Key points
- Your personal journal starts on your device. Personal sync, backups and partner sharing are separate features; the Datey backup preference is currently on by default.
- Connecting a partner can share existing relationship entries as well as new ones. Shared collection notes are different from private date notes.
- Disconnecting, deleting an entry, deleting all app data and canceling a subscription have different effects. None remotely erases a partner's independent copies.
- PrivateVault files are device-bound and excluded from Datey's backups. Do not treat them as recoverable from an ordinary backup.
- Purchase services, diagnostics and support involve additional processing. A separate Datey login is not required, but that does not mean no data is processed.
The sections below explain these points in more detail.
1. About Datey and this policy
Datey is an adults-only app for keeping a personal dating journal and, in Couples mode, recording and sharing parts of your relationship with a connected partner. This policy explains personal storage, optional iCloud features, partner sharing, purchases, diagnostics, and contact with our support team.
Datey does not require a separate Datey login. Apple services and our service providers nevertheless process information to deliver the features described here. “No Datey account” does not mean that no information leaves your device.
Your personal journal is stored on your device. Your settings may also place copies in your own iCloud. Connecting a partner creates a separate sharing connection through Apple's CloudKit service. Information in shared couple features can reach your partner's devices and remain in their possession after you disconnect.
Choosing Couples mode by itself is not the same as connecting another person's phone. You can use supported couple features without a connected partner, subject to the applicable purchase requirements. Personal backup/sync, external searches and diagnostic services can still operate without partner pairing.
2. Who is responsible and how to contact us
Datey is provided by Tortuga Global Tech LLC, 1021 E Lincolnway, Suite 10348, Cheyenne, WY 82001, United States. For privacy questions or requests, email support@tortugatech.co.
We are responsible for personal information processed in operating Datey to the extent applicable law assigns that responsibility to us. Using Apple infrastructure does not remove our legal obligations. Apple also processes information for its own services under the Apple Privacy Policy.
3. Information used in the app
3.1 Your personal journal
Depending on the features you use, you can enter profile and contact details about yourself and people you know; dates and relationship history; places and venue coordinates; photos; personal notes; moods, ratings and preferences; spending; and information about intimacy or sexual life. Datey also calculates summaries, counts, maps and insights from your entries.
These entries are saved in the app's storage. Optional personal iCloud sync and backup are described in section 5. We do not operate a separate journal-content server or have an ordinary support facility for opening your private iCloud journal. If you send us an entry or screenshot in a support request, we receive what you send.
Information may concern people who do not use Datey. Record and share it lawfully and respectfully, particularly intimate information and images. The fact that information is recorded in a diary does not give someone permission to disclose it to others.
3.2 Information shared with a connected partner
Both people need iCloud access to connect their devices. Shared information can include:
- Your display name, profile photo, birthday, gender information and the home/origin information used in the partner profile.
- Relationship start date, relationship style, the couple cover photo and special dates; shared activities, collections, custom lists and bucket-list items; notes and ratings entered inside shared collections; plans, trips, saved places and their coordinates; and photos added to shared moments.
- Shared intimacy entries and the dates or counts used to display them.
- Your latest Communication responses about mood, energy, needs and sex drive, the message you leave for your partner, and update times.
- Availability days; game answers, guesses about each other and play times used to calculate results; and information indicating when your app last communicated with the sharing connection.
- Whether your purchase currently provides partner access, including an access-expiry value. Your partner does not receive your payment-card details through this mechanism.
The app can publish existing entries associated with the connected relationship as well as new entries. Pairing is not limited to content created after the connection date. Shared library entries can be edited or deleted by either partner; changes can be synchronized to both devices.
Personal notes are different from shared notes. The personal notes and ratings attached to private journal dates are not included in the shared date projection. That projection can include the date, venue, city, country and venue coordinates. Notes and ratings entered in shared collection items are shared. PrivateVault files are not sent through partner sharing. Other people may be identifiable in a shared photo, entry or note; sharing your own information does not automatically authorize disclosure of theirs.
3.3 Pairing codes and invitations
When you create a pairing code, Datey stores the code, your display name and its expiry in the app's public CloudKit database, operated by Apple. A join request adds the requesting person's display name, an app-specific iCloud account identifier and a request time. Once approved, the invitation record can also contain an iCloud sharing link.
These limited matching records are separate from the private/shared databases containing journal and couple content. They do not contain your journal entries. Someone who obtains the record identifier or code may be able to read its matching information; public-database administration access also differs from private iCloud storage. Keep invitation codes and links private. A code alone does not approve a partner: the invitation and acceptance process controls access to the shared connection.
