Privacy Policy
Effective date: October 29, 2026 · Last updated: October 29, 2026
1. Who we are
CoupleMoment is operated by Ravid Zer, an individual based in Israel ("we", "us"). We decide how your personal information is used (we are the "controller"). This policy explains what we collect in the CoupleMoment apps, on couplemoment.com and on date-invite pages, why, who we share it with, how long we keep it, and your rights. Contact: hello@couplemoment.com.
The short version
- We collect what we need to run the app: your account, what you create, and how you use the app.
- We don't sell your personal information for money, and we never give your app data (your account, answers, chats, photos or AI conversations) to advertisers.
- The app has no ad trackers and no third-party analytics SDK. Our website uses the Meta Pixel for ad measurement, and PostHog for analytics. You can turn them off (see §9).
- Your partner, or someone you connect with, sees only what you share with them. Nobody can browse users: someone can find you only with your exact username or a code you give them.
- The AI coach sends what you type to Anthropic to generate a reply. We ask your permission first. Your name and your partner's name are not sent.
- You can delete your account, or your guest data, in the app at any time.
2. What we collect
| Category | What | Where it comes from |
|---|---|---|
| Account | Email address, display name, username (optional), profile photo (optional), sign-in method (Apple, Google or email). With Sign in with Apple you can hide your email | You, Apple or Google |
| Guest data | If you play without an account: a random anonymous ID, the stage you chose (single, dating or couple), your progress, avatar and rewards | Created when you play as a guest |
| Relationship | Couple link, couple code, "together since" date if you add it, stage, coach choice (Mia or Max) | You and your partner |
| Content you create | Answers to questions and games, journal entries and moods, memories, photos you choose, lists, favourites, calendar plans, messages to your partner | You |
| Date invites (where available) | The invite (idea, time, place, a short note), its status, date connections (who you connected with and when), your "I'm 18 or older" confirmation and when you gave it | You and the people you connect with |
| People you invite who don't use CoupleMoment | If they tap "I'm in" on the web: the first name they type. See §6 | The invite recipient |
| Avatar and progress | Avatar look, unlocked items, XP, levels, streaks, quests and rewards | The app |
| AI coach | What you type to Mia or Max, and a short context (see §4) | You |
| Purchases | Subscription status, product, price, purchase, renewal and expiry dates, store transaction IDs, and on iOS an Apple Search Ads attribution token (which ad campaign, if any, led to the install). We never see your card details | Apple or Google, via RevenueCat |
| Safety | Your block list, reports you file (with the content you report), reports about your content, and abuse-prevention logs that store a one-way hash of your IP address, never the address itself | You, other users, our systems |
| Device and notifications | Push token, platform, app version, notification settings | Your device |
| App usage | Which features and screens you use (for example "game completed", "invite sent", "paywall shown"), the onboarding version you were shown (we test versions), whether you're a guest, platform, app version, and a country code taken from your phone's language and region setting (not from your location) | The app (our own analytics, stored in our database) |
| Email choices | Whether you turned on tips or offers emails, when and where, unsubscribes, and a log of the emails we sent you | You, our email system |
| Support | Messages and feedback you send us | You |
| Website | IP address, browser and device, pages visited, the link that brought you, clicks, and (see §9) session recordings with every typed field masked | Your browser, our hosting and analytics providers |
| Holiday photo tool (website, couplemoment.com/holiday) | The photo you upload. See §7 | You |
We don't collect: precise location (GPS), your contacts or address book, photos other than the ones you pick, your date of birth, government ID, payment card data, or your device's advertising ID (IDFA/AAID). If you allow calendar access, the app adds your shared couple events to a CoupleMoment calendar on your device.
Personal topics. Some features invite personal topics: intimacy question packs, moods, what you tell the AI coach about your relationship or how you feel. We treat this as sensitive. We use it only to provide the feature you asked for. We don't use it to infer things about you, for advertising, or for any other purpose, and we don't sell or share it. Washington, Nevada and Connecticut residents: see our Consumer Health Data Privacy Policy.
3. How we use it, and why we're allowed to
- Run the app (to perform our contract with you): accounts and sign-in, saving guest progress and moving it to your account when you sign up, syncing what you share with your partner or a date, invites, notifications you allow, purchases and restores.
- Your experience (contract): question packs, games and date ideas for your stage, your avatar and progress, the AI coach.
- Safety and abuse prevention (our legitimate interest in a safe service, and legal duties): filtering invite text and names, reviewing reports, enforcing blocks, rate limits, keeping the service to adults, crisis resources in the AI coach.
- Improve the app (legitimate interest): measuring which features and onboarding versions work, and fixing bugs. We use our own first-party analytics and look at aggregate results.
- Emails (contract for account emails; your consent for tips and offers): see §5.
- Legal (legal obligation): taxes and accounting, responding to lawful requests, enforcing our Terms.
We don't make automated decisions that have legal or similarly significant effects on you. An automated filter can stop invite text from being saved; email hello@couplemoment.com if you think it got it wrong.
You don't have to give us any information by law. Without an account email we can't save a full account; without a message, the AI coach can't answer.
