Privacy Policy

Privacy Policy

Last updated: October 13, 2026

MySchatz ("we", "the app") lets two connected people (partners) use location, messaging, calling, and everyday relationship planning features in one app. This Privacy Policy explains what data is collected while using the app, how it's used, and who it's shared with. By using the app, you agree to this policy.

Data We Collect

When you create your account and use the app, we collect:

• Account info: name, email address, gender (for the default mascot), profile photo; if you sign in with Google, the name and email address of your Google account (we never see your Google password)
• Location data: your device's GPS location (while the app is open, and in the background if you grant that permission)
• Messages and media: text messages, photos, and voice notes you send your partner
• Call data: voice/video call history (duration, time) -- call content itself is never recorded
• Voice notes and AI inputs: audio you record and notes you write in Dinliyorum, and the photo you choose when creating a mascot (see "AI Features")
• Optional health-related info: cycle information you enter yourself in Period Tracking
• Content you enter yourself, like calendar events, tasks, shopping lists, gifts, and memories; events you import from your phone calendar if you choose to
• Invite codes: if you sign up with someone's invite code or share your own, the link between the two accounts is stored
• Special dates you enter yourself (birthdays, anniversaries, your own reminders); birthdays are shown to your connected partner
• Push notification token (so we can send you notifications)
• Technical data: device type, app version, error logs Usage statistics: time spent in the app, names of the sections you use (e.g. "Shopping List"), device model, operating system and app version, language, country and city (the city is determined on the device only with a location permission you already granted; coordinates are never sent) and error reports (error message, screen name) are collected to improve the service and fix problems. Message contents, photos and sensitive data are not part of this record. You can turn it off with the switch on the Privacy Policy screen.

How We Use It

The data we collect is used solely for the app's core purpose -- connecting two partners: showing the distance between you, delivering your messages, connecting your calls, sending reminders and notifications, and syncing content you plan together like calendars, tasks, or shopping lists. None of this data is used for ad targeting, profiling, or third-party marketing.

Who We Share It With

Your personal data -- location, messages, photos -- is only ever visible to your connected partner. We don't sell any data, share it with advertisers, or pass it to third parties for marketing. Only the data needed to run a given feature is shared with the service providers that run the app's infrastructure (see "Third-Party Services We Use" and "AI Features" below); those providers process data on our behalf, under our instructions.

Background Location Use

When you turn on location sharing and choose "Allow all the time," MySchatz collects your location not only while the app is open, but also while it's closed or in the background, and shares it with your partner. This powers the app's core feature of always being able to find each other. This data is shared only with your partner and used for no other purpose (advertising, analytics, sharing with third parties). You can turn location sharing back off at any time using the switch in the Location tab. If you additionally turn them on in the Location tab: movement status (still/walking/driving) and arrival/departure alerts for saved places are computed on our server from your location updates; optional location history (off by default) is stored in your account for the period you choose (7, 14 or 30 days) and deleted automatically afterwards. Each of these has its own switch, you choose whether it is shared with your partner, and you can delete your history at any time. If you send an SOS or "I'm safe" alert, your current location may be passed to your partner. To save battery you can share your location only on the days and hours you choose (Location tab > Sharing hours); outside those hours no location is collected or shown to your partner. When your battery drops to 15%, location sharing is turned off automatically and you are notified; for this, the battery level is sent to the server along with location updates, solely to apply this rule.

Data Retention

Your data is kept for as long as your account is active. When you delete your account from Settings > Delete Account, your messages, location information, and all other database records tied to your account are permanently removed. The photos and files you uploaded (profile, message, gift, shopping, task, calendar and trip photos, mascot images) are also removed from storage. Content your partner uploaded themselves and images that belong to the couple (such as the couple mascot) are not deleted. Some technical logs (for debugging, containing no personal information) may be kept briefly longer.

Your Rights

You can access, edit, or delete your data directly in the app at any time. Under applicable data protection law (such as GDPR in the EU), you have the right to access, correct, delete, restrict processing of, and request portability of your data. To exercise these rights, contact us at info@myschatz.app.

Children's Privacy

MySchatz is designed for adult couples in a romantic relationship and may not be used by anyone under 18; we do not knowingly collect data from them. If we become aware that someone under 18 has provided us with data, we promptly delete that data and the account. If you're a parent or guardian with concerns about this, please contact us.

Security

Your data is transmitted over encrypted connections (HTTPS/TLS). Special sections like the Gift Box and Schengelemengele are additionally protected by a PIN you set yourself. That said, no system is 100% secure; while we take reasonable technical and organizational measures, we can't guarantee absolute security.

Third-Party Services We Use

To run the app, we use these infrastructure providers: Supabase (database, authentication, and file storage), Expo and Google Firebase Cloud Messaging (push and call notification delivery), LiveKit (voice/video call infrastructure), and Google Maps and Google Places (maps and nearby place search). These providers process data on our behalf and do not use it for their own advertising. Resend for email delivery (a message sent from the Feedback section, with your name, email address and attached images, is emailed to our team).

Changes to This Policy

We may update this Privacy Policy from time to time. We'll notify you in the app about any significant changes. The current policy always lives on this screen.

AI Features

Some features use third-party AI services, and only run when you use them:

• Mascot creation: the photo you pick is sent to OpenAI to generate a cartoon character.
• Dinliyorum: audio you record is sent to OpenAI to be turned into text; a note you write or speak is sent to Anthropic to work out its meaning (for example, turning it into a list or reminder).
• Chat suggestions: the text of a message you send is sent to Anthropic to suggest a shopping or calendar item. Only you see the suggestion, and nothing is added unless you confirm it.
• Let's Go to a Restaurant: when you use this feature, your approximate location is sent to Google Places to find nearby restaurants.

This content is processed only to fulfil your request; we do not use it for advertising or profiling. Using these features is entirely optional -- if you don't use them, this data is not sent.

Founding 100 stories (optional)

Taking part in the Founding 100 is optional. Until it is published, your story and its photos are stored in a private space only you and your partner can access. A story becomes public on the myschatz.app website and in the app only after you have both approved its final version separately and an admin has reviewed it.

What gets published: the display names you choose, your profile photos if you want, the country you pick, the story text, photos and theme. Email, phone, real location, messages and the pairing code are never published. Location and camera data (EXIF) are removed from photos on your device before upload.

Either of you can withdraw consent at any time without the other's approval; the story is removed from public view immediately (caches clear within a few minutes). If the partner connection ends or one of the accounts is deleted, the story is unpublished automatically; deleting your account also deletes the story photos you uploaded. Review and approval steps are logged for security.

Contact Us

For privacy-related questions: info@myschatz.app

Website updates

When you submit the early access form, your email address, selected language and the country taken from your browser's language setting are stored in our news list (Supabase), and a confirmation email is sent to you through Resend. We only send you news and offer emails after you click the button in that email (double opt-in). Every email has a one-click unsubscribe link, and you can ask for your entry to be deleted completely by writing to info@myschatz.app. Unconfirmed sign-ups receive no further emails.