Teso: Couples ("the App") is a relationship companion app that helps couples track shared events, explore conversation prompts, and resolve conflicts using AI-assisted analysis. This Privacy Policy explains what data we collect, how we use it, who we share it with, and what rights you have.
By using the App, you agree to the practices described in this policy. If you do not agree, please do not use the App.
1. Information We Collect
1.1 Information You Provide
- Account information: name, email address, and authentication data when you sign in with Apple or Google.
- Partner connection: a unique pair code used to link your account with your partner.
- Events: events you create (e.g., dates, movie nights, intimacy events), including titles, dates, and notes.
- Card interactions: your swipes and preferences on conversation/activity cards.
- Wishlist entries: items you add to shared wishlists.
1.2 Conflict Resolution Data (Sensitive)
The Conflict Resolution feature collects data that may be considered sensitive or special-category personal data under applicable privacy laws (including GDPR Article 9), as it relates to your emotional state and intimate relationship. We process this data only with your explicit consent, which you provide each time you submit a conflict entry.
When you use the Conflict Resolution feature, we collect:
- Conflict topic (selected or custom-written)
- Description of what happened (free-text narrative)
- Emotional intensity rating (1–10 scale)
- What felt important or painful (free-text)
- Your acknowledged responsibility (free-text)
- What you want from the situation (free-text)
- AI-refined text (if you request a rewrite of your entry)
- AI-generated analysis (therapeutic insights generated from both partners' submissions)
- Feedback on whether the analysis was helpful
Both you and your partner can see each other's submitted entries and the shared analysis once the conflict is resolved.
1.3 Automatically Collected Information
- Device type and model
- iOS version
- App version
- Anonymous usage and diagnostic data
- Crash reports
2. How We Use Your Information
- Create and manage your account
- Connect you with your partner
- Sync events, cards, and wishlists between partners
- Process conflict submissions and generate AI-powered analysis
- Manage subscriptions and premium features
- Improve the App through analytics
- Send service-related notifications (e.g., when your partner submits their conflict entry)
- Detect and prevent fraud or abuse
We do not sell your personal information. We do not use your data for advertising.
3. Third-Party Services and Data Sharing
We share your data with the following third-party service providers, solely to operate the App:
| Provider |
Purpose |
Data shared |
| Supabase, Inc. |
Backend infrastructure, database, authentication, real-time sync |
All account, event, card, wishlist, and conflict data. Stored on Supabase-managed servers (AWS, US regions). |
| OpenAI, L.L.C. |
AI-powered conflict analysis and text refinement |
Conflict entries (topic, descriptions, emotional data) are sent to OpenAI's API for processing. See Section 4 for details. |
| RevenueCat, Inc. |
Subscription and purchase management |
Anonymous app user ID, purchase receipts, subscription status. |
| Apple Inc. |
Sign in with Apple, App Store payments, crash reporting |
Authentication tokens, payment processing (we never see your payment details), diagnostics. |
| Google LLC |
Google Sign-In |
Authentication tokens, basic profile (name, email) if you choose Google Sign-In. |
| Google Firebase |
Push notifications, crash reporting |
Device tokens, crash logs. Firebase is not used as the primary database. |
4. AI Conflict Resolution Feature
When you use the Conflict Resolution feature, your submitted text and emotional data are sent to OpenAI's API (models: GPT-4o and GPT-4o-mini) for processing. Specifically:
- Text refinement: If you request an AI rewrite, your conflict entry is sent to OpenAI to generate a version based on Nonviolent Communication (NVC) principles.
- Topic generation: The initiator's topic and description are sent to generate a neutral topic title shown to the partner.
- Full analysis: After both partners submit, both entries (descriptions, emotional ratings, acknowledged responsibility, desires) are sent to OpenAI to generate a therapeutic analysis.
Important:
- Your data is sent to OpenAI via encrypted HTTPS connections.
- Under OpenAI's API data usage policy, API inputs and outputs are not used to train OpenAI's models.
- We do not include your name, email, or account identifiers in requests to OpenAI.
- OpenAI may retain API data for up to 30 days for abuse monitoring, after which it is deleted. See OpenAI's API Data Usage Policy for details.
5. Data Storage and Security
Your data is stored on Supabase-managed infrastructure hosted on Amazon Web Services (AWS) in the United States. Data is encrypted in transit (TLS) and at rest (AES-256).
We implement reasonable technical and organizational measures to protect your data, including:
- Row-Level Security (RLS) policies ensuring only you and your partner can access your shared data
- Encrypted connections for all data transmission
- Secure authentication via Apple and Google identity providers
However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
6. Data Retention
- Account data: retained as long as your account is active.
- Conflict data: retained as long as your account is active. You may request deletion at any time (see Section 9).
- OpenAI processing: OpenAI may retain API request data for up to 30 days for abuse monitoring, then deletes it.
- Analytics and crash data: retained in anonymized/aggregated form.
Upon account deletion, your personal data is removed from active systems within 30 days, except where we are legally required to retain it.
7. Subscriptions
Teso offers optional in-app subscriptions that unlock premium features, including Conflict Resolution, additional card packs, and more. All payments are processed through Apple's App Store. We do not directly store or process your payment information. Subscription status is managed by RevenueCat.
8. Children's Privacy
The App is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately.
9. Your Rights
Depending on your location, you may have the following rights:
- Access: request a copy of the personal data we hold about you.
- Correction: request correction of inaccurate data.
- Deletion: request deletion of your personal data.
- Data portability: request your data in a structured, machine-readable format.
- Restriction: request restriction of processing in certain circumstances.
- Objection: object to processing based on legitimate interests.
- Withdraw consent: withdraw consent for processing of sensitive data (conflict resolution) at any time, without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at nadtoka.o.work@gmail.com. We will respond within 30 days.
9.1 For Users in the European Economic Area (EEA)
If you are located in the EEA, our legal bases for processing your personal data are:
- Contract: processing necessary to provide the App's services (account, partner sync, events).
- Explicit consent: processing of sensitive data in the Conflict Resolution feature (GDPR Article 9(2)(a)). You provide this consent each time you submit a conflict entry. You may withdraw consent at any time.
- Legitimate interest: analytics, fraud prevention, and App improvement.
Your data is transferred to the United States (Supabase/AWS and OpenAI). These transfers are safeguarded by Standard Contractual Clauses (SCCs) or equivalent mechanisms.
You have the right to lodge a complaint with your local data protection authority.
10. Account Deletion
You can request account deletion through the in-app account settings or by contacting us at nadtoka.o.work@gmail.com. Upon deletion:
- Your personal information is removed from active systems within 30 days.
- Shared data (events, conflicts) associated with your pair may be anonymized or deleted.
- Some data may be retained where legally required.
11. International Data Transfers
Your information may be transferred to and processed in the United States, where our service providers (Supabase, OpenAI) operate. By using the App, you consent to the transfer of your information to the United States and other jurisdictions that may have different data protection laws than your country of residence.
For transfers from the EEA, we rely on Standard Contractual Clauses and other approved transfer mechanisms to ensure adequate protection.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Changes will be posted with a revised effective date. For material changes (especially those affecting sensitive data processing), we will notify you through the App. Continued use of the App after changes constitutes acceptance of the updated policy.
13. Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, contact us at:
Alexandr Nadtoka
Email: nadtoka.o.work@gmail.com