Privacy Policy for Amory

Last Updated: July 23, 2026

1. Introduction

Welcome to Amory ("Amory," "we," "our," or "us").

Amory is a private relationship platform designed to help two people build, maintain, and strengthen their connection through shared experiences, communication, memories, planning tools, interactive features, and other services made available through the Amory mobile application, website, and any related services (collectively, the "Services").

We recognize that the information you choose to share through Amory is deeply personal. Because of this, protecting your privacy, safeguarding your personal information, and maintaining the confidentiality of your data are among our highest priorities. We are committed to processing your information responsibly, transparensively, and in accordance with applicable privacy and data protection laws.

This Privacy Policy explains how we collect, access, receive, generate, use, process, store, disclose, transfer, protect, retain, and delete information relating to individuals who access or use the Services. It also explains the choices available to you regarding your information and the rights you may have under applicable privacy legislation.

By creating an account, accessing, or using any part of the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Privacy Policy, you must discontinue use of the Services immediately.

This Privacy Policy applies regardless of the device you use to access the Services, including smartphones, tablets, computers, wearable devices, or other supported platforms.

Relationship-Based Service

Unlike traditional social networking platforms, Amory is designed primarily for private use between two connected users.

Many features within the Services are specifically intended to allow information to be shared between you and the partner whom you voluntarily connect with through the application's invitation system. Depending on the permissions you grant and the features you enable, your connected partner may be able to view certain information that you intentionally choose to share, including but not limited to profile information, relationship memories, shared plans, activity indicators, status updates, wellness indicators, location information, calendar events, voice recordings, media content, or other shared relationship data.

You remain in control of the permissions you grant within the Services. Certain features may require your explicit consent before any information is collected or shared.

Scope of this Privacy Policy

This Privacy Policy applies to all information collected through:

• the Amory mobile applications;

• official Amory websites;

• customer support communications;

• optional beta features;

• future versions of the Services;

• integrations made available by Amory;

• widgets, lock-screen features, wearable integrations, and companion experiences;

• any other services that expressly reference this Privacy Policy.

This Privacy Policy does not apply to third-party websites, applications, products, or services that are not owned or controlled by Amory, even if they may be linked from within the Services. Your interactions with those third parties are governed by their own privacy policies and terms.

Changes to this Privacy Policy

We may revise, modify, or update this Privacy Policy from time to time in order to reflect changes in our Services, legal obligations, business practices, technological developments, security standards, or other operational requirements.

When material changes are made, we will update the "Last Updated" date at the beginning of this Privacy Policy. Where required by applicable law, we may also provide additional notice through the Services, by email, or by other reasonable means before such changes become effective.

Your continued use of the Services after any revised Privacy Policy becomes effective constitutes your acknowledgment of the updated Privacy Policy to the extent permitted by applicable law.

If any modification requires your explicit consent under applicable law, we will request such consent before applying the relevant changes.

Important Notice

This Privacy Policy should be read together with our:

• Terms of Service;

• Community Guidelines (if applicable);

• Cookie Policy (if applicable);

• Data Processing Addendum (where applicable);

• Data Deletion Policy;

• any additional privacy notices presented when using specific features.

Where additional notices are presented within particular features of the Services, those notices supplement this Privacy Policy and shall govern the processing activities specific to those features.

2. Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set forth below.

These definitions apply regardless of whether the terms appear in singular or plural form.

"Amory"

"Amory," "we," "our," or "us" refers to the developer and operator of the Amory application and related Services, including any affiliated entities, successors, contractors, employees, representatives, or authorized service providers acting on our behalf.

"Services"

"Services" means the Amory mobile application, official website, APIs, widgets, wearable integrations, cloud infrastructure, customer support services, beta programs, and any current or future products, software, features, functionality, or services provided by Amory.

"User"

A "User" means any individual who downloads, installs, registers for, accesses, browses, or otherwise uses the Services, regardless of whether the individual creates an account.

References to "you" and "your" mean the User.

"Account"

An "Account" means the unique profile created by a User to access certain features of the Services.

An Account may include authentication credentials, profile information, settings, preferences, relationship status, and other associated information.

"Partner"

A "Partner" means another User who has been voluntarily connected to your Account through Amory's invitation or account-linking process.

Certain information may become visible to your Partner depending on the permissions granted by you, the features enabled, and your privacy settings.

Connecting with another User does not grant either party unrestricted access to the other's information.

Information is shared only as described in this Privacy Policy and according to the settings selected within the Services.

