What we record
Everything below is either something you typed, something you switched on, or a plain count of how the app is used. Nothing else is collected quietly in the background.
An email address verified by code, a first name and a password stored encrypted and never readable by us. If you choose to, a verified phone number so you can recover your account.
Memories, photos, plans, dates, the words you leave each other, goals and time capsules. This content is readable only by you and, if you are paired, by your other half.
Only if you turn sharing on. It is visible to your other half alone, disappears the moment you turn the switch off, and expires by itself after twenty four hours. The app never follows you in the background without your knowledge.
Only if you accept notifications. It is removed when you sign out or turn them off.
Which plan is active and when it expires. We never see your payment details. Apple on iPhone, or Google Play on Android, handles the payment and tells us only whether it went through.
When you use link import, the link and the public page behind it are read by a language model in order to turn them into plans. We keep the plans, we do not keep the page.
Which screens open and which features are used: the name of the action, the moment, your app version, tied to your account identifier so that we count people rather than taps. Never what you write, never a photo, never a place. It tells us where people get stuck, nothing more.
On iPhone, Pomia asks once whether it may measure which advertisement, if any, led you to install it. If you say yes, AppsFlyer records it, along with three steps: account created, other half linked, share taken. Apple confirms the install to the advertiser without saying who you are, and sends us the same anonymous confirmation. Never your content, never your phone’s advertising identifier, which Pomia does not ask for. If you say no, nothing is sent; you can change your answer at any time in Settings.
Cloudflare counts which pages of this site are visited, from which country and on which kind of device, without cookies and without recognising anyone. We see totals, never a person.