Codes currently stop being accepted after one hour. Expiry is not a guarantee that the underlying record is deleted after one hour. The app attempts cleanup, which may fail or be delayed.
3.4 Where information comes from
Information can come from your entries and selected imports; a connected partner's entries, profile and responses; and Apple and the purchase or diagnostic services described below. A person may also record information about someone who does not use Datey. That does not mean we obtained the information directly from that person or that they agreed to sharing it. Contact us under section 11 if information about you is involved.
3.5 Calculations and insights
Datey calculates statistics and scores from journal entries on the device. For example, an overall person score can combine recorded vibe and intimacy ratings, give newer dates greater weight and moderate results based on small numbers of entries. Other views summarize dates, spending, locations and activity patterns. These are interpretations of the entries, not independently verified facts or diagnoses. They do not make decisions for you about whom to date or establish another person's consent. Edit the underlying entries if they are inaccurate.
3.6 External title suggestions
In search-enabled collection fields, changes to the title text can send a search query from your device to an external catalog service before you save an entry. The current integration uses Apple's iTunes Search service for books and Wikipedia, operated by the Wikimedia Foundation, for films, series and games. Book requests include a country/region setting; Wikipedia requests use a language-specific endpoint. The receiving service also receives ordinary network-request information, including your IP address.
The title query is sent to obtain suggestions; this request does not attach your whole journal or your partner's profile. Avoid entering personal notes or sensitive information in these search fields. Leaving a suggestion unselected or saving a manually entered title does not undo a query already sent. See the Apple Privacy Policy and Wikimedia Privacy Policy for their handling of requests.
4. Purchases, usage information and diagnostics
Purchases
Apple processes payments. We use RevenueCat to validate purchases, restore access and manage entitlements. This involves a generated app-user identifier, product and transaction information, purchase/renewal status, and relevant app, device and storefront information. A generated identifier is not your Apple login, but it can distinguish a customer record; we do not describe it as inherently unidentifiable.
Apple does not provide your payment-card details to Datey through this purchase flow. RevenueCat is not given your journal content by our subscription integration. See RevenueCat's privacy information.
Usage analytics
Datey uses TelemetryDeck for usage signals. Our integration sends predefined events and categories, such as screen or feature use, onboarding and purchase stages, permission outcomes, session-duration ranges, and coarse usage/library-size categories. It also uses app/device and locale information. The app does not intentionally include your typed names, journal text, photos, exact ratings or saved location values in these events.
TelemetryDeck uses hashing to protect identifiers, as described in its privacy documentation. Hashing alone is not a promise that every possible combination of event information is anonymous. A feature-use event can itself reveal that a person used a sensitive feature.
Crash diagnostics
Datey uses Sentry for error and crash diagnostics. Reports can include technical identifiers, stack traces, app and operating-system versions, device information and execution context. Our app disables the default PII option and removes the user object and breadcrumb messages/data before sending an event. Those safeguards reduce disclosure; they are not an absolute guarantee that every diagnostic field is anonymous. Network requests also expose connection information, including an IP address, to the receiving infrastructure.
Datey does not include advertising or intentionally use journal information for targeted advertising, sale to data brokers, or cross-app advertising tracking.
5. Personal iCloud sync, backups and security
These are separate features with different settings:
| Feature | What it does | Current default and limits |
|---|---|---|
| Personal iCloud sync | Synchronizes supported journal records between your devices using your Apple Account. | Off by default. Turning it off stops this synchronization; it does not necessarily delete copies already in iCloud. |
| Datey backup | Writes an encrypted snapshot of supported personal and couple records and settings, normally to your iCloud Drive. A local fallback may be used when that destination is unavailable. | The iCloud-backup preference is on by default. Completion depends on device, account and storage availability. PrivateVault file contents are excluded. |
| Apple device backup | Apple may include eligible app data in a device backup, subject to your iOS and Datey settings. | Separate from cross-device sync. Manage existing device backups with Apple. |
| Partner sharing | Synchronizes shared couple information between the connected partners. | Started by pairing. The personal-sync switch does not serve as a partner-disconnect control. |
The Datey backup file is encrypted before it is written. Its key uses iCloud Keychain so it can become available to your other devices. Recovery depends on access to that key and a usable backup. A backup stored only on the same device does not protect against losing that device.
CloudKit protects data using Apple's security architecture. Private sync uses encrypted fields for supported journal values; partner-sharing records also contain ordinary CloudKit fields and file assets. Protection differs by field, service, account settings and sharing configuration. We do not promise that every Datey field or every shared record is end-to-end encrypted or unreadable by Apple. See Apple's iCloud security overview.