"Personal Information"

"Personal Information" or "Personal Data" means any information relating to an identified or identifiable natural person.

This may include, without limitation:

• name;

• email address;

• profile photograph;

• online identifiers;

• location information;

• device identifiers;

• voice recordings;

• messages;

• photographs;

• relationship information;

• health-related information where applicable;

• calendar information;

• technical identifiers; and

• any other information that may reasonably be linked to an individual.

The definition of Personal Information shall be interpreted in accordance with applicable privacy laws, including but not limited to the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable legislation.

"Sensitive Personal Information"

"Sensitive Personal Information" refers to categories of Personal Information that receive additional legal protection under applicable law.

Depending on the features enabled by the User, this may include:

• precise location data;

• health-related information;

• wellness indicators;

• menstrual cycle information;

• biometric characteristics where applicable;

• voice recordings;

• other categories recognized as sensitive under applicable law.

Sensitive Personal Information is processed only where permitted by applicable law and, where required, based upon the User's explicit consent.

"User Content"

"User Content" means any information, files, communications, recordings, media, documents, text, photographs, videos, memories, reactions, journals, voice notes, messages, profile information, or other content uploaded, created, transmitted, synchronized, or stored by a User through the Services.

Ownership of User Content remains with the User unless otherwise provided by applicable law or the Terms of Service.

"Shared Content"

"Shared Content" means User Content intentionally made available to a connected Partner through features provided by the Services.

Shared Content may include, depending on the feature used:

• shared memories;

• photographs;

• relationship timelines;

• activity indicators;

• calendar events;

• voice messages;

• letters;

• countdowns;

• location information;

• planning boards;

• and other relationship-related information.

Shared Content is only accessible according to the permissions granted by the User and the functionality of the relevant feature.

"Device Information"

"Device Information" means technical information collected from the device used to access the Services.

This may include:

• device manufacturer;

• device model;

• operating system;

• operating system version;

• application version;

• preferred language;

• time zone;

• device identifiers;

• push notification tokens;

• crash diagnostics;

• network information;

• battery status where applicable;

• and other technical information reasonably necessary to operate and secure the Services.

"Processing"

"Processing" means any operation or set of operations performed on Personal Information.

Processing includes, without limitation:

• collection;

• recording;

• organization;

• storage;

• adaptation;

• modification;

• retrieval;

• consultation;

• use;

• transmission;

• disclosure;

• synchronization;

• combination;

• anonymization;

• restriction;

• deletion; and

• destruction.

"Third-Party Service Provider"

A "Third-Party Service Provider" means an external organization, vendor, contractor, infrastructure provider, analytics provider, cloud platform, authentication provider, payment processor, customer support provider, or similar entity engaged by Amory to assist in providing, maintaining, improving, securing, or operating the Services.

Examples may include cloud hosting providers, database providers, authentication providers, crash reporting services, push notification services, analytics platforms, and payment processors.

"Applicable Law"

"Applicable Law" means all laws, regulations, directives, governmental requirements, court decisions, regulatory guidance, and legally binding rules relating to privacy, data protection, consumer protection, cybersecurity, electronic communications, and digital services that apply to the Services or to the processing of Personal Information.

Applicable Law may include, without limitation:

• General Data Protection Regulation (GDPR);

• UK GDPR;

• California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA);

• Brazil's Lei Geral de Proteção de Dados (LGPD);

• Canada's Personal Information Protection and Electronic Documents Act (PIPEDA);

• Australia's Privacy Act 1988;

• and other applicable national or regional privacy laws.

Interpretation

The headings used in this Privacy Policy are provided for convenience only and shall not affect the interpretation of any provision.

Where the context requires, words importing the singular include the plural and vice versa, and references to one gender include all genders.

References to legislation include any amendments, replacements, or successor legislation applicable from time to time.

3. Information We Collect

The categories of information we collect depend on how you interact with the Services, the features you use, the permissions you grant, the device you use, and applicable legal requirements.

Certain information is required for the operation of the Services, while other categories are collected only if you voluntarily choose to enable specific features.

We do not intentionally collect more information than is reasonably necessary to provide and improve the Services.

3.1 Information You Provide Directly

We collect information that you voluntarily provide when creating an account, using the Services, communicating with your Partner, or interacting with Amory.

Depending on how you use the Services, this information may include:

Account Information

When you create an account, we may collect information such as:

• email address;

• encrypted authentication credentials;

• account identifier;

• account creation date;

• authentication provider;

• account preferences;

• verification status.

Your password is never stored in plain text. Authentication credentials are processed using secure authentication technologies provided either by Amory or trusted authentication providers.

