Privacy Policy
Love You, Bye
The short version
Your relationship lives between the two of you. We store what the app needs to work, encrypt it in transit and at rest, never sell it, never show ads, never track you across apps, and delete it when you ask.
Love You, Bye is made by Madilyn Thomas, an independent developer. Questions about anything here: maddie@madilynthomas.com.
What we collect and why
| Data | Why | Kept until |
|---|---|---|
| Email, or Apple's private relay address | Sign-in and account recovery | Account deletion |
| Display name, optional pronouns and avatar | How your partner sees you | Account deletion |
| Timezone | A fair shared "day" for streaks | Account deletion |
| Your content — answers, notes, chats, moods, photos, drawings, lists, dates | It is the product | Shared deletion, the unpair window, or account deletion |
| Optional coarse location (about 1 km) | The distance feature — only when you tap to share, and only visible while both of you share | Until you stop sharing |
| Device push token | Notifications you opted into | Sign-out |
| Purchase and subscription state | Premium features. Apple processes payment; we never see card details | Life of the account |
We do not collect precise or background location, your contacts, calendar, health data, or your photo library. When you add a photo we use Apple's picker for that single image, and we strip location and camera metadata before upload. There are no ads, no advertising identifiers, no analytics events, and no third-party trackers in this app.
Who can see what
- Your content is visible to exactly two accounts: yours and your paired partner's. This is enforced by database-level access rules, not by app politeness.
- Private moods, surprise dates, and gift claims are visible only to the person who created them — including hidden from your partner by design.
- Our support tooling shows only metadata (counts and statuses), never your content. Reading actual content requires a logged, documented emergency procedure.
- We never sell personal data or share it with third parties for their own purposes.
Who processes data for us
- Supabase — hosting and database, encrypted at rest.
- Apple — Sign in with Apple, push notifications, and payments.
Unpairing and deletion
- Either partner can unpair at any time; both immediately lose live access. Shared content is held for 30 days (export only), then permanently deleted.
- You can delete your account in Settings. Deletion completes within 30 days, including backups aging out. A contentless record that an account existed is retained.
- Permanently deleting a shared item, like a photo, needs both partners' confirmation — except where privacy or law requires an individual path.
- You can export everything as a JSON archive from Settings, free, any time.
Security
TLS in transit and encryption at rest, row-level security on every table and file bucket, least-privilege keys, and logs that never contain your content. We do not claim end-to-end encryption today. A phased plan for it is on the roadmap, and we will not claim it before the server is genuinely unable to read your content.
Children
Love You, Bye is intended for adults and is not directed at children.
Changes
We'll tell you in the app about material changes, and keep earlier versions available on request.
Last updated: 24 July 2026.