Privacy and terms
Relationshipss holds something personal: who matters to you, and when you last talked. This page says what we keep, where it goes, and how to take it back; the terms of using it are its last part.
Last updated
The short version
- You need to sign in to use the app. Public pages can be read without an account.
- Your list is stored on our server so it is safe and works on every device. The line you write about someone, their phone number if you add it, and any note you keep from a talk are encrypted before they are stored.
- Optional analytics measures only public pages, only if you accept it. It never measures your account, contacts, or activity in the app. No advertising, and no following you around. The one thing we note when you join is how you first found us, once, when you join. The only emails we send are sign-in links; once you use the app, a short reminder when someone drifts off, at most one a day and only when your phone didn't get the notification, or one note a week if you choose it, each of which you can stop in one tap; update emails, only if you turn them on; the one email you asked for when it opens to everyone; and, if you send us a problem or an idea, our answer.
- We never read your calls or messages, and the app never contacts anyone. It reads your contacts only when you ask it to. If you are signed in, it keeps the whole book you bring as your phone book, encrypted, and only the people you pick join your circle. From Google Contacts, it checks for changes about every 15 minutes until you choose Stop syncing.
- You can download everything, or delete your account and everything in it, whenever you like.
Relationshipss is run by its founder from India. In this policy, “we” means the person running it, and “you” means anyone who uses it. Questions go to hello@relationshipss.com.
What we keep
Browsing public pages
You can read the home page, guides, and other public pages without an account. Opening your circle requires sign-in. Optional public-page analytics and the record of how you found us are described below.
With an account
- Your email address, and your name and picture if Google shares them when you sign in that way.
- Which sign-in methods are linked to your account: the provider and its id for you, never the access tokens it gives for signing in. If you use a passkey, we store its public key only; the private key never leaves your device.
- Your categories and their frequencies, each person's name and category, the word you choose for who they are to you (such as Mum or Client), how often you want to talk, the dates of your last talks, any line or phone number you add, and any “later” you choose. The line and the phone number are encrypted before they are stored (see Security). The name, that word and the dates are not, so the app can sort and show them, and the app keeps the dates it works out from them, such as who is due today.
- Each time you tell us you talked: the date, and, if you choose to keep one, a short note you write about it, up to 400 characters. Keeping one is never needed. The note is encrypted before it is stored (see Security), it stays until you remove it, and it is never in the copy your browser keeps, in a reminder, or in the console. Nothing is captured on its own: no call, message or recording ever reaches us, only the words you type or dictate.
- Your phone book, if you bring a whole book of contacts: everyone in it, with their name, phone numbers, email addresses, birthday, company, and what their contact groups say about them (such as Family). Each entry is encrypted whole, name included, before it is stored. For each phone number and email address in it we also keep a keyed hash, so the same person is recognised across sources and so the console can see, without names, which accounts have each other in their phone books. See Your phone book below.
- If you connect Google Contacts: the selected Google account, its read-only permission and the marker for checking changes. The permission, the identifiers Google uses for contacts and the values as we last read them are encrypted before storage. We also keep sync status and the times of checks. If your account has no name or picture yet, we keep that Google account's name and picture for your account button.
- For reminders: your time zone (so each moment and the quiet hours are your own), your email choice, the days an email was last considered or sent, when each reminder went out and whom it named, and, for each device where you turned on notifications, the address its browser gave us to reach it, the browser's family (such as Chrome on Android) and whether the last notification got through. That address works only for us and only for that browser.
- For updates about the product: whether you asked for them by email (off until you turn it on), when you last opened What's new, and which update emails went to you.
- When you were last in the app, to the minute: one time, replaced on each visit, so the people who run the service can see whether anyone is here.
- Your phone number, if you previously gave it on the waiting list. It is encrypted before it is stored. It is also matched, by keyed hash, against the phone books here for the drawing of who knows whom. You can ask us to remove it, or delete your account.
- Anything you send us from the account menu (a problem, an idea or something else): your words, encrypted before they are stored, which kind you chose, the page you were on, and what your browser said about itself (its name and version, whether the app is installed, whether notifications are allowed, and the screen size). Each has a number and whether it is still open.
- How you first found us, noted once when you joined, if there was anything to note: the tag on the link you came in by (such as “reddit”), the name of the site that sent you (such as www.google.com, never the page you were on), and the first page you opened here.
Your signed-in account is the copy that counts. A list left in this browser by an earlier version is not automatically added to your account.