No security measure prevents every loss or unauthorized disclosure. Use a device passcode, protect your Apple Account and review who can see your devices, notifications and widgets.
PrivateVault
PrivateVault encrypts supported private files on the device and protects access through the device's authentication facilities. Its file-encryption key is device-bound. Vault files are excluded from personal CloudKit sync, partner sharing and Datey's backup snapshot, and the vault directory is marked for exclusion from device backup.
Do not rely on reinstalling Datey, changing phones or restoring an ordinary backup to recover vault files. We do not have a recovery key. If the app offers an export action, an exported copy is outside the vault's protections. Importing a file does not automatically remove the original from Photos, Files, Recently Deleted or another source.
6. Permissions, notifications and exports
Datey uses system permissions or selection interfaces for photos, camera, contacts, calendars, location and notifications, and device authentication for protected features. You can change permissions in iOS Settings. Denying a permission limits the feature that needs it.
When you select a contact for import, the supported fields can include their name, phone numbers, photo and birthday. This is a selected-contact import, not a statement that your entire address book is uploaded. Location and Apple map services support place search, maps and entry locations; saved venues can include precise coordinates. A saved place is not evidence of live location tracking.
Calendar events are created when you request them. A calendar entry can include a person's name and the date; other people with access to that calendar may see it. The calendar feature requests full calendar access in iOS to prepare an event for you to save. Copies in your calendar, photo library, exported files, messaging apps or other destinations have their own storage and sharing settings.
The permissions above are not mandatory for every use of Datey. Without a permission, the related import, capture, location, calendar or notification function may be unavailable. An iOS permission permits a device capability; it is not by itself explicit consent to every use or partner disclosure of sensitive information.
Apple can send silent push notifications that prompt the app to fetch shared updates. Datey then prepares relevant visible notifications on the receiving device. Turning off visible notifications does not end the iCloud sharing connection. A preview or widget may expose personal or partner information to someone who can see the screen.
7. Retention, disconnecting and deletion
Switching to Single mode while staying together: pauses publication through the couple connection while that mode is active; it does not revoke the underlying iCloud share, remove previously shared information or permanently mark all entries made in Single mode as unshareable. Returning to Couples mode can make eligible existing relationship entries available for sharing. Personal sync, backups and other services are separate from this mode setting.
Disconnecting a partner: stops future synchronization through that connection when revocation completes. A network failure can delay cloud revocation. Follow any retry or pending status in the app. Shared entries already received can remain in each person's local journal and backups. Disconnecting is not a remote wipe of another person's phone, exports or screenshots.
Ending the relationship in the app: changes the relationship status, returns you to Single mode and starts disconnection. It preserves journal history rather than deleting every activity or list, but clears certain couple state, including the local couple cover photo and game-answer state. Disconnecting phones without ending the relationship has different effects: it clears the local partner game/availability mirrors but can retain your own game answers and the couple cover photo. None of these local cleanup steps guarantees erasure of an independent recipient or backup copy.
Deleting an individual shared entry: can propagate its deletion to the connected library. It cannot guarantee removal of independent copies or copies made before the deletion reached the other device.
Deleting Datey: removes its installed local storage, but does not by itself cancel subscriptions, revoke an iCloud share, delete cloud records or remove existing backups. If you want to end sharing or delete cloud information, use those controls before uninstalling where possible.
Reinstalling or restoring a connection: Datey can discover a surviving couple connection in your Apple Account and offer to reconnect or restore shared information. Dismissing that offer is not the same as revoking the cloud connection. Check the proposed partner and sharing scope before restoring; a reinstall is not evidence that previously shared information has been erased.
The app's full-data deletion flow: attempts to erase the local journal, accessible Datey cloud data, applicable sharing records, Datey backup files and local vault material. It requires the correct iCloud account and network access. A participant's deletion is scoped differently from deletion by the owner of a shared zone. The app reports incomplete deletion for retry. This process cannot erase another person's independent copies or backups, files you exported elsewhere, or Apple's separate purchase records.
Turning off backups stops future Datey backups governed by that preference; it is not a promise to erase every previous backup. Apple-managed backups and user-exported copies may need to be removed separately.
These technical limits do not remove our obligations when an applicable privacy law requires deletion, restriction or notice to a recipient or service provider. We will assess a rights request separately from the app's disconnect command and take the steps the applicable law requires. We will explain any information we cannot access or erase and any applicable exception; we do not promise a remote wipe capability we lack.
We retain support and operational information only for the relevant service purpose, applicable recordkeeping duties, security and resolution of disputes, with access restricted accordingly. We do not retain a separate support copy of your private journal unless you send one to us.
