Privacy Policy

Korby is private and ad-free. We collect only what the app needs to work, we never sell your data, and everything you share stays between you and your partner.

1. Who we are

This Privacy Policy explains how Korby (the "App") handles your personal information. The App is operated by:

Trillidium LLC, a New Mexico limited liability company
Email: support@getkorby.com

2. What we collect, and why

We only collect what the App needs to give you and your partner a private space to collect, plan, and remember shared experiences.

When you create your account:

• Email address, so you can sign in and recover your account
• Password, stored only as a salted hash, never in plain text
• Your first name, shown to both of you in the App
• Your partner's first name, entered during onboarding
• Optional: your anniversary date, for anniversary reminders

While you use the App:

• Wishes and bucket-list items: title, category, budget, date, notes, checklists
• Memories: title, note, date, photos, mood
• Photos you add to memories, items, or as your couple photo
• Couple ID and pairing code: a generated 6-character code that links your two accounts
• Notification permission, for local reminders and an optional push when your partner adds a new wish (the notification shows your partner's name, never the wish itself)
• Device push token: a pseudonymous Apple identifier stored so that partner notification can reach your device; deleted with your account

What we do NOT do:

• No tracking across other apps or websites
• No ad trackers, no identity-linked analytics, no fingerprinting
• We do not sell your personal information, and we do not share it with advertising networks
• No access to your contacts, location, or microphone

3. Payments and subscriptions

Korby offers auto-renewing subscriptions and a one-time lifetime purchase. Current prices are shown in the App Store before you buy. Purchases and billing run exclusively through your Apple account; Apple is the merchant of record. We never receive your payment or card details. To manage subscription entitlements we use RevenueCat, which processes a pseudonymous app user ID, your subscription status, and your App Store country.

4. Who can see your content

• You, in your own App.
• Your partner, once paired with your code. Every couple's space is private, and database-level access rules enforce this separation.
• Us as the operator, only as strictly necessary for maintenance and support. We do not browse your content.
• Our service providers (section 5), as technical processors only.

5. Service providers

Each provider processes data on our behalf under a data-processing agreement and has no right to use your content for its own purposes.

6. Where your data is stored

Your data is stored in the United States (Supabase, region us-east-1, N. Virginia). Photos live in a private storage bucket that only members of your couple can access. If you use the App from outside the United States, your data is transferred to and processed in the USA; for users in the European Economic Area or the UK, such transfers are safeguarded by Standard Contractual Clauses with our providers.

7. How long we keep your data

For as long as you keep your account. You can delete your account at any time in the App under Settings → "Delete account and all data". This removes your sign-in record, all wishes, memories, notes, and photos, and the couple entry from our live systems immediately; residual copies in encrypted backups are purged automatically within about 30 days.

8. Your rights

You can access, correct, and delete your data directly in the App, and most of these rights work without contacting anyone: edits are instant, and account deletion is built in. Depending on where you live, you may also have statutory rights to request access to, correction of, deletion of, or a portable copy of your personal information, and the right not to be discriminated against for exercising them. We honor such requests regardless of where you live. If you are in the European Economic Area or the UK, you additionally have the rights provided by the GDPR, including the right to lodge a complaint with a supervisory authority.

To exercise any right, email support@getkorby.com. We answer within 30 days.

9. Security

All traffic between the App and our servers is encrypted in transit (TLS). Content is protected by database-level row security so that only the two members of a couple can read their space. Passwords are stored as salted hashes. No system is perfectly secure, but we design Korby so that the smallest possible amount of data exists in the first place.

10. Children

Korby is intended for people aged 16 or older. We do not knowingly collect data from anyone under 16. If you believe a child has created an account, contact us and we will delete it.

11. Changes to this policy

If we change this policy in a meaningful way, we will update the date above and inform you in the App before the change takes effect. The current version is always available at getkorby.com/privacy.html.

12. Contact

Questions about privacy: support@getkorby.com