Couplemaxx Get it on the App Store
How it works Features FAQ Support Get it on the App Store

Privacy Policy

Last updated: September 3, 2026

Deutsch English

1. Data Controller & Contact

The data controller within the meaning of the General Data Protection Regulation (GDPR) is:

Paul Schachner
Schachner Media
Bahnhofstraße 6 / Top 25, 6890 Lustenau, Austria
Email: info@schachnermedia.com
Phone: +43 676 5731921

2. Data We Process

When you use Couplemaxx, we process the following categories of data:

  • Account data: Sign-up happens exclusively via "Sign in with Apple" or "Google Sign-In". There is no email/password login and we do not store a separate password. Legal basis: Art. 6(1)(b) GDPR (performance of a contract).
  • Relationship start date: the date you provide as the day you got together. Legal basis: Art. 6(1)(b) GDPR.
  • Daily entries: your answers to the five fixed questions, your emoji selection and your connection score. Legal basis: Art. 6(1)(b) GDPR.
  • Daily photos: see the dedicated "Daily Photos" section below.
  • Partner link: the invite code or link you use to connect your account with your partner's. Legal basis: Art. 6(1)(b) GDPR.
  • Push token: a technical device identifier that lets us notify you once your partner has logged their day. Legal basis: Art. 6(1)(b) GDPR.
  • First names of both partners: the first names you provide when linking your accounts, so your entries can be attributed correctly. Legal basis: Art. 6(1)(b) GDPR.
  • Feedback: if you rate the app using the built-in 1–3 star feedback feature, we store that rating in a dedicated table. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in product improvement).
  • Device permissions: we request camera and photo library access solely so you can take or select your daily photo. Legal basis: Art. 6(1)(b) GDPR.
  • Device and usage data: including device type, OS version and anonymous in-app usage events. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in stability and improvement of the app) or your consent where legally required.

Couplemaxx explicitly does not collect location data, contacts from your address book, health data, or data for third-party advertising trackers or ad networks.

3. Important Notice: Your Content Is Shared With Your Partner

Couplemaxx is built around two linked accounts. This explicitly means: your daily entries, your answers to the five questions, your emoji selection, your connection score and your daily photo become visible to your linked partner once they have submitted their own entry for the day. Please only upload content you are comfortable sharing with your partner.

4. Processors & Services We Use

To provide Couplemaxx, we rely on the following processors/services:

Rork (app platform & backend infrastructure)

Couplemaxx is operated via the Rork app platform. Rork provides our app backend for us – built on Supabase infrastructure (PostgreSQL database, file storage for daily photos, authentication and server-side logic) – and stores your account data, both partners' first names, relationship start date, daily entries (love letter texts), emoji selections, connection scores, your feedback ratings, and your daily photos. Legal basis: Art. 6(1)(b) GDPR.

The underlying infrastructure operates either within the EU/EEA or in a third country (e.g. the United States), depending on the server region configured for our project. Where processing takes place outside the EU/EEA, we rely on appropriate safeguards under Art. 46 GDPR, in particular the European Commission's Standard Contractual Clauses.

PostHog (product analytics)

We use PostHog to anonymously understand how the app is used. We use PostHog's EU cloud (server location European Union, host eu.i.posthog.com) under a data processing agreement per Art. 28 GDPR. Session replay, autocapture and automatic screen-view tracking are disabled. Only anonymous event markers are sent (e.g. "onboarding step reached" or "paywall purchase completed"), along with at most the purchased plan name or step index. We do not collect names, answers to the daily questions, photos, free-text content, or cross-device tracking. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in improving the app).

RevenueCat (in-app purchase management)

To manage and validate in-app purchases we use RevenueCat, which processes a pseudonymous app user ID and purchase/subscription status. No payment data (e.g. credit card data) is processed here, since payment is handled exclusively by Apple. Legal basis: Art. 6(1)(b) GDPR.

Apple

Apple provides the App Store, in-app purchases, "Sign in with Apple" and push delivery via the Apple Push Notification service (APNs). If you sign in with Apple and use email relay, we only receive an anonymised, Apple-generated relay email address, not your real email address.

Google (Google Sign-In)

As a second sign-in option we offer Google Sign-In, which processes your email address, name and Google account ID for authentication purposes. Google also processes this data in the United States. The legal basis for this third-country transfer is the European Commission's Standard Contractual Clauses under Art. 46 GDPR.

4a. Daily Photos

Purpose and legal basis: Your daily photo is not only stored locally on your device but also stored in a private storage bucket on our Rork-operated backend infrastructure (Supabase), because your linked partner needs to be able to see it. Legal basis is Art. 6(1)(b) GDPR (performance of a contract), since sharing daily photos is a core feature of the app.

Storage location and transfer: Photos are transferred to our servers encrypted via TLS. The storage bucket is private, i.e. not publicly browsable.

Access: Only your linked partner can access your daily photo, technically via short-lived signed URLs that expire automatically after a short time. There is no permanently public URL through which the photo could be accessed without authentication, no disclosure to third parties, and no automated analysis of the photo's content.

Retention: Your daily photo remains stored for as long as your account, or the linked account, exists. If you delete your account, your own daily photos are removed as described under "Retention & Deletion" below. Photos your partner has already seen at the time of your deletion remain part of their shared memories, as they form part of already-completed, mutually shared daily entries.

Note to you: Please do not upload photos showing people other than yourself and your partner without their explicit consent.

5. Payments

All payments for in-app purchases are processed exclusively by Apple. We never receive payment data such as credit card or bank information.

6. Managing & Cancelling In-App Purchases

In-app purchases and auto-renewing subscriptions can only be managed and cancelled via your Apple ID / the App Store settings on your iPhone. We have no technical access to do this ourselves.

7. Retention & Deletion

We retain your personal data for as long as your account exists, or as required to fulfil the purposes described above. If you delete your account (see Delete Account), your account data, relationship start date and your own entries and daily photos are deleted.

What happens to your partner's data: If one person deletes their account, the linked partner's account remains. Shared entries and photos that both partners have already seen at the time of deletion remain part of the remaining partner's memories, as these are already-completed, mutually shared content. New entries that have not yet been mutually unlocked are deleted together with the account.

8. Your Rights

Subject to applicable law, you have the following rights:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw any consent given, at any time, with future effect (Art. 7(3) GDPR)

To exercise these rights, contact us at any time at info@schachnermedia.com.

9. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is:

Austrian Data Protection Authority (Österreichische Datenschutzbehörde)
Barichgasse 40–42, 1030 Vienna, Austria
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Web: www.dsb.gv.at

10. Children

Couplemaxx is not directed at children and teenagers under the age of 16. The app is intended for use starting at age 16.

11. Privacy on This Website

This website is hosted by Netlify. When you visit the site, the host automatically collects technical server log files (including IP address, date and time of access, page requested) to ensure secure operation. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operational security).

This website itself does not use cookies other than those that are technically necessary for the site to function. If you use the contact form on the Support page, we process the data you enter (name, email address, message) solely to handle your request. Legal basis: Art. 6(1)(b) or (f) GDPR.

12. Last Update

This privacy policy was last updated on September 3, 2026.