Couplemetric

Privacy Policy

Last updated: October 20, 2026

Couplemetric ("we," "us," "our") operates the Couplemetric platform. This Privacy Policy explains what data we collect, why we collect it, how we store it, and what rights you have.

1. Data We Collect

Account Information

When you register, we collect your email address, optional name, and password. We store a bcrypt hash of the password, not the password itself. We also store your account ID, preferences, partner invitation and referral information, subscription status, and password-reset records.

Relationship & Life Data

When you use the app, we store the data you provide through daily logs, including self-reported scores across life pillars (vitality, growth, security, connection) and relationship dimensions (emotional closeness, trust, fairness, stress, autonomy). We also store computed scores, scenario profiles, and recommendation history. This includes mood, energy, journal notes, weekly reflections and goals, tasks, constraints, and exercise activity. These entries can contain sensitive health or personal information. Coaching conversations and replies are stored with your account.

Partner Features

When you link accounts, your linked partner can see your name, email address, and latest overall quality score. The partner dashboard also shows your latest life and relationship scores, emotional closeness, trust, fairness, stress and autonomy values, and differences between your scores. Comparison views also share dated life, relationship, and overall quality scores and all nine dimension values: vitality, growth, security, connection, emotional closeness, trust, fairness, stress, and autonomy. Comparison history covers a 7-day window, or 30 days when the viewing account has a premium entitlement. Insights can also show up to 90 dated life and relationship score records. These score-comparison views do not include your journal notes, weekly reflections, coaching messages, or separate mood and energy-level fields. Couple features include shared tasks. You can unlink on the partner page. Avoid entering another person's sensitive information without their permission.

Usage Data

The app generates internal events such as page views, daily-log submissions, and milestones, with timestamps, event properties, and sometimes account IDs. These events are handled inside the application; they are not sent to any external analytics service. Campaign attribution is kept in browser sessionStorage. Hosting providers may process request and error data, including IP addresses and requested URLs, to operate the service. The app does not embed advertising or third-party analytics scripts.

2. How We Use Your Data

  • To provide and improve the relationship optimization service
  • To compute your life, relationship, and total quality scores
  • To generate personalized recommendations and exercises
  • To support linked-partner comparisons and shared tasks
  • To deliver password-reset emails and respond to support requests
  • To authenticate your sessions
  • To communicate important service updates

3. Data Storage & Security

Application records are stored in a PostgreSQL database hosted on Supabase. Vercel hosts the application. The public application URL uses HTTPS. The server verifies signed sessions and checks account and record ownership before allowing protected access. Signing a session prevents undetected changes; it does not encrypt the session contents. No method of storage or transmission provides absolute security.

4. Cookies & Local Storage

Session Cookie

We set a single httpOnly session cookie when you log in. It contains an HMAC-SHA-256 signed, unencrypted account ID and expiry, uses SameSite=Lax, is marked Secure in production, and expires after 7 days. This cookie is essential for authentication and cannot be disabled while using the app.

Local Storage

Browser localStorage remembers app preferences and dismissed notices, including:

  • PWA install prompt dismissal — remembers if you dismissed the "install app" banner
  • Welcome and cookie notices, daily-log mode, and calibration reminders

Browser sessionStorage also remembers campaign attribution and a dismissed landing-page notice. These local preferences are not the account database and may remain on your device after account deletion; you can clear them in your browser or app storage settings.

No Tracking or Advertising Cookies

We do not use any third-party tracking cookies, advertising cookies, or analytics pixels. There are no cookies from Google Analytics, Facebook, or any other third-party service embedded in our pages.

5. Third-Party Services

These services process data for the features described below:

  • Supabase — database hosting (your relationship and account records are stored here)
  • Stripe — web subscription payments and billing management. Stripe receives email, account identifiers, and payment information through its checkout. We store customer/subscription IDs and entitlement status, not full card numbers. Android v1 has no purchase or upgrade flow; existing account entitlements can still be recognized.
  • Vercel — application hosting, request processing, and operational logs
  • Resend — password-reset email delivery when configured. It receives your email address and the message containing your reset link. Never forward a reset link to someone else.
  • Google Gemini API — optional coaching for accounts with access when configured. We send your message, up to ten previous conversation messages, and context containing recent scores, dimension values, trends, constraint names, and exercise titles. Replies are stored in the application. If the API is unavailable or unconfigured, coaching uses an internal rules-based response.

Google's processing depends on the API project's paid-service status. Its Gemini API terms explain paid-service abuse monitoring and unpaid-service use for product improvement, including possible human review. Do not enter passwords, payment details, or information you do not want processed by the coaching service. Coaching can make mistakes and is not medical advice or therapy.

The Android v1 app does not include an active Google Play Billing, RevenueCat purchase SDK, push-notification SDK, or advertising SDK. Older store billing records, if any, require a separate provider support request.

6. Data Retention

We retain your app data while your account is active. After successful account deletion, we immediately remove your account and active application records, including logs, scores, check-ins, coaching conversations, scenarios, constraints, recommendations, password-reset tokens, tasks you created, referrals, and associated mailing-list records. Your partner retains their own account and data; your link, shared sync records, and assignments to you are removed. Stripe billing cleanup must finish before app deletion; a failure keeps your account available and gives retry instructions. App-store subscriptions must be canceled through the store separately. Backup copies and provider records may follow separate retention processes, described below.

Deleting an app account does not itself erase provider backups, hosting logs, email delivery records, or legally retained payment records. Supabase database backups are kept according to the project plan and backup configuration described in its backup documentation and expire on a rolling basis. Resend documents 30-day email/log retention in its security information. Stripe retains payment records as required by financial regulations. If you need the retention period that applies to a specific record, email info.llcluna@gmail.com.

Delete your account in Settings → Data or on the account deletion page, which also explains sign-in recovery and how to request manual deletion.

7. Your Rights

Depending on your jurisdiction (including under GDPR, CCPA, and similar laws), you have the right to:

  • Access — request access to your personal data
  • Rectification — correct inaccurate data
  • Deletion — request permanent deletion of your account and data
  • Portability — export your daily logs, scores, and weekly check-ins as JSON in Settings → Data; request other applicable records through the verified contact
  • Restriction — request that we limit processing of your data
  • Objection — object to certain types of processing

For account deletion, use the account deletion page. To exercise any other right, email info.llcluna@gmail.com from your account email address. We may ask you to confirm that you own the account before acting on a request.

8. Children's Privacy

Couplemetric is intended for users who are 18 years or older. We do not knowingly collect data from anyone under 18. If we learn that we have collected personal information from a child under 18, we will delete it promptly.

9. International Data Transfers

Your data may be processed in countries other than your own by the providers above, including the United States. Where required, transfers rely on the providers' standard contractual clauses and equivalent safeguards. Email info.llcluna@gmail.com for details about the regions used for your data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the platform. Continued use after changes constitutes acceptance.

11. Contact Us

If you have questions about this Privacy Policy or want to exercise your data rights, email info.llcluna@gmail.com. For account deletion, see the account deletion page, which also covers sign-in recovery. A manual deletion request requires verification that you own the account; never send your password.