Privacy Policy

1. Who we are

Us (“the Service”, “we”, “us”) is operated by Daniel Atherton, based in the United Kingdom. Daniel Atherton is the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Contact: privacy@us-app.co.uk

2. What data we collect

When you use Us, we collect:

• Account information — your name and email address, provided when you sign up via Clerk (our authentication provider).
• Profile information — a display name and optional profile photo you choose to upload.
• Content you create — memories, journal entries, recipes, wishlists, plans, and any photos you upload. This content is stored securely and is only visible to you and your partner.
• Relationship data — your relationship start date and any milestones or events you create.
• Usage data — basic technical logs (IP address, browser type, timestamps) generated automatically when you access the Service.

3. How we use your data

We use your data to:

• Provide and operate the Service (lawful basis: contract performance)
• Authenticate your identity and keep your account secure (legitimate interests)
• Display your shared content to you and your partner (contract performance)
• Send transactional emails such as partner invite notifications (contract performance)
• Diagnose technical issues and improve the Service (legitimate interests)

We do not sell your data to third parties. We do not use your content for advertising or machine-learning training.

4. Third-party services

We use the following sub-processors to operate the Service:

• Clerk — authentication and session management. Your email address and name are stored with Clerk. Clerk Privacy Policy.
• Neon — PostgreSQL database hosting. All structured app data (memories, journal entries, recipes, etc.) is stored here. Servers are located in the EU (eu-west-2). Neon Privacy Policy.
• Amazon Web Services (AWS S3) — photo and file storage. Photos you upload are stored in an S3 bucket located in the EU (eu-north-1). AWS Privacy Policy.
• Vercel — hosting and deployment. Vercel Privacy Policy.

5. Data sharing

Your content is shared only with the one partner account linked to yours — nobody else can see it. We will not disclose your data to any other third party except where required by law (e.g. a valid legal request from a UK authority).

6. Data retention

We retain your data for as long as your account is active. If you request account deletion, we will delete your personal data and content within 30 days, except where retention is required by law. Photos stored in AWS S3 are deleted alongside your account.

7. Your rights under UK GDPR

You have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your data (“right to be forgotten”).
• Restriction — ask us to restrict processing of your data.
• Portability — receive your data in a structured, machine-readable format.
• Object — object to processing based on legitimate interests.

To exercise any of these rights, email privacy@us-app.co.uk. We will respond within one calendar month. You also have the right to lodge a complaint with the UK's supervisory authority, the Information Commissioner's Office (ICO).

8. Cookies and local storage

We use cookies and browser local storage solely to keep you signed in and remember small UI preferences (such as whether you have dismissed the install banner). We do not use tracking or advertising cookies.

9. Security

All data is transmitted over HTTPS. Passwords are never stored by us — authentication is handled entirely by Clerk. Photos are stored in a private AWS S3 bucket with access controlled via short-lived signed URLs.

10. Changes to this policy

We may update this policy from time to time. We will notify you of material changes by posting a notice within the Service. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions or requests, contact us at privacy@us-app.co.uk.