Privacy Policy

The Service is operated by Patrick Engelkes (“DateKeeper”, “we”, “us”), based in Germany. For the purposes of the EU General Data Protection Regulation (GDPR), we are the controller of the personal data described here. You can reach us about privacy at patrick.engelkes@googlemail.com.

We collect the account details you sign up with and the content you create in the app — dates, photos, wishlist items, trips, and similar entries. We use it to run the Service for you and your partner, and we share it only with the infrastructure providers needed to operate the app (listed below). We do not sell your data, we do not use advertising or tracking, and we do not run analytics. You can ask us to delete your account and data at any time.

We collect the following categories of personal data, almost all of it provided directly by you when you create an account and use the app:

• Account and sign-in: your email address, and either a password (which we store only as a secure one-way hash, never in plain text) or an identifier from Sign in with Apple or Google when you use those options.
• Profile: an optional display name, an optional profile photo, and your language preference.
• Your couple: an optional couple name, the invite code used to connect with your partner, your relationship start date, and progress towards in-app milestones (“trophies”).
• Dates and memories: the dates you log — titles, notes, the date itself, category, rating, an optional cost you enter, venue name, and the photos you attach.
• Wishlists, trips, and reunions: shared wishlist items and their completion notes, trips (“adventures”) with a destination and per-trip activities, and any reunion countdown you set.
• Location: approximate or precise coordinates attached to dates, wishlist items, and trips. See section 6.
• AI Date Coach messages: the messages you exchange with the in-app AI coach and the resulting conversation history. See section 7.
• Notifications: a device push token so we can deliver notifications, your per-category notification preferences, and a log of the notifications shown to you.
• Technical data: your device platform (iOS or Android), security tokens used to keep you signed in, and timestamps recording when entries are created or updated.

What we do not collect: we do not collect your phone number, date of birth, contacts or address book, payment card or financial account details, health or biometric data, background location, advertising identifiers, or any analytics or tracking identifiers.

Under the GDPR we must have a lawful basis for each use of your data. We rely on the following:

• To provide the Service (performance of our contract with you): creating and securing your account, connecting you with your partner, storing and syncing the dates, photos, wishlists, trips, and other content you create, and sending you the notifications you have enabled.
• With your consent: accessing your device location, sending push notifications, and generating AI coach suggestions are optional features you turn on. Where the feature relies on a device permission, you grant that consent through your operating system and can withdraw it at any time in your device settings.
• For our legitimate interests: keeping the Service secure, preventing abuse, and maintaining the reliability of the app — balanced against your rights and freedoms.

We do not use your data for advertising or profiling, and we do not make decisions that produce legal or similarly significant effects about you by automated means.

We do not sell your data and we do not share it for advertising. We share data only with the service providers that operate the app on our behalf, and only to the extent each provider needs to perform its function:

• Your partner: once you connect as a couple, the content you add — dates, photos, wishlist items, trips, and similar entries — is visible to and editable by your partner. That is the core purpose of the app.
• Hosting and database: our backend and database are hosted on cloud infrastructure that stores and processes all of the data above.
• Object storage: photos and profile images you upload are stored with a cloud object-storage provider.
• Apple and Google (sign-in): if you choose Sign in with Apple or Google, we verify your identity token with them and receive your email and name.
• Google Places: when you search for a venue, your search text — and, for nearby searches, your approximate location — is sent to Google to return matching places.
• Mapbox: coordinates of your dates and venues are sent to Mapbox to draw maps and map images in the app.
• OpenAI (AI Date Coach): if you use the AI coach, your messages and relevant context are sent to OpenAI to generate replies. See section 7.
• Push notification delivery: push tokens and notification content are sent through Expo’s push service, which relays them to Apple and Google’s notification networks for delivery to your device.
• Email: when you request a password reset, your email address and the reset message are sent through our email delivery provider.

We may also disclose data where we are legally required to do so, or to protect the rights, safety, and security of our users or the Service.

You can attach a place to a date, wishlist item, or trip. When you do, we store the venue name and its coordinates. If you grant the app location permission, we use your device’s current location only while you are using the app (never in the background) to suggest nearby places and to improve venue search. We do not continuously track your location, and you can turn the permission off at any time in your device settings — the rest of the app keeps working without it.

The optional AI Date Coach generates date ideas and suggestions. When you chat with it, your messages are sent to our AI provider, OpenAI, together with relevant context about your relationship so that suggestions are personalised — this can include your and your partner’s names, your relationship start date, a summary of your recent dates (such as titles, categories, ratings, venues, and any cost you entered), your outstanding wishlist items, your planned trips and their activities, and your rating challenges with their contenders and scores. OpenAI processes this to return a reply and retains the conversation so follow-up messages stay in context. Your conversations are stored in your account so you can revisit them, and you can delete a conversation from within the app. Because the coach can include personal relationship details, only use it when you are comfortable doing so. Its suggestions are generated automatically, may be inaccurate, and are for inspiration only — they are not professional, relationship, medical, or legal advice.

Some of our service providers — including the sign-in, maps, AI, and notification providers named above — process data in the United States or other countries outside the European Economic Area. Where your data is transferred outside the EEA, the transfer is covered by appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or an adequacy decision. You can contact us for more information about these safeguards.

We keep your account and the content you create for as long as your account is active. Some data is removed automatically: a password-reset code expires within minutes, sign-in sessions expire and rotate, and a reunion countdown is removed shortly after the date it counts down to. When you delete your account we remove your personal data as described in section 11.

Under the GDPR you have the right to access the personal data we hold about you, to correct it, to have it deleted, to restrict or object to certain processing, to receive your data in a portable format, and to withdraw any consent you have given (without affecting processing already carried out). To exercise any of these rights, email us at patrick.engelkes@googlemail.com. You also have the right to lodge a complaint with your local data protection supervisory authority.

You can delete your account at any time from within the app, under Settings, or by emailing us at patrick.engelkes@googlemail.com from the address on your account. We delete your account and personal data, and instruct our service providers to do the same, within 30 days, except where we are required to retain certain information by law.

Because DateKeeper is a shared space for two people, deleting your account does not erase the memories that belong to your partner. If you are connected as a couple, the shared content you created together — dates, photos, wishlist items, and trips — remains with your partner, who becomes its sole owner, so they do not lose your shared history. Your personal account details (such as your email, name, profile photo, and login) are deleted.

We use industry-standard measures to protect your data. Traffic between the app and our servers is encrypted in transit, passwords are stored only as secure one-way hashes, and sign-in tokens are kept in your device’s secure storage. Photos are uploaded directly to storage over short-lived, access-controlled links. No method of transmission or storage is completely secure, but we work to protect your data using reasonable safeguards.

DateKeeper is intended for adults and is not directed to children. You must be at least 18 years old to use the Service. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

We may update this Privacy Policy from time to time. When we make material changes we will update the “Last updated” date above and, where appropriate, notify you in the app. Continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

For any questions about this Privacy Policy or your personal data, contact us at patrick.engelkes@googlemail.com.