Privacy Policy

Last updated: September 2026

Bothy is a private space for two people. This policy explains what we collect, why, and what you can do about it.

WHAT WE COLLECT

Account details. Your email address, name, date of birth and gender. Date of birth is used to confirm you are old enough to use Bothy and to show your partner your birthday.

What you write. Your answers to questions, daily check-ins and moods, messages you send your partner, and any photos you upload.

Your pairing. Who your partner is, and when you connected.

Usage. Which features you open, your streaks and points, and completed exercises.

Technical data. Device type, operating system, app version, a device token for push notifications, and IP address in our server logs.

Purchases. If you subscribe, the app stores are our payment processor. We receive a confirmation that a subscription is active and when it expires. We never see your card details.

WHAT WE DO NOT DO

We do not sell your personal data. We do not use your answers or messages to train machine learning models. We do not show you third-party advertising.

WHO CAN SEE YOUR ANSWERS

Your partner can see an answer once you have both answered the same question. Until then it stays hidden from them. Your check-in for a day is visible to your partner once you submit it, and cannot be edited afterwards.

Our staff do not read your messages or answers as a matter of course. We may access specific content only where necessary to investigate a security issue, a report of abuse, or where the law requires it.

SHARING

We share data only with the service providers that let Bothy run: our hosting and database provider, Google Firebase for push notifications and crash reporting, our email provider for verification codes, and RevenueCat together with the Apple App Store and Google Play for subscriptions. Each processes data only on our instructions.

We may disclose information if required by law, or to protect someone's safety.

HOW LONG WE KEEP IT

We keep your data while your account exists. When you delete your account we remove your answers, check-ins, moods, messages, photos and profile details, and end your pairing. Your partner keeps their own answers, because those are their words rather than yours; the shared record those sit against is retained but stripped of everything identifying you, so your account cannot be signed into, searched for or contacted afterwards. Backups are overwritten on a rolling basis within 30 days.

YOUR CHOICES

Delete your account at any time from Settings. This is immediate and cannot be undone.

Turn off push notifications in Settings or in your device settings.

Depending on where you live you may have the right to access, correct, export or restrict the use of your data, and to object to processing or complain to a regulator. Write to support@trybothy.xyz and we will respond.

CHILDREN

Bothy is not intended for anyone under 17, and we do not knowingly collect data from children. If you believe a child has created an account, contact us and we will remove it.

INTERNATIONAL TRANSFERS

Our providers may process data in countries other than yours. Where required we rely on standard contractual clauses to protect it.

SECURITY

Passwords are stored hashed, never in plain text. Traffic between the app and our servers is encrypted in transit. No system is perfectly secure, so please use a strong, unique password.

CHANGES

If we make a material change we will tell you in the app before it takes effect.

CONTACT

[COMPANY NAME] support@trybothy.xyz