Adding people automatically
When you choose Bring in more people, you bring people from your phone, from a contacts file, or from Google Contacts. A contact's group (such as Family) and company help guess their category on your screen.
From your phone, you either pick people one by one, or open its contacts file and untick anyone you'd rather not send; only the people you send leave the phone. On the phone they are locked with a key that only your open screen holds; our server passes the locked box along and cannot open it. The box is deleted the moment your screen receives it, or within minutes if it never does.
Suggested categories are worked out on your own screen, by plain rules that run in your browser. You choose which people join your circle and how often to keep in touch.
Your phone book
With an account, the whole book you bring, from your phone, a contacts file, or Google Contacts, is kept on our server as your phone book, each entry encrypted before it is stored. The people you tick join your circle, which is your list. Everyone else stays in the phone book, outside your circle: they show as faint dots outside the picture, and you can bring any of them in at any time. To avoid bringing anyone in twice, we also keep keyed hashes of what identifies each contact, such as its first phone number or Google's id for it (see Security), and of each of its phone numbers and email addresses, which also let the console see, without names, which accounts have each other in their phone books (see How we use it).
If you choose From Google Contacts while signed in, our server keeps your phone book in step with Google until you choose Stop syncing: about every 15 minutes it checks for contacts you added, changed or deleted. Local details and relationship history remain when a Google contact is deleted. We also keep track of which new contacts still await your review in the notification bell. See Google user data.
Stories you share
If you choose to share a story, we keep your title and words, when you agreed to share them, and the review status and dates. The founder can read your submission and your account name and email to review it. Only approved titles and stories appear publicly. We do not publish your account name, email, or picture with your story.
Service records
When something breaks or runs slowly, we keep a record so we can find out what happened and fix it. A record holds the page, the time, what went wrong and how long it took, the kind of device and browser (its model, screen size and connection speed), the app version, and your account's number. It never holds your list, your contacts, what you write, or anyone's name, email or number. We also note the main steps, such as signing in, connecting Google Contacts, how many contacts arrived and how many people were offered and added, and on a phone how the screen was laid out (the sizes of the window and its bars), so a problem can be traced. These records stay with Google Cloud for 30 days.
What we never touch
- Your calls, messages, or call logs, and anything said in them. A note you keep from a talk is yours to write; nothing here listens, records or transcribes for you.
- Your contacts, unless you choose to bring them, and then only as described above. We never change or delete anything in your Google account: what you edit here stays here. We do not invent details, rename people, clean up numbers or merge contacts automatically.
- Your location, your card or bank details (there is nothing to pay), or anything about you from other websites.
How we use it
- To show you who you have gone quiet on, and to keep your list the same on every device when you are signed in.
- To keep your phone book, so you can choose people from it, see who is outside your circle, and bring them in later; and, if you brought it from Google Contacts, to keep it in step with Google.
- To sign you in and keep your account secure.
- To review stories you choose to share and publish them if approved.
- To see which places bring people to the app, from how each person found us.
- To see, in the console, who is in the app right now and when each account was last here.
- To see, in the console, how many accounts have each other in their phone books, as a drawing of dots and lines with no names on it. Nobody is told who has them in a phone book.
- With your permission, to understand which public pages people read.
- To find and fix errors.
That is all. We do not sell your data, use it for advertising, or use it to train AI. One thing here uses a model: when you keep a note from a talk, we send just that note, never a name or who you are, to Groq, which writes the one-line short version the card shows; Groq keeps nothing and does not use it to train AI (see Who else sees it). You can rewrite that line yourself, and your note is never changed. Optional Google Analytics is limited to public-page visits, as described below. We do not measure clicks or forms. The one thing kept about your activity in the app is when you were last here. Who comes up each day is worked out by plain rules from the dates you gave, and nothing else.
Who else sees it
We use a few services to run Relationshipss. Each gets only what its job needs.
- Google Cloud hosts the site and its database, in Singapore. Every request passes through it, including your IP address; our code does not store IP addresses. The database holds your account and your list, with the lines, phone numbers and talk notes encrypted, and, if you have them, your phone book and your Google Contacts permission, both encrypted. It also holds any stories you choose to share and their review records.
- Resend delivers sign-in links, the reminder emails, the update emails you ask for, and the emails around anything you send us. It receives your email address and the message: the names of the people who are drifting off, or your own words. It also receives whatever anyone writes to hello@relationshipss.com: that mail is kept, encrypted, in our console so we can answer it, and deleted when you ask.
