Privacy Policy

1. Who we are

SamePage is operated by Grady Harwood, a sole proprietor based in New York, United States ("SamePage", "we", "us"). We decide what happens to the personal data described here, which makes us the data controller for it.

Questions, requests and complaints go to support.samepage@gmail.com, and a person reads them.

2. What this covers

This policy applies to the SamePage iOS app, this website, our emails to you, and any support conversation you have with us. It does not apply to what a third party does on their own site or in their own app, even if we linked to it.

3. Where your check-ins live

This is the part most people care about, so it goes first, and the honest answer now has two parts.

How you talk stays on your phone. When you speak a check-in, iOS turns your voice into text on the device itself. No audio file is ever created, so there is none to upload, none to leak, and none to delete. Turning that text into a structured answer also runs on your device, using Apple's on-device models. Your words are not sent to us, to Apple, or to any AI provider for that step. This is a property of how the app is built, not a promise to tidy up afterwards.

What you confirm is shared. Every question ends with a review step where you see what the app understood and can edit it before confirming. Once you confirm an answer, it stops being something only your phone knows: the confirmed value — a score, a short summary, a quote, a selection, or something you typed directly — is sent to our servers and stored there, because that is how it becomes visible to your partner and how it survives a lost phone. Our servers are run for us by Supabase, a database and authentication provider; production data is expected to live in the United States, and we will name the specific hosting region here once we have confirmed it in writing with Supabase.

Partner sync is live. Once you and your partner have both created accounts and paired, you are a "couple" in our system, and the record above — check-in answers, pulse-check scores and topics, values, goals, and the timeline of sessions you have completed — is shared between you. Some activities use a "reveal lock": your partner's answer to a question is only shown to you once you have both answered it, so neither of you sees the other's answer first and edits your own to match.

4. What we do collect

Account and identity data

You need an account to use the shared parts of SamePage. You can create one with:

Sign-in method	What we receive
Sign in with Apple	Your email (or Apple's private relay address, if you choose to hide your email), and your name if Apple provides it and you allow it
Google Sign-In	Your Google account's email and name
Email code (no password)	Your email address, to send you a one-time code

We also store a first name, and a profile photo if you choose to add one. Once you are paired, your partner can see your name and your profile photo.

Things you give us

What	Why we have it
The name you use for your partner, and their email if you invite them	So the app can address you both, and so we can send the invitation you asked us to send
Onboarding survey answers — for example the focus areas you pick when you first open the app	To tailor the check-ins we show you. These are linked to an anonymous install identifier before you sign up, and to your account once you do.
Support emails, and notes from a pilot call if you take part in one	To answer you, and to improve the ritual

Things your device gives us

• Subscription status — whether you have an active subscription, which plan, when it renews or lapses, and an anonymous purchase identifier. Apple handles the payment itself.
• Device and app data — device model, operating system version, app version, language and region, and a randomly generated install identifier.
• Usage events — that a session was started, which step of the agenda was reached, that a check-in was completed, that a paywall was shown. These record that something happened, and are separate from the confirmed answers described above.
• Diagnostics — crash reports and error logs.

Permissions the app asks for

Each is requested only when the feature that needs it is used, and each can be refused or later withdrawn in iOS Settings.

• Microphone — so the app can listen while you talk instead of making you type.
• Speech recognition — so what you say becomes text, entirely on your device.
• Calendar — so your next check-in can be written into your calendar and the cadence survives you forgetting about the app. We read nothing else from your calendar.
• Photo library — if you choose to set a profile photo, or attach a photo to a check-in.

5. About sensitive topics

Some check-in topics are personal by design — money, family, sex, mental health. We do not ask you to disclose anything about your health, sex life, religious or political beliefs, or similar sensitive categories, and we do not analyze your answers to infer any of it. But because the format is open — you write or say what is true for you — you may choose to. If you do, that content is stored and shared the same as anything else you confirm into the record, per Section 3.

Pulse checks ask for a 1–5 score and a choice of topic areas from a fixed list (for example, "money" or "family") — this is structured data, not free text. Other check-ins include a short typed answer of your own words, shown side by side with your partner's. Both are part of the confirmed record described above.

We are reviewing with counsel whether specific state laws that define broad categories of "consumer health data" — Washington's My Health My Data Act is the one we are watching most closely — apply to SamePage now that confirmed answers leave the device, and what that means for how we should handle this data. If you have questions about this, email us.

6. What we deliberately do not collect

• No audio recordings, ever. iOS on-device speech recognition owns the microphone and hands back text.
• No raw transcript reaches us. What you said is turned into a reviewable answer entirely on your device before you ever see a confirm button.
• No advertising identifiers and no ad networks. SamePage carries no advertising and does not track you across other apps.
• No sale of personal data, and no sharing of it for cross-context behavioural advertising, as those terms are defined under US state privacy laws.
• No use of your check-in content to train AI models.

7. Who we share it with

Only the service providers we need to run the app, and only with the minimum each one needs. Every provider is contractually bound to use it on our instructions alone.