Profile Information

You may choose to provide profile information, including:

• full name;

• display name;

• username (if applicable);

• profile photograph;

• avatar;

• biography;

• personal description;

• pronouns (if supported);

• language preferences;

• country or region;

• date of birth where required for legal compliance.

Providing certain profile information is optional.

Relationship Information

When you connect with another User, we may process information necessary to establish and maintain that relationship within the Services.

This may include:

• invitation codes;

• relationship identifier;

• connection status;

• relationship milestones;

• anniversary dates;

• relationship preferences;

• shared settings;

• shared permissions;

• connection history.

Relationship information is processed solely for the purpose of operating relationship features within the Services.

User Generated Content

The Services allow Users to create and share content.

Depending on the features used, this may include:

• text messages;

• voice messages;

• photographs;

• videos;

• journals;

• notes;

• letters;

• memories;

• countdown events;

• reactions;

• saved conversations;

• profile answers;

• calendar entries;

• shared plans;

• wish lists;

• uploaded documents;

• custom notifications;

• any other content voluntarily submitted through the Services.

You remain responsible for all User Content that you choose to upload or share.

3.2 Information Shared With Your Partner

Certain features are specifically designed to share information between two connected Users.

Subject to your permissions and privacy settings, information shared with your Partner may include:

• profile information;

• relationship milestones;

• shared memories;

• photographs;

• voice recordings;

• messages;

• journals;

• shared plans;

• countdowns;

• status indicators;

• activity indicators;

• location information;

• calendar information;

• wellness indicators;

• custom reactions;

• shared widgets;

• other information intentionally made available through relationship features.

Information is shared only as required for the selected feature and according to the permissions you have granted.

3.3 Location Information

Where you grant permission, Amory may collect location information.

Depending on the feature being used, this may include:

• approximate location;

• precise GPS location;

• country;

• city;

• time zone;

• movement status;

• arrival status;

• distance between connected Users.

Location information may be used for features such as:

• relationship presence;

• safe arrival notifications;

• shared maps;

• meeting countdowns;

• weather information;

• local time display;

• contextual relationship experiences.

Location services may be disabled at any time through your device settings.

Some features may become unavailable if location permissions are revoked.

3.4 Health and Wellness Information

Certain optional features may process limited health-related information after receiving your permission.

Depending on the enabled features, this may include:

• daily step count;

• activity level;

• sleep duration;

• sleep schedule;

• wellness indicators;

• menstrual cycle information;

• other health-related information explicitly authorized by you.

Health-related information is processed solely to enable relationship features selected by you.

We do not use health information for advertising purposes.

Where required by law, health-related information is processed only with your explicit consent.

3.5 Voice, Audio and Media

You may voluntarily upload or create media within the Services.

This may include:

• voice recordings;

• voice messages;

• profile recordings;

• photographs;

• videos;

• attachments;

• memories;

• shared albums.

Media uploaded by you may be stored on secure cloud infrastructure to provide synchronization, backup, and relationship features.

3.6 Calendar Information

If you choose to enable calendar-related features, we may process information such as:

• anniversaries;

• birthdays;

• reminders;

• shared events;

• countdown dates;

• recurring events.

Calendar information is used only to provide relationship planning features.

3.7 Device Information

When you access the Services, certain technical information is collected automatically.

This may include:

• device manufacturer;

• device model;

• operating system;

• operating system version;

• application version;

• preferred language;

• region;

• screen resolution;

• device identifiers;

• notification token;

• network information;

• battery level where required by enabled features;

• crash diagnostics;

• performance metrics.

This information helps us provide a secure and reliable experience.

3.8 Usage Information

We automatically collect information regarding how the Services are used.

This may include:

• features accessed;

• buttons selected;

• navigation events;

• session duration;

• interaction timestamps;

• application launches;

• notification interactions;

• feature usage frequency;

• diagnostic events;

• error reports.

We use this information to improve stability, usability, security, and performance.

3.9 Diagnostic and Security Information

To maintain the security and integrity of the Services, we may process information including:

• crash reports;

• diagnostic logs;

• authentication logs;

• failed login attempts;

• security events;

• abuse detection signals;

• fraud prevention data;

• system integrity information.

This information helps detect unauthorized access, prevent abuse, investigate security incidents, and protect Users.

3.10 Information from Third-Party Services

Where you choose to connect third-party services, we may receive information from those providers.

Depending on the integration, this may include information from:

• Apple Sign In;

• Google Sign-In;

• Apple Health;

• Google Fit;

• Spotify;

• payment providers;

• notification providers;

• analytics providers;

• cloud infrastructure providers;

• other services that you explicitly authorize.

The information we receive depends on the permissions you grant to the relevant third-party service.

3.11 Information We Do Not Intentionally Collect

Unless explicitly required for a feature that you voluntarily enable, Amory does not intentionally collect:

• government-issued identification numbers;

• passport information;

• driver's license information;

• banking credentials;

• payment card numbers;

• biometric identifiers for identity verification;

• facial recognition templates;

• fingerprint templates;

• political opinions;

• religious beliefs;

• employment records;

• tax information;

• or any other categories of information that are not reasonably necessary for providing the Services.

If such information is inadvertently received, we will take reasonable steps to delete or securely handle it in accordance with applicable law.

4. How We Use Your Information

We use the information we collect only for legitimate purposes related to operating, maintaining, securing, improving, and providing the Services.

The information we process depends on the features you use, the permissions you grant, your relationship settings, applicable law, and your interactions with the Services.

We do not process Personal Information for purposes that are incompatible with those described in this Privacy Policy without providing additional notice or obtaining consent where required by law.

4.1 To Provide the Services

We process Personal Information to create, maintain, and operate your Amory account and to provide the features and functionality of the Services.

This includes, but is not limited to:

• creating and managing user accounts;

• authenticating users;

• connecting Users through invitation codes;

• synchronizing relationship data;

• delivering messages and shared content;

• displaying profile information;

• maintaining relationship timelines;

• enabling widgets;

• providing memories, countdowns, journals, and planning tools;

• synchronizing settings across devices;

• operating optional relationship features.

Without processing this information, many core functions of the Services would not operate correctly.

4.2 To Connect You With Your Partner

Amory is specifically designed to facilitate private experiences between two connected Users.

Accordingly, we process information necessary to:

• establish a secure relationship connection;

• synchronize shared content;

• display information intentionally shared with a connected Partner;

• maintain relationship-specific preferences;

• synchronize memories;

• synchronize planning features;

• update relationship timelines;

• provide shared experiences;

• enable real-time relationship interactions.

Information shared with your Partner is limited to the permissions you grant and the functionality of the relevant feature.

4.3 To Enable Real-Time Features

Certain features require information to be processed in real time.

Depending on the feature, this may include:

• synchronization of shared activities;

• notification delivery;

• relationship presence;

• countdown synchronization;

• shared calendars;

• location updates;

• interactive experiences;

• voice synchronization;

• shared widgets;

• collaborative planning.

Real-time processing occurs only while necessary for the operation of the selected feature.

4.4 To Personalize Your Experience

We process information to personalize your experience within the Services.

This may include:

• remembering your preferences;

• displaying preferred language;

• customizing interface settings;

• remembering accessibility preferences;

• displaying selected themes;

• improving recommendations within the Services;

• adapting relationship experiences based on your settings.

Personalization is intended solely to improve usability and does not involve selling your Personal Information.

4.5 To Deliver Notifications

We process information necessary to send notifications requested by you or required for the operation of the Services.

Notifications may include:

• relationship invitations;

• messages;

• reminders;

• shared events;

• countdown alerts;

• safety notifications;

• relationship activity;

• memories;

• calendar events;

• feature updates.

You may manage notification permissions through your device settings or within the Services where available.

4.6 To Improve the Services

We continually improve the Services by understanding how they are used.

Information may be processed to:

• identify technical issues;

• improve stability;

• improve usability;

• evaluate feature performance;

• develop new functionality;

• optimize user experience;

• improve accessibility;

• reduce errors;

• improve reliability.

Where reasonably possible, improvement activities are performed using aggregated, de-identified, or anonymized information.

4.7 To Maintain Security

We process information to protect the Services, Users, and our infrastructure.

This includes processing information to:

• detect fraud;

• prevent unauthorized access;

• investigate suspicious activity;

• prevent abuse;

• enforce our Terms of Service;

• secure user accounts;

• monitor infrastructure;

• prevent malicious activity;

• respond to security incidents.

These activities are necessary to protect both Users and the Services.

4.8 To Comply With Legal Obligations

We may process Personal Information where necessary to comply with applicable laws, regulations, court orders, governmental requests, legal processes, or regulatory obligations.

This may include processing information for:

• responding to lawful requests;

• complying with tax obligations;

• maintaining required records;

• responding to law enforcement requests where legally required;

• resolving disputes;

• exercising legal rights;

• defending legal claims.

