Favil ("we", "our", or "us") is a mobile app made for two people in a relationship. It gives you a private space to grow closer through a private native chat (voice notes, photos, reactions), one daily question, mood check-ins, Our Space shared memories and a couple calendar, couple games, love languages, a shared bucket list, and optional cycle tracking. It is free to use, with an optional premium tier billed per relationship.
We built Favil to be private by design. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights and choices you have. By using Favil, you agree to the practices described here.
01 Information We Collect
Account information
- Display name you choose
- Email address (or the identifier from Sign in with Apple / Google, if you use those)
- Password — hashed and salted via Supabase Auth, never stored in plain text (not applicable if you sign in with Apple or Google)
- Gender (optional; used only to tailor cycle-tracking features)
- Profile avatar (an emoji or a photo you upload)
Relationship & content data
- Couple pairing information (you link with your partner via an invite code)
- Relationship start date, if you provide it
- Chat messages, voice notes, photos, and reactions
- Daily question answers, mood check-ins, and partner mood guesses
- Our Space memories — photos, titles, descriptions, dates — and couple calendar events
- Game answers, love-language results, and shared bucket-list items
- Couple statistics such as streaks and points
Health data (optional)
- Cycle / period dates — collected only if you opt in to cycle tracking
Technical data
- Push-notification token (Firebase Cloud Messaging)
- Device platform (iOS or Android) and app version
- Anonymous product-usage signals — only if you leave analytics on (see How We Use Your Information)
02 How We Use Your Information
We use your information only to provide and improve the Favil experience:
- Core features: delivering your chat, daily question, mood check-ins, memories, calendar, games, and other features, and syncing them between you and your partner.
- Notifications: sending push notifications — for example a new message, a partner's answer, or a streak reminder — via Firebase Cloud Messaging.
- Partner syncing: sharing shared couple data with your linked partner (more on this in Sharing With Your Partner).
- Subscriptions: processing and validating optional premium purchases via RevenueCat and the App Store / Google Play.
- Product improvement: understanding which features are used and how often — only if you leave analytics on. You can opt out anytime in Settings.
We never sell your data, and we never use your content to train AI models. Your relationship, mood, cycle, and intimate content are used only to power the features you use — never for advertising, ad targeting, data brokerage, or AI training.
Our analytics never see your private content. When analytics is on, we collect only anonymous usage signals (which features are opened and how often). We never send your written answers, chat messages, moods, cycle data, or any intimate content to analytics.
03 Storage & Security
Your data is stored on Supabase, which runs on Amazon Web Services (AWS) infrastructure in Mumbai, India (ap-south-1). We protect it with several layers of security:
- Per-couple AES-256 encryption: sensitive couple content is encrypted with a key unique to your relationship, so one couple's data is cryptographically separated from every other couple's.
- Encryption in transit: all data transfers use TLS / HTTPS.
- Row-Level Security (RLS): database policies enforce that you can only ever read or write your own couple's data.
- Password security: passwords are hashed via Supabase Auth and never stored in plain text.
- No exposed secrets: API keys, tokens, and credentials are stored securely and are never shipped client-side.
How the encryption works — honestly. Favil is couple-private and AES-256 encrypted. This is an escrow model: the service can technically hold the encryption key so we can operate features, recover access, and support you. That means Favil is private by design, but it is not a system where the provider can never access the data. We say this plainly so you can make an informed choice.
A note on the few things that stay in plain text by design: daily-question prompts and cycle / period dates are not encrypted with the per-couple key, because the app needs them to deliver prompts and predictions. Everything else sensitive is encrypted as described above.
International transfers: Favil is operated from India and your data is stored in India. If you are in the EU or UK, your personal data is transferred to and processed in India under the Standard Contractual Clauses (SCCs) in Supabase's Data Processing Agreement, alongside appropriate technical and organisational safeguards.
04 Third-Party Services
We rely on a small set of trusted providers to run Favil. Each has its own privacy policy:
- Supabase — database, authentication, and real-time sync, protected by Row-Level Security. Privacy Policy
- RevenueCat — manages optional premium subscriptions and validates purchases. Privacy Policy
- Firebase Cloud Messaging — push notifications only. We do not use Firebase Analytics or Firestore. Privacy Policy
- PostHog — privacy-respecting product analytics, hosted in the EU. It is opt-out (you can turn it off in Settings) and limited to anonymous feature-usage signals. It never receives your free-text content, moods, cycle data, or intimate content. Privacy Policy
- Sign in with Apple — optional sign-in. Apple shares only a stable identifier and, if you allow it, your name and email. Privacy Policy
- Sign in with Google — optional sign-in. Google shares basic profile details such as your name and email. Privacy Policy
- Google Drive — optional, user-initiated encrypted backup (see Optional Google Drive Backup). Privacy Policy
05 Optional Google Drive Backup
If you choose to connect Google Drive, you can create an encrypted backup of your couple's encryption key (and, where offered, memory photos) into your own Google account. This is entirely optional and only happens when you explicitly start it. When you do:
- Favil works within a dedicated Favil folder in your own Google Drive.
- It only accesses the specific folder it creates — a limited scope.
- It never reads, modifies, or deletes any other files in your Drive.
You can disconnect Google Drive at any time from the app settings. Anything already backed up stays in your Google Drive, under your control, until you remove it.
07 Your Rights
You stay in control of your data. You can:
- Access: view all of your data within the app.
- Correct: update your profile information at any time.
- Export: download your couple's data (memories, answers, mood entries) as an archive, where this option is available in Settings.
- Delete: delete your account and associated data from the app settings.
- Withdraw consent: turn analytics off, or revoke optional integrations such as Google Drive, at any time.
If you are in a region with data-protection laws such as the EU/UK GDPR or India's DPDP Act, you also have the rights described in Compliance below. To exercise any right you can use the in-app controls or contact us at the address below.
08 Data Retention & Deletion
- Active accounts: your data is retained for as long as your account is active.
- Account deletion: deleting your account removes the couple's data associated with it. We permanently delete your personal data within 30 days of the request.
- Notifications: in-app notifications are automatically removed after 30 days.
- Push tokens: removed when you sign out or delete your account.
Account deletion is irreversible. A limited amount of anonymized, aggregated data (which can no longer identify you) may be retained for product-improvement and security purposes.
09 Children's Privacy
Favil is intended for people aged 13 and older and is rated accordingly on the App Store and Google Play. We do not knowingly collect personal data from anyone under 13. If we learn that we have collected data from a child under 13, we will take steps to delete it promptly. Where local law sets a higher age of digital consent, you must meet that age (or have a parent or guardian's consent) to use Favil.
10 Compliance
GDPR (EU/EEA & UK users): we process your data based on your consent (given when you create an account and use optional features) and our legitimate interest in providing the app. You can withdraw consent at any time by turning off the relevant feature or deleting your account, and you have rights of access, rectification, erasure, restriction, portability, and objection.
Information Technology Act, 2000 (India): we comply with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. Sensitive personal data — such as passwords and health data including cycle tracking — is collected with your explicit consent and protected with reasonable security practices.
Digital Personal Data Protection Act, 2023 (India): we process personal data only for the purposes you consent to, provide access and erasure rights, and apply appropriate security safeguards.
11 Changes to This Policy
We may update this Privacy Policy from time to time. When we make significant changes, we will notify you in the app or by email. The "Last updated" date at the top always reflects the most recent revision.
12 Contact Us
If you have any questions, concerns, or requests about your privacy or this policy, we'd love to hear from you.
By using Favil, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your information as described here.