Privacy Policy

Last updated 24 October 2026 · The German version prevails.

This policy covers two things: the Dovea app for Android and iPhone, and this website. Dovea shows no ads, sells no data and builds no advertising profile of you. Because Dovea is made for two people who share their data with each other, part of it leaves your device – that is the only way your partner sees what you add. What exactly, is below.

Controller

TONYC, Jake Benner. Address and contact in the imprint. Privacy questions to support@tonyc.link.

The Dovea app

In short

• Your entries live on your device first and are only synced between you and your partner.
• Intimate entries are encrypted on the device before they leave it. On the server they are unreadable, including to me.
• No ads, no ad tracking, no analytics tools, no crash reporting.
• You need neither a name nor an email address. An account with email or Google is optional.

On your device

The app stores everything you add – moods, expenses, chores, events, cycle data, journal entries and settings – in a database on your device. The key for intimate entries is kept in your device's protected storage (Android Keystore or iOS Keychain) and never leaves it unencrypted.

Account and sign-in

On first launch the app creates an anonymous account with Firebase Authentication (Google Ireland Limited / Google LLC): a random user ID with no name or email. If you choose to secure your account with an email and password or your Google account, Firebase also processes that email address or Google display name. Legal basis: Art. 6(1)(b) GDPR (providing the app).

Syncing with your partner

Once you have connected with the 6-character code, your shared entries are synced through Google Firebase Cloud Firestore and Cloud Functions. This includes mood and status, signals, expenses and settlements, chores, shopping list, events, date ideas, wishes, gratitude and feedback entries, progress and achievements, and the cycle data you share with your partner. The database and Cloud Functions are located in the Google Cloud region Frankfurt (europe-west3). Google processes the data as my processor (Art. 28 GDPR); where data reaches the USA, Google is certified under the EU-US Data Privacy Framework and the EU Standard Contractual Clauses apply as well. Legal basis: Art. 6(1)(b) GDPR.

Entries in the intimacy tracker are encrypted with AES-256 on your device before upload; the key is only exchanged between your two devices in encrypted form (RSA). The server holds ciphertext only.

Cycle and health data

Cycle data and intimacy entries are health data under Art. 9 GDPR. Dovea only processes them if you switch on the cycle tracker or intimacy tracker yourself; the app asks for your explicit consent first. Your cycle days only leave your device while tracking is on and you have chosen a sharing level above "private" (phase only, phase and symptoms, everything); they are then synced to your partner's device, which shows them according to that level. If you switch to "private", turn tracking off or delete your cycle data, your cycle days are removed from the server and from your partner's device. Legal basis is your explicit consent (Art. 9(2)(a) GDPR), which you can withdraw at any time in this way.

Notifications

For push notifications (such as "your partner is thinking of you") the app uses Firebase Cloud Messaging (Google). A device token is stored for this, used only to reach your device. Reminders for events and chores are local notifications on your device.

Abuse protection

So that only the genuine app can reach the server, Firebase App Check verifies the app through Play Integrity (Google) or App Attest (Apple). This processes technical device signals, not content. To keep the cost of the service predictable, the app also counts its own server requests per day; if a device exceeds a daily limit, I receive a message via the Telegram messenger containing the pseudonymous couple ID and the counts – no content. Legal basis: Art. 6(1)(f) GDPR (protecting and running the service economically).

Premium and purchases

You buy Premium through Google Play or the App Store; the store handles payment entirely and the app never sees payment details. So that Premium applies to both of you, the app uses the purchase service RevenueCat (RevenueCat, Inc., USA). RevenueCat receives the pseudonymous couple ID, the store's purchase receipt and technical data such as app version, operating system, store country and IP address. RevenueCat acts as my processor; transfers to the USA are covered by the EU Standard Contractual Clauses. Legal basis: Art. 6(1)(b) GDPR. More: revenuecat.com/privacy.

Photos in your Google Drive

Photos for your memories are stored in your own Google Drive, only if you connect it, and only in files the app creates itself (drive.file permission). The photos never reach my servers.

Fonts

On first launch the app downloads its fonts (Lora, Nunito) from Google Fonts' servers and keeps them on the device afterwards. Google learns your IP address in the process. Legal basis: Art. 6(1)(f) GDPR (consistent display).

Calendar subscriptions

If you add the address of an external calendar (iCal/ICS) yourself, the app fetches that calendar directly from its provider, who sees your IP address.

Permissions

• Notifications: for push notifications and reminders
• Camera and photos: only when you pick a profile or memory photo
• Battery optimization (Android): so reminders arrive on time, only if you confirm

The app does not access your location, contacts or microphone.

Retention and deletion

Your data is kept as long as you use the app. In the app you delete your account under Profile → Settings → Danger Zone → Delete Account: your account, the data on your device and your sign-in are removed. This dissolves your couple – as does either of you choosing "Leave Couple". When a couple is dissolved, the server automatically deletes every entry you shared as a couple; all that remains is the record that, and when, the couple ended. All the details: Delete account.

Children

Dovea is meant for adults and is not intended for anyone under 16.

This website

This website is hosted on Cloudflare Pages (Cloudflare, Inc., USA). To deliver pages, Cloudflare processes your IP address, the requested address, the time and your browser's identifier and keeps them briefly for delivery and defence against attacks (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework. The site sets no cookies, uses no analytics and loads nothing from other servers; its fonts are served from this site itself.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR), the right to withdraw consent at any time (Art. 7(3) GDPR) and the right to lodge a complaint with a supervisory authority, such as the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg. Write to support@tonyc.link.