4. The AI coach (Mia and Max) and Anthropic
- Mia and Max are AI characters. When you message them, your message, your recent messages in that conversation (up to the last 20) and a short context go through our server to Anthropic (the Claude API) to generate a reply. The context is: your stage and how long you've been together, interests you chose, your streak and level, topics you discussed before, and how many coach sessions you've had and when the last one was.
- Not sent: your name or your partner's name, your location, your email or account ID, your photos, your journal, or your chats with your partner or a date.
- We ask your permission before your first message, and you can withdraw it in the app's privacy settings.
- Anthropic processes this as our service provider. Under its commercial terms it doesn't use it to train its models, and keeps it only for a limited time for trust and safety (see Anthropic's privacy center).
- Where the conversation is stored: on your device (the last 100 messages), not on our servers. It's erased when you clear it, delete the app or delete your account.
- Safety: every message is checked on our server for signs of suicide, self-harm, abuse or danger. If there are signs, the coach shows crisis resources instead of coaching. We keep only daily counts of how often this happens, never who or what was said. See our AI safety protocol.
5. Emails we send
Account emails go to every account holder as part of running the account: confirming your email, signing in, resetting your password, confirming an email change, purchase receipts, a notice when auto-renew is turned off, and a yearly reminder that your subscription renews automatically (price and how to cancel). You can't turn these off while you have an account and subscription.
Tips and offers emails are off unless you turn them on in the app's notification settings: tips and a weekly recap, and occasional Premium offers. We record when you turned them on. Every one has a one-tap unsubscribe link, and you can also turn them off in the app; we stop right away, and within 10 business days at the latest. We send at most one tips or offers email a day. To personalise them we use your first name, your partner's first name, your couple level and how many games you played that week. We don't read your answers, chats or notes for this, and we don't track whether you open our emails.
We never email or text people you invite. If an email bounces or is marked as spam, we stop emailing that address.
6. If someone invited you (and you don't use CoupleMoment)
If you open a date invite on the web, we process the invite link and standard technical data (IP address, browser) to show you the page; our abuse-prevention log keeps only a one-way hash of your IP address. The page has no analytics or ad trackers. If you tap "I'm in", we collect the first name you type and show it to the person who invited you. We clear your first name 30 days after the planned date (or after the invite expires, if later) and delete the invite after 90 days. We don't add you to any list and we never email or text you. To have it deleted sooner, email hello@couplemoment.com with the invite code.
7. Who we share it with
We share personal information only with these service providers, who process it for us under contract and may not use it for their own purposes, and as described under "Other cases":
| Who | Why | What |
|---|---|---|
| Supabase (US) | Database, sign-in, file storage, server functions | All app data |
| Anthropic (US) | AI coach replies | See §4 |
| RevenueCat (US) | Subscriptions | Your anonymous app user ID, purchase records, the Apple Search Ads attribution token |
| Apple, Google | Sign-in, payments, push delivery | What their services need |
| Expo (US) | Push delivery and app updates | Push token, notification text |
| Resend (US) | Sending our emails | Email address, first name, the details in the email |
| Vercel (US) | Website hosting | Server logs (IP address, browser) |
| PostHog (US) | Website analytics only | See §9 |
| Meta | Website ad measurement only | See §9 |
| OpenRouter and Google (US) | The website holiday photo tool only | The photo you upload, to create the holiday image. See below |
| Cloudflare | Bot protection, if shown at sign-up | A browser check, not stored by us |
| Slack | Internal alerts about new feedback | The feedback you sent and your reply-to email |
Holiday photo tool (website). When you upload a photo at couplemoment.com/holiday, it's sent through OpenRouter to Google's Gemini image model to create your holiday image, which is sent back to your browser. We don't store the photo or the result on our servers, and we don't analyse, measure or compare faces. Only upload photos of people who agreed. We limit use per device with a one-way hash of your IP address.
Movie and horoscope data (TMDB, JustWatch, a horoscope data service) is fetched by our servers; nothing about you is sent.
Affiliate links. When you tap an affiliate link (for example Amazon), you leave CoupleMoment. The partner sees the click and our affiliate tag and handles your visit under its own policy. We don't send them your name, email or any app data.
Other cases. We may disclose information to comply with the law or a valid legal process; to protect someone from imminent harm (including reporting child sexual exploitation to NCMEC); to enforce our Terms; or to a buyer of the Service or a company we form to run it, who must keep this policy's promises, with notice to you.
8. How long we keep it
| Data | How long |
|---|---|
| Account and content | Until you delete it or your account |
| Guest (anonymous) accounts | Deleted after 30 days with no activity, or right away when you delete your guest data |
| Date invites | The web "I'm in" first name is cleared 30 days after the planned date or expiry; the invite is deleted after 90 days |
| Ended date connections | Deleted 90 days after they end |
| Reports and the reported content | 1 year after we review them; reports about you are kept without your account ID if you delete your account |
| App usage analytics | 24 months, or until you delete your account |
| AI coach conversations | On your device only (§4); our crisis counts contain no personal information |
| Purchase records | Up to 7 years for tax and accounting; when you delete your account they are kept without your account ID |
| Email choices and our log of emails sent | Until you delete your account. If you unsubscribe or an email bounces, we keep the address only so we don't email it again |
| Abuse-prevention logs (hashed IP) | From 1 hour to 1 day |
| Website analytics (PostHog) | Up to 12 months; session recordings up to 30 days |
| Server logs | Up to 90 days |
| Backups | Deleted data can stay in encrypted backups for up to 30 days |
Deleting your account. Delete your account in the app (Profile → Delete Account) or follow the steps at couplemoment.com/delete-account. Deletion is immediate, except the records listed above. Your photos are deleted from our storage. If you signed in with Apple, we also ask Apple to revoke our access to your Apple ID. Deleting your account doesn't cancel a store subscription.
