personal data beyond the token is shared.
• PostHog (United States) — product analytics. Receives anonymised usage events tied to an internal user ID. Your email address and name are not sent to PostHog.
• RevenueCat (United States) — subscription management. Receives your internal app user ID and purchase receipt from Google Play to validate your subscription. Your email address is not sent to RevenueCat.
• Resend (United States) — transactional email. Your email address is passed solely for delivery of account-related emails.

Where data is transferred outside Australia or the European Economic Area, we take reasonable steps to ensure equivalent protections apply, including relying on service providers who maintain recognised compliance frameworks (GDPR Standard Contractual Clauses, SOC 2, or equivalent).

Data security

All data in transit between the app and our servers is encrypted using TLS. Access to your data in our database is protected by row-level security policies — meaning queries are scoped by user identity and cannot return another user's data, even in the event of an application error. We limit access to production data to the minimum required to operate the service.

No security measure is absolute. While we implement industry-standard protections, we cannot guarantee that our systems will never be compromised. To the maximum extent permitted by applicable law, acoupl is not liable for any unauthorised access, disclosure, or loss of data that occurs despite these measures, provided we have acted in accordance with this policy and applicable law.

Your responsibility: You are responsible for maintaining the confidentiality of your account credentials. Do not share your password. If you believe your account has been compromised, contact us immediately at hello@acoupl.com.

Data breach notification

In the event of a data breach that is likely to result in serious harm to you, we will notify you and any applicable regulatory authority as required by law — including within 72 hours where required under GDPR, and as soon as practicable under the Australian Privacy Act's Notifiable Data Breaches scheme. Notification will be provided via email and/or in-app notice.

Data retention

We keep your data for as long as your account is active. If you delete your account, we delete your personal data within 30 days. Anonymised analytics events that cannot be linked back to you may be retained for longer for product improvement purposes. We may also retain data for longer where required by applicable law.

Your rights

Depending on where you live, you may have the right to access, correct, or delete your personal data, to obtain a copy of it in a portable format, or to object to or restrict how we process it. These rights apply to users under the EU GDPR, UK GDPR, Australian Privacy Act (APPs), California Consumer Privacy Act (CCPA), and equivalent laws in other jurisdictions.

Under the Australian Privacy Act, you also have the right to request correction of inaccurate personal information we hold about you. We will respond to correction requests within 30 days.

To exercise any of these rights, email us at hello@acoupl.com. We will respond within 30 days. We may ask you to verify your identity before actioning a request.

You can delete your account directly from within the app (Profile → Settings → Delete account), which will initiate removal of your personal data from our systems within 30 days.

If you believe we have not handled your personal information in accordance with applicable privacy law, you have the right to lodge a complaint with the relevant authority — in Australia, the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au; in the EU, your local data protection authority; in the UK, the ICO at ico.org.uk.

Children

acoupl is strictly intended for adults aged 18 and over in committed relationships. We do not knowingly collect personal data from anyone under the age of 18. If you are under 18, do not use this app. If we become aware that a minor has created an account, we will delete it immediately. If you believe a minor has created an account, contact us at hello@acoupl.com.

Limitation of liability

To the maximum extent permitted by applicable law, acoupl and its operators shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of data, revenue, profits, or goodwill, arising out of or in connection with your use of the app or this privacy policy, even if advised of the possibility of such damages.

Nothing in this section limits liability that cannot be excluded under applicable law, including under the Australian Consumer Law.

Governing law and disputes

This Privacy Policy is governed by the laws of Victoria, Australia. Any dispute arising out of or in connection with this policy shall be subject to the exclusive jurisdiction of the courts of Victoria, Australia, except where applicable consumer protection law in your jurisdiction requires otherwise.

Changes to this policy

If we make material changes to this policy, we will notify you via a notice in the app or by email at least 14 days before the change takes effect. Continued use of acoupl after that date constitutes acceptance of the updated policy. The "Last updated" date at the top of this page reflects the most recent revision.

Contact

Questions, requests, or concerns about this policy: hello@acoupl.com