Privacy Policy

You&Me · Last updated: August 14, 2026

You&Me is a private space for two people: shared plans, documents, wishes and loyalty cards. This policy explains what the app stores, where it is kept, who can see it, and how you can remove it.

The app is developed and operated by Dmitry Keller (the "developer", "we"). For any question about this policy or about your data, write to kellerdimka@gmail.com.

1. What we collect

Account information

Signing in is possible only through Sign in with Apple. From it we receive a user identifier and an email address — which will be Apple's private relay address if you chose to hide your real one. We store an account identifier generated by Firebase Authentication. There are no passwords: we never see or store one.

Your profile

A display name and a date of birth, if you enter them. The date of birth is used only to show the birthday inside your shared space and to remind your partner in advance.

Content you create

Everything you put into the app is stored so that it syncs between your devices and your partner's:

• wishes, including product links, prices and images you attach;
• plans, trips, tasks and polls;
• shared calendar events and important dates;
• time capsules — letters that stay sealed until a date you set;
• loyalty cards, including card numbers and barcodes;
• documents you scan or upload, and the files themselves.

Documents may include sensitive material such as scans of passports or insurance papers. The app is built for exactly that use, and access to those files is restricted to the members of your space by server-side rules.

Device permissions

• Camera — to scan documents and to read the barcodes of loyalty cards. Captured images are saved into your own space; nothing is sent anywhere else.
• Calendar — to import events from your device calendar and to export shared events back into it. This happens on your device and only when you ask for it.
• Face ID / Touch ID — to lock the Documents section. Biometric matching is performed entirely by iOS; the app receives only a yes-or-no answer and never gains access to your biometric data.
• Photo library — pictures you pick are passed to the app by the system picker. The app is not granted access to the rest of your library.

Links you paste

When you add a product link to a wish, the app opens that page in the background to read its title, price and picture. That request goes directly from your device to the website you pasted, and it is subject to that website's own privacy practices. We do not log the links you open, beyond storing the wish itself in your space.

What we do not collect

The app contains no analytics, no crash-reporting, no advertising and no third-party tracking SDKs. It does not use the Advertising Identifier (IDFA) and does not ask for tracking permission. It does not send push notifications, and it does not collect your location.

2. Where the data is stored

Data is stored using Google Firebase — Firebase Authentication, Cloud Firestore and Cloud Storage — running on Google's cloud infrastructure. Google processes this data on our behalf as an infrastructure provider; see the Firebase Privacy and Security policy.

Copies of your documents are also kept in the app's private folder on your device, so that you can open them without an internet connection. That folder is not accessible to other apps and is included in your device's protection.

3. Who can see your data

Your content is readable only by the members of your space: you, and the one partner you link with using an invitation code. This is enforced on the server by security rules that check membership on every read and write — it is not merely hidden in the interface.

To be straightforward with you: as the operator of the Firebase project, the developer holds technical administrative access to the database. It is used only where strictly necessary — to investigate a fault or to comply with a legal obligation — and never to browse user content out of curiosity.

We do not share your data with any other third party. We do not sell it, rent it, or use it for advertising.

4. Legal basis and purpose

We process your data solely to provide the features you use: keeping your content in sync between your devices and your partner's, and keeping it available offline. Where the GDPR applies, the legal basis is the performance of a contract with you (Art. 6(1)(b)) — the service you asked for cannot exist without storing what you put into it.

5. Retention and deletion

Your data is kept for as long as your account exists. You can delete your account from inside the app: Us → Couple settings → Delete account. See the account deletion page for the details of what is removed.

In short: if you are alone in your space, everything is erased. If you are linked with a partner, your profile and your membership are removed while the shared archive stays with your partner, because it belongs to both of you. In both cases, the local copies of files on your device are erased.

Deleted data is removed from the live database immediately. Residual copies may persist in the infrastructure provider's backups for a limited period before being overwritten.

6. Your rights

You may request access to your data, ask for it to be corrected, or ask for it to be erased. The fastest route to erasure is the in-app deletion described above. For anything else, write to kellerdimka@gmail.com and we will respond as soon as we can. If you are in the EEA or the UK, you also have the right to lodge a complaint with your local data protection authority.

7. Children

You&Me is not directed to children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, write to us and we will remove it.

8. Changes to this policy

If this policy changes, the new version will be published on this page with an updated date at the top. Material changes will also be announced inside the app.

9. Contact

Dmitry Keller
kellerdimka@gmail.com