- Your browser's push service, only if you turn on notifications: Google's for Chrome and Android, Apple's for Safari and iPhone, Mozilla's for Firefox. It carries each reminder to your device. The words are encrypted so that only your device can read them.
- Google, only if you sign in with Google or bring people from Google Contacts. Signing in, it tells us your email address, and usually your name and picture. If the Google sign-in prompt appears, it loads Google's own script, which may set Google's cookies under Google's privacy policy. If we ever offer another sign-in provider, the same applies to it. For Google Contacts, you say yes on Google's own screen. If you are signed in, our server then reads your contacts from Google, and checks again about every 15 minutes until you choose Stop syncing. Nothing goes the other way: we never change or delete anything in Google. If you are not signed in, they travel from Google straight to your browser and do not pass through our server.
- Google Analytics, only where it is configured and you choose Accept analytics: receives public page views and ordinary browser and device information, with a randomly assigned browser identifier. The connection also carries your IP address. We send only known public page paths and titles, never query strings, fragments, referring URLs, account identifiers, names, email addresses, contacts, notes, or form contents. Signed-in pages and private app screens are excluded. Google signals, advertising personalization, and automatic click, scroll, search and form measurement are disabled. If you reject it, the tag does not load and no Analytics request is sent, including requests without cookies.
- Sentry receives error reports. Cookies, request bodies, and authorization headers are removed before a server report is sent.
- Your keyboard, if you dictate a note on a phone: its own mic does the listening, under its maker's terms (Google's or Apple's), and it hands us only the words it typed. The site never asks for your microphone.
- Groq receives the words of a talk note, alone, to write its one-line short version, and nothing else: never a name, a number or anything about your account. Its services agreement forbids training on what we send, and zero data retention is turned on, so it keeps no copy.
Some of these providers process data outside India, for example in the United States or the European Union.
Google user data
Relationshipss asks Google for two things, and only when you choose them. Here is exactly what each one reads, what happens to it, and how to take it back.
Signing in with Google
Google tells us your email address, and usually your name and profile picture. We use them to create your account and sign you in. If you submit a story for review, the founder can also see your account name and email with it. They are stored with your account until you delete it.
Google Contacts
- What we read: with your permission, each of your Google contacts: their name, phone numbers, email addresses, birthday, contact groups (such as Family), and company. Our server reads them when you say yes, then checks again about every 15 minutes for contacts that were added, changed, or deleted. That is the only permission we ask for: read-only.
- What we send: nothing. We never change or delete anything in your Google account. What you edit here, including names and numbers, stays here. Reminders, private notes, categories and interaction history are never sent.
- How we use it: to show you your contacts, so you can tick the people you want in your circle; to keep everyone else in your phone book, so you can see who is outside your circle and bring them in later; and to keep the phone book in step with Google. Changes made in Google show up here. Someone already in your circle stays there when a Google contact is deleted. The groups and companies also help guess each person's category. Keyed hashes of its numbers and addresses also feed the console's drawing of which accounts have each other in their phone books, which carries no names. We use it for nothing else.
- What we store: every contact we read, as your phone book, in our database on Google Cloud in Singapore: the details above, except that of the contact groups we keep only what they say about the person, such as Family. Each entry is encrypted with AES-256-GCM before it is stored. To avoid duplicates, we also keep keyed hashes (HMAC-SHA256) of Google's id for each contact and of its first phone number, and, for the drawing above, of each of its phone numbers and email addresses. We also keep, encrypted, each contact as we last read it from Google, so that a change on Google's side can be told apart from one you made here.
- Access: Google gives our server a lasting permission (a refresh token), so it can check for changes without asking you again. It is encrypted before it is stored and used only to read your contacts. You can pause an individual contact.
- Sharing: we do not sell, share, or transfer Google user data to anyone, and we do not use it for advertising or to train AI. Only the founder can read it, and only where you ask for help with your account, where the law requires it, or to keep the service secure.
- Taking it back: open People from your account menu and, under Connected apps, choose Stop syncing. We hand the permission back to Google and delete it from our servers. Local contacts stay. Emptying contacts you brought also stops syncing and retains people in your circle. Deleting your account removes local data and hands the permission back to Google; it does not delete your Google contacts. You can also remove Relationshipss's access at myaccount.google.com/connections; once Google refuses permission, syncing pauses; nothing you have here is lost. Whatever local data you delete leaves our database at once, and its automatic backups within 7 days, when they expire.
