Pairfect Privacy Policy

Our Privacy Philosophy

Pairfect is a dedicated private web platform designed exclusively for two partners. Pairfect is not a social media network. We do not have public profiles, follower counts, likes, public comment sections, or discovery feeds. Everything you create, write, or record inside Pairfect is built to be accessible only by you and your invited partner.

1. Information We Collect

We collect only the information necessary to provide you and your partner with a seamless, private companion experience:

• Account Information: Your email address, encrypted password hash (managed by Supabase Auth), and display name.
• Couple Space & Pair Association: Unique pair IDs and invite codes that link you strictly to your partner.
• Content You Create: Love letters, gratitude notes, daily mood check-ins, scrapbook memories, photobooth keepsakes, and dispute arguments. Sensitive content like Love Letters, Gratitude Notes, and Dispute Arguments are encrypted with AES-256-CBC before storage.
• Technical & Device Information: Standard browser type, IP address, operating system, and log metadata required for system stability and security.

2. Why We Collect It

We use your information exclusively for the following purposes:

• Authenticating your identity and preventing unauthorized access to your pair room.
• Displaying your shared memories, mood streaks, and love letters to your partner.
• Delivering synchronized features (such as Watch Together YouTube rooms or co-op riddle guessing).
• Sending partner notifications when your partner leaves a letter, gratitude note, or check-in.
• Ensuring platform integrity, security, and bug fixes.

3. How Data Is Stored

Your data is stored in production database infrastructure powered by Supabase (PostgreSQL) and Supabase Storage. Data is partitioned strictly by pair identifiers.

4. Authentication & Pair Isolation

Authentication is handled through Supabase Authentication. Passwords are never stored in plain text; they are hashed using industry-standard bcrypt hashing. Pair spaces are isolated so that exactly two authenticated partners share a pair room.

5. Security Measures & Encryption

We enforce multi-layered security protections:

• Encryption in Transit: All HTTP traffic between your browser and our servers is encrypted using modern TLS 1.3 / HTTPS.
• Encryption at Rest: Sensitive content (including Love Letters, Gratitude Jar notes, and Vibe Dispute arguments) is encrypted on the server using AES-256-CBC encryption before being written to PostgreSQL.
• Row Level Security (RLS): Database tables enforce Row Level Security policies, restricting read/write access strictly to authenticated pair members.
• Private Storage Buckets: Shared memory files are stored in access-restricted storage buckets.

6. Who Can Access User Data

Your memories, letters, and mood logs are visible only to you and your invited partner.

We do not sell your personal data. We do not share your private letters or photos with third-party advertisers or data brokers under any circumstances.

7. Third-Party Services

To provide specific app features, we integrate with trusted third-party service providers:

• Supabase: For authentication, PostgreSQL database, storage, and Realtime WebSocket subscriptions.
• YouTube iFrame API: Powers the Watch Together synchronized player feature. YouTube's terms and privacy policies apply when interacting with embedded video streams.
• Groq AI: Powers the playful AI Vibe Judge arbitration feature. Dispute arguments are sent securely to generate verdicts.
• GIPHY API: Powers sticker searching inside the webcam photobooth.

8. Cookies & Local Storage

Pairfect uses strictly necessary cookies and browser local storage solely to maintain your login session, active theme preference (dark/light), and push notification banner choices. We do not use advertising cookies or cross-site tracking scripts.

9. Your Rights & Data Control

You maintain full ownership of your memories and relationship data:

• Right of Access & Correction: You can view and update your profile details at any time from your settings panel.
• Right to Unlink & Reset: You can unlink your pair space or leave a pair room directly in Settings.
• Right of Deletion: You may request full deletion of your account and associated private data by contacting us.

10. Children's Privacy

Pairfect is intended for individuals aged 13 and older (or the applicable legal age of digital consent in your jurisdiction). We do not knowingly collect or solicit personal information from children under 13.

11. International Users

If you access Pairfect from outside the United States, please be aware that your information may be transferred to and processed in secure cloud infrastructure servers located in the United States and global edge nodes.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect improvements in our security infrastructure or legal requirements. When updates occur, we will refresh the "Last Updated" date at the bottom of this page.

13. How to Contact Us

If you have any questions, privacy concerns, or requests regarding your personal data, please contact our privacy team: