Privacy Policy

Last updated: April 2026

Ours is a relationship wellness app for couples. It is not a medical, therapeutic, or healthcare service. Ours is not subject to HIPAA or any health-data legislation. "Aphelion Health" refers to the corporate entity that develops and operates Ours; the name reflects our mission of supporting emotional wellbeing, not the provision of healthcare.

1. Who We Are

Ours ("the App") is operated by Aphelion Health (Pty) Ltd, a company registered in the Republic of South Africa ("Aphelion Health," "we," "us," or "our").

For users in the European Union or United Kingdom, if we are required to appoint a local representative under GDPR Article 27 or UK GDPR Article 27 we will publish their details here. If you need to contact a representative before one is formally appointed, please email support@aphelion.health.

2. Data We Collect

We collect the minimum data necessary to provide the service. We do not collect location data, contacts, health records, financial information, or browsing history.

2.1 Account Data

2.2 Couple and Relationship Data

2.3 User-Generated Content

2.4 Usage Data

2.5 Technical Data

2.6 Subscription Data

We do not store payment card details, billing addresses, or transaction amounts. All payment processing is handled by Apple (App Store) or Google (Google Play) through RevenueCat. See their respective privacy policies for payment data handling.

3. Sensitive and Intimate Content

Ours includes prompts across categories such as intimacy, vulnerability, and conflict resolution. Your responses to these prompts — including text, photos, and voice notes — may constitute special category data under GDPR Article 9 (data concerning sex life or relationships) and special personal information under POPIA Section 26.

By creating an account and using Ours, you provide explicit consent to the processing of this sensitive content for the purpose of sharing it with your connected partner and storing it as part of your shared timeline.

You control what you share. Every response is voluntary. You may choose to respond with text, a photo, an emoji, or a voice note — the level of intimacy is entirely your choice.

4. How We Use Your Data

PurposeData Used
Provide the daily ritual and shared timelineAccount data, couple data, user-generated content
Share your responses with your connected partnerUser-generated content, display name
Deliver push notifications (moment updates, taps, reminders)FCM token, display name, timezone
Process and manage subscriptionsSubscription data, account ID
Maintain streaks and milestonesUsage data, couple data
Transcribe voice notes on your deviceAudio recordings (processed locally, never sent to external services)
Improve app stability (crash reporting)Crash logs, stack traces, device state
Understand usage patterns (analytics)Anonymised usage events, device identifiers (with opt-out available in Settings)
Measure advertising effectivenessDevice identifiers, attribution data (only with your consent)
Deliver app configuration and feature flagsAnonymous device request (no personal data)

5. Voice Notes and On-Device Transcription

When you record a voice note, transcription is performed entirely on your device using an open-source AI model (Whisper). No audio is sent to any external transcription service.

6. Data Sharing

We do not sell your personal data. We do not share your data with advertisers, data brokers, or any third parties for their own marketing purposes.

6.1 Sharing with Your Partner

Your responses, reactions, display name, and profile photo are shared with your connected partner. This is the core function of the App. Both partners must respond before either can see the other's answer.

6.2 Service Providers (Sub-processors)

We use the following third-party service providers to operate Ours. Each processes data on our behalf under appropriate data processing agreements:

ProviderPurposeData ProcessedLocation
Google LLC (Firebase)Authentication, database, file storage, push notifications, cloud functions, remote configuration, crash reporting, analyticsAll categories listed in Section 2; crash logs; analytics events (with opt-out available)United States
RevenueCat IncSubscription and billing managementAccount ID, subscription status, purchase platformUnited States
Meta Platforms IncAnalytics and advertising measurementDevice identifiers, attribution events (with consent only)United States
Google LLC (Google Fonts)Font delivery via CDNIP address (transmitted during font loading)Global CDN
Apple IncAuthentication (Sign in with Apple), subscription billingAuthentication tokens, purchase receiptsUnited States

7. Analytics, Tracking, and Consent

We use analytics to understand how the App is used and to measure the effectiveness of our marketing:

You can disable all analytics and advertising measurement at any time using the "Usage Analytics" toggle in the App's Settings. Changes take effect immediately.

Crash reporting (Firebase Crashlytics) collects crash logs, stack traces, and device state to help us fix bugs and improve stability. This operates under our legitimate interest in maintaining a functional service and does not require separate consent.

Essential Services (Always Active)

The following services are necessary for the App to function and do not require separate consent: Firebase Authentication, Cloud Firestore, Cloud Storage, Cloud Messaging, Cloud Functions, and Remote Config.

