Privacy Policy
Pairly Widget ("Pairly") is an app for two partners to share notes, drawings and photos. This policy explains what data we collect, why, and the choices you have. We do not show ads and we do not sell your data.
Who we are
Pairly is operated by Emre Taş, an independent developer and data controller based in Türkiye. Contact: pairlywidget@gmail.com.
Data we collect
- Account data. When you sign in with Apple, Google or an email link, we receive your email address and, if the provider shares it, your name. You can also start as a guest; a guest account has an identifier but no email until you link a sign-in method.
- Profile data. The first and last name, profile photo, partner nickname, relationship type and app language you choose to set.
- Partner link. Which account you are linked with, and the invite codes used to link.
- Content you share. Notes, drawings and photos you send, reactions, and settings such as Scratch to Reveal or a Time Capsule unlock time. Live Canvas sessions store drawing strokes, stickers, text and images while a session runs, and, if replays are on, an encrypted replay.
- Encryption keys. Each phone creates its own private key, which stays on the device. We store the matching public keys, device identifiers and encrypted copies of your shared conversation key, so that your partner's phones can decrypt notes.
- Device and app data. Push notification tokens (Apple Push Notification service, Firebase Cloud Messaging and Live Activity tokens), app version, build number and platform.
- Purchases. Whether you or your partner has an active Pairly Pro purchase, and the store transaction details we need to verify it. Payments are handled by Apple or Google; we never receive your card details.
- Usage analytics and diagnostics. Events such as screens opened, features used and errors, together with your account ID, email address, name, app version and device type. Session recording is turned off.
Pairly accesses your camera and photo library only when you choose to take or pick a photo. We do not collect your precise location, contacts or advertising identifiers.
End-to-end encryption
After you link with your partner, each phone creates encryption keys automatically. A new phone must be approved by your partner. Once both partners' keys are ready, the images of the notes and photos you send are encrypted on your phone before upload and can be decrypted only on your and your partner's phones. We cannot read them.
Exceptions: images sent before both partners' keys are ready, or when on-device encryption cannot complete, are stored without end-to-end encryption. Live Canvas live drawing data is not end-to-end encrypted; saved Live Canvas replays are. Profile data, partner links, timestamps and other metadata are not end-to-end encrypted. Anything shown on a widget or Lock Screen can be seen by anyone who can see your phone.
How we use your data
- To provide Pairly: link partners, deliver notes, update widgets and Live Activities, and send notifications (performance of our contract with you).
- To apply free usage limits and give both linked partners access to Pro (contract).
- To keep Pairly secure, prevent abuse and fix problems (our legitimate interests).
- To understand how Pairly is used and improve it through analytics (our legitimate interests). You can object at any time by contacting us.
- To answer your support requests and send important service messages (contract and legitimate interests).
- To comply with legal obligations.
We use permission-based features such as notifications, the camera and photos only with your permission, which you can withdraw in your phone's settings.
International transfers
Our service providers may process data in countries other than yours, including the European Union and the United States. Where required, we rely on safeguards such as the European Commission's Standard Contractual Clauses.
How long we keep data
- Account, profile and notes: while your account exists. Notes you delete are removed from the app.
- Live Canvas live drawing data: deleted automatically shortly after a session ends.
- When you unlink from your partner, the connection ends. Notes you already exchanged stay stored until one of you deletes them or deletes your account.
- When you delete your account, we delete your account, profile, partner link and the notes you sent or received, and the files linked to them, within 30 days. Copies in backups are overwritten on our providers' regular schedules.
- Analytics data is kept only as long as needed to understand usage, and is deleted on request.
- We keep purchase records where the law requires it.
Your choices and rights
You can delete your account at any time in Pairly under Settings. Depending on where you live, including under the EU and UK GDPR and Türkiye's Law No. 6698 (KVKK), you may have the right to access, correct, export or delete your data, to object to or restrict certain processing, and to withdraw consent. To make a request, email pairlywidget@gmail.com from the address linked to your account. You may also complain to your local data protection authority.
To stop notifications, turn them off in your phone's settings. Uninstalling the app stops all further collection from that device, but does not delete your account.
Children
Pairly is not intended for children under 13, or under the minimum age for using online services without parental consent in their country. If you believe a child has given us personal data, contact us and we will delete it.
Security
Data is encrypted in transit, access to our systems is restricted, and note content is end-to-end encrypted as described above. No system is perfectly secure; please keep your phone locked and your sign-in methods protected.
Changes and contact
We will update this page when our practices change and show the new effective date. For significant changes, we will also let you know in the app. Questions: pairlywidget@gmail.com.