Privacy policy

Who we are

Liyan is an AI marriage-coaching app published by H A R S VENTURES CO W.L.L, a limited liability company incorporated in Bahrain under commercial registration number 188858-1, with its registered office at Office 39, Building 111, Road 385, Al Khalifa Avenue, Block 304, Capital Governorate, Manama, Al Asimah, Bahrain ("we", the data controller).

The app has two spaces: one for the husband, one for the wife. You choose yours when you sign up. Both spaces run on the same infrastructure and are covered by this one policy.

Data we collect

Account: your email address, managed by our authentication provider, Supabase. When you sign up with an email address, a code sent to it confirms that it is yours. You can sign in with your password, with a code sent by email, with Apple (on iPhone) or with Google.

Signing in with Apple or Google: we receive the account identifier and the email address the provider passes on. Apple may give you a private relay address; we use it as given and make no attempt to trace it back to your real address. For Apple, we also keep an encrypted refresh token, used only to revoke your authorization with Apple when you delete your account.

Profile: your onboarding answers (temperament, love language, way of handling conflict, sensitive topics, cultural background, length of marriage and similar), and what you tell the app about your preferences and your spouse's, including your answers to the short questions it asks along the way.

Conversations with the coach: your messages, the coach's replies, conversation titles and summaries, and a memory the coach keeps of what matters to you.

Images (optional): an image you attach, for example a screenshot of a conversation, is sent to the AI model for that one reply. It is not stored; we only keep a note that the message included an image.

Cycle: see the section below.

Mood and relationship: in the wife's space, a daily mood on a 1 to 5 scale; in both spaces, a weekly relationship satisfaction score on a 1 to 5 scale and, once a month, a short look back at the month with the coach.

Daily tips: the tips written for you, your feedback on them, and your time zone, so they arrive at the right hour.

Subscription: your plan, trial dates, RevenueCat customer ID, remaining AI credits, and billing events (for example "trial started").

Notifications: a device token (Apple Push Notification service on iPhone, Firebase Cloud Messaging on Android, or a Web Push subscription in a browser), used to send your tips.

Referral: the partner code you entered at sign-up, if any. When someone opens a partner's link, we record the click with a one-way hash of the IP address, never the address itself, to credit the partner.

Preferences: language, display theme and app icon.

Technical data: an AI usage counter per account and a request counter used to prevent abuse.

Problem and crash reports: when you report a problem from Settings, we receive your message, up to three screenshots you choose to attach, and technical context (the screen you were on, the app version, the type of device and browser, the language, recent app errors). A screenshot can show content from the app, your conversations included: attach only what you want us to see. When a screen fails to load, the app sends a crash report on its own (the error, its technical trace and the same context) with a one-way hash of the IP address, never the address itself, to limit abuse, even before you have an account.

Voice dictation (optional): if you dictate a message, the audio is handled by your phone's own speech recognition (Apple or Google). We never receive any audio, only the text, which you can review before sending.

Cycle tracking

In the wife's space, you can track your own cycle: the start and end dates of your periods, cycle and period length and, if you turn on advanced tracking, your cervical mucus observations and ovulation test results. This is your health data, processed with your explicit consent, given when you turn tracking on.

In the husband's space, the husband can turn on an estimate of his wife's cycle (the date of her last period and her usual lengths) to adapt the coach's advice. This data concerns his wife, who does not hold the account it is stored in. Before any date is entered, the app asks him to confirm that his wife knows about this tracking and agrees to it, both at setup and when he turns it on in Settings: without that confirmation, nothing is recorded. Anyone who believes data about them was entered without their agreement can write to privacy@liyan.app to have it accessed, corrected or deleted.

In both spaces, tracking can be turned off at any time in Settings.

Linking your accounts

Linking the husband's and the wife's accounts is optional. One spouse generates a code in Settings, valid for 7 days, and the other enters it: nothing is linked until both have acted. Either spouse can unlink at any time in Settings, which ends everything described in this section straight away.

Once the accounts are linked, and only if the wife tracks her cycle in her space, the husband's space uses her real cycle instead of his estimate: it shows him her current phase and when her next period is expected, and adapts his advice to them. He never sees her entries themselves (dates, observations, tests), her mood or her conversations.

Sharing an insight: each spouse can also turn on, in Settings, the sharing of insights with the other. After some conversations, the AI then drafts a short, gentle summary, for example a need you expressed. It is never sent on its own: you read it, then share it or ignore it. One you have not decided on within 48 hours is deleted. A shared insight is shown to your spouse, who is notified. Your spouse's coach takes it into account as your point of view, quoted as written, for as long as your accounts stay linked; it is also added to your own coach's memory. Your spouse only ever sees the text you approved, never your conversations. Unlinking your accounts ends its use in your spouse's space, and deleting your account deletes your insights.

