Privacy policy

Allirha is built to share as little as possible. This policy explains what the app stores, why, who can see it, and how to get it or delete it.

The short version

• You don't need an email to start in the app: it creates an anonymous account the first time you open it. You can add an email and password later, so you can sign in on another phone or the website and reset a forgotten password. On the website, you create an account with just a name, an email and a password. We only email you about your account — codes and security notices, never marketing.
• Your location is city-level only. You pick a city from a list; if you choose to use your phone's location instead, it is used once, rounded to about 11 km on your phone, and matched to the nearest city. Only the city is stored. Nothing runs in the background.
• Your partner sees your name, city and time zone — never coordinates. The distance between you is worked out on our server, so neither phone ever receives the other's position.
• You can export everything or delete your account from Settings at any time.
• We don't sell data, show ads or use third-party analytics.

What we store

Data	Why
A random account ID and sign-in tokens	To keep you signed in. Only a scrambled (hashed) version of each token is stored on our server.
If you add one: your email address	To sign you in, to reset your password, and to send sign-in codes if you switch them on.
If you add one: your password, scrambled	We store only a one-way hash (argon2id); nobody, including us, can read your password.
Short-lived codes (verification, sign-in, password reset)	Stored only as a hash; each works once and expires after 10–15 minutes.
The name you choose	Shown to your partner, and to someone you're pairing with before they confirm it's you.
Your city and time zone	For the distance, "good time to call" and time-zone widgets.
Pairing codes you create	To connect you with your partner. Codes expire after one hour.
If you sign in on the website: the kind of browser (for example "Chrome on Windows")	So you can recognise and sign out of it in Settings. Browser sign-ins end after 30 days without use.
Your couple's shared dates, visits and bucket list	The widgets and shared screens show them to both of you.
Countries you pin in Trips ("want to go" or "been there")	Shown on the map to both of you. Only the country is stored.
Your answers in the games	Shown to your partner once you've both answered.
Your answers in ABC Fast or Slow, the grades you give each other, and the score	Your answers are shown to your partner once the round is locked (until then they only see that you're typing); grades are shown as they're given.

We don't collect your contacts, photos, precise location, advertising ID or device identifiers.

Why we're allowed to use it

• To provide the app you asked for (our contract with you): your account, sign-in, pairing, widgets, games and bucket list.
• To keep accounts safe (our legitimate interest): sign-in codes, security emails such as "your password was changed", and limits on repeated sign-in attempts.
• With your permission: using your phone's location once to find your city, and sign-in codes if you switch them on. You can stop either at any time.

Who can see your data

• Your partner sees what the app shows as shared: your name, city, time zone, shared dates, bucket list and game answers (only after both of you have answered).
• Nobody else in the app. Every request is checked against your couple on our server.
• Our administrators can see only account-level information needed to run the service — such as when an account was created, whether it is paired, and its subscription status. They cannot see names, cities, dates or game answers, and never see a list of email addresses; they can look an account up by its exact email only when you ask for support.
• Our email provider, [EMAIL PROVIDER], delivers account emails on our behalf. It receives your email address and the message, and may not use them for anything else.

City data

The list of cities comes from GeoNames and is stored on our own server. Searching for a city never sends what you type to a third party.

How long we keep it

• While you use the app, we keep your data so the app works.
• If you unpair, you both lose access to each other's data immediately. Your shared history (dates, visits, bucket list, trip countries, game answers and ABC games) is kept for 30 days — shown in Settings with its deletion date — in case the unpairing was a mistake, then deleted permanently. Either of you can delete it sooner.
• If you delete your account, your name, email, password, city, time zone and sign-in are deleted immediately. Any shared history waits out the same 30 days for your former partner, then everything is deleted.
• Sign-in tokens expire after 30 days without use, on your phone and in a browser alike.

Signing in on the website

The website does everything the app does except the home-screen widgets, so you can use Allirha without a phone. You can create an account there, or sign in with your email and password, or — if you haven't added an email — by confirming a code in the app after seeing which browser is asking. A signed-in browser can do anything the app can, including changing or deleting your account, so only sign in on computers you trust. On the website you always type your city; it never asks for your browser's location. You can see and sign out every signed-in browser in Settings → Sign in on the web, in the app or on the website.

Your rights

• Export: Settings → Export my data gives you a file with everything we hold about you, including your email address (never your password).
• Delete: Settings → Delete my account. See deleting your account for details, including how to ask for deletion without the app.
• Questions or requests: write to [CONTACT EMAIL].

Children

Allirha is for adults in relationships and is not intended for anyone under 16.

Changes

If this policy changes, we'll update the date below and, for significant changes, tell you in the app.

Who we are

Allirha is operated by [OPERATOR NAME]. Contact: [CONTACT EMAIL].