Privacy Policy

Notre Boussole (“we”, “us”) provides a private shared space for couples to manage finances, health, faith, goals, memories and their relationship. This policy explains what we collect, how we use it, who processes it, how long we keep it, and the rights you have. It applies to the GDPR, UK GDPR, and the CCPA/CPRA.

Some features let you record special-category data, including data about religious or faith beliefs, health, and sexual/intimacy preferences, as well as highly personal free-text about your relationship. We process this data only with your explicit consent (GDPR Art.9), captured at signup and manageable at any time in Settings → Privacy → Consents. Under the CPRA you may limit the use of your sensitive personal information by withdrawing the relevant consent or deleting the data.

• To provide the shared workspace and its features.
• To generate gentle, sanitized guidance that helps partners understand each other.
• To secure the service and maintain an audit trail of privacy actions.

Our lawful bases are performance of contract, your consent (for sensitive data and AI processing), and our legitimate interest in securing the service.

To power rewrites, tone checks, mediation and partner guidance, relationship content you submit may be sent to third-party AI sub-processors. We engage:

• OpenAI and/or Anthropic — AI text processing.
• Supabase — database, authentication and file storage hosting.
• A maps/place-search provider — restaurant roadmap lookups.

AI processing of relationship content occurs only if you grant the AI-processing consent. You can withdraw it at any time, after which content is no longer sent for AI processing.

Some sub-processors operate in the United States. Where your data is transferred outside your region, we rely on appropriate safeguards (such as Standard Contractual Clauses) and your consent. You can review and withdraw the international-transfer consent in Settings.

Raw grievances are private to their author; your partner only sees what you explicitly choose to share, and never your unmet needs or repair asks. Our Relationship Intelligence Engine performs automated profiling to build couple/partner models and insights (GDPR Art.22). These contain canonical categories and sanitized labels rather than raw sensitive text. You may opt out of partner guidance and delete intelligence data at any time.

We keep data while your account is active. Deleted data is soft-deleted and then permanently purged after your configured retention window (default 30 days). You control retention windows in Settings → Privacy → Retention. Deleting your account removes your data, including stored photos.

Subject to law, you can: access and export your data (Art.15/20), correct it, delete it (Art.17), withdraw consent (Art.7), object to or restrict processing, and — under the CPRA — know, delete, correct, and limit sensitive-PI use. We do not sell or share your personal information for cross-context behavioral advertising. Exercise these rights in Settings → Privacy.

Data is protected with row-level security, isolated privileged access, and least-privilege service credentials. Personal photos are served from access-controlled storage.

For privacy requests or questions, contact security@notreboussole.com or through the in-app Settings.