This Privacy Notice for Squires Studios, LLC ("we," "us," or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at info@squiresstudios.com.
This summary provides key points from our Privacy Notice. You can find more details about any of these topics in the corresponding section below, or use the table of contents.
What personal information do we process? We process information you provide (such as your Sign in with Apple identifier hash, the name you choose to display, intake responses, conversations with our AI therapist, and Love Notes you send to your partner) and information automatically collected from your device (such as your push notification device token, IP address, and anonymous app usage analytics).
Do we process any sensitive personal information? Yes. Because Couples Therapy is a relationship and emotional wellbeing tool, conversations with our AI therapist may include sensitive topics such as relationship dynamics, sexual intimacy, mental health, trauma history, and family relationships. We process this information with your consent and apply technical safeguards including device-side encryption for partner profile and intake data.
Do we collect any information from third parties? We use Sign in with Apple for authentication, which provides us only with a hashed identifier. We do not collect any other information from third parties.
How do we process your information? We process your information to provide the Services (including AI conversations, partner pairing, push notifications, and subscription management), to improve our Services, to communicate with you, for security and fraud prevention, and to comply with law.
With which third parties do we share personal information? We use the following service providers to deliver the Services: Apple (authentication, push notifications, in-app purchases, on-device speech recognition), Anthropic (AI conversation generation), Amazon Web Services (text-to-speech), Supabase (database and backend hosting on AWS), TelemetryDeck (anonymous in-app analytics), Google Analytics (anonymous website analytics — website only), and Sentry (crash and error reporting). Details in Section 4.
How do we keep your information safe? We use device-side encryption for sensitive partner data (such as names and intake responses), HTTPS for all network traffic, and access controls on our servers. Despite these measures, no electronic transmission or storage is 100% secure.
What are your rights? You can delete your couple account and all associated data at any time directly within the app (Settings → Delete Account). Depending on where you are located, applicable privacy law may give you additional rights to access, correct, or delete your personal information.
How do you exercise your rights? Use the in-app deletion flow for account/data deletion (Settings → Delete Account), or contact us at info@squiresstudios.com.
In Short: We collect information you provide to us when using the Services, including a hashed Apple identifier, the name and information you provide in your profile, conversations with our AI therapist, and content you exchange with your partner.
We collect personal information that you voluntarily provide to us when you create a couple account, use the AI therapist features, send Love Notes to your partner, or otherwise interact with the Services.
Authentication identifier. We use Sign in with Apple as our sole authentication method. We do not request your email address or name from Apple. Instead, we store a one-way SHA-256 hash of an opaque Apple-provided identifier on our servers. The raw identifier itself stays on your device's iOS Keychain and is never transmitted to us. We cannot use this hash to identify you outside our system or to contact you via Apple.
Profile information. The name you choose for yourself within the app, the name you choose for your partner (if applicable), the number of years you indicate you have been together, your relationship type, and answers to optional intake questions about your relationship goals and history. Profile names and intake responses are encrypted on your device before transmission (see Section 7).
Invite codes. To pair with a partner, you generate a 6-character invite code. We store this code on our server so that we can match it when your partner enters it on their device. The code self-invalidates after pairing completes.
Subscription information. When you subscribe via Apple's in-app purchase system, we store your subscription status (such as "monthly," "yearly," or "lapsed"), the subscription expiration date, and an opaque original transaction identifier provided by Apple. We do not see or store your payment card details — Apple processes all payment data directly.
Conversation content. Messages you exchange with our AI therapist via the Chat feature, transcripts of Live Therapy sessions you conduct using voice, Love Notes you send to your partner, and AI-generated insights derived from your inputs.
Because Couples Therapy is designed to help with relationship and emotional wellbeing, conversations with our AI therapist may include sensitive topics such as:
We process this category of information only when you voluntarily share it as part of a conversation with the AI therapist or in intake responses. We process it with your consent and apply technical safeguards including device-side encryption for partner intake responses (see Section 7).
Mobile device data. We collect technical information about your device including the iOS version, device model, application version, and IP address. This information is used for troubleshooting, security, and analytics.
Push notification token. When you grant notification permissions, we receive a unique APNs (Apple Push Notification service) device token from Apple. We store this token in our database so that we can deliver push notifications to your device for events such as new Love Notes, partner pairing confirmations, or account deletion alerts. We do not use the token for any other purpose. You may revoke notification permissions at any time via iOS Settings → Notifications → Couples Therapy.
