BOTH. Privacy Policy

1Who we are (the controller)

BOTH. is a conversation game for couples, currently operated by Gökay Tuna (United Arab Emirates) while the operating company is being formed. This policy will be updated with the company details when incorporation completes. For all privacy matters: gokaytuna@gmail.com.

2What we collect on this website, and why

·Waitlist: your email address. Purpose: telling you about the launch and major updates. Legal basis: your consent, withdrawable anytime by unsubscribing or emailing us.

·Practice applications (therapists): the name, practice, license reference, and email you submit. Purpose: evaluating and responding to your application. Legal basis: taking steps at your request prior to a contract.

·Cookies and analytics: essential cookies keep the site working (legal basis: legitimate interest in operating the site). Anonymous product analytics (PostHog, hosted in the EU) run ONLY if you press "Accept" on the cookie banner (legal basis: consent) — if you choose "Essentials only" or ignore the banner, no analytics code loads and nothing is collected. Analytics events never contain free text — they are technical events (page opened, waitlist joined) by design.

3What we collect in the app, and why

·Account: your email (or Apple/Google sign-in), display name, and language. Basis: performing our contract with you.

·Your game: your answers, reactions, agreements, custom questions, and play history — stored in the European Union (Supabase, Ireland region). Basis: performing our contract; this data exists solely so you and your partner can play.

·Payments: handled by Apple and RevenueCat. We never see or store your card details; we store only your subscription status. Basis: performing our contract.

·Push notifications: your device token, stored so only you can be notified, with your permission. Notification text never contains question or answer content — lock screens stay private by design. Basis: consent, withdrawable in settings.

4The promises built into the product

·Blind until both commit. Your answer is technically unreadable by your partner until you have both answered. This is enforced in the database, not just the app.

·No partner surveillance. The app never reports your reading times, activity, or private choices to your partner. A notification that "your partner answered" is part of the game; nothing else is shared.

·Your words stay yours. Export of everything YOU wrote is free, always — no subscription required.

·Breakup means deletion. If either partner ends the couple, the couple’s shared data is genuinely deleted from our systems — not archived, not soft-deleted. Each partner keeps a copy of what they themselves wrote.

·Not even we read your answers. Access controls prevent our own staff from browsing couple content. We operate on aggregates and account metadata only.

5AI features

Optional "go deeper" questions are generated by an AI model (Anthropic Claude) only when BOTH partners explicitly agree, per question. When you both agree, your two answers to that one question are sent to Anthropic to generate a follow-up question; they are not used to train Anthropic’s models. The AI suggests questions; it never judges, diagnoses, or takes sides. Optional translation of your own custom questions works the same way. Basis: consent, given per use.

6Who processes data for us, and where

We use a small set of processors, each bound by a data processing agreement and processing data only to provide their service to us:

·Supabase (database, authentication, file storage) — hosted in the EU (Ireland).

·Vercel (website hosting) — global CDN, US company.

·Apple (payments, App Store) — per your Apple ID region.

·RevenueCat (subscription management) — US company.

·PostHog (anonymous analytics, only after cookie consent) — EU-hosted.

·Anthropic (AI question generation, only with both partners’ per-question consent) — US company.

·Expo (push notification delivery) — US company.

International transfers: where a processor is outside the EU/EEA or UAE, transfers are protected by the European Commission’s Standard Contractual Clauses or an equivalent lawful mechanism, and are limited to the minimum data each service needs. Your game content itself lives in the EU; what leaves the EU is the minimum required (for example, the two consented answers sent to Anthropic for one follow-up question).

7How long we keep things

·Your game data: for as long as your account and couple exist. Breakup deletion is immediate and real; account deletion removes your personal data.

·Waitlist emails: until launch communications end or you unsubscribe, whichever is first.

·Practice applications: until evaluated and for up to 12 months after, then deleted.

·Payment/subscription records: as long as legally required for accounting.

·Analytics: aggregated, without free text, per PostHog’s EU retention settings.

8Your rights

You can access, export, correct, or delete your data at any time — export and deletion are built into the app, free. EU/EEA users additionally have the GDPR rights to restriction, objection, portability, withdrawal of consent (without affecting prior processing), and complaint to a supervisory authority. To exercise anything not already built into the app: gokaytuna@gmail.com. We respond within 30 days.

9Age

BOTH. is for adults (17+). We do not knowingly process children’s data; if you believe a minor has created an account, contact us and we will delete it.

10Changes

If this policy changes materially, we will tell you in the app or by email before the change takes effect. The current version always lives at this page, with its effective date above.

11Languages and local laws

This policy is published in English; translations may be provided for convenience, and if they ever differ, the English version prevails. We honor the data-protection laws that apply to you where you live — including the EU/UK GDPR, the UAE Personal Data Protection Law, Turkey’s KVKK, and Japan’s APPI. Wherever you are, the same promises in this policy apply, and every right described here can be exercised via gokaytuna@gmail.com.