Privacy Policy

The controller under the General Data Protection Regulation (GDPR) is Vulpes Vanguard LLC, 2880 W Oakland Park Blvd Suite 225C, Oakland Park, FL 33311, USA. More details are in the legal notice.

For any privacy question, write to support@almarelacionamento.app. A real person replies, usually within a few days.

The Tilia app for iPhone (and for Android, once available), this website tiliapareja.com and your messages to us.

We only process what Tilia needs in order to work for you:

• Account: name, e-mail address, a user ID and, if you sign in with Apple or Google, the details those services send us for that. Optionally a profile photo and your date of birth.
• Your relationship: what you tell us during onboarding (for example since when you have been together or what you hope for), the invite code and the link with your partner.
• Content: your conversations with Alma, answers to questions, reflections, check-ins and what you share with each other, plus short notes Alma keeps from your conversations.
• Your home: progress, built items and the settings of your shared world.
• Subscription: whether you have one and which. Apple handles the payment; we never see payment or card details.
• Usage and technical data: which features are used (for example “paywall viewed” or “message sent” with the message length, never its text), device model, system and app version, language, crash reports without IP address and a push notification token if you allow notifications.

Tilia is a shared space, not an open book. Your partner sees your name, your profile photo, your shared answers and questions, your home and anything you choose to share. They do not see your conversations with Alma or your personal reflections. If you share something from them, you see it first and decide whether it goes out.

What you write in Tilia may contain sensitive data, which is specially protected under Art. 9 GDPR. We process it only because and to the extent that you entrust it to us, solely to provide Tilia's features, and based on your explicit consent (Art. 9(2)(a) GDPR), which you give when you create your account and before you first use the AI. You decide what you write.

Alma's answers are generated by the AI model Claude by Anthropic. Before you first write to Alma, we ask for your permission. Without your consent, no text reaches the AI.

Your message's route: the app sends it to our server in the EU. From there it passes through the EU gateway of our provider Requesty, also in the EU, to Claude on Amazon Bedrock (Amazon Web Services), also in the EU. The answer comes back the same way. The entire route stays in the EU.

• What is sent: your message, the context Tilia needs to answer well (for example your first names, what you have told us about the two of you, the question of the day) and the notes Alma has kept.
• What is not sent: your e-mail address, date of birth, profile photo or payment details.
• What does not happen there: Requesty and Amazon do not store your messages or Alma's answers; they only process them for the duration of the request. They are not used to train AI models. According to Amazon, Anthropic has no access to them.
• What we keep: the history of your conversations and Alma's notes, so you can pick up where you left off, encrypted on our servers in the EU. Under Settings → What Alma knows about me you can view and delete Alma's notes.
• Your choice: under Settings → AI features you can withdraw your consent at any time. Tilia then stops answering; everything else keeps working.
• Limits: Alma is an AI and can be wrong. It gives no therapeutic, medical or legal advice and makes no decisions with legal or similarly significant effects on you (Art. 22 GDPR).

• To make Tilia work: account, couple link, storing your content, your home, subscription and the notifications you turn on (contract, Art. 6(1)(b) GDPR).
• For the AI's answers and sensitive data (your consent, Art. 6(1)(a) and 9(2)(a) GDPR). You can withdraw it at any time with effect for the future.
• To make Tilia better and more stable: usage statistics without content and crash reports (legitimate interest, Art. 6(1)(f) GDPR). Our interest is a reliable, easy app; your content is never used for this.
• For security: preventing abuse, fraud and unauthorised access (legitimate interest, Art. 6(1)(f) GDPR).
• Where the law requires it, for example tax record-keeping (Art. 6(1)(c) GDPR).

For specific tasks we work with carefully selected providers. They may only process data on our instructions and for that purpose (processors under Art. 28 GDPR):

• Supabase Inc. — database, file storage (profile photo) and server functions; this is where your account and content live · servers in the EU
• Requesty Ltd — AI gateway: forwards requests to Alma to the Claude model on Amazon Bedrock (Amazon Web Services) without storing them · servers in the EU; company based in London (United Kingdom)
• Clerk Inc. — sign-up, sign-in and account security · USA
• RevenueCat Inc. — managing subscription status (Apple processes the payment) · USA
• PostHog Inc. — app usage statistics (which features are used, never content) · servers in the EU
• Functional Software Inc. (Sentry) — app error and crash reports, without IP address · servers in the EU
• 650 Industries Inc. (Expo) — delivering push notifications to your device · USA
• Vercel Inc. — hosting this website · EU / USA

For AI requests, Requesty uses Amazon Web Services as a sub-processor (Amazon Bedrock, EU region); Requesty publishes the full list here.

If you sign in with Apple or Google or take out a subscription in the App Store, Apple or Google process the necessary data under their own responsibility and their own privacy policies.

Beyond this, we only disclose data where the law requires it. We do not sell data.

Your content is on servers in the EU, and the AI processing happens there too. Some providers are based outside the EU:

• United Kingdom (Requesty): the European Commission has decided that the UK ensures an adequate level of protection (Art. 45 GDPR).
• USA (e.g. Clerk, RevenueCat, Expo): we rely on the EU-US Data Privacy Framework where the provider is certified, and otherwise on the European Commission's Standard Contractual Clauses (Art. 46 GDPR).

Vulpes Vanguard LLC is based in the USA. We will send you a copy of the safeguards on request.

We keep your data as long as you have an account. You can delete it at any time in the app: Settings → Delete account. We then immediately delete your account, profile, photo, conversations with Alma, reflections, Alma's notes about you and your sign-in data. They disappear from backups automatically within 30 days at the latest.

Your shared home and what your partner wrote stay with your partner. Our providers keep crash reports for no more than 90 days and usage statistics for no more than twelve months. Data we must keep by law is locked and deleted when the period ends.

Important: deleting your account does not cancel an App Store subscription. Cancel it first in your Apple ID settings (Settings → your name → Subscriptions).

You have the right at any time to

• access your data and get a copy (Art. 15 GDPR),
• rectification (Art. 16 GDPR) and erasure (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability in a common format (Art. 20 GDPR),
• withdraw consent with effect for the future (Art. 7(3) GDPR),
• lodge a complaint with a data protection authority in your country.

Just write to us. We reply within one month, usually much sooner, and may ask a question to make sure the request really comes from you.

All connections are encrypted (TLS) and data is also stored encrypted on our servers. In the database, access rules make sure each person can only read their own content and what has been shared with them. Internally, only those who need it for operations and security have access. Should a relevant security incident nevertheless occur, we will inform you and the authorities as the law requires.

Tilia is meant for adults aged 18 and over. We do not knowingly collect data from minors. If we learn of it, we delete it.

This website uses no tracking or advertising cookies and no analytics tools. It only stores in your browser whether you chose the light or dark theme. Our hosting provider Vercel processes the technical access data needed to deliver the page securely (such as the IP address) and deletes it after a short time.

If Tilia or the law changes, we update this policy. The current version is always here with its date. We will tell you about significant changes in the app in good time.

See also the Terms of Use and the help page. For anything else: support@almarelacionamento.app.