What we record
Everything below is either something you typed, something you switched on, or a plain count of how the app is used. Nothing else is collected quietly in the background.
An email address verified by code, a first name and a password stored encrypted and never readable by us. If you choose to, a verified phone number so you can recover your account.
Memories, photos, plans, dates, the words you leave each other, goals, time capsules, and the hours you say you are usually free, on weekdays and at weekends. This content is readable only by you and, if you are paired, by your other half. So that the app never plans a shared evening on top of one of yours, your phone also shares the starting times of your own planned outings with your other half’s: the times only, never what they are.
Only if you turn sharing on. It is visible to your other half alone, disappears the moment you turn the switch off, and expires by itself after twenty four hours. The app never follows you in the background without your knowledge.
Only if you allow it. Pomia writes its planned outings and your dates into the calendar you choose on your phone, and reads back only the events it wrote itself, to recognise them after a reinstall. It never reads your other events, and nothing about your calendar is sent to us.
Only if you accept notifications. It is removed when you sign out or turn them off.
Which plan is active and when it expires. We never see your payment details. Apple on iPhone, or Google Play on Android, handles the payment and tells us only whether it went through.
When you use link import, the link and the public page behind it are read by a language model in order to turn them into plans. We keep the plans, we do not keep the page.
Which screens open and which features are used: the name of the action, the moment, your app version, tied to your account identifier so that we count people rather than taps. Never what you write, never a photo, never a place. It tells us where people get stuck, nothing more.
On iPhone and Android, Pomia asks once whether it may measure which advertisement, if any, led you to install it. If you say yes, AppsFlyer records it, along with three steps: account created, other half linked, share taken. On iPhone, Apple confirms the install to the advertiser without saying who you are, and sends us the same anonymous confirmation; on Android, Google Play tells AppsFlyer which link the install came from. Never your content, never your phone’s advertising identifier, which Pomia does not ask for. If you say no, nothing is sent; you can change your answer at any time in Settings.
Cloudflare counts which pages of this site are visited, from which country and on which kind of device, without cookies and without recognising anyone. We see totals, never a person.