Privacy & data
App data
Updated October 11, 2026
The categories of data the Duoniva iPhone app and its API handle.
1. Account
We store an email address, a password hash if you use a password, a display name, and optional pronouns. Sign in with Apple gives us the identifier Apple provides, and an email if you choose to share one. We do not store your Apple ID password.
2. Couple and invitations
We store which two accounts share a space. Invitation codes are secrets. We store them in a form that lets us check a code without keeping the raw code in logs. A code that does not match the couple is rejected and is not written.
3. Story, plans, and files
Photos, videos, albums, milestones, time capsules, calendar events, and similar story items are stored so the couple can open them. They are protected in transit and by the storage provider at rest. They are not end-to-end encrypted. Both people in the space can see items placed in the shared story.
4. Messages
Message text is sealed on the device before it is sent. The server stores ciphertext, a nonce, a sender, a time, and a sequence. We cannot read the message. Reactions are stored the same way. A deleted message stays as a row with the body cleared. A new phone cannot open older sealed messages with the current design, because the key lives on the device.
5. Sessions and support
We store session material as hashes, with an expiry and a user agent, so we can keep you signed in and revoke a session. If you email [email protected], we keep that correspondence to answer you.
6. Not collected
We do not collect a contact list, precise location, health data, or an advertising identifier for Duoniva. Voice and video calls are not available. An assistant that could read a calendar request is not available. We do not use message contents to train a model, because we do not have the readable text.