Privacy

Private by design

Your room has exactly two keys. No feeds, no followers, no audience.

Exactly two keys

Your room can only ever hold you and your partner.

Locked means locked

Scheduled and unlock-together entries stay hidden — even in previews.

No audience

No public profiles, no feeds, no ads built on your feelings.

Information we collect and why

Dearmine uses information needed to provide your account, private room and chosen features:

  • Account details, such as your name and email address, plus authentication and session information used to sign you in and protect access.
  • Room and profile details, including membership, invitations, avatars, language, display preferences and notification choices.
  • Content you choose to add, including journal entries, moods, letters, replies, memories, photos, tags and timeline events.
  • Limited operational records, such as security events, delivery status and aggregate activity, used for reliability, security and administration. These records are not intended to contain passwords, tokens or private message content.

Account and couple room privacy

A couple room has exactly two current members. Invitations are tied to a specific recipient email, and that email must be verified before the invitation can be accepted.

  • Private drafts are visible only to their author until they are shared or sent.
  • Room content is available according to membership and each entry's unlock rules, not through public profiles or feeds.
  • Admin access does not by itself provide access to private journals, letters, memories or photos.
  • Leaving a room removes your access immediately. Shared content is preserved for the remaining partner.

Journals, letters, memories and photos

Scheduled and Unlock Together journal entries keep their contents hidden until their conditions are met. Scheduled letters remain sealed until delivery. Unlock Together entries require consent from both current members.

  • Locked content is excluded from ordinary previews and notification text before it opens.
  • Sent letters cannot be edited, and recipients can add one reply after opening them.
  • Memory photos and avatars are kept in private storage. Authorized views use short-lived signed links, which can remain usable until they expire.
  • Hiding previews or blurring photos changes what is shown on your signed-in device; these options are not encryption or a device lock.

Storage and security practices

Dearmine uses Supabase for authentication, database records and private file storage. Access checks use authenticated account state, room membership and server-side or database authorization. Restricted database operations coordinate sensitive changes such as invitations, membership and content writes.

  • Private buckets are used for memory photos, avatars and room covers instead of permanent public file addresses.
  • Administrative actions require separate database-backed Admin authorization and use limited projections for management tasks.
  • These measures are designed to reduce unauthorized access, but no online service can guarantee absolute security. Use a strong, unique password and protect your email account and devices.

Emails, analytics and third-party services

Supabase provides authentication, database and storage services, including verification and password-recovery emails. Resend may deliver optional activity emails using the recipient address and message information needed for delivery. Activity emails depend on your preferences and service configuration; an email failure does not undo the original app action.

  • Activity notification emails use general activity messages rather than the contents of locked journals, letters or memories.
  • Google Tag Manager and Google Analytics load only after analytics consent on eligible public pages without query or fragment data. Private account, invitation and dashboard pages are excluded.
  • Analytics events use sanitized public page information. You can accept or reject analytics when the consent prompt appears, and your browser stores that choice.

Cookies and browser storage

Authentication can use cookies and browser storage to maintain your signed-in session and support secure account operations. Dearmine also stores some choices locally in your browser.

  • Theme, language and analytics consent choices may be saved in local storage.
  • An invitation token is held temporarily in per-tab session storage while you accept an invitation.
  • If you allow analytics, the third-party analytics service may use its own browser storage on eligible public pages. Rejecting analytics keeps that integration from loading through Dearmine.

Retention and account deletion

Content remains while your account and room are active, subject to individual deletion and the room and account lifecycle controls below. Leaving a room does not erase its shared content.

  • An eligible sole-member room deletion closes the room and starts a 30-day recovery period. You can recover it during that window or choose permanent deletion. Expired-room cleanup is a separate process.
  • Account deactivation signs you out and starts a 30-day recovery period. Signing in during that period recovers the same account, but does not restore rooms you already left or deleted.
  • After the account recovery period, the account becomes eligible for the separate permanent cleanup process. Personal profile data and eligible files are removed or scrubbed, while eligible shared content may remain in anonymized form. Cleanup may not happen immediately when the period ends.
  • Operational or audit records may follow their own retention schedules where needed for security and service administration.

Your controls and support

In Settings, you can update your profile, manage notification and display preferences, leave an eligible room, manage room recovery or deactivate your account. Individual journal drafts, memories, photos and timeline entries also have their own available controls.

  • You can review or clear the stored analytics choice through your browser's site-data controls; clearing it allows the consent prompt to appear again.
  • Keep your signed-in devices and verification email secure, and sign out when using a shared device.
  • For privacy questions or help with these controls, contact Dearmine support at hello@dearmine.space.