4.9 To Communicate With You

We may process your information to communicate with you regarding:

• your account;

• customer support requests;

• service announcements;

• important updates;

• security notifications;

• policy changes;

• legal notices;

• feature availability;

• responses to inquiries.

Communications that are essential to the operation or security of the Services may be sent even if you opt out of certain marketing communications.

4.10 Research and Product Development

We may use aggregated, anonymized, or de-identified information to better understand how the Services are used and to improve future products and features.

Such information does not reasonably identify individual Users.

4.11 Artificial Intelligence Features

If the Services include artificial intelligence or machine learning features, information may be processed solely for the purpose of providing the requested functionality.

Unless expressly stated otherwise, Personal Information will not be used to train publicly available artificial intelligence models without obtaining any consent required under applicable law.

Where AI-assisted features are available, additional notices may be presented describing the specific processing activities associated with those features.

4.12 Marketing Communications

We may send newsletters, product announcements, surveys, or promotional communications where permitted by applicable law.

You may opt out of receiving non-essential marketing communications at any time by following the instructions included in those communications or by adjusting your account preferences.

Opting out of marketing communications does not affect essential service-related communications.

4.13 We Do Not Sell Your Personal Information

Amory does not sell your Personal Information to advertisers, data brokers, or third parties for monetary compensation.

We do not permit third parties to purchase access to your Personal Information.

Where applicable privacy laws define "sale" or "sharing" broadly, Users may exercise any rights available under those laws as described later in this Privacy Policy.

4.14 No Automated Decisions Producing Legal Effects

Unless otherwise required for fraud prevention or security, Amory does not make decisions based solely on automated processing that produce legal or similarly significant effects concerning Users.

Where automated systems are used to improve security, reliability, or feature functionality, appropriate safeguards are implemented in accordance with applicable law.

5. Legal Bases for Processing Personal Information (EEA, UK and Similar Jurisdictions)

If you are located in the European Economic Area ("EEA"), the United Kingdom, Switzerland, or another jurisdiction that requires a legal basis for processing Personal Information, Amory processes Personal Information only where a valid legal basis exists under applicable law.

Depending on the circumstances, we may rely on one or more of the following legal bases.

5.1 Performance of a Contract

Most processing activities are necessary to provide the Services requested by you.

This includes processing Personal Information necessary to:

• create and maintain your account;

• authenticate your identity;

• establish and maintain your relationship connection;

• synchronize content between connected Users;

• deliver messages, notifications, and shared experiences;

• provide memories, planning tools, widgets, countdowns, and other requested functionality;

• provide customer support related to your account.

Without this processing, many features of the Services cannot be provided.

5.2 Consent

Certain categories of Personal Information are processed only after you voluntarily provide your consent, where required by applicable law.

Depending on the feature you choose to use, consent may apply to processing such as:

• precise location information;

• health and wellness information;

• menstrual cycle information;

• voice recordings;

• camera access;

• microphone access;

• photo library access;

• contacts, where supported;

• calendar access;

• push notifications;

• optional integrations with third-party services.

You may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Where consent is withdrawn, certain features may become unavailable.

5.3 Legitimate Interests

Where permitted by applicable law, we may process Personal Information where necessary for our legitimate interests, provided that such interests are not overridden by your rights and freedoms.

Legitimate interests may include:

• maintaining platform security;

• preventing fraud and abuse;

• improving reliability;

• diagnosing technical problems;

• protecting Users;

• enforcing our Terms of Service;

• responding to customer inquiries;

• improving accessibility;

• developing new features;

• measuring service performance;

• maintaining system integrity.

Before relying on legitimate interests, we consider the potential impact on Users and implement appropriate safeguards where required.

5.4 Compliance With Legal Obligations

We may process Personal Information where necessary to comply with legal obligations, including obligations arising under applicable laws, regulations, court orders, lawful governmental requests, accounting requirements, taxation requirements, or other legally binding obligations.

5.5 Protection of Vital Interests

In limited circumstances, we may process Personal Information where necessary to protect the vital interests of a User or another natural person, including situations involving serious threats to health or safety where permitted by applicable law.

5.6 Public Interest

Where required or permitted by applicable law, certain processing activities may be carried out for reasons of public interest or as otherwise authorized by law.

5.7 International Variations

The legal bases described in this Section apply only where applicable under relevant privacy legislation.

Users located outside jurisdictions requiring a legal basis for processing may have different rights under applicable law.

Where local law provides additional protections, Amory will comply with those requirements to the extent applicable.