# Privacy Policy — Just Us
**Last updated:** July 10, 2026
**App name:** Just Us
**Contact:** mazellangames@gmail.com
**Developer:** Mazellan Games
This Privacy Policy describes how Just Us (“we”, “our”, “the app”) collects, uses, and protects information when you use our mobile application.
---
## 1. Who this app is for
Just Us is a **private app for couples**. You pair with one partner using an invite code. Data in your couple space is intended to be shared **only between you and your linked partner**, not with the public.
---
## 2. Information we collect
### 2.1 Account information
- A Firebase Authentication user ID (including anonymous accounts until you link Google or Apple Sign-In)
- Display name, avatar color, and avatar customization you choose
- Optional: email or identity provider data from Google or Apple when you choose to link an account
### 2.2 Couple & app content
When you use the app with a partner, we store content you create, such as:
- Moods, pings, silent love (heart) events
- Memories (text, photos you upload)
- Board notes, countdowns, calendar events, plans, playlists
- Game states, messages, and other couple features you use
- Push notification tokens (Expo/FCM) to deliver partner alerts
### 2.3 Device & usage data
- Basic analytics events (e.g. app open, screen views) and crash reports, tied to your user ID
- Device platform (iOS/Android) and app version
- Language preference stored locally on your device
### 2.4 What we do not collect
- We do not sell your personal data
- We do not use your data for third-party advertising
- We do not require a phone number or email unless you link Google/Apple
---
## 3. How we use information
We use data to:
- Provide pairing, sync, and real-time features between you and your partner
- Send push notifications your partner triggers (pings, hearts, SOS, etc.)
- Maintain your account and restore access when you link Google or Apple
- Improve stability (analytics and crash reporting)
- Enforce security rules so only couple members can access couple data
---
## 4. Where data is stored
Data is stored using **Google Firebase** (Firestore, Authentication, Cloud Storage, Cloud Functions) in infrastructure operated by Google. Firebase may process data in the United States and other regions where Google operates.
Photos and files you upload are stored in Firebase Storage under your couple’s folder.
---
## 5. Encrypted memory photos (new couples)
For couples created with photo encryption enabled:
### What is encrypted
- **Memory photos** are encrypted on your device **before** upload using industry-standard cryptography (X25519 key agreement and AES-GCM).
- Encrypted files are stored in Firebase Storage. Firebase/Google **cannot** decrypt these photos — they only store encrypted blobs.
### What stays on your device
- Your couple’s **photo decryption key** is stored in the device **Keychain / Secure Enclave** (via iOS Secure Store).
- Your **recovery code** (if shown at setup) is also saved locally on the device so you can view it again in Settings.
### What we store in Firebase for encryption (not the photos themselves)
- Public encryption keys (for key exchange between partners)
- A **recovery backup envelope** (your file key encrypted with your recovery code — we cannot read the code or the key)
- Wrapped keys so your partner can help restore access when online
### Recovery
If you reinstall the app or change phones, you can restore photo access by:
1. **Recovery code** — the code you saved when pairing (Settings → View recovery code / Restore photo access)
2. **Partner online** — when your partner opens Just Us, keys can be re-shared automatically
**Important:** If you lose both your device keys and your recovery code, and your partner cannot help, **encrypted photos cannot be recovered**. We do not have a master key.
### Older couples
Couples created before photo encryption may still store memory photos in plain form in Firebase Storage.
---
## 6. Sharing with third parties
We share data only as needed to run the app:
| Provider | Purpose |
|----------|---------|
| **Google Firebase** | Authentication, database, file storage, push delivery, cloud functions |
| **Google / Apple** | Sign-in, if you choose to link an account |
| **Expo (push services)** | Delivering notifications on development/production builds |
We do **not** share couple content with advertisers or data brokers.
Your **partner** can see content you share in the couple space (by design).
Firebase stores encrypted photo blobs but cannot decrypt them.
---
## 7. Data retention & deletion
- Data remains until you or your partner delete it, reset pairing, or delete an account
- **Delete account** (in Settings) removes your Firebase Authentication account and local app data; couple cleanup may affect shared content depending on pairing state
- **Reset pairing** deletes the shared couple space for both partners, including encryption metadata
- Leaving or resetting pairing clears encryption keys stored locally on your device
- You may request deletion of your data by contacting us at **mazellangames@gmail.com**
---
## 8. Security
We use:
- Firebase Security Rules so couple data is readable/writable only by couple members
- HTTPS for network communication
- Optional Google/Apple account linking to reduce anonymous account loss
- **End-to-end encryption for memory photos** (new couples) as described in Section 5
No system is 100% secure. Use a strong device passcode, **save your photo recovery code**, and link your account if you want easier recovery.
---
## 9. Children
Just Us is **not intended for users under 17**. We do not knowingly collect data from children. Contact us if you believe a child has used the app.
---
## 10. Your choices
- **Language:** English or Turkish in Settings
- **Notifications:** Can be disabled in device Settings
- **Account linking:** Optional Google/Apple link
- **Leave couple / delete account:** Available in Settings
- **Sound:** Can be muted in Settings
- **Photo recovery code:** View or regenerate in Settings (encrypted couples)
---
## 11. International users
If you use the app outside your home country, your data may be processed in countries where Firebase operates, including the United States.
---
## 12. Changes to this policy
We may update this Privacy Policy. We will post the new date at the top. Continued use after changes means you accept the updated policy.
---
## 13. Contact
Questions or privacy requests:
**Email:** mazellangames@gmail.com
**App:** Just Us (com.mazellan.ikimiz)
---
*Publish this text at your privacy policy URL (e.g. Google Sites) so it matches what users see in the app.*