Privacy policy
Significance Balance is a self-assessment app for relationships. What you write in it — who you are, what your situation is, and how you answer — is the most sensitive kind of content an app can hold, so the app is built to keep it on your device rather than on ours.
This page explains, in order: what is stored on your phone, what leaves it and why, who else is involved, on what legal basis, and what you can ask us to do. It covers the app and this website. Reading this page is itself recorded by whoever serves it, which is why the section on processors names them too.
What is stored on your device
Everything the app records about you is written to storage on your phone. Nothing here is uploaded as a copy, backed up to us, or shared with anyone:
- your profile — your own name, your age and gender and your partner's age and gender, how long you have been together, your occupation, your hobbies, your partner's name as you entered it, and whether there are children;
- the free-text context you write for each relationship stage;
- every question you are asked and every answer you give;
- your coach-chat conversation, and the rewrites you type in the reframing exercise;
- every balance score, recommendation and weekly roll-up derived from them;
- your settings, your streaks and your notification schedule, which are produced and delivered entirely on the device;
- a tally of how many AI tokens each feature has used.
One qualification, because "on your device" alone would overstate it. The profile details, the context and your answers are sent as the text of a request when you use a feature that needs the language model — the next section says which, and what happens to it. What is never uploaded is a stored copy of your history.
There is no account to create, no password, and nothing to sign in to. Delete all my data, under Privacy & data in Settings, erases all of it from the phone — the profile, the context you wrote, every answer and the whole history. You are asked to confirm first, because it cannot be undone and there is no backup. What it keeps is deliberate and small: your settings — language, theme and notifications — and your subscription, which it does not cancel. Deleting the app itself removes the same data. If your phone keeps a backup of the app, that backup stays on the phone; we never receive one, and we cannot restore your history for you.
What leaves the device for AI coaching
Ten features in the app need a language model, which does not run on the phone. Two are free and are the app's core loop: generating a session's closed questions, and scoring your answers into a recommendation. The other eight are premium — the coach chat, weekly focus, the daily challenge, the weekly quiz, the AI scenario pack, personalised micro-lessons (their intro and their AI-written decks), the reframing exercise (both the phrases it gives you and the feedback on your rewrites), and the roadmap outlook.
When you use one of them, the app assembles the text that feature needs — profile details, the context you wrote, recent answers and results, and for the chat and the reframing exercise the messages and rewrites you typed — and sends it to our service, which passes it to a third-party AI provider and returns the answer.
Three things about that path:
- it carries no email address and no device identifier of yours beyond the anonymous id described below. Names are the exception worth spelling out: your partner's name goes as you entered it, so the coaching can refer to them the way you do — if you typed a full name, the full name is sent. Your own name is deliberately left out of the session questions and the scoring, so that advice addresses you as "you" — but the premium coach chat does send it, because its whole point is a conversation that greets you by name;
- your request never carries our credentials for that provider, and the provider is reached only through our service — never from your phone directly;
- we do not store the request or the answer on our servers. The answer is stored on your device, as part of your history. The one exception is a reply you choose to report — see below.
Every screen that shows you AI-written text carries a report button. If a reply is offensive, tapping it shows you exactly what will be sent and asks you to confirm; nothing is sent unless you do. What we then receive is that piece of AI text, which feature produced it, your app language and the anonymous id described below — and we do keep it, because a report nobody can read is not a report. Bear in mind that AI text is written from the context you gave, so a reply may repeat details from it, your partner's name among them. Reporting is the only way anything you see from the AI reaches our storage.
We log how many tokens each feature consumed, because AI has a per-request cost we have to keep under control. Those counters record the feature, the amount and the anonymous id described below — never the content. The app keeps its own copy on the device too; in the version you download from a store, that copy is not shown to you anywhere.
What else leaves the device
- An anonymous identifier. Before any request to our service the app signs in anonymously and is issued a random id. It is not linked to your name, email or phone number. It is what our AI rate limits are counted against, and what tags the per-feature token counters above in our server logs.
- Subscription records. When you buy or renew a subscription, Apple or Google sends us a receipt, we verify it with them, and we keep a record of what is active and until when. That record is filed under the transaction identifier the store issues — not under the anonymous id — because that is what lets the subscription follow you to a new device. The anonymous id is stored alongside it so a cold start on the same device can find it quickly. Apple and Google also notify us directly when a subscription changes. We never see your card details: the purchase happens inside the App Store or Google Play, not in our app.
- Rate-limit counters. A count of AI requests per feature per time window, against the anonymous id, so one device cannot exhaust the service for everyone.
- Reports of offensive AI text. Only when you send one, and only what the confirmation showed you: the AI text you reported, which feature produced it, your app language and the anonymous id.
- Crash diagnostics. When the app crashes or hits an unexpected error, our crash-reporting provider receives the technical report — the error, the stack trace, the device model and the OS version. It does not include your assessment content.