Microphone audio (Live Therapy only). When you participate in a Live Therapy session, the app captures audio through your device's microphone and converts it to text using Apple's on-device or cloud-based Speech Recognition framework. The text transcript is then sent to our AI therapist for processing. We store the resulting transcript on our servers (see Section 7). Audio recordings themselves are not stored or transmitted to our servers. You may revoke microphone permission at any time via iOS Settings.
In Short: Some technical information such as your IP address and device characteristics is automatically collected when you use the Services.
This information does not directly identify you but may include IP address, device type, operating system version, app version, and information about how and when you use our features. We use this information for security, troubleshooting, and analytics.
All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.
In Short: We process your information to deliver the Services, including AI conversations, partner pairing, push notifications, subscription management, security, and to comply with law. We may also process your information for other purposes only with your prior explicit consent.
We process your personal information for the following purposes:
In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law, like with your consent, to comply with laws, to provide you with services to enter into or fulfill our contractual obligations, to protect your rights, or to fulfill our legitimate business interests.
If you are located in the EU or UK, this section applies to you.
The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information. As such, we may rely on the following legal bases:
If you are located in Canada, this section applies to you.
We may process your information if you have given us specific permission (express consent) to use your personal information for a specific purpose, or in situations where your permission can be inferred (implied consent). You can withdraw your consent at any time.
In some exceptional cases, we may be legally permitted under applicable law to process your information without your consent, including:
In Short: We share your information with service providers that help us deliver the Services. We do not sell your personal information. We do not share your personal information for advertising purposes.
We share information with the following categories of service providers ("subprocessors"). Each is bound by a written contract that limits how they may use your information and requires appropriate technical and organizational security measures.
We use Sign in with Apple for authentication, Apple's StoreKit for in-app subscription processing, and Apple's Push Notification service (APNs) for delivering notifications. Apple receives and processes the data necessary for these functions in accordance with Apple's privacy policy.
We use Anthropic's Claude AI to generate therapist responses in AI Chat and Live Therapy. When you send a message to the AI therapist, the content of your message and recent relevant context — including decrypted intake data necessary to ground the response in your relationship context — is transmitted to Anthropic for processing.
Per Anthropic's commercial API terms, Anthropic does not use this data to train its models. Anthropic processes the data only to generate a response, and deletes prompt content from operational systems within 30 days.
We use Amazon Polly to convert AI therapist text responses into spoken audio for the optional voice feature. Polly receives the text of the AI response and returns audio. AWS processes this data only to generate the audio and does not retain the text after processing.
We use Supabase (hosted on AWS infrastructure, primarily in the United States) to store all couple data, conversation history, profile information, device tokens, and subscription state. Encrypted partner intake data is stored as ciphertext (see Section 7). Supabase processes this data only to provide hosting services.
We use TelemetryDeck to collect anonymous usage events from the iOS App such as which screens are viewed, how features are used, and onboarding completion rates. TelemetryDeck is designed not to track individual users — events are hashed and aggregated, and TelemetryDeck does not collect IP addresses or other personal identifiers.
We use Google Analytics 4 on our website (squiresstudios.com — not the iOS App) to understand how visitors arrive and which content they read. Google Analytics collects your IP address (anonymized where possible), referrer, the pages you view, your browser and OS, and approximate region. Google processes this data under its own terms. See our Cookie Policy for details, including how to opt out.
We use Sentry to collect crash reports and error stack traces. When the app encounters an error, Sentry receives information about what code failed, your device model and OS version, and a session identifier. We configure Sentry to avoid sending personal data in error messages.
Live Therapy uses Apple's SFSpeechRecognizer framework to convert microphone audio to text. Depending on your iOS configuration, this may happen entirely on your device, or audio may be sent to Apple's servers for processing. We do not control how Apple processes this audio — refer to Apple's Privacy Policy for details. You can choose on-device speech recognition only in iOS Settings → General → Speech Recognition where supported by your device.
We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company. If this occurs, we will notify you and require the receiving entity to honor this Privacy Notice.
We may disclose your information if required by law, court order, or other legal process, or to protect our rights or the safety of users.
In Short: Yes. Our AI Chat and Live Therapy features use third-party AI services to generate therapist responses based on your conversation input.
We use AI services from the following providers:
As part of providing these features, your inputs and the resulting outputs are transmitted to and processed by these providers. See Section 4 for details on each provider's role and data handling.
