Privacy Policy

The Untangled Life app and this website are operated by Roy Benjamin Trimarchi, ABN 33 996 188 561, trading as Untangled Life Couples app, in New South Wales, Australia. In this policy "we", "us" and "our" mean that operator, and "you" means the person using the app.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. If you are in the UK or the European Economic Area, we act as the controller of the information described here, and we rely on your consent for calendar access and photos, and on the performance of our agreement with you for everything else.

Contact: hello@untangledlife.com.au

• Account information. Your email address and a securely hashed password, handled by our authentication provider, plus the display name you choose. We never see or store your password itself. If you turn on two-factor authentication, our authentication provider keeps the authenticator secret, and we keep your recovery codes only as one-way hashes that cannot be turned back into the codes. We also keep the date and version of the Terms of Service and of this policy that you agreed to in the app.
• Your partner link. The invite code you generate or enter, and the fact that the two of you are paired. Pairing is what makes everything below visible to your partner.
• Events from the calendars you share. For each event in a shared calendar we store its start and end time and whether it is an all-day event, and, only for calendars you have set to full detail, its title, location and notes. That is what lets your phone's calendar appear inside Untangled Life as something you can read rather than an unexplained grey block. Section 4 sets out the three settings and how to change your mind.
• Working hours and rosters. The regular hours, rotating pattern or roster you enter. Roster text you paste in is read on your phone and never uploaded; we keep only the shifts worked out from it, so that time you are at work is not offered as time you are free.
• Content you create together. Dates and plans you book, key dates such as birthdays and anniversaries, countdowns, to-do items, wishlist items, trips (destination, dates, notes, booking references, costs and anything you attach), gift spending (each occasion you are buying for, the names you give the people you are buying for, who may be your children, each gift with its price and any note, and any budget you set), dates you propose to each other, date ideas you save, and the short review each of you can leave after a date, which your partner can read. All of it includes any titles, notes, locations and links you add. The names in gift spending are whatever you type, so a nickname or an initial works just as well.
• Photos you choose to add. A profile picture for yourself, a cover photo for your shared home screen, pictures on wishlists, trips and key dates, and screenshots of bookings and boarding passes you attach to a trip. These are uploaded, resized (screenshots are not cropped, so they stay readable) and stored so both of you can see them on every device you sign in from. Everything except your profile picture belongs to the couple and is visible to your partner. We only ever receive pictures you pick yourself. We do not read your photo library, and the app asks your phone for access to it only at the moment you tap to choose a picture. Location data embedded in a picture is removed before upload.
• Your answers about what makes you feel valued. The “Feeling valued” questions in the app ask what makes you feel wanted and what helps on a hard week, and ask you to rank five ways of feeling valued. These answers are written by you, for your partner to read, and that is the purpose of the feature rather than a side effect of it. Nothing you write is visible to your partner until you turn sharing on yourself: until then the answers are readable only by you, which is enforced by our database rather than by the app politely not asking. You can edit them, stop sharing them, or delete them at any time, and deleting your account deletes them with it. We do not score these answers, rate your relationship, or compare the two of you, and we never use them for anything other than showing your own words to your own partner inside the app.
• Anything you send us. If you email us for support, we keep that correspondence so we can help you.
• The waitlist on this website. If you register your interest, we keep your name, your email address and your answer to the shared-calendar question. We use them to tell you when the app launches, to understand who is interested, and to honour your place in the founding member queue, which is counted from the order emails were registered. When you create your account in the app, the email you sign up with is matched against the waitlist once, to find your place. If we move a place to a different email at your request, or mark a registration as not a real person, we keep a short administrative note of that change. Section 9 says how long the list is kept. Email us at any time and we will remove you from it.
• Your subscription. Purchases are handled by Apple or Google and we never see your card number. We keep the subscription's status and expiry, which store it was bought in, the store's product and transaction identifiers, and which of you is the payer. Both partners can see this, because one subscription covers the couple. If you registered on the waitlist, your founding member place and tier are kept on your profile, along with whether that discount has since ended.

• Push notification token. If you turn on notifications, your phone gives us a token we use to send you alerts, for example when your partner books a date, or adds a key date you might want on your own list. It is stored against your account so we can reach your phone; the push service sees the token and the message, not who you are. It is deleted when you sign out or delete your account. Turning notifications off in your phone's settings stops anything being shown.
• The notifications we have sent you. When we send you an alert we keep a copy of it against your account: what kind it was, the short title and message you saw, and when it was sent. That is what lets the app show you, in the bell, something you missed or cleared from your lock screen. Only you can read your own; the copy sent to your partner is not visible to you, and yours is not visible to them. Swiping one away in the app marks it cleared, and section 9 says how long the rest are kept.
• Device and technical information. The platform (iOS or Android) and the time zone your phone is set to, so the app shows your times correctly for both of you. Your time zone is visible to your partner and changes when you travel. An event you create also records the time zone you created it in, and that one does not change afterwards: a weekly 6pm dinner has to go on meaning 6pm at home even while you are away. Both are visible only to your partner.
• Security and diagnostic logs. Our hosting and authentication providers keep logs of connections to the service, including IP address, to detect abuse and to fix faults. Most are short-lived; the sign-in log kept by our authentication provider stays in our database for as long as we run the service. The sign-up form on this website counts attempts per connection address in memory for ten minutes and never writes the address anywhere.

