Who is responsible
Deary is operated by Kreyd Labs Ltd, registered in England and Wales under company number 17152066. Our registered office is 133 Whitmore Road, Harrow, United Kingdom, HA1 4AG. For privacy questions or requests, email privacy@kreydlabs.com.
What Deary uses
We use the following information to provide Deary:
- your Sign in with Apple identifier and first name, but not your Apple email address;
- your couple connection, relationship preferences, shared schedule, time zone, notification choices, topic exclusions and consent;
- the questions you choose, private answers, one bounded reply, reactions, reveal state and timeline entries;
- purchase and entitlement information needed to provide shared paid access; and
- limited technical identifiers and content-free security, notification, deletion, backup and recovery records.
Answers are free text. They may contain especially sensitive information you choose to write, including information about relationships, sex life, sexual orientation or health. Read our Consumer Health Data Privacy Policy for additional detail that applies in Washington.
What Deary does not do
We do not sell personal information, share it for targeted advertising, show advertising, track you across other companies' apps or websites, make relationship or health profiles, or use private questions or answers to train AI. We do not place private question, answer or reply text in notifications, analytics, crash reports, support records or operational receipts.
Deary does not collect your contacts, photos, videos, audio, precise location, payment-card details, browsing history or search history. The app contains no advertising, analytics or third-party crash reporting SDK.
Why we use information
For UK users, we rely on performance of our contract to provide the account, couple ritual, timeline, purchases, export and deletion. We ask for separate explicit consent before intimate questions can be used. Both people must opt in, either person can withdraw, and either person's exclusion always wins. Withdrawal stops future intimate questions but does not hide memories already revealed.
We rely on legitimate interests for strictly necessary security, abuse prevention, service reliability and recovery after balancing those interests against the sensitivity of the information. We use information where necessary to meet legal obligations and honour privacy rights.
For US users, we use information to provide the service you request, protect it, fulfil legal obligations and honour privacy rights. Where applicable law requires consent for sensitive information, we ask before the relevant processing and provide a withdrawal route.
Who receives it
Your revealed answers are visible only to you and your connected partner. Convex hosts Deary's authenticated production and recovery backend in EU West (Ireland) and processes account, ritual, encrypted content, purchase and operational data for Kreyd Labs Ltd. Apple processes Sign in with Apple, App Store purchases and push transport under Apple's terms. Push payloads never contain private question, answer, reply or topic text.
We may disclose information where legally required or necessary to protect people and the service. We do not disclose answers for advertising.
International transfers
Deary's production and recovery backends are in Ireland. The UK recognises the European Economic Area as adequate for UK GDPR transfers. Apple and approved support providers may process limited information in other countries under their transfer safeguards.
How long we keep it
Active account information and answers are kept while needed to provide Deary. Confirmed account deletion removes the deleting person's live account and answers. It does not delete the other person's own answers. Encrypted backup copies are beyond normal use, carry deletions through the restore procedure, and expire within 30 days. Generated exports are not retained by Deary after delivery. Minimal content-free deletion, Apple-event, security and backup receipts expire within 30 days.
Disconnecting stops new questions but preserves each active person's revealed memories. Apple and other processors may retain limited records under their own legal duties.
Your choices and rights
In Deary you can change exclusions and notification privacy, withdraw intimate-topic consent, export your data, disconnect, and delete your account. Depending on where you live, you may also ask for access, correction, deletion, portability, restriction, objection, withdrawal of consent, an appeal, or an opt-out required by law.
Email privacy@kreydlabs.com. We will verify requests without asking for unnecessary information. Exercising a privacy right will not result in unlawful discrimination.
UK users may complain to the Information Commissioner's Office. US users may contact their state attorney general.
Security and incidents
Network connections use encryption in transit. Private answers and timeline content are encrypted before database storage, and device caches are encrypted with a device-only key. Access is scoped to the requester and couple. Operational logs and notifications exclude private text, and restricted encrypted backups are restore-tested. No security measure can remove every risk.
If an incident requires notice, we will notify affected people and regulators as required by applicable law.
Children
Deary is only for people aged 18 or older and is not directed to children. By creating an account, you confirm that you are at least 18. Version one does not independently verify age.
Changes to this notice
We will explain material changes before they take effect and request new consent where required. The date at the top shows when this notice was last updated.