This page is maintained by My Best Solutions Limited (trading as Couples Digital Vault) to explain what personal data we collect, why, and the rights you have under UK GDPR.
Who we are
The data controller is My Best Solutions Limited(Company No. 14243668), registered in England & Wales and registered with the UK Information Commissioner's Office (ICO). You can reach us at hello@couplesdigitalvault.com or +44 20 4652 2307.
What we collect
- Account details — name, email address, password hash, and (optionally) a display name for you and your partner.
- Vault contents — the journal entries, photos, documents, goals, and other content you and your partner add. Encrypted at rest.
- Billing details — handled by Stripe. We store your Stripe customer ID and subscription state; we never see or store your card number.
- Usage analytics — only if you've accepted analytics cookies (see our Cookie Policy). Anonymous pageviews and device type.
- Support correspondence — emails you send us and our replies, kept for as long as the account is active.
Why we use it (purpose & lawful basis)
- To provide the vault — contract (UK GDPR Art. 6(1)(b)).
- To take payment — contract, via Stripe.
- To keep the service secure — legitimate interests (Art. 6(1)(f)): fraud prevention, abuse detection, backups.
- To improve the product — consent (Art. 6(1)(a)) via the cookie banner. Withdrawing consent is a one-click reset.
- To comply with legal duties — e.g. tax records, responding to lawful requests from authorities.
Who we share it with
We do not sell your data. We do not use your vault contents to train AI models. We share only the minimum necessary with these processors:
- AWS (UK region) — hosting and encrypted storage. Certified to ISO/IEC 27001.
- Stripe — payment processing (privacy policy).
- Google — Tag Manager & Analytics, only if you've accepted analytics cookies (privacy policy).
- Our AI concierge (Olivia) — when you choose to chat with her, the messages you send are processed by our AI provider to generate a reply. Your private vault contents are not sent unless you explicitly reference them in a message.
Where your data lives
Vault contents and backups are hosted in the United Kingdom on AWS infrastructure certified to ISO/IEC 27001. Some processors (Stripe, Google) may transfer limited data outside the UK under UK GDPR safeguards including the UK International Data Transfer Addendum and Standard Contractual Clauses.
How long we keep it
- Active accounts — for as long as your subscription is active, plus a short recovery window after cancellation so you can come back.
- Closed accounts — vault contents are deleted from live systems within 30 days of a deletion request. Encrypted backups are rotated out on our normal schedule (up to 90 days).
- Billing records — retained for 6 years to meet HMRC obligations.
Security
Vault contents are encrypted at rest (AES-256) and in transit (TLS 1.2+). Access is protected by password plus optional social sign-in. Passwords are hashed; we never see them. Row-level access controls ensure that only you and your linked partner can read your vault.
Your rights (UK GDPR)
You have the right to:
- Access a copy of your personal data.
- Correct anything that's inaccurate.
- Delete your account and personal data.
- Export your data in a portable format.
- Restrict or object to certain kinds of processing.
- Withdraw consent for analytics/marketing at any time.
To exercise any of these rights, email hello@couplesdigitalvault.com. We aim to respond within one calendar month.
Complaints
If you're unhappy with how we handle your data, please tell us first — we'll do our best to fix it. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
Cookies
See our Cookie Policy for the full list of cookies we set, categorised by purpose, and how consent controls which scripts load.
Changes to this notice
We'll update this page when our practices change and note the date at the top. Material changes will be flagged in-app or by email.