Website visit counts. This website uses Vercel Web Analytics, a privacy-focused measurement tool run by our hosting provider, so we can see how many people visit, which pages they read, and which website or social network brought them here. It sets no cookies and stores nothing in your browser. For each page view it records the page, the time, the referring site, your approximate location (country and region, worked out from your connection; the connection address itself is not kept), and your browser, operating system and device type. It does not record your IP address, it does not build a profile of you, and it does not follow you across other websites or apps. Visitors are told apart by a hash of the request that is discarded after 24 hours, so what we see are totals, not people.

There are no advertising tags and no tracking cookies on this website. The app contains no third-party advertising or analytics software at all. Our Cookie Policy sets this out in full.

Calendar access is entirely optional, and it is granted one calendar at a time, at whichever of the three levels above you pick.

• Your phone asks your permission before the app can see any calendar at all. If you decline, the rest of the app still works: you can enter working hours, book dates and use key dates, to-dos and wishlists without ever connecting a calendar.
• Once permission is granted, you choose a level for each calendar. A calendar left off, which is what every calendar starts as, has its events never read and never uploaded. We keep only its name and the account it belongs to, so the Calendars screen can show you a recognisable list and remember your choice for each one; that list is readable by you alone.
• For shared calendars we read events in a rolling window around today, the next 30 days ahead, and refresh them when you open the app. We do not read your distant past or the far future.
• What we store is visible to your partner inside your shared calendar: the times for a busy-only calendar, the times and the content for a full-detail one.
• Turn a calendar off or down from full detail to busy only in the app, and what that calendar contributed is deleted from our servers immediately and stops appearing for your partner. Withdraw calendar access in your phone's settings, or remove a calendar from your phone, and the same happens the next time the app opens.
• The app writes to your calendar in three situations only: when a date or plan is booked for one or both of you (including a repeating one), it writes that event into a calendar on your phone, keeps it up to date if the plan changes, and your partner's app does the same on theirs; when you edit or delete one of your own events from inside the app, it makes that change to the calendar the event came from; and when you unpair or delete your account, it removes the events it created, where your phone still lets it. Cancelling a date removes it again. It never changes anything else in your calendar.

• Your position. The app never asks your phone where it is and never records a GPS position. A location you type into an event is text you chose to write. The one thing close to it that we do keep is the time zone your phone is set to, and the one recorded on each event you create (section 3), because times have to be shown correctly for both of you.
• Your contacts. We never read your address book. You pair with your partner using a code, not by us scanning who you know.
• Your photo library. We only receive the individual pictures you pick.
• Attendees and invitees. Where a calendar event lists other people, we do not upload them.
• Payment details. Purchases are handled by Apple or Google. We never see your card number, only the subscription details in section 2.

We use it to run the app you asked for, and for nothing else:

• To show you and your partner a shared calendar of what you both have on.
• To work out when you are both genuinely free, and to suggest those times.
• To book dates onto both of your phones and keep them in step.
• To send you reminders and alerts if you have allowed notifications: upcoming key dates, a date or plan of yours about to start, a date your partner just booked or changed, a countdown reaching zero. And one more: if neither of you has planned a date for a fortnight, both phones get a gentle reminder. It goes to both of you or to neither, it is worked out from your own dates alone, and either of you can turn it off for both of you under Settings, Notifications in the app; that one switch is the couple's, so both of you can see whether it is on. The same screen lets you turn off reminders and the alerts about your partner's changes, and choose the hour reminders arrive and how long before a date or plan you are told; those choices are kept against your account and are never shown to your partner.
• To keep your lists, wishlists, gift spending, key dates and photos in sync across your devices.
• To answer your support emails, fix faults, and keep the service secure.
• To meet our legal obligations.

We do not sell your personal information. We do not share it with advertisers, we do not use it to target ads, and we do not use your calendar content to train machine learning models.