Anthropic, our primary AI provider, does not train its models on data submitted via the commercial API we use. Your conversations are used only to generate the immediate response and are not retained for model improvement purposes.
Conversation content is sent to AI providers via encrypted (HTTPS) connections. Providers process the data only to generate a response. Responses are returned to your device and stored in our database (see Section 6) so that you and your partner can refer back to past conversations.
Encrypted partner intake data referenced in AI prompts remains encrypted at rest in our database, but is decrypted on your device and included in the prompt to AI providers to give the AI relevant context. Therefore, intake content does pass through AI provider systems during a conversation, but is then deleted by the provider per the terms described in Section 4.
In Short: We retain your information for as long as your couple account is active, and for limited periods afterward as described below.
We retain personal information as follows:
When you delete your couple account, we use our delete-couple server function to permanently remove your data from active databases. Both partners' data is removed together because the data is shared between you (see Section 4).
When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it.
In Short: We use multiple layers of technical and organizational safeguards including device-side encryption for sensitive partner data, encrypted network connections, and access controls on our servers.
Sensitive partner data — including the names you assign to yourself and your partner, your years-together, relationship type, and intake responses — is encrypted on your device before transmission using AES-256-GCM with a key derived via HKDF-SHA256 from your invite code and partner 1's Apple ID hash. The encrypted ciphertext is what we store on our servers.
This protection covers:
Note that conversation content (AI Chat messages, Live Therapy transcripts, Love Notes) is also stored with encryption at rest on our servers, but is transmitted in decrypted form to AI Service Providers as necessary to deliver the Service (see Section 5).
All communication between the app and our servers, and between our servers and our service providers, uses HTTPS (TLS 1.2 or higher).
Our development and production databases are protected by access controls and authentication. Only authorized personnel can access production systems.
Despite these measures, no electronic transmission or storage can be guaranteed 100% secure. We cannot guarantee that hackers or other unauthorized parties will be unable to defeat our security. You should only access the Services within a secure environment. If we become aware of a security incident affecting your data, we will notify you and applicable authorities as required by law.
In Short: We do not knowingly collect data from or market to children under 18 years of age or the equivalent age as specified by law in your jurisdiction.
We do not knowingly collect, solicit data from, or market to children under 18 years of age or the equivalent age as specified by law in your jurisdiction, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18 or the equivalent age as specified by law in your jurisdiction or that you are the parent or guardian of such a minor and consent to such minor dependent's use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at DPO@squiresstudios.com.
In Short: Depending on your state of residence in the US or in some regions, such as the European Economic Area (EEA), United Kingdom (UK), Switzerland, and Canada, you have rights that allow you greater access to and control over your personal information. You may review, change, or terminate your account at any time.
In some regions (like the EEA, UK, Switzerland, and Canada), you have certain rights under applicable data protection laws. These may include:
If a decision that produces legal or similarly significant effects is made solely by automated means, we will inform you, explain the main factors, and offer a simple way to request human review. In certain circumstances, you may also have the right to object to the processing of your personal information. You can make such a request by contacting us using the contact details provided in Section 14.
We will consider and act upon any request in accordance with applicable data protection laws.
If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your Member State data protection authority or UK data protection authority.
If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner.
If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time. You can withdraw your consent at any time by contacting us using the contact details provided in Section 14.
However, please note that this will not affect the lawfulness of the processing before its withdrawal nor, when applicable law allows, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.
If you would at any time like to review or change the information in your account or terminate your account, you can:
Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms, and/or comply with applicable legal requirements.
If you have questions or comments about your privacy rights, you may email us at info@squiresstudios.com.
Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Notice.
California law requires us to let you know how we respond to web browser DNT signals. Because there currently is not an industry or legal standard for recognizing or honoring DNT signals, we do not respond to them at this time.
In Short: If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to and receive details about the personal information we maintain about you and how we have processed it, correct inaccuracies, get a copy of, or delete your personal information.
The table below shows the categories of personal information we have collected in the past twelve (12) months.
