VowPing

VowPing Privacy Policy (Draft v1)

Draft v1 — requires attorney review before App Store submission. This is a working draft matched to the VowPing MVP data flows, not legal advice.

Effective date: [TBD — set at launch] Who we are: VowPing is a service of Fortune Five Ventures (DBA filing pending), California. Contact: privacy@vowping.app.

1. What we collect

  • Account info: email address, display name, timezone — for sign-in, nudge timing, support.
  • Spouse profile: her name, your story together, her likes, milestones, goals — for personalizing your message drafts, the core of the service.
  • Occasions: anniversaries, birthdays, custom dates — for occasion reminders and Pro gift/flower suggestions.
  • Drafts: generated texts and their status (pending/sent/skipped) — for history and reuse.
  • Nudge settings: daily nudge time, tone preference — for delivering the nudge when you want it.
  • Affiliate clicks: which flower/gift/restaurant link you tapped, when — for commission attribution.
  • Device info: push token (only if you enable notifications) — for delivering nudges.

We do NOT collect: your location, your contacts, your messages with your spouse, payment card details (handled by the app store / payment provider), or anything about your spouse beyond what you choose to enter.

2. How we use AI — and what we promise

To write your drafts, we send the relevant parts of your spouse profile to our AI provider (an LLM accessed via API).

  • We never use your responses, drafts, or profile content to train AI models. Our provider agreement prohibits training on API inputs, and we request zero data retention where the provider offers it.
  • Drafts are generated for you alone. Nothing is shared with advertisers or data brokers.

3. Who we share data with (sub-processors)

  • Supabase — hosts our database and authentication.
  • AI provider — generates message drafts from your spouse profile.
  • Email provider — sends nudge reminder emails if you enable them.
  • Affiliate networks — receive only the fact that you tapped a flower/gift/restaurant link, so commissions can be attributed.

We do not sell personal data. We do not share your spouse profile with affiliate partners — they see a click, nothing more.

4. How we protect it

  • Encrypted in transit (TLS) and at rest.
  • Spouse profile free-text fields are additionally encrypted at the column level. Encryption keys are stored separately from the database and never in our code.
  • Database access is restricted per-user: one user cannot read another user's data.

5. How long we keep it

  • Drafts: until you delete them. Skipped drafts are automatically purged after 90 days.
  • Affiliate click records: 13 months, then purged.
  • If you delete your account: encrypted profile data is destroyed immediately (crypto-shredding), and all remaining data is hard-deleted within 30 days.

6. Your rights

You can, at any time, in Settings: see and download everything we hold about you (self-serve JSON export); correct your profile and settings; delete your data and your account.

If you are in the EU/UK, you also have the right to restrict or object to processing, to withdraw consent, and to lodge a complaint with your data protection authority. Our lawful bases are contract (providing the service) and consent (optional features like marketing emails, off unless you opt in).

California residents: we do not sell or share personal information as defined by the CCPA/CPRA.

7. Children

VowPing is for adults (18+) only. We do not knowingly collect data from anyone under 18.

8. Changes to this policy

We will post changes here and update the effective date. Material changes get an in-app notice. Continued use after changes take effect means you accept them.

9. Contact

Questions about privacy: privacy@vowping.app. EU/UK users will be given a designated contact before EU launch.