Relationshipss's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Cookies and browser storage
We use the cookies that signing in needs, and one that remembers how you found us. Optional Analytics cookies are used only after you accept. There are no advertising cookies.
- Your Analytics choice is remembered in this browser's local storage for 180 days, separately from your account. Use Cookie preferences in any page footer to change it or withdraw permission. Closing the choice without accepting leaves Analytics off. If your browser cannot save a choice, Analytics stays off.
- Optional Analytics cookies begin with relationshipss_ga. They distinguish visits to public pages and expire after 30 days without being renewed on each visit. They are removed from this browser when you reject Analytics. Withdrawal stops future measurement; it does not remove reports already received by Google.
- Your session (“authjs.session-token”) keeps you signed in for up to 30 days, renewed while you use the app.
- Sign-in security (“authjs.csrf-token”, “authjs.callback-url”, and short-lived “pkce”, “state”, “nonce”, and passkey “challenge” cookies) protects the sign-in step and expires within minutes.
- How you found us (“came-from”) is set only when you arrive by a tagged link or from another site, and never once you are signed in. It holds the link's tag, that site's name, and the first page you opened, is kept with your account if you join, and expires after 30 days.
If you install the app, it keeps its own code and one “you're offline” page on your device so it opens quickly. It never keeps your list or any page with your people on it there. It also remembers, on that device, if you closed the reminder card.
Your browser also keeps a local copy of your signed-in list so the screen opens quickly. Changes are saved to your account on our server. Blocking browser storage does not turn off account storage. If your device can't keep the picture moving smoothly, the browser remembers that for a day, so the picture opens calm next time, or quite still if even the calm water was too much for it.
How long we keep it
- Your account and your list: until you delete your account.
- A note you keep from a talk: until you remove it, or delete your account.
- When each reminder went out and whom it named: until you delete your account.
- Your phone book: until you empty it or delete your account.
- Your shared stories and their review records: until you delete your account.
- Anything you sent us, and whether it is resolved: until you delete your account.
- The Google Contacts permission: until you choose Stop syncing, delete your account, or remove it at Google. If Google refuses it, for example because you removed it there, we delete it.
- Our database's automatic backups: 7 days, so anything you delete is gone from them within 7 days.
- The copy in your browser: until you remove people or clear your browser's data.
- Sign-in links: valid for 10 minutes.
- A device's notification address: until you turn notifications off there, or its browser tells us it no longer works.
- The locked box of people from your phone: until your screen receives it, and at most a few minutes.
- Service records: 30 days.
- Copies held by our providers, such as email delivery logs and error reports, follow their own retention.
Your data, your choices
- Download. In the account menu, choose Download your data. You get one file with your account, your list, and your phone book, with the lines, phone numbers, talk notes, and phone-book entries decrypted, along with any stories you shared and their review status, and anything you sent us. It never holds the Google Contacts permission or the hashes we use to spot duplicates.
- Delete. In the account menu, choose Delete account. This permanently deletes your account and everything in it: your list, the lines, numbers and talk notes, your phone book, your sessions, passkeys, linked sign-ins, shared stories, including any approved stories on the public page, and anything you sent us. If you were syncing Google Contacts, the permission is handed back to Google first. It cannot be undone.
- Phone book. In Everyone, under Outside your circle, choose Stop syncing to stop reading Google Contacts, or Empty the phone book to delete it. The people in your circle stay.
- Analytics. Choose Cookie preferences in the footer, then Reject analytics. You can keep using every part of the site without accepting.
- Reminders. Turn notifications on or off, and choose whether email carries a reminder (one a day at most when your phone didn't get it, one note a week, or never), from the bell at the top of the app; or stop the emails from the link at the bottom of any of them.
- Updates. Turn update emails on or off from What's new in the bell, on the updates page, or from the link at the bottom of any of them. They are off until you turn them on.
- Tell us. In the account menu, choose Report a problem or share an idea. We reply by email.
- Correct. Tap a person to change anything about them. For anything else, email us and we will fix it.
You can also ask us to access, correct, or erase your information, or raise a concern about how we handle it, by emailing hello@relationshipss.com. We aim to reply within 30 days.
Security
The line you write about a person, their phone number, any note you keep from a talk, every entry in your phone book, names included, and the Google Contacts permission are encrypted with AES-256-GCM using keys held only on our servers. A talk note is sealed to the talk it belongs to, so it cannot be read from another row. To spot the same contact kept twice, our server compares each contact's numbers with the ones already in your phone book, in memory, as it does when it shows you the phone book; nothing from that comparison is stored. What is stored for this are keyed hashes (HMAC-SHA256), not the values themselves: of phone numbers, of Google's id for each contact, and, for a contact with no number, of its name.