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Apple ID hash (one-way SHA-256), IP address, APNs device token, couple invite code | YES |
| B. Personal information per CCPA | Display name you choose for yourself (not your legal name unless you choose to use it); we do not collect contact details such as phone number, email, or address | LIMITED |
| C. Protected classification | Relationship status / years together (only as you choose to provide) | LIMITED |
| D. Commercial information | Subscription status, Apple transaction identifier (we do not see card data) | YES |
| E. Biometric information | Fingerprints, voiceprints | NO |
| F. Internet or other similar network activity | Anonymous app usage events, features accessed | YES (anonymized via TelemetryDeck) |
| G. Geolocation data | Approximate location derived from IP address | LIMITED (no GPS) |
| H. Audio, electronic, sensory | Microphone audio (Live Therapy only); audio is converted to text on-device or via Apple, not stored by us as audio | NO (text transcript only) |
| I. Professional or employment | Job title, work history | NO |
| J. Education | Student records | NO |
| K. Inferences | AI-generated relationship insights and suggested topics | YES |
| L. Sensitive personal information | Relationship dynamics, sexual orientation and intimacy, mental health, trauma | YES (with consent) |
We only collect sensitive personal information as defined by applicable privacy laws for the purposes allowed by law or with your consent. Sensitive personal information may be used, or disclosed to a service provider or contractor, for additional, specified purposes (such as transmitting the content of your AI conversation to Anthropic to generate a response). You have the right to limit the use or disclosure of your sensitive personal information. We do not collect or process sensitive personal information for the purpose of inferring characteristics about you outside the conversation context.
In addition to the categories above, we also collect Live Therapy session transcripts — text generated from your spoken voice by Apple's Speech Recognition. We classify these as conversation content rather than audio.
Learn more about the sources of personal information we collect in Section 1.
Learn more about how we use your personal information in Section 2 and how we share it in Section 4.
We may disclose your personal information with our service providers pursuant to a written contract between us and each service provider, as described in Section 4. We may use your personal information for our own business purposes, such as for undertaking internal research for technological development and demonstration. This is not considered to be "selling" of your personal information.
We have not disclosed, sold, or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months. We will not sell or share personal information in the future belonging to website visitors, users, and other consumers.
You have rights under certain US state data protection laws. However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law. These rights include:
Depending upon the state where you live, you may also have additional rights including:
To exercise these rights, you can:
Under certain US state data protection laws, you can designate an authorized agent to make a request on your behalf. We may deny a request from an authorized agent that does not submit proof that they have been validly authorized to act on your behalf in accordance with applicable laws.
Upon receiving your request, we will need to verify your identity. Because we authenticate via Sign in with Apple and do not have your email or name, identity verification may involve confirming control of the same Apple ID or in-app actions. We will only use personal information provided in your request to verify your identity or authority to make the request.
Under certain US state data protection laws, if we decline to take action regarding your request, you may appeal our decision by emailing us at info@squiresstudios.com. We will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If your appeal is denied, you may submit a complaint to your state attorney general.
California Civil Code Section 1798.83, also known as the "Shine The Light" law, permits California residents to request information about personal information disclosed to third parties for direct marketing purposes. We do not share personal information for direct marketing purposes. If you are a California resident and would like to make such a request, please submit your request in writing using the contact details provided in Section 14.
In Short: You may have additional rights based on the country you reside in.
We collect and process your personal information under the obligations and conditions set by Australia's Privacy Act 1988 and New Zealand's Privacy Act 2020.
This Privacy Notice satisfies the notice requirements defined in both Privacy Acts. At any time, you have the right to request access to or correction of your personal information by contacting us using the details in Section 14.
If you believe we are unlawfully processing your personal information, you have the right to submit a complaint to the Office of the Australian Information Commissioner or the Office of the New Zealand Privacy Commissioner.
At any time, you have the right to request access to or correction of your personal information by contacting us using the details in Section 14.
If you are unsatisfied with the manner in which we address any complaint with regard to our processing of personal information, you can contact the Information Regulator (South Africa):
We are based in the United States. Our service providers operate primarily in the United States. If you access our Services from outside the United States, your information will be transferred to, stored, and processed in the United States and other countries where our service providers operate. We rely on appropriate legal mechanisms (such as Standard Contractual Clauses where applicable) to facilitate such transfers in compliance with EU and UK data protection law.
In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.
We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Last updated" date at the top of this Privacy Notice. If we make material changes to this Privacy Notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification through the Services. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.
If you have questions or comments about this notice, you may contact our Data Protection Officer (DPO):
Based on the applicable laws of your country or state of residence in the US, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law.
To request to review, update, or delete your personal information by other means, please contact us at info@squiresstudios.com.