8. Sensitive information and privacy choices
Optional entries and couple features may reveal health, sexual life, sexual orientation or other sensitive information. You do not need to complete every optional field. Record and share another person's intimate information or images only with the permission or other legal authority required for that information.
Accepting these Terms, allowing an iOS permission or connecting a partner does not by itself provide explicit consent to every use of sensitive information. One person's choices cannot substitute for another person's consent where it is required.
You can edit or delete entries, manage personal sync and backups, and disconnect a partner as described in sections 5–7. Disconnecting stops future sharing when revocation completes but does not erase independent recipient copies. Contact support@tortugatech.co to exercise a privacy right, withdraw consent for processing based on it or object to processing where applicable. Withdrawal does not affect processing that was lawful before withdrawal.
Where EEA or UK data-protection law applies to processing for which we are responsible, its lawful basis depends on the purpose. Necessary purchase validation and access restoration support the purchase or service agreement. Ordinary support and security operations serve our interests in answering requests, investigating faults and protecting the service, subject to necessity and the person's rights. A binding recordkeeping or disclosure duty may require processing under applicable law. These grounds do not by themselves authorize processing sensitive information; an additional applicable condition is needed.
The technical fact that we cannot normally open a private database does not by itself determine whether data-protection law applies to an operation. This policy does not transfer our statutory responsibilities to you.
9. Recipients and international processing
Information is disclosed to the connected partner as described above, to Apple for its platform and catalog services, to the Wikimedia Foundation for Wikipedia title queries described in section 3.6, and to the purchase and diagnostic providers in section 4. Our support and website providers also process information relevant to their services when those services are used. Authorized personnel may access operational or support records for the purposes described here. We may disclose information we actually hold when legally required or to establish or defend legal claims, subject to applicable law.
The providers described here may process information outside your country, including in the United States. Contact support@tortugatech.co for information about processing locations and safeguards relevant to your request. A provider's services remain subject to its applicable privacy information as well as any obligations we have under data-protection law.
10. Support and the Datey website
When you contact us, we receive the name/contact details, message and attachments you choose to send. We use them to respond, troubleshoot and handle the request. Please avoid sending passwords, payment-card details or unnecessary intimate content. A screenshot can contain another person's personal information; redact it where possible.
We use Google Workspace to receive, store and reply to email sent to support@tortugatech.co. Google processes the correspondence, sender/recipient addresses, attachments and related email metadata to provide that service. Support correspondence is separate from the private journal in your app; an entry or screenshot you send to support becomes part of that correspondence.
The website contact form requests a name, email address, topic and message. Cloudflare hosts the website and processes form submissions to deliver them to our support mailbox. We use Cloudflare Turnstile and request limits to reduce spam and abuse. These protections process connection and browser information, including IP addresses and security signals. See the Cloudflare Privacy Policy and Turnstile Privacy Addendum.
The form does not save a separate copy of your message in a website database. A successful submission means the email service accepted the message; a failed submission does not mean it was delivered. Hosting and security infrastructure may generate operational logs when accessed. Links to Instagram, the App Store and other services take you to their own privacy practices.
11. Your choices and rights
Use the app's editing, sharing, sync and backup settings and Apple's account controls to manage information stored there. Contact support@tortugatech.co for privacy requests, including information concerning you entered by someone else. You do not have to be a paying subscriber to contact us about your rights.
Depending on the law that applies, you may have rights to access, correct, delete or obtain a portable copy of personal information, restrict or object to processing, withdraw consent, appeal a refusal and complain to a regulator. Withdrawal does not undo lawful processing already completed or automatically erase copies a recipient independently retains. We will explain available deletion steps and any lawful retention requirements.
We may request proportionate information needed to verify and locate a record. We will not require a complete intimate journal or an Apple password for that purpose. If we cannot identify or access a requested record, we will explain the limitation and what help is available; this is not a blanket exemption from responding.
For EEA/UK requests, the usual response period is one month, with permitted extensions and notice where necessary. You may contact your local supervisory authority, including the UK ICO or an EEA authority.
For US residents, applicable state rights can include access, correction, deletion, portability, authorized-agent requests, appeals and freedom from unlawful discrimination for exercising rights. We do not sell personal information or share it for cross-context behavioral advertising. Partner sharing at your request is a separate disclosure described in this policy.
12. Adults only; changes
Datey is intended for people aged 18 or older. Onboarding asks for an adult-age confirmation; this is not government identity verification. If you believe a minor's information has reached our support or operational systems, contact us so we can assess and address it. Removing the app alone does not erase partner/cloud copies as explained in section 7.
When this policy changes, we will identify its effective date and provide any notice or fresh choice required for a material change. We will not treat a policy update as consent to a new sensitive-data use.