Privacy Policy

1. Who is responsible

Wivyu is an independently developed UK service and acts as the data controller for information processed through the Wivyu app. Privacy questions and requests can be sent to privacy@wivyu.com.

2. Information we process

• Account information: email address, display name, account identifiers and authentication records.
• Update sign-ups: the email address and consent time submitted through the public website.
• Shared relationship content: moods, private signals, messages, reactions, plans, goals, dates, memories and the details you choose to add.
• Files: photos, voice notes, PDFs, tickets and other attachments you upload.
• Device information: push-notification token, device platform and notification preferences.
• Operational information: timestamps, delivery/read status, security events and limited technical logs needed to diagnose faults and protect the service.

Wivyu does not request precise location, contact-book access, advertising identifiers, health records or payment information as part of its current beta service.

3. Why we use it

• To create and secure your account and shared space.
• To synchronise content between you and your paired partner.
• To store and deliver messages, files, plans, goals, memories and private signals.
• To send account emails and notifications you have enabled.
• To send occasional beta and product updates when you join the website list.
• To prevent abuse, investigate faults and improve reliability.
• To respond to support, privacy and deletion requests.

Our main legal bases are performance of the service you request, our legitimate interests in operating and securing it, and consent for optional communications and permissions. You can unsubscribe from update emails at any time.

4. Who can see your content

Content in a paired space is intended for the two members of that space. We use row-level access rules and private file storage to separate couples. Service administrators and infrastructure providers may have limited technical access when necessary to operate, secure, troubleshoot or comply with law. Wivyu does not currently provide end-to-end encryption.

5. Services that help Wivyu operate

• Supabase: authentication, database, private file storage and server functions.
• Expo and Firebase Cloud Messaging: app builds and Android push-notification delivery.
• Resend: account confirmation and password-recovery email delivery.
• OpenAI Sites: hosting for this public information website, separate from private in-app relationship content.

These providers process information only to provide their contracted services and may operate infrastructure outside the UK. Where required, appropriate contractual safeguards are used for international transfers.

6. Retention and deletion

We keep account information and shared content while your account or paired space remains active. Deleted messages may remain as a deletion marker so conversation order and replies still make sense. Operational logs and backups may be retained for a limited period before automatic removal.

You can request account deletion at any time. Shared-space deletion may require both partners to approve because it removes information belonging to both people. See the account deletion page for the exact process.

7. Your choices and rights

Depending on your location, you may ask for access to, correction of, deletion of, restriction of or a copy of your personal information, and you may object to certain processing. You can also withdraw optional permissions in your phone settings. We may need to verify that a request comes from the account owner.

UK users may raise unresolved concerns with the Information Commissioner’s Office at ico.org.uk.

8. Security and changes

We use authentication, access controls, private storage and encrypted network connections. No online service can promise absolute security. We will update this policy when the service or its privacy protections materially change and will show a revised date here.