Provider	What it does	What it sees
Apple	App distribution, TestFlight, Sign in with Apple, payment and subscription billing	Your Apple purchase relationship, and your Apple ID email/name if you use Sign in with Apple. We never see your card details.
Google	Google Sign-In	Your Google account's email and name, if you choose this sign-in method
Supabase	Our database, authentication and file storage provider	Your account data and the confirmed check-in record described in Section 3 — this is the one provider that does hold check-in content, because it is the database we run on
RevenueCat	Subscription state management	An anonymous app user ID and your entitlement status
Resend	Delivers the emails we send you — invitations, sign-in codes, reminders	Your email address and the content of the email we send
Vercel	Website hosting	Standard web request data for this website only, not the app

We keep this list current, and if we add a provider that handles your check-in content we will update this policy before it goes live.

Everyone else

We disclose personal data outside that list only where we are legally required to — a court order, or a valid request from a regulator or law enforcement — where it is necessary to establish or defend legal claims, or to protect someone from serious harm. If SamePage is ever sold, your data may transfer to the buyer, who stays bound by this policy until you are told otherwise.

We do not share your data with academic researchers, insurers, employers, or anyone marketing to couples.

8. How it is protected

What is on your phone is protected by your phone: your passcode, Face ID, and iOS's own encryption of app storage. Data held on our servers is access-controlled so that only members of a couple can read that couple's record — enforced at the database level, not just in the app. Anything that reaches us travels encrypted and is stored encrypted. Access to production systems is limited to the people who need it to run the service, protected by multi-factor authentication.

No system is perfectly secure. If a breach affecting your personal data occurs, we will notify you and any regulator we are required to notify, within the timeframes the law requires.

9. How long we keep it

• Confirmed check-in content, values, goals and the session timeline — for as long as your account and your couple exist. You can ask us to delete your contributions at any time; see Section 11.
• Account and profile details — while your account is active, then deleted within 30 days of you asking us to close it. Deleting your account also removes your profile photo.
• Onboarding survey answers — kept, but no longer linked to you once your account is deleted; they are anonymised rather than erased, because we use the aggregate to improve the check-ins we design.
• Purchase and billing records — seven years, because tax law requires it.
• Usage events — 12 months, pseudonymised.
• Support emails — 24 months.
• Backups — deleted data persists in encrypted backups for up to 30 days before being overwritten.

If you and your partner separate: deleting your account removes you from the couple and deletes your profile data, but does not retroactively erase entries your partner also holds a copy of, because you each contributed to a shared record. If you would like your specific contributions removed from a shared record you are no longer part of, email us and we will do it by hand while we build a self-service way to do this.

10. Deleting your account

You can delete your account from the app itself (Settings → Delete account). This removes your profile photo, your login, and unlinks you from your couple. It does not automatically cancel an active subscription — cancel that separately through Apple, as described in the Terms of Service.

11. Your rights

Wherever you live, you can ask us to give you a copy of the data we hold about you, correct anything inaccurate, delete it, tell you who we shared it with, or stop sending you marketing. Every marketing email has an unsubscribe link, and it works.

Email support.samepage@gmail.com. We respond within 45 days, we will not charge you, and we will not treat you worse for asking. If we turn a request down we will tell you why, and you can ask us to look at it again.

If you live in California, Colorado, Connecticut, Utah, Virginia or another US state with a comprehensive privacy law

You have the rights above, including the right to know what we collect, to delete it, to correct it, to a portable copy, and to opt out of the sale of personal data, of sharing it for cross-context behavioural advertising, and of targeted advertising and profiling. We do none of those three things, so there is nothing to opt out of, but the request channel above is open regardless. You may use an authorised agent, and California residents may also designate someone to act after their death.

If you are a Washington or Nevada resident: see Section 5. We are actively working out how state consumer-health-data laws apply to a shared relationship record like this one, and we will update this policy as that work concludes. Contact us if you would like to discuss your specific rights under those laws now.

If you live in the UK or the EEA

The UK and EU GDPR give you the rights above plus the right to restrict or object to processing, and to withdraw consent at any time without affecting what was done before. Our lawful bases are: performance of a contract (running your account, your couple's shared record, and your subscription), legitimate interests (keeping the service secure, preventing abuse, and understanding through aggregate analytics which parts of the ritual work — weighed against your rights, using the least intrusive option available), consent (device permissions and marketing email), and legal obligation (tax records).

We are based in the United States, so data you send us is processed there. You can complain to your national data protection authority; in the UK that is the Information Commissioner's Office at ico.org.uk.

12. Children

SamePage is for adults building a life together. It is not directed at anyone under 18, and we do not knowingly collect data from anyone under 18. If we learn that we have, we delete it.

13. Changes to this policy

If we change this policy in a way that materially affects you, we will tell you in the app or by email before the change takes effect, and update the date at the top. Continuing to use SamePage after that means you accept the updated policy.