Dovelet Privacy Policy

Last updated: October 23, 2026

Dovelet is a couples app that two adults use together. This policy explains what information we collect and why, who can see what, how long we keep it, and your rights.

Data controller: Hazim Okutan, an individual developer based in New Jersey, USA, publishing Dovelet. Contact: [email protected].

Support: [email protected]. Child safety: [email protected].

1. Information we collect

• Account: your name, email address (which may be Apple's private relay address if you sign in with Apple), your account identifier if you sign in with Apple or Google, and your date of birth.
• Your preferred form of address, if you choose to provide it (for example, "querida," "querido," or "sin género" in Spanish). We use it only to word sentences addressed to you correctly in languages that require this grammatically: Spanish, Portuguese, French, and Italian.
• What you share with the person you are paired with: notes, drawings, photos, taps, daily question answers, a shared list, mood, special days, the state of your shared plant or pet, and your relationship start date and next meeting date.
• City: with your permission, the city found from your phone's approximate location, or the city you select manually. Only the city name and a point rounded to roughly 10 km are sent to the server. We keep only the latest value.
• Language and time zone: to show the app in your language and send notifications at the right time.
• Device and session: notification token, device name, app version, and last day of use.
• Purchases: your Plus subscription status, gifts you have bought, and the store transaction identifier. Your payment information stays with Apple or Google.
• Gifts: the type and date of gifts you send and receive.
• Share card requests: when you ask your partner to let you share a card containing their initial or answer, the type and status of that request (7 days).
• Security records: people you have blocked, invitations, and reports. For attempt limits, a hash of your IP address that changes daily (we do not store the IP address itself). Your IP address stays in our service providers' server logs for a short time.
• Counts that are not linked to individuals, such as "how many couples paired today." These counts do not identify you.
• Three yes/no flags kept for your couple for up to 30 days to measure sales (for example, "was the purchase page opened in the first week?"). We do not record the time or who opened it. Your partner cannot see these flags. After 30 days, they are deleted and become only an aggregate count.

2. Information we do not collect

We do not collect continuous location, location history, your contacts, your entire photo library (we receive only the photo you select), an advertising identifier, or online or last-seen status. We do not use analytics, advertising, or crash-reporting libraries. Location and device information in your photos (EXIF) is removed on your phone before upload.

On your phone: your partner's notes and photos stay on your phone for up to 30 days, encrypted and excluded from backups. They are also deleted from your phone when you sign out, end the pairing, or delete your account.

3. Why we collect information and our legal bases

4. Sensitive data

Your preferred form of address, considered together with who your partner is, may lead to assumptions about your sexual orientation. We therefore protect it as sensitive data. We record it only with your separate, explicit consent, never show it to your partner, and do not use it for any other purpose. You can withdraw consent by selecting "Neutral" in Settings. The record is deleted immediately.

5. What your partner can see

Your partner can see:

• Your name (your partner can give you a nickname on their own phone) and your birthday (only the day and month, not the year).
• Your time difference (whether it is night or day), city name, and weather, only if you enable sharing. The distance between you (a rounded number), only if both of you enable sharing. When you turn sharing off, the information disappears immediately and your partner is not notified.
• Only "Sharing" or "Not sharing" for each of your sharing settings.
• Notes, drawings, photos, thank-you notes, and "Let's make up" notes you send (if you delete them, they disappear for your partner too), gifts you send (but not their price), your taps, and your responses.
• Your daily question answer, only after both of you have answered.
• Your mood, if you choose to share it (24 hours), and your break message (when you take or extend a break, or say "I'm ready to talk").
• Your shared list (it does not show who added or checked off an item), your shared plant or pet, and your shared counts (without distinguishing between people), and special days (a "difficult day" is shared only if the person who added it chooses to share it).
• Your relationship mode (long-distance or nearby), and the relationship start date and wedding date that both of you have approved.
• That Plus is active and who pays for it (but not the price or plan).

Your partner never sees:

• When you do what: whether you are online, your last-seen status, a typing indicator, read receipts, or battery level; when you open the app, widget, or a notification; whether you have visited today or who watered the plant; whether you have answered the daily question (until your partner writes their own answer), or when you answered. The only exception: if you send a "Remind" gesture, they can tell from that gesture that you have answered. Whether you opened their note, did not respond to a tap, how many times you tapped or reached the limit, or who did what on the list. Your mood history, or the number of breaks or "Let's make up" notes (we do not keep these).
• Your settings: notification settings and quiet hours, what you have muted or hidden, your "What appears on my screen" choices, your response to photo approval, whether you have added a widget, discreet view, app lock, or the nickname you gave your partner. Whether you never enabled sharing or turned it off later (both appear as "Not sharing," and no notification is sent when you turn it off). Toggles that change only your screen (birthday reminders, showing counts, keeping your initial and answers off cards). Your choice for "What do you call them?"
• Your account and personal information: preferred form of address, birth year, email address, sign-in method, sessions, or device. Your payment details (card, receipt, refund, payment issue, price of a gift you sent, or gift refund). Your location point or time zone region.
• Safety information: the content or person you reported; that you opened the Help and safety page or used "Leave quietly"; that you blocked them (your partner sees the same screen as when a pairing ends); your reason for pausing or ending the pairing (we do not ask or record it); that you answered "Not this time" to a share card request or did not answer.

The app's Settings > What am I sharing page shows this in one place. Your partner can take screenshots. In v1, we cannot notify you when they do.

6. What we can see

Your notes and photos are not end-to-end encrypted. They are protected on our servers, but we can technically access them. We do this only when content is reported, during a security incident, or when legally required. Only an authorized person views the content, and every access is logged.