8. International Data Transfers

Aphelion Health is based in South Africa. Your data is stored and processed on Google Cloud Platform infrastructure located primarily in the United States. RevenueCat and Meta also process data in the United States.

For transfers from the European Economic Area (EEA) or United Kingdom, we rely on:

For transfers from South Africa, we rely on POPIA Section 72, which permits cross-border transfers where the recipient is subject to binding rules or agreements providing an adequate level of protection, or where the data subject has consented.

9. Data Retention

Data TypeRetention Period
Active account dataRetained while your account is active
Deleted user's personal dataPermanently removed immediately upon account deletion
Remaining partner's own contentRetained until they delete their account or leave the couple
Couple data (when both partners leave/delete)Permanently deleted
Compliance audit logs (no personal data)Up to 3 years for regulatory purposes
Infrastructure backupsSubject to Google Cloud's standard data deletion practices

10. Account Deletion and Couple Content

You can delete your account at any time from the App's Settings screen. Deletion is immediate and permanent — there is no grace period or cooling-off window.

What happens when you delete your account:

  1. Your user profile, email, display name, and profile photo are permanently deleted.
  2. Your responses (text, photos, voice notes, transcripts) are surgically removed from all shared moments.
  3. Your media files are deleted from storage.
  4. Custom prompts and important dates you created are removed.
  5. Your partner retains only their own responses and content. Where your content has been removed, your partner will see a message indicating that the content is no longer available.
  6. If both partners delete their accounts, the entire couple record and all associated data are permanently deleted.

What happens when you leave a couple (without deleting your account):

The same immediate surgical removal applies: your shared content is removed from the couple's timeline, your partner retains their own content, and you retain your user account for re-pairing.

11. Security

We implement the following measures to protect your data:

No system is 100% secure. While we implement industry-standard security measures, we cannot guarantee absolute security of data transmitted or stored digitally. By using Ours, you acknowledge the inherent risks of sharing content electronically, including intimate content. Please see our Terms of Service for further details on liability.

12. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms:

13. Children

Ours is intended for adults aged 18 and older. We do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account or if you have any child safety concerns, please contact us at safety@aphelion.health and we will investigate and act promptly. For our full child safety policy, see our Child Safety Standards.

14. Your Rights

14.1 European Economic Area and United Kingdom (GDPR / UK GDPR)

If you are in the EEA or UK, you have the right to:

14.2 South Africa (POPIA)

If you are in South Africa, you have the right to:

14.3 California (CCPA / CPRA)

If you are a California resident, you have the right to:

Financial incentive disclosure: Ours offers a free tier and a premium subscription. The free tier provides full core functionality. Premium features (unlimited timeline, voice notes, custom prompts, profile photo) are available for a subscription fee. The difference in service is based on the value of the additional features provided, not on the personal data you share.

14.4 Brazil (LGPD)

If you are in Brazil, you have equivalent rights under the Lei Geral de Protecao de Dados (LGPD), including the rights to access, correction, deletion, portability, and information about sharing. We apply the same protections described in this policy to all users regardless of jurisdiction. To exercise your LGPD rights, contact us at support@aphelion.health.

How to Exercise Your Rights

For any of the rights listed above, you may:

We will respond to verifiable requests within 30 days (or the period required by applicable law). We may need to verify your identity before processing your request.

15. Legal Basis for Processing (GDPR)

Processing ActivityLegal Basis
Account creation and service provisionPerformance of contract (Article 6(1)(b))
Sharing content with partner (including intimate/sensitive content)Explicit consent (Articles 6(1)(a) and 9(2)(a))
Push notifications (moment updates, taps)Consent (Article 6(1)(a))
Re-engagement notificationsLegitimate interest (Article 6(1)(f)) — with opt-out available
Subscription processingPerformance of contract (Article 6(1)(b))
Analytics (Google Analytics)Legitimate interest (Article 6(1)(f)) — with opt-out available in Settings
Advertising measurement (Meta SDK)Consent (Article 6(1)(a))
Crash reporting (Crashlytics)Legitimate interest (Article 6(1)(f)) — app stability
Voice note transcription (on-device)Consent (Articles 6(1)(a) and 9(2)(a))
Remote configuration and feature flagsPerformance of contract (Article 6(1)(b))

16. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

Material changes take effect 30 days after notification. Continued use of the App after this period constitutes acceptance of the updated policy. If you do not agree with the changes, you may delete your account before they take effect.

17. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: