Privacy Policy
Score:ok Couple Calculator
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Score:ok Couple Calculator works without accounts. On your iPhone it stores optional partner names, relationship start date, selected avatar, date plans and their dates, notes, completion history, selected journal photos, activity Score, reminder preference and language. Selected photos are resized and stored as JPEG copies. It uses an automatically issued random installation secret and a separate encryption key held in the iOS Keychain. The backend stores a hash of the secret and its creation time. Requests for date ideas include category, budget, mood and language; tip requests include language and an optional topic. If you choose backup or enable automatic backup, the device sends an AES-GCM encrypted copy of the couple data, including photos and notes, and the server stores that ciphertext and update time. The server does not receive the encryption key. Cloudflare terminates public HTTPS and proxies this website and API to Railway, our hosting provider. Both providers receive network requests and associated technical information such as IP address, request time, path and transport metadata, including when you visit this website. The public HTML pages request no transformation and restrict browser scripts; the application does not embed web analytics beacons. The app has no advertising or analytics SDKs and does not access your location or contacts.
How we use information
Local information powers planning, the diary, the activity Score and optional reminders. Preferences let the app and backend select authored date ideas and relationship tips. The Score counts your recorded activities and is not an assessment of relationship quality. The installation secret authorizes access to your own encrypted backup, and its hash allows the server to recognize the installation without an account. A backup is for restoration within the same installation while its Keychain secret and encryption key remain available; there is no login or promised recovery after either is lost. Technical request information supports hosting, rate limiting, service reliability and security. Export creates an unencrypted JSON file only when you request it.
Service providers and sharing
The backend runs on Railway and uses a persistent Railway volume for its SQLite database. Cloudflare provides the public HTTPS proxy in front of that same Railway service. Cloudflare and Railway process network and infrastructure information in operating these services. The native app sends authorized requests to api.score-ok-couple-calculator.site; the public policy is available on score-ok-couple-calculator.site/privacy. No advertising, analytics, email-delivery or other external application providers are integrated. The app does not sell data or publish your diary. Encrypted backups are stored by our service on Railway, but its application code does not have your device encryption key. If you use the system share sheet to export, the destination you choose receives the unencrypted export under its own practices. Apple provides the system photo picker, Keychain and local notification facilities on the device. A privacy email you send separately is processed by the email services used by you and the privacy contact.
Data retention
Local couple data remains until you delete it, remove the app or replace it by restoring a backup. The main local data file is excluded from device backup by the app; system Keychain handling is controlled by iOS. Encrypted server backups remain until overwritten or deleted by the installation. Installation secret hashes and creation times remain in the database for authorization; deleting a backup does not remove this non-content installation record. The service has no automatic expiration period for these records. Operational request logs are managed by Cloudflare and Railway; this app does not set or promise a fixed infrastructure log retention period for either provider. The app does not configure scheduled database snapshots. Residual storage pages, provider backups if maintained by infrastructure, and exported copies are not guaranteed to disappear immediately when a live record is deleted; any such provider copies follow the provider’s applicable storage lifecycle.
Deleting your information
In Us settings, Delete all data clears the local profile, dates, notes, photos and history and resets the Score. It removes the backup encryption key and the app’s current temporary export file. Copies already shared remain outside the app. It also requests deletion of this installation’s encrypted server backup and turns automatic backup off. If the network is unavailable, the app keeps a pending deletion flag and retries when it is opened online; keep the app installed until this finishes. Individual dates, journal items and photos can be removed in their detail screens. Removing the app alone does not request deletion of the server backup. Deleting data does not erase copies you have exported or shared, and does not remove the authorization hash described above. You can contact mervyn.weatherby@icloud.com about privacy or deletion questions. We cannot locate or decrypt an installation’s diary using a name or email address, and cannot restore data after its secret or encryption key is lost.
Permissions and your choices
The system Photos picker lets you choose individual images for your avatar or journal; the app does not request access to your entire photo library. You can cancel selection and remove imported copies in the app. Local notifications are optional and are requested only when you turn reminders on. They are scheduled on the device for one day before and at the planned date time; delivery depends on iOS settings and device conditions. You may turn reminders off in the app or withdraw notification authorization in iPhone Settings at any time. Revoking access does not automatically delete copies or existing diary information. No geographic location, tracking, contacts, camera or microphone permission is requested.
Your privacy rights
Depending on the law that applies to you, you may have rights to access, correct, delete or restrict processing of personal information, or to complain to a competent data protection authority. The app provides profile and diary editing, a JSON export and deletion controls. For questions or a request about data processing, contact mervyn.weatherby@icloud.com. This address is a public privacy contact, not an account identifier or an in-app messaging service. We may need enough information to understand a request and confirm that it concerns your installation; do not send your installation secret or encryption key by email. We cannot retrieve plaintext encrypted backups or recover lost keys.
Security
Public communication uses HTTPS terminated by Cloudflare, which proxies to the pinned Railway HTTPS origin. No installation secret or encryption key is placed in the public policy URL. Each installation uses a random secret stored in Keychain; the server stores only a SHA-256 hash of that secret and checks it before private operations. Backup content is encrypted on the device with AES-GCM and a separate 256-bit Keychain key. The local data file uses iOS file protection; the app resizes photos before storing them. Server requests have body-size and rate limits. Application error logs use request identifiers without recording diary payloads or secrets. These measures reduce risk but cannot guarantee absolute security, particularly on a compromised device. Unencrypted exports and the destinations you choose are outside the protection of backup encryption.
Children’s privacy
The app is designed for adult couples and is not directed at children under 13. It does not knowingly solicit children’s information or operate child accounts. If you believe a child has supplied personal information to the service, contact mervyn.weatherby@icloud.com so the situation can be assessed using the information available.
Changes to this policy
This policy may change when the app’s data practices or hosting arrangements change. The current version and effective date will be published on this page. Review it before using new backup or sharing capabilities. Material changes will be reflected in the app or updated policy as appropriate.