How privacy works
DRAFT FOR LEGAL REVIEW, not yet in force. To complete before launch: the controller's identity (company name, form, registration number, address), a contact address, and the retention periods marked [TO COMPLETE]. The data protection impact assessment must be done before the first real user.
Just Us is built so that your partner can never read your answers, and so that we keep as little as the game needs.
What your partner sees
Only what you both answered positively: cards you both want, or fantasies you both share. Never a single answer of yours on its own. A "not for me" is never shown, never counted on a screen, and never stored as part of anything your partner can see.
When you pick today's card, your top three stays private too. Your partner only sees the card that comes out on top.
What we store, and why
| Data | Why | Basis | Kept for |
|---|---|---|---|
| Email address | Signing you in with a one-time code | Contract | As long as your account exists |
| The fact that you are 18 or over (yes or no only; your date of birth is never stored) | Keeping the service for adults | Legal obligation and legitimate interest | As long as your account exists |
| Your answers to the cards | Working out what you and your partner have in common | Your explicit consent (GDPR article 9), given separately from the terms | As long as your shared space exists, or until you erase them |
| What you have in common with your partner, and the card you picked together | Showing it to both of you | Your explicit consent | Until either of you erases your answers or leaves the space |
| Your private top three when picking a card | Choosing today's card | Your explicit consent | [TO COMPLETE] |
| Your phone's notification address, and the time your couple chose for today's card | Sending a reminder and today's card. The notification never shows a card or an answer, because it appears on your lock screen and passes through Apple, Google and Expo | Contract | Until you turn notifications off or delete your account |
| Subscription status | Unlocking new rounds | Contract | [TO COMPLETE: per accounting rules] |
| Step reached in the app, time, random install identifier | Knowing whether the app works (for example, how many invited partners join) | Legitimate interest | 13 months |
Your answers are tied to one shared space. If you start a space with someone else, nothing carries over: not your answers, not what you had in common.
What we never do
- We never sell your data and never use it for advertising.
- We never send your answers to an artificial intelligence service. The game's rules are fixed and run on our own servers.
- We never use age signals from the App Store or Google Play for anything other than keeping the app for adults.
- We do not record your IP address or device details with the measurement data.
Where it is stored, and who helps us
Everything is stored in the European Union, including backups. We use these processors:
- Supabase: database and sign-in, hosted in the EU region (Ireland).
- Apple and Google: app distribution and payments. They handle your payment details; we never see them.
- RevenueCat: subscription status. It receives an anonymous identifier, never your answers. [TO COMPLETE: confirm data location and transfer safeguards]
- [TO COMPLETE: email provider used to send sign-in codes]
Your rights, and how to use them in the app
- Export: Settings, Export my answers. The export contains only your own answers, never your partner's and never what you had in common, because that would reveal theirs.
- Erase: Settings, Erase my answers. Everything you had in common disappears for both of you. Your partner's account and their own answers are not touched.
- Withdraw consent: erasing your answers withdraws it for the past; leaving the space stops it for the future.
- Leave: Settings, Leave this space. The space closes for both of you, and each keeps only their own answers.
You may also ask for access, correction, restriction or objection, or delete your whole account, by writing to [TO COMPLETE: contact address]. If you believe your rights are not respected, you may complain to the French data protection authority, the CNIL, at cnil.fr.
Who is responsible
[TO COMPLETE: company name, legal form, registration number, registered address] is the controller of the processing described on this page.
Draft of 2 November 2026.