Privacy Policy

Last updated: 15 October 2026

Who we are

Mittens (“we”, “us”) is an app made by Gabriel Capraru, an independent developer based in the United Kingdom. We are the data controller for the personal data described in this policy. You can reach us at gabrielcapraru@gmail.com.

What we collect

Your account

• Your email address, if you sign in with an email code, or the email Apple shares with us if you use Sign in with Apple (this can be a private relay address).
• The name you choose and your avatar: either one of our built-in avatars or a photo you take or pick.
• Your time zone, so your daily question and streak change at the right time.

What you share with your partner

• Moods and short status updates.
• Notes (up to 280 characters).
• Your answers to daily questions, topic questions, quizzes and games. Your partner only sees an answer once they have answered too.
• Memories: photos, captions, the date, and an optional place rounded to about 1 km.
• Plans and countdowns, such as your next visit, and your anniversary.
• Your streak, and the in-app notifications about what your partner did.

Your location (optional)

If you turn on “Share my location”, the app reads your location while it is open and sends it rounded to about 1 km. It is used to show how far apart you are. Only your partner can see it. Turning the option off deletes it from our server. We never track your location in the background.

Purchases

Payments are handled by Apple. We never see your card or payment details. We receive the plan you bought (for example Premium Yearly or a streak repair), when it started and when it ends, so we can unlock Premium for you and your partner.

Technical data

• A notification token, if you allow notifications, so we can send them to your device.
• Basic in-app events, such as pairing or unpairing, used to keep the app working correctly.
• Server logs (including IP addresses), kept for a short time to keep the service secure and fix problems.

What we don’t do

• We don’t show ads and we don’t share your data with advertisers.
• We don’t sell your data.
• We don’t use third-party analytics or tracking tools, and we don’t track you across other apps or websites.

Who can see your data

Your profile and everything you share in the app are visible only to you and the partner you paired with. Our database enforces this: each couple can only read its own data, and photos are stored privately and shown through short-lived links.

We use a small number of service providers to run Mittens. They only process data on our behalf:

• Hetzner Online GmbH (Germany): hosts our server, database and photos.
• RevenueCat, Inc. (United States): manages subscriptions and purchases. It receives your account ID and purchase details, not your content.
• Apple: Sign in with Apple, payments, and push notifications.
• Our email provider: delivers your sign-in codes.

When data is transferred outside the UK or the European Economic Area (for example to RevenueCat in the United States), it is protected by safeguards such as standard contractual clauses.

We may disclose data if the law requires it.

Why we use your data

• To provide the app you signed up for: your account, pairing, sharing with your partner, and Premium (performance of a contract).
• To keep the service secure and working, and to prevent abuse (our legitimate interests).
• Location and camera only when you allow them (your consent, which you can withdraw in the app or in iOS Settings).

How long we keep it

• We keep your data while you have an account.
• Unpairing deletes everything the two of you shared: moods, notes, answers, memories and their photos, plans and notifications. This applies to both partners.
• Deleting your account (Profile › Account › Delete account) unpairs you and deletes your account, your profile and your avatar photo. Basic in-app events are kept without anything that identifies you.
• Records of purchases may be kept by Apple and RevenueCat as required for tax and accounting.
• Deleted data may remain in our server backups for a limited time until they are overwritten.

Your rights

Under UK and EU data protection law you can ask us to access, correct, delete or export your data, and to restrict or object to how we use it. You can delete your account yourself in the app, or export your data (Profile › Account › Export my data). For anything else, email us and we will reply within one month.

If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner’s Office (ico.org.uk) or your local data protection authority.

Age

Mittens is for people aged 18 and over. We don’t knowingly collect data from anyone younger. If you think a child has created an account, please contact us and we will delete it.

Security

Data is encrypted in transit, access is limited to each couple, and photos are private. No system is perfectly secure, but we work to protect your data and will tell you if a breach affects you, as the law requires.

Changes to this policy

If we change this policy, we will update the date above. If the changes are significant, we will let you know in the app.

Contact

Questions or requests: gabrielcapraru@gmail.com.