Who processes data for us
We use a small number of specialist providers, and each one only receives what its job needs:
- a cloud infrastructure provider, which runs our service and holds the subscription records, the rate-limit counters and the crash reports;
- a third-party AI provider, which produces the session questions, the scoring and the coaching text from the request our service sends it;
- Apple and Google, which distribute the app and handle the subscription purchase itself, under their own privacy policies;
- a web host, which serves this website. Its access logs record the address your browser connects from, which browser it is and which page it asked for — for every visitor, including someone who only reads this policy and never installs the app, and who has therefore never agreed to anything in it;
- a mail provider, which carries our support correspondence. Whatever you write to the address at the bottom of this page passes through it, including the contents of a request to see or delete your data.
These providers process data on servers that may sit outside your country, including outside the European Economic Area. For the infrastructure, AI and store providers the transfer rests on a European Commission adequacy decision covering that provider, or on the Commission's standard contractual clauses agreed with it. The support mailbox is the exception and we would rather say so than imply otherwise: it is an ordinary consumer mail account, governed by that provider's own terms, so write to us there only what you are content to send that way. Ask us if you want to know who these providers currently are, or for a copy of the safeguards.
On what legal basis
Where the General Data Protection Regulation applies — which it does for readers in the European Union and the wider European Economic Area, wherever we ourselves are — we have to name the ground we rely on for each purpose, not only describe what we do. These are the grounds:
- What stays on your device. No ground is needed, because it is not processing we carry out: your history is written to your phone and we never receive a copy of it. Note the qualification above — the profile details, the context, your answers, your recent chat messages and the results derived from them do leave the phone, as the text of a request, whenever you use a feature that needs the language model. That is the next entry, not this one.
- AI coaching. Performance of a contract, Article 6(1)(b) — you asked for a feature that only a language model can produce, and sending it the text it needs is how we deliver that. The free-text context, your open answers and your chat messages are about your closest relationship, so they may well reveal special categories of data — your sex life, your health, your beliefs. For those we rely on your explicit consent, Article 9(2)(a), given by choosing to write and send that text after this page has told you where it goes. If you would rather not give it, the only control is what you write: generating a session's questions is one of the two free features, and it sends your free-text context, your open answers and your recent chat messages like the rest. Declining premium does not hold them back.
- The anonymous identifier, the rate-limit counters and the per-feature token counters. Our legitimate interests, Article 6(1)(f) — keeping the service available to everyone and its cost bounded. We know of no lighter way to stop one device exhausting it for the rest.
- Subscription records. Performance of a contract, Article 6(1)(b), to honour what you bought; and a legal obligation, Article 6(1)(c), for the period tax and accounting law then requires us to keep the record.
- Crash diagnostics. Our legitimate interests, Article 6(1)(f) — a crash we never hear about is one we cannot fix.
- The web host's access logs. Our legitimate interests, Article 6(1)(f) — a page cannot be served without them, and they are what shows the site being attacked.
- Support correspondence. A legal obligation, Article 6(1)(c), where you write to exercise one of the rights below, because we are required to answer you; our legitimate interests, Article 6(1)(f), for anything else you write to us about.
How long it is kept
- On-device data: until you delete it in Settings, or uninstall the app.
- Subscription records: for as long as needed to honour the subscription and to meet tax and accounting obligations.
- Rate-limit counters: deleted automatically. A counter stops being consulted when its time window closes, and the record itself is then deleted — normally within a day of that.
- Server logs, including the per-feature token counters: for as long as our infrastructure provider keeps them. We do not extend that period.
- Crash diagnostics: for the retention period the provider applies to that kind of data.
- Text sent to the AI provider: it deletes what it processes for us under our agreement with it, and we keep no copy of the request or the answer on our servers.
- Reports of offensive AI text: kept for 180 days so we can read them and act on what they show, then deleted automatically — normally within a day of that.
- The web host's access logs: for the period that host keeps them. We do not read them for any purpose of our own and we do not extend that period.
- Support correspondence: until the matter you wrote about is settled, and then for as long as we may need to show we answered you.
Children
Significance Balance is for adults. It is not directed at children, and we do not knowingly collect data from anyone under 18.
Your rights
Depending on where you live — and this applies in full in the European Union — you can ask for access to the data we hold, its correction, its deletion, a copy of it, or a restriction on its use, and you can object to processing. In practice most of what the app holds is only on your device, so the fastest route is Delete all my data in Settings, which erases your profile, context, answers and history without you losing the app. Two things it does not reach: the anonymous id described above, which identifies the installation rather than the content and is what lets a subscription be restored, and a local count of how many AI tokens each feature has used. Deleting the app removes both.
For anything we do hold — the anonymous id, subscription records, crash diagnostics, the web host's access logs and anything you have written to us — write to support@significancebalance.com. Tell us which platform you are on and roughly when you subscribed, and we will find the record. You may also complain to your local data-protection authority.
Do Not Track
This website sets no cookies and runs no analytics or tracking scripts, so there is nothing for a browser's Do Not Track signal to switch off. It changes nothing about how we handle your data.
Changes to this policy
If what the app does with data changes, this page changes with it and the date at the top moves. Material changes will also be announced in the app's release notes.
Contact
The controller for everything described on this page — the company that decides why and how it happens, and whom you address any of the rights above to — is:
From Codes To World LLC
support@significancebalance.com