• Your partner. Once you are paired, they can see everything the app shares within a couple: your busy times, the content of events from any calendar you set to full detail, your working hours, your shared dates and plans, key dates, countdowns, to-dos, wishlists, trips and what is attached to them, gift spending, date proposals and reviews, the subscription details, your display name, your profile picture and your time zone. This is symmetrical: you see the same things about them. Our database is built so that no other user of the app can read your couple's information. We can, when we need to fix a fault or answer a support request, and we do not look otherwise.
• Service providers. We use Supabase for the database, authentication and photo storage, Expo's push service to deliver notifications, and Vercel to host this website and to count visits to it. They process information on our instructions in order to provide those services, and they are not permitted to use it for their own purposes. Apple and Google deliver notifications to your phone and handle purchases, as they do for every app, under their own policies.
• Where the law requires it. We may disclose information if we are legally compelled to, or where it is necessary to protect someone's safety or our legal rights.
• If the business changes hands. If Untangled Life is sold or merges with another business, information may transfer to the new owner as part of that. We will tell you in the app before that happens, and the new owner will be bound by this policy until you are given notice of a replacement.

Nobody else. There is no public profile, and nothing you enter is visible on the web.

Your information is stored in our Supabase project, hosted in Sydney, Australia. Push notifications are delivered through Expo's servers in the United States and then by Apple or Google; a notification carries only the short message you see on your lock screen, which can include your partner's name and the title, time and place of the plan. The sign-up form on this website is processed by Vercel outside Australia before your details are written to Sydney.

Where information is handled outside Australia, we take reasonable steps to ensure it is protected to a standard comparable to the Australian Privacy Principles.

• Calendar events. Only the current window. Events more than a week in the past are deleted by a daily job, so the app does not accumulate a history of where you have been.
• Everything you created. Key dates, to-dos, wishlists, trips, gift spending, dates, photos and working hours are kept until you delete them, or until you leave (see the next three points).
• Your account. Kept until you delete it. Deleting your account removes your profile, your profile picture, your calendar data, your working hours, your Feeling valued answers and your date reviews, and your own birthday entry from your partner's list. Photos and items you added to shared lists, trips, gift spending and key dates stay with your partner, as the Terms explain; delete them in the app first if you do not want that. Everything shared is removed when the last member of the couple deletes their account.
• Unpairing and pairing again. Unpairing treats shared content the same way as deleting your account, but you keep your account and profile picture. Whoever stays keeps what you shared, and if they later pair with someone new, their new partner can see it. The same is true for you if you are the one who stays. Pairing works by one person entering the other's code. Whoever enters it, whether pairing for the first time or again, loses the photos on their own wishlists, trips and key dates, including trip screenshots: those are deleted, not moved. Their cover photo for the home screen comes across if the other person has none of their own and the two of you can still add photos once paired; otherwise it is deleted.
• Backups. Our database provider keeps backups for a short, rolling period. Deleted information can persist in those until they roll over; it is not restored to the live service.
• The waitlist. Kept until 90 days after the app launches, which is how long a founding member place is held, then deleted by a daily job. A row whose email became an app account is kept with the account instead; if that account is later deleted, the row is released and goes with the rest of the list. Ask us and we will remove you sooner.
• Notifications we have sent you. Deleted by a daily job ninety days after they were sent, whether or not you cleared them. They also go when you unpair or delete your account.
• Logs. Kept briefly by our providers for security and diagnosis, then discarded. The administrative notes about waitlist places and subscriptions mentioned in section 2 are kept while the app operates.

Everything travels over encrypted connections and is encrypted at rest by our hosting provider. Access to your couple's data is enforced in the database itself, row by row, so a bug in the app cannot expose another couple's information. Passwords are hashed by our authentication provider and are never visible to us.

No service can promise perfect security. If a breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner as required by law.

• See what we hold. Most of it is visible in the app. Email us and we will provide the rest.
• Correct it. You can edit your name, photos, key dates, working hours and lists in the app at any time.
• Get a copy. Settings, then “Export my data”, gives you a file (JSON) of your profile and settings, your working hours, calendar choices and busy times, your Feeling valued answers and date reviews, and everything shared in your couple, with photos listed by their storage path. Ask us if you need it another way or want anything it leaves out.
• Withdraw consent. Turn off calendar access or notifications in your phone's settings, turn off any kind of notification under Settings, Notifications in the app, disconnect individual calendars in the app, or unpair, whenever you like.
• Delete it. Delete individual items in the app, or delete your account in Settings and it is removed straight away; any remaining photo files are cleared by a daily job. If you cannot get into the app, email us and we will do it within 30 days.

Email hello@untangledlife.com.au for any of these and we will respond within 30 days.

Untangled Life is not intended for anyone under 16, and we do not knowingly collect information from them. If you believe a child has given us their information, contact us and we will delete it.

You may add information about children yourself, such as a birthday in key dates, or a name and what you are buying them in gift spending. It is treated like the rest of your shared content: your partner can see it, it is used only for the purposes in section 6, and section 9 says how long it is kept. A first name or a nickname is all the app needs.

If you think we have mishandled your personal information, email us and we will respond within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

If this policy changes in a way that affects what we collect, who can see it, or how long we keep it, we will update the date at the top and tell you in the app before the change takes effect.

This policy is governed by the laws of New South Wales, Australia.