Artificial intelligence

Before anything is sent to an AI model, the app asks for your explicit agreement: on the first screen of onboarding, and in the chat for anyone who reached it without that screen. The agreement is kept on your device, so a new device asks again.

What is sent: your messages and the images you attach, your profile answers, the coach's memory and, if tracking is on, the cycle phase. The models use it to write the coach's replies, your tips and conversation summaries.

Our providers are Google (Gemini), our main model, and Anthropic (Claude), a second model used in particular when Gemini is unavailable. We use Google's paid Gemini API, under terms by which Google does not use your data to train its models. Your data is never sold, and never used for advertising.

Why we use this data

To provide the coaching service and personalize it from your profile, the cycle phase and the coach's memory; to share what you chose to share with your spouse; to manage your subscription and trial; to send your tips; to look into and fix the problems you report or the app detects; to prevent abuse; and to produce aggregated usage statistics.

Legal basis

Most processing is necessary to provide the service you signed up for (GDPR Art. 6.1.b). Sending your data to the AI providers relies on the consent you give before the first exchange. Cycle data is health data (GDPR Art. 9): it is processed only with explicit consent, given when tracking is turned on, and that consent can be withdrawn at any time by turning tracking off. Abuse prevention, crash reports and usage statistics rely on our legitimate interest (Art. 6.1.f).

Encryption and security

Our database host encrypts all stored data at rest, and traffic between the app and our servers is encrypted in transit (TLS).

On top of that, the most personal content is encrypted with AES-256-GCM using a key specific to each user, derived and held on our servers: your profile answers and preferences, your messages, conversation titles and summaries, the coach's memory, your cycle settings (last period and usual lengths, or the husband's estimate), the history of your periods and ovulation tests, your mucus observations and your moods, your monthly look-back summaries, insights waiting for your decision, and the Apple token.

Other data does not have this extra layer, only the host's encryption and our access controls: the date attached to a mood or mucus entry (not its value), weekly satisfaction scores, generated tips and your feedback on them, problem and crash reports, and subscription and technical data.

This is not end-to-end encryption: our servers hold the keys and decrypt content when the service needs it, in particular to send your messages to the AI model that writes the coach's replies.

Who we share data with

We use the following providers (processors under the GDPR) to run the service:

• Supabase: database and authentication

• Vercel: application hosting

• Google: Gemini AI model, Firebase Cloud Messaging (notifications on Android) and Sign in with Google

• Anthropic: Claude AI model

• RevenueCat: subscription management

• Resend: sending the app's emails (sign-up and sign-in codes)

• Apple: App Store payments, Apple Push Notification service and Sign in with Apple

• Cloudflare: hosting of the liyan.app website

We do not sell any data. Between the two spaces, only what is described under "Linking your accounts" is shared, and only after both of you have linked your accounts.

International transfers

Several of these providers are based in, or process data in, the United States (notably Google, Anthropic, RevenueCat, Resend, Vercel, Apple and Cloudflare). These transfers rely on the European Commission's Standard Contractual Clauses or an equivalent mechanism recognized as providing an adequate level of protection.

How long we keep your data

Your data is kept as long as your account is active. You can delete your account and all your data at any time from Settings → "Delete all my data". Your profile, conversations and messages, the coach's memory, cycle data, mood and satisfaction scores, tips, preferences, insights, notification tokens, problem reports and any link with your spouse are then permanently deleted, and your authorization with Apple is revoked.

Problem and crash reports are kept six months, then deleted.

What remains: billing records, which we must keep for our accounting and tax obligations; a partner's commission record if you came through their link; and copies in our database backups, until their retention period with our host expires.

Deleting your account does not cancel your subscription: cancel it in the App Store or Google Play, or billing continues. An invitation code that nobody uses expires after 7 days.

Your rights

Under the GDPR, you have the right to access, rectify, erase and port your data, to restrict or object to its processing, and to withdraw your consent at any time. To exercise these rights, write to privacy@liyan.app. You can also lodge a complaint with your data protection authority (the CNIL in France).

Age requirement

Liyan is intended for married adults (18 and over). We do not knowingly collect data about minors.

Cookies and local storage

The liyan.app website uses no advertising cookies and no third-party trackers. The only outside connection it makes is to load fonts (Google Fonts).

Inside the app, your device's local storage keeps your language, theme and app icon, your agreement to AI processing, a draft of your onboarding answers until they are saved, and a few display flags (a banner you closed, an insight you have seen). This stays on your device and goes with the app.

Changes to this policy

We may update this policy as the service or the law evolves. The date of the last update appears at the bottom of this page.

Contact

For any question about your personal data or this policy, write to privacy@liyan.app.