9. Website analytics, pixels and your choices
On couplemoment.com (not in the app):
- PostHog measures how pages are used: pages visited, the link that first brought you, clicks, and session recordings of how a page is used, with everything you type masked. It is not loaded with your app account data.
- Meta Pixel (and the TikTok Pixel, if we turn it on) measures whether our ads work and lets us show our ads to people who visited the site. It receives your IP address, browser data, cookie IDs, the pages you visit and a few actions (for example tapping our App Store link). Meta and TikTok use this under their own policies. The pixels don't load while you're signed in to the web app, and they're never in the app.
- Google Fonts may receive your IP address when a page loads its fonts.
Under California and some other state laws, letting the ad pixels collect this can count as "sharing" personal information for cross-context behavioral advertising or "targeted advertising" (and some states may call it a "sale"). You can opt out:
- with the button below (it turns off the ad pixels and session recordings in this browser);
- by turning on Global Privacy Control in your browser: we honour it automatically, for the pixels and the recordings;
- by blocking third-party cookies, or in your Meta and TikTok ad settings.
In the app: open this page at couplemoment.com/privacy-policy in your browser to use the button. The app itself doesn't use these tools.
10. Your rights and choices
Everyone, wherever you live, can:
- get a copy of your data, or ask us to correct or delete it (email hello@couplemoment.com; we reply within 30 days, and within 45 days where a state law allows that);
- edit your profile and delete your account or guest data in the app;
- withdraw AI-coach permission, turn off notifications, and turn emails on or off;
- opt out of the website pixels and recordings (§9).
US state privacy rights. Depending on where you live (including California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia), you may have the right to: know what we collect and access it; correct it; delete it; get a portable copy; opt out of "sale", "sharing" for targeted advertising, and profiling (we don't profile you, and the only advertising activity is the website pixels in §9); limit the use of sensitive personal information (we already use it only to provide the service you asked for); and not be treated differently for using these rights. We honour these rights for everyone, whether or not a state's law applies to us.
To use them, email hello@couplemoment.com or use the in-app tools. We verify a request by matching it to your account (for example from your account email). You may use an authorised agent; we may ask for proof of the authorisation. If we deny your request, you can appeal by replying with "Appeal"; we'll answer within 45 days (60 in some states). If you're still unhappy, you can contact your state attorney general.
California notice. In the last 12 months we collected: identifiers (email, user IDs, IP address); customer records (name, email); commercial information (purchases); internet or other electronic network activity (app usage, website browsing); inferences (none); audio, electronic or visual information (photos you upload); and sensitive personal information (account login, and the content of your messages and personal topics you choose to share), for the purposes in §3 and from the sources in §2. We disclosed these to the service providers in §7. We "shared" website identifiers and browsing activity with Meta for cross-context behavioral advertising (§9), and we don't sell personal information for money. We don't use sensitive personal information to infer characteristics. We don't knowingly sell or share the personal information of anyone under 16. Retention is in §8. "Shine the Light": we don't share personal information with third parties for their own direct marketing. Financial incentive: we don't offer any in exchange for personal information.
Israel. We operate from Israel, so Israel's Protection of Privacy Law also applies to us. You have the right to see the information we hold about you and to ask us to correct or delete it, by emailing hello@couplemoment.com. Providing information to us isn't required by law; we use it for the purposes and share it with the recipients described above.
11. Children and age
CoupleMoment is for adults 18 and over, and it isn't directed to children. We don't knowingly collect personal information from anyone under 18, and we don't knowingly collect any from children under 13. If we learn that a user is under 18, we close the account and delete its data. If you think a minor is using CoupleMoment, email hello@couplemoment.com.
12. Security
We use encryption in transit (TLS) and at rest, row-level security so each person can read only their own and shared data, server-side checks on every request, rate limits, and regular security reviews. Messages are not end-to-end encrypted: our systems can access them to deliver them and to handle a report. No system is perfectly secure. If a breach affects your personal information, we'll notify you and the authorities as the law requires.
13. Where your data is processed
Our servers are in the United States (Supabase, US East). We operate from Israel and access data from there to run and support the service. Our service providers may process data in other countries under contractual safeguards.
14. Changes
We'll post updates here and change the "Last updated" date. For material changes, we'll tell you in the app or by email before they take effect, and ask for your consent where the law requires.
15. Contact
Questions, requests and complaints: hello@couplemoment.com. We reply within 48 hours, and to privacy requests within 30 days.