Privacy policy

• Without an account, your list lives in your browser. We never see it.
• If you sign in, your list is stored on our server so it is safe and works on every device. The line you write about someone, and their phone number if you add it, are encrypted before they are stored.
• No analytics, no advertising, and no tracking of any kind. The only emails we send are sign-in links.
• We never read your calls or messages, and the app never contacts anyone. It reads your phone's contacts only when you ask it to, on your phone, and keeps only the people you pick.
• You can download everything, or delete your account and everything in it, whenever you like.

Relationshipss is run by its founder from India. In this policy, “we” means the person running it, and “you” means anyone who uses it. Questions go to hello@relationshipss.com.

Without an account

Your list stays in your browser's storage on this device: each person's name, how often you want to talk, when you last did, the line you wrote about them, their phone number if you added it, and any “later” you tapped. None of it is sent to us. If you clear your browser's data, it is gone, and we cannot bring it back.

With an account

• Your email address, and your name and picture if Google shares them when you sign in that way.
• Which sign-in methods are linked to your account: the provider and its id for you, never its access tokens. If you use a passkey, we store its public key only; the private key never leaves your device.
• Your list, as above. The line and the phone number are encrypted before they are stored (see Security). The name and the dates are not, so the app can sort and show them, and the app keeps the dates it works out from them, such as who is due today.
• Each time you tell us you talked: the date. Never what was said.

The first time you sign in, if your browser holds a list and your account has none, that list is uploaded once and then removed from the browser. After that, your account is the copy that counts, and the browser keeps a copy only so the screen opens quickly.

Adding people automatically

When you choose Add them automatically, you pick people on your phone: from its contacts, from a contacts file, or from Google Contacts. Only the people you pick are sent, and only their name and one phone number. On the phone they are locked with a key that only your open screen holds; our server passes the locked box along and cannot open it. The box is deleted the moment your screen receives it, or within minutes if it never does. If you choose to send everyone instead, your whole list travels the same locked way and is sorted on your own screen, by plain rules that run in your browser; only the people you keep are stored, and the rest are discarded there. Either way, your full contact list is never readable by us.

Service records

Error reports when something breaks, so we can fix it. They hold technical details, not your list.

• Your calls, messages, or call logs, and anything said in them.
• Your phone's contacts, apart from the people you choose to bring from your phone. We never ask for standing access to your contacts, and the ones you do not keep are never stored.
• Your location, your card or bank details (there is nothing to pay), or anything about you from other websites.

• To show you who you have gone quiet on, and to keep your list the same on every device when you are signed in.
• To sign you in and keep your account secure.
• To find and fix errors.

That is all. We do not sell your data, use it for advertising, or use it to train AI; nothing here uses AI at all. There are no analytics: we do not count visits, pages, or clicks, and we never ask your browser to report back. Who comes up each day is worked out by plain rules from the dates you gave, and nothing else.

We use a few services to run Relationshipss. Each gets only what its job needs.

• Vercel hosts the site. Every request passes through it, including your IP address. Our code does not store IP addresses.
• Our PostgreSQL database provider stores your account and your list, with the lines and phone numbers encrypted.
• Resend delivers sign-in links. It receives your email address and the message.
• Google, only if you sign in with Google: it tells us your email address, and usually your name and picture. If the Google sign-in prompt appears, it loads Google's own script, which may set Google's cookies under Google's privacy policy. If we ever offer another sign-in provider, the same applies to it. If you choose to bring people from Google Contacts, Google's script runs in your browser, you say yes on Google's own screen, and the names and numbers travel from Google to your browser. They do not pass through our server.
• Sentry receives error reports. Cookies, request bodies, and authorization headers are removed before a server report is sent.

Some of these providers process data outside India, for example in the United States or the European Union.

We use only the cookies that signing in needs. There are no analytics or advertising cookies.

• Your session (“authjs.session-token”) keeps you signed in for up to 30 days, renewed while you use the app.
• Sign-in security (“authjs.csrf-token”, “authjs.callback-url”, and short-lived “pkce”, “state”, “nonce”, and passkey “challenge” cookies) protects the sign-in step and expires within minutes.

Your browser also keeps your list in its local storage, as described above. It is never sent to us on its own: only signing in moves it, once, to your account. If your browser blocks storage, the screen still works for the visit and tells you, once, that nothing will be kept.

• Your account and your list: until you delete your account.
• The copy in your browser: until you remove people or clear your browser's data.
• Sign-in links: valid for 10 minutes.
• The locked box of people from your phone: until your screen receives it, and at most a few minutes.
• Copies held by our providers, such as email delivery logs and error reports, follow their own retention.

• Download. In the account menu, choose Download your data. You get one file with your account and your list, with the lines and phone numbers decrypted.
• Delete. In the account menu, choose Delete account. This permanently deletes your account and everything in it: your list, the lines and numbers, your sessions, passkeys, and linked sign-ins. It cannot be undone.
• Correct. Tap a person to change anything about them. For anything else, email us and we will fix it.

You can also ask us to access, correct, or erase your information, or raise a concern about how we handle it, by emailing hello@relationshipss.com. We aim to reply within 30 days.

The line you write about a person and their phone number are encrypted with AES-256-GCM using keys held only on our servers. To spot a duplicate number without decrypting anything, we compare keyed hashes (HMAC-SHA256) instead of the numbers themselves.

Names and dates are stored without that extra encryption so the app can sort and show them. They are protected by our database's access controls, and every connection to the site is encrypted with HTTPS.

No system is perfectly secure. If a breach affects your information, we will tell you and explain what happened.

Relationshipss is not meant for children. You must be at least 18 years old to create an account.

When this policy changes, we update this page and the date at the top. If a change affects how we use information you have already given us, we tell account holders by email before it takes effect.