Privacy Policy

Amora is operated by Tonkin Apps LLP. This policy covers the Amora website, web onboarding and mobile apps. Relationship content is private by design: we process it to provide Amora, but we do not send your answers, journal entries, memories, partner details or photos to advertising platforms.

Information We Collect

• Account and profile information: email address, authentication provider, name, account identifier, profile details and a profile photo you choose to add.
• Relationship content: partner details, dates, onboarding answers, question answers, journal entries, stories, memories and other content you create. This may include information you consider sensitive.
• Usage and device information: app or page events, feature interactions, subscription screens, device and app version, language, approximate country, performance, crash and diagnostic information.
• Acquisition information: referring site, landing page, UTM values, campaign, account, ad set or ad group, ad, creative and placement identifiers. Paid links may include Meta fbclid, TikTok ttclid, or Google gclid, gbraid and wbraid.
• Consented advertising signals: after you allow the relevant provider, Meta browser identifiers _fbc and _fbp, TikTok identifier _ttp, and short-lived IP address and user-agent information used to dispatch a conversion event.
• Subscription and transaction information: product, offer, trial or subscription status, purchase and renewal dates, amount, currency and store transaction references. We do not receive your full card number.
• Support and security information: messages you send us, authentication and audit records, and information needed to prevent abuse and protect the service.

How and Why We Use Information

We use information to create and authenticate your account; save and sync your experience with your partner; personalize features; provide notifications; operate subscriptions; respond to support; protect Amora; diagnose failures; measure product performance; and, only where permitted, measure advertising. Depending on where you live, our legal bases include performing our contract with you, complying with law, our legitimate interests in security and service improvement, and your consent for optional analytics or advertising measurement.

Advertising Measurement and Matching

The web onboarding choice starts with optional analytics and advertising measurement turned off. If you enable advertising measurement, Amora may send generic events such as landing viewed, registration completed, checkout started, trial started or purchase completed directly from our servers to Meta through its Conversions API and to TikTok through its Events API. The web funnel does not load Meta or TikTok browser scripts.

Those events may include product, offer, value and currency plus a normalized email address and stable account identifier transformed with a one-way hash. A hash remains personal data when it can be matched. We may also include the relevant ad click ID, the provider-specific browser identifiers listed above, and IP address and user agent for event matching and deduplication. We never include relationship answers, partner names, birthdays, photos, journals or memories in these events.

Raw click and browser identifiers are encrypted in our attribution system. The outbox copy of provider browser identifiers, IP address and user agent is cleared after successful delivery, when consent is withdrawn, or no later than the seven-day retry window. Encrypted acquisition-touch context containing paid-click identifiers is removed after its limited attribution window, no later than 90 days; hashed and aggregate campaign records may be kept longer for reporting and fraud prevention.

Services That Process Information for Us

• Supabase provides authentication, database services and private photo storage. Photos selected during web onboarding are re-encoded to remove embedded metadata before upload to Supabase Storage.
• RevenueCat manages subscription entitlement and transaction status. Stripe processes web payment details within RevenueCat's checkout. Apple or Google process purchases made through their app stores.
• PostHog provides product analytics, performance and diagnostic measurement. We use generic product events and do not send private relationship content or photos to PostHog.
• AppsFlyer measures mobile installs, acquisition sources, generic in-app conversion events and uninstall signals. After authentication, it may receive an Amora account identifier so web and app activation can be reconciled; it does not receive your private relationship content.
• Meta and TikTok receive the consented advertising events and matching signals described above. Their own policies govern information after they accept it.
• Vercel hosts parts of our website and provides operational analytics. Apple Push Notification service and Firebase Cloud Messaging deliver notifications.

What We Do Not Do

We do not sell personal information for money, use private relationship content to target ads, train public AI models on that content, or show third-party ads inside Amora. Some laws define consented advertising measurement as “sharing” or targeted advertising even when no money changes hands; you can opt out as described below.

Storage, Security and Retention

We use HTTPS, access controls, encrypted storage where supported, signed links and other safeguards appropriate to the information. No system is completely secure. Account and relationship content is generally kept while your account is active and removed or de-identified after deletion, subject to backups, fraud prevention and legal or financial recordkeeping. Consent, transaction and security records may be retained as needed to demonstrate choices, provide purchases and comply with law.

Your Choices, GPC and Rights

You can choose necessary-only processing or separately allow optional analytics and advertising measurement in web onboarding. Return to web onboarding and select “Privacy choices” to change the choice for that journey or, when signed in, for your account, or email us. We honor Global Privacy Control (GPC) for advertising measurement in the web funnel: when detected, ad measurement remains off. Withdrawing a provider expires its first-party Amora-domain measurement cookies where technically possible and suppresses pending server deliveries. Withdrawal cannot automatically erase an event a provider already accepted.

Depending on your location, you may ask to access, correct, export or delete your information; restrict or object to processing; withdraw consent; opt out of sale, sharing or targeted advertising; or appeal a decision. You may also complain to your local data-protection authority. You can delete your account in Amora or contact us for help. We may need to verify your identity before fulfilling a request.

International Processing and Age

Our providers may process information outside your country. Where required, we use appropriate transfer safeguards. Amora is for adults aged 18 and over, and we do not knowingly collect personal information from children.

Changes and Contact

We may update this policy as Amora changes. We will update the date above and provide additional notice when required. Questions or privacy requests can be sent to privacy@tryamora.app.