For the people in your circle, names and dates are stored without that extra encryption so the app can sort and show them. They are protected by our database's access controls, and every connection to the site is encrypted with HTTPS.
No system is perfectly secure. If a breach affects your information, we will tell you and explain what happened.
Children
Relationshipss is not meant for children. You must be at least 18 years old to create an account.
Changes to this policy
When this policy changes, we update this page and the date at the top. If a change affects how we use information you have already given us, we tell account holders by email before it takes effect.
Terms of service
The agreement between you and Relationshipss, in plain words: what it is, what we ask of you, and what we can and cannot promise.
Agreeing to these terms
These terms apply when you use the Relationshipss website or app, with or without an account. By using it, you agree to them and to the privacy policy above. If you do not agree, please do not use it.
Relationshipss is run by its founder from India. “We” means the person running it.
What it is
Relationshipss helps you keep in touch with the people you choose. Set how often you would like to talk, see whose next conversation is coming up, and mark when you talk.
- It shows you a name. You decide whether and how to get in touch.
- It never contacts anyone for you, and never reads your calls or messages. It reads your contacts only when you ask it to. With an account, it keeps the whole book you bring as your phone book, and, if it came from Google Contacts, keeps it in step with Google until you stop syncing. Only the people you pick join your list.
- It only reads Google Contacts. It never changes or deletes anything in your Google account; what you edit here stays here. Private notes and reminder settings stay here.
- Nothing counts as having talked until you say so.
Signing in to the app
You need to sign in or create an account to use the app. Your list is saved to your account so you can use it on every device. Public pages, including the home page and guides, can be read without signing in.
Free while we build it
Relationshipss is free. There are no plans, no payments, and nothing to cancel. If that ever changes, we will say so here first, and nothing will be charged without your clear agreement.
It is also early. Things may change, break, or be removed, and the service may be interrupted. Keep a copy of anything important: you can download your data at any time. We work to keep it running and your data safe, but we cannot promise that it will always be available, error-free, or right for a particular purpose.
Your account
- You must be at least 18 years old to create an account.
- An account is for one person. Use an email address you control.
- Keep your sign-in methods secure. You are responsible for what happens in your account, and should tell us at hello@relationshipss.com if you think someone else has access to it.
- You can stop at any time, and delete your account from the account menu.
Your list and the people in it
What you add stays yours. You let us store and process it only to run the service for you, as the privacy policy describes.
The people on your list, and in your phone book, have not agreed to anything. Add only what you came by fairly, whether you type it in or bring it from your phone, a contacts file, or Google, and use Relationshipss for your own relationships. It is not a tool for marketing, sales, or keeping watch on anyone.
What not to do
Do not use Relationshipss to:
- harass, stalk, threaten, or monitor anyone;
- send spam or bulk messages, or build lists for marketing;
- break the law, or infringe anyone's privacy or rights;
- store phone numbers you have no right to hold;
- access another person's account or data;
- probe, overload, or disrupt the service, or get around its limits;
- resell or copy the service without our written permission.
We may close an account that breaks these rules, and will tell you why when we can.
What belongs to us
The Relationshipss software, design, and name belong to us. Using the service does not give you any rights in them beyond using the service under these terms. If you send us ideas or feedback, we may use them without owing you anything.
Ending
You can stop at any time. Deleting your account removes your data as the privacy policy describes.
We may end your access if you break these terms. If we ever shut Relationshipss down, we will give account holders at least 30 days' notice by email where we can, so you have time to download your data.
Limitation of liability
To the fullest extent the law allows, we are not liable for indirect or consequential losses, lost data, or lost opportunities arising from your use of Relationshipss, and our total liability for any claim is limited to the amount you paid us in the 12 months before it arose.
Nothing in these terms limits a liability that cannot be limited by law, or any right you have as a consumer that cannot be waived.
Changes to these terms
We may update these terms as the service changes. We will update this page and the date at the top, and email account holders about any change that materially affects them before it takes effect. Continuing to use Relationshipss after a change means you accept the new terms.
Governing law
These terms are governed by the laws of India, and the courts of India have jurisdiction over any dispute. Before going to court, please write to us at hello@relationshipss.com; most things can be sorted out in a reply.
Anything unclear, or a request about your data? Write to hello@relationshipss.com.