Privacy policy

Summary

• Most of your data never leaves your phone. Profile, history, favorites, and plans live in local app storage.
• Pairing is optional. If you turn on two-phone daily sync, a limited set of data passes through Supabase so both phones can reveal together.
• We don't call anything "end-to-end encrypted." Synced answers are protected by access controls, not a cryptographic promise we haven't built yet.
• The website itself doesn't track you. No ad trackers, no analytics cookies, by design.
• You can export or delete your data whenever you want, from inside the app.

Data stored locally

Fated Truths keeps the following in the app's local storage on your device:

• Player display names
• Couple profile and preferences
• Session history and answer text
• Favorites, hidden questions, revisit dates, and plans
• Draft or unfinished sessions
• App Lock preference and local reminder identifier
• Pairing information

This stays on your device unless you export it yourself or turn on the optional cloud sync described below.

Optional paired daily-answer sync

If you enable two-phone pairing and it's actively syncing, the app may process a limited set of data through Supabase:

• An anonymous authentication identifier
• Your couple/pair identifier and six-character pair code
• Player display name
• Daily round and question identifiers
• A snapshot of the daily prompt
• The submitted answer text
• Submission timestamps

This data exists for one reason: to match your paired devices, coordinate the shared daily card, and reveal both answers once you've both submitted. We do not currently claim this text is end-to-end encrypted — it is protected by access controls, not a cryptographic guarantee.

Device capabilities

• Biometrics stay with the operating system. Face ID and fingerprint data never reach the app or us — iOS handles that check and only tells the app yes or no.
• Reminders carry no content. The optional local notification does not contain question or answer text.
• Calendar files are made on request only and handed to your device's normal share sheet.

Export and deletion

• Export your local archive as a JSON file, any time, from within the app.
• Delete your local Fated Truths data permanently from a device, from within the app.
• Cloud deletion — we don't yet have an automated flow for deleting synced pair data. Until we do, email brandonharvey@me.com with the subject line "Cloud data deletion request" and we'll remove it.

Website data

• No trackers, no analytics, no cookies — we don't intentionally use any of these on this website.
• Ordinary hosting logs may briefly exist. Our host or CDN may temporarily process IP address, user agent, request time, and requested path for security and reliability. Retention depends on the host, currently Namecheap shared hosting (cPanel / Apache).
• If that ever changes — say, if we add analytics — we'll update this policy and our App Store privacy disclosures first, not after.

Purpose and lawful use

We process the data above only to operate the features you turn on — running the game locally, coordinating optional pairing and sync, and keeping the website and support channel working. We don't use it for anything beyond that.

Service providers

We rely on a small number of providers to run the parts of the product that aren't purely local:

• Supabase — for optional two-phone daily-answer sync.
• Our website host — currently Namecheap shared hosting (cPanel / Apache) — to serve this site.

No sale, no behavioral advertising

We do not sell personal information, and we do not build advertising profiles from your prompts, answers, or reflective patterns. What you tell each other stays between the two of you and the systems needed to deliver it back to you.

Security

We use reasonable technical and organizational measures to protect the data described above. No system is perfectly secure, and we can't offer an absolute guarantee — only a genuine effort and a policy we intend to keep.

Adults only

Fated Truths is not directed to children. Some prompts discuss sex, intimacy, and conflict in non-graphic, adult-relationship language, and the product is intended for adults in a relationship with each other.

International processing

Depending on where you and our service providers are located, your data may be processed in a country other than your own. We rely on our providers' own safeguards for cross-border processing.

Changes to this policy

We may update this policy as the product changes. The date at the top will always reflect the most recent version, and material changes will be reflected here before they take effect.

Contact

Questions about this policy or your data? Email brandonharvey@me.com.

Related: Terms of use · Support