Privacy

Last updated 21 September 2026

Couples Jar is built so that we hold as little about you as possible. There are no ads, no analytics, no trackers and no cookies. Here's exactly what we keep, and why.

Who is responsible

4V3D OÜ, registry code 17515961, Asula tn 5-26, 11312 Tallinn, Estonia. The quickest way to reach us is support@couplesjar.app.

What we keep

• Your account: the name you type, your email address and your password. The password is stored only as a scrypt hash, so we can't read it.
• What's in your jar: the wishes and rewards the two of you write, the values you agree, what's been done and delivered, the dates you pick, and your keepsake notes.
• A couple of settings: your language, and your answer to the life-stage question if you gave one. That answer only changes which suggestions we show.
• Sign-ins: for each device you're signed in on we keep a hashed token, and when it was last used. Failed sign-in attempts are kept for a short time, by email address, to slow down anyone guessing passwords. Password reset links are stored hashed and work once, for an hour.
• An activity log of what happened in your jar (for example "a wish was agreed"), with no slip text in it. It's there so the app knows what's waiting on whom.
• Purchases: which plan, where it was bought, the receipt reference and who bought it. We never see your card. On the website the payment is handled by Stripe, who are the card processor and hold those details; in the apps it is Google Play or the App Store.
• Server logs: our web server records each request (time, address requested, your IP address and browser). These are kept for security and fault-finding, rotated automatically, and never used to profile anyone.

What we don't do

• We don't sell or share your data, and we don't use it for advertising.
• Notifications never contain what's written on a slip.
• We don't keep a lifetime score or a record of who did more.
• The app and this page load nothing from third parties, fonts included.

Why we're allowed to

We process your data to provide the service you signed up for (GDPR article 6(1)(b)). Server logs and the sign-in throttle are kept under our legitimate interest in keeping the service secure (article 6(1)(f)).

Who else handles it

• Hetzner Online GmbH hosts the server, in Helsinki, Finland, under a data processing agreement.
• Forward Email will send password reset and account emails once mail is switched on.
• Google and Apple handle payments when you buy through their stores, under their own privacy terms.

Your jar is stored in the EU.

How long we keep it

For as long as your jar exists. When a jar is deleted, everything in it goes straight away: every slip, every note and both accounts. If one of you leaves or is removed, that person's account and everything the two of you shared goes the same way. Copies of the database taken before app updates are kept on the same server and the oldest are deleted automatically; only the most recent 14 are ever kept.

A jar opened without an account has no address on it, so nobody can ever get back into it once the device is gone. We delete those 180 days after the last time anyone opened them. Add an email and a password and this stops applying: a jar with an account on it is kept for as long as it exists.

Your rights

You can ask to see, correct, export or delete your data, or object to how we use it. Deleting is in the app (Settings, then Delete this jar or Leave the jar). For anything else, email support@couplesjar.app and we'll answer within a month. You can also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) or the authority where you live.

Deleting, step by step, with what goes and what is kept: how to delete your account.

Who it's for

Couples Jar is for adults. It isn't meant for anyone under 18.

Changes

If this changes in a way that matters, we'll say so in the app before it takes effect.