If you report content, that content and your report are sent to us for review. We do not tell your partner that you reported it.

7. Who we share information with

We do not sell your data, use it for advertising, or give it to anyone for tracking. Our service providers process your data only on our behalf:

Notifications do not contain your note or photo. Apple and Google carry only a signal that "there is something new."

We provide information to authorities only through a valid legal process and only to the extent necessary. For child sexual abuse content, we make the report required by law (to NCMEC in the United States; see our child safety standards in section 14).

8. International transfers

Your data is stored in the United States. It passes through Apple and Google servers for notifications, sign-in, purchases, and weather. These servers may be in other countries. We are based in the United States. Your data may be accessed from the United States when we review a report, handle a support request, or respond to a security incident (section 6). We use the safeguards required by law for these transfers.

9. How long we keep information

Full list: account deletion page.

10. If you end the pairing

Your access to your partner's content ends immediately, and so does their access to yours. For content you added (including gifts you received), you choose: delete it immediately, or keep it accessible only to you for 30 days (you can download or delete it during that time), then delete it. Shared items (the plant or pet, countdown, and special days) are deleted after 30 days. No notification is sent to your partner. The next time they open the app, they see a calm "Pairing ended" screen. Their widget also returns to a neutral state without your content.

Content may remain in the cache on your partner's phone for a while. We cannot delete screenshots your partner has taken.

11. If you delete your account

Go to Settings > Security > Delete my account, or account deletion page. Your account and everything you added are deleted. Your pairing ends immediately. Deletion is completed within 24 hours, and the data is removed from backups within 30 days at the latest. Purchase records are unlinked from you and kept for the legally required period.

Deleting your account does not stop your subscription. Cancel it through the App Store or Google Play. If you pay for Plus, your partner's Plus also ends when your account is deleted.

12. Your rights and support

You have the right to access, correct, delete, and transfer your data (Settings > Download my memories), object to its processing, and withdraw consent. You can do most of this yourself in the app. You can write to us at [email protected]. We will respond within 30 days. If we deny your request, we will explain why. You can ask us to review the decision at the same address.

You have the right to complain to the data protection authority in your country (the Personal Data Protection Authority in Türkiye; your country's authority in the EU; your state attorney general or the FTC in the United States). If you live in the United States, see section 16 too.

To prevent someone else from taking over your account, support follows these rules:

• Support does not change, open, delete, or transfer an account based only on a claim in an email. An email's sender line can be forged. We do not request or store identity documents. We do not offer phone support.
• We accept only two forms of proof: an active session in the app with recent reauthentication, or use of a link or code we sent to the email address registered to your account. Without either, we cannot take action.
• Changing your email address, adding or removing a sign-in method, ending or pausing a pairing, and blocking are available only in the app. Support shows you how but does not do these things for you.
• Account deletion on the web is available only through a link sent to the email address registered to your account (account deletion page).
• For safety, you cannot later change your date of birth yourself in the app. If you entered it incorrectly, request a correction in the app (Settings > Account > "My date of birth is wrong," with reauthentication). We correct it once during the account's lifetime, and only if both dates indicate an age of 18 or older. We do not make a correction that changes an age under 18 to an age over 18. We direct correction requests received by email to the app.
• An appeal against an age decision is possible only with age information from Apple or Google. Use the same sign-in method and tap "Appeal" on the "Your account has been closed" screen (section 14).
• Account recovery: if you linked a second sign-in method, use it. If you lose your sign-in method (Apple ID, Google account, or email inbox) and have no other method linked, we cannot access or recover your account. We say this clearly because another route would also be open to an attacker. You can create a new account and invite your partner again. Your partner can end the old pairing in Settings.
• We do not take action on another person's account (your partner's or a family member's), and we do not disclose whether an email address has an account.
• Every action by support is logged (who, when, which account, and why). Content is not included in that log.

13. Security

Data is encrypted in transit. Each user can access only their own data and data shared with their partner. Photos are stored in a nonpublic storage area and can be opened only through a private URL that lasts a few minutes. Our team accounts use two-factor authentication, and every access to content is logged. If a data breach occurs, we notify the authority and, where necessary, you within the period required by law.

14. Age limit

The app is for people 18 and older. We ask for your date of birth when you register. Where your phone supports it, we also use age information from Apple or Google. If you are under 18, we do not create an account or store your date of birth. We keep only a one-way hash of your sign-in identifier to prevent another attempt with the same account for 12 months. If we learn that someone is under 18, we close their account and delete their data.

Our child safety standards: child safety standards.

15. Changes

If we change this policy, we will notify you in the app. For a significant change, we will ask for your consent again if needed.

16. If you live in the United States

This section addresses privacy laws in California (CCPA and CPRA, CalOPPA), New Jersey, and other states.

• We do not sell your personal information or share it with anyone for personalized advertising. Because we have never done this, we do not offer a separate "do not sell" option.
• Your rights: learn what information we keep about you, receive a copy (Settings > Download my memories), correct it, and delete it. Write to [email protected] to exercise these rights. We will respond within 30 days. We verify your identity only through an active session in the app or a link we send to your registered email address (section 12).
• If we deny your request, we will explain why, and you can ask us to review the decision. If you are not satisfied with the outcome, you can contact your state attorney general.
• We do not reduce your service or change the price because you exercise your rights.
• Sensitive information: we record your preferred form of address only with your separate, explicit consent (section 4). We do not collect precise location.
• We do not take specific action in response to browsers' "Do Not Track" signals because we already do not track anyone in the app or on the website.
• We do not knowingly collect information from children under 13. The app is for people 18 and older (section 14).
• If a data breach occurs, we give notice in the order and within the time required by law (in New Jersey, first to the state police, then to you without delay).