Information we handle
We process an email address, an account identifier, authentication and session information, and limited network or security metadata needed to create and protect an account. We also process pair membership, invitations, and pair-lifecycle state so two people can use the service together.
When you use the core experience, we may store your answers, response states such as Not sure, Prefer not to answer, or Not applicable, optional predictions about your partner, round and Reveal state, and history needed to show prior interactions. Depending on what you choose to write or select, this content may include sensitive personal information about relationships, sexuality, health, beliefs, finances, disability, grief, identity, or other intimate subjects.
We process limited operational data when features are used, including synchronization commands, authorization and deletion events, and security records. We do not use third-party advertising or intimate-content analytics. Optional notifications begin off; if you enable them, we process an installation identifier, notification preferences, and a push token. The Version 1.0 app does not request contacts, camera, microphone, photo library, precise location, or payment data.
How we use information
We use information to authenticate accounts, create and manage a two-person pair, operate Questions and response mechanics, enforce commitment and Reveal rules, maintain history, honor deletion and withdrawal controls, send optional quiet notifications, prevent abuse, secure the service, and diagnose essential operational failures.
We do not sell personal information. We do not use answers or predictions for advertising, marketing profiles, or relationship compatibility scores.
Disclosure between participants
Authored content is not automatically disclosed to your partner. A Reveal is operation-specific and occurs only after the applicable conditions and scoped authorization are satisfied. Private drafts remain private. Not sure, Prefer not to answer, and Not applicable are valid response choices. A participant can withhold, withdraw, or delete where the product offers that control. Questionnaire of Love treats neither participant as the reference answer.
Your partner's receipt of information through a Reveal is a disclosure you initiate as part of the two-person experience. A recipient can remember or record what they have already seen; technical controls cannot make another person forget a prior disclosure.
Service providers
Supabase provides authentication, database, server authorization, and related backend services. Expo/EAS supports application build and delivery infrastructure; Expo Push Service and Google Firebase Cloud Messaging process optional Android notification routing when notifications are enabled. Resend provides account-email delivery. These providers process information on our behalf to operate the service. We may also disclose information when legally required or necessary to protect people, rights, or service security.
On-device storage and security
The Android app uses HTTPS/TLS for data in transit, protected operating-system storage for authentication secrets, and a SQLCipher-encrypted local database. Android application backup is disabled. The backend uses row-level authorization and scoped operations to restrict access. No system is perfectly secure, and Questionnaire of Love does not claim anonymity or end-to-end encryption.
Retention and deletion
You can request account deletion in the app and can delete or withdraw supported participant data. Deleting a supported answer removes its substantive answer body from the active database and prevents future disclosure. Account deletion removes authored answer bodies and prediction bodies involving the account from the active database, clears associated contextual content, removes notification endpoints and push tokens, anonymizes the retained profile, and ends future relationship access.
We retain limited non-content records needed to preserve relationship and record integrity, document deletion processing, prevent stale access, protect the service, and meet legal obligations. These may include internal identifiers, timestamps, lifecycle state, deletion requests, tombstones, and minimized audit events. Encrypted provider backups may contain prior copies for up to the provider's limited backup window, currently seven days, before normal expiration. We do not promise immediate erasure from those backups, and we do not use retained deletion evidence for advertising or relationship scoring.
See the account deletion instructions for a concise description of the request process and its effects.
Children
Questionnaire of Love is intended for adults aged 18 and older. It is not designed for children and is not intended for use by anyone under 18.
Product boundary
Questionnaire of Love supports discovery and conversation. It is not therapy, medical advice, diagnosis, crisis intervention, or a certification of relationship compatibility. If you or someone else may be in immediate danger, contact local emergency services or an appropriate crisis resource.
Contact
For privacy questions or support, email support@questionnaireoflove.app.