Privacy Notice — Couples Digital Vault

Couples Digital Vault is a trading name of My Best Solutions Limited.

Who we are

The data controller and service provider is My Best Solutions Limited, registered in England & Wales (company number 14243668). Registered address: 167–169 Great Portland Street, 5th Floor, London W1W 5PF. ICO registration number: ZB623638. Singles Digital Vault and Couples Digital Vault are trading names of My Best Solutions Limited. Contact: hello@couplesdigitalvault.com or +44 20 4652 2307.

What we collect

Account details — name, email address, password hash, and (optionally) a display name for you and your partner.
Vault contents — the journal entries, photos, documents, goals, and other content you and your partner add. Encrypted at rest.
Billing details — handled by Stripe. We store your Stripe customer ID and subscription state; we never see or store your card number.
Usage analytics — only if you've accepted analytics cookies (see our Cookie Policy). Anonymous pageviews and device type.
Support correspondence — emails you send us and our replies, kept for as long as the account is active.

Why we use it (purpose & lawful basis)

To provide the vault — contract (UK GDPR Art. 6(1)(b)).
To take payment — contract, via Stripe.
To keep the service secure — legitimate interests (Art. 6(1)(f)): fraud prevention, abuse detection, backups.
To improve the product — consent (Art. 6(1)(a)) via the cookie banner. Withdrawing consent is a one-click reset.
To comply with legal duties — e.g. tax records, responding to lawful requests from authorities.

Who we share it with

We do not sell your data. We do not use your vault contents to train AI models. We share only what each provider needs to do its job:

Hosting: Lovable Cloud, on Amazon Web Services (Tokyo, Japan): our database and file storage. They hold everything in your vault, so the service can run. Hosted on Amazon Web Services, whose data centres are certified to ISO/IEC 27001.
Lovable: runs the app and passes our AI requests on to the right provider. When you speak to the assistant, your recording is sent through Lovable to OpenAI to be turned into text.
Anthropic (the AI assistant): sees the messages you send the assistant and the parts of your vault needed to answer them. Under Anthropic's Commercial Terms, Anthropic may not train its models on this content.
ElevenLabs (voice): sees the text of replies it reads aloud, to turn them into speech, under its Data Processing Addendum.
Stripe (payments): sees your name, email, billing address and card details. We never see or store your card number (privacy policy).
Resend (email): sees your email address and the content of the emails we send you.
Google: Tag Manager and Analytics, only if you've accepted analytics cookies (privacy policy).

Where your data lives

Our database and file storage are hosted in Japan with Amazon Web Services. The UK recognises Japan as providing adequate protection for personal data (UK–Japan data adequacy). Some other providers (Anthropic, ElevenLabs, Stripe, Resend, Google) may process limited data outside the UK under UK GDPR safeguards, including the UK International Data Transfer Addendum and Standard Contractual Clauses.

Date Safety pilot: identity and check-ins

Only authorised test accounts can use this pilot. We do not check ID, and we do no face matching or biometric processing. If you choose to make a Date Card, we store your first name, a photo you take live with the in-app camera (uploads and gallery photos are not accepted), the date it was taken, the month you joined, and any links you choose to add.

Your Date Card is seen only by the one person you share it with, and only after they accept your single-use link. You can withdraw it at any time; it stops showing to them straight away and the photo is deleted. The photo is also deleted when the date plan closes, or 24 hours after the planned end at the latest, and when your account is erased. The other person could take a screenshot of your card. Only share it with someone you're comfortable seeing it. Date Card records are never shared with a linked partner’s vault.

Trusted contacts must accept their invitation before alerts can be sent. Alerts are sent by email. Automatic check-in alerts do not contact emergency services. Location is shared only after a tap for that date, never tracked in the background, and wiped when the date plan closes. Consent may be withdrawn by withdrawing your Date Card or closing the date plan.

How long we keep it

Active accounts — for as long as your subscription is active, plus a short recovery window after cancellation so you can come back.
Closed accounts — vault contents are deleted from live systems within 30 days of a deletion request. Encrypted backups are rotated out on our normal schedule (up to 90 days).
Billing records — retained for 6 years to meet HMRC obligations.

Security

Encrypted at rest with AES-256 and in transit with TLS. Access is protected by password plus optional social sign-in. Passwords are hashed; we never see them. Row-level access controls ensure that only you and your linked partner can read your vault.

Your rights (UK GDPR)

You have the right to:

Access a copy of your personal data.
Correct anything that's inaccurate.
Delete your account and personal data.
Export your data in a portable format.
Restrict or object to certain kinds of processing.
Withdraw consent for analytics/marketing at any time.

To exercise any of these rights, email hello@couplesdigitalvault.com. We aim to respond within one calendar month.

Complaints

If you're unhappy with how we handle your data, please tell us first — we'll do our best to fix it. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

Cookies

See our Cookie Policy for the full list of cookies we set, categorised by purpose, and how consent controls which scripts load.

Changes to this notice

We'll update this page when our practices change and note the date at the top. Material changes will be flagged in-app or by email.