Privacy Policy
Straightforward, in plain language. We collect the minimum we need to make Carluci work for you and your partner — and nothing more.
1. Who we are
Carluci is an iOS app operated by Carles Pascuet ("we", "us", "our"), as a personal project. We can be reached at projectand1969@gmail.com.
Carluci is a private space for two paired users (a couple) to share memories, prompts, lists, and letters. Nothing in Carluci is public.
2. What we collect
Information you provide when you sign in
- If you sign in with Apple: a unique Apple identifier, and optionally your name and a relay email if you choose to share them.
- If you sign in with Google: your Google identifier, your email address, and your display name.
- If you sign in with email and password: your email address and a password (stored only as a salted hash by Firebase Authentication — we never see your plain-text password).
Information you provide while using the app
- Couple profile: the names you and your partner choose to display, the date you started dating, the date you met, and optionally the name of the place where you met.
- Pairing code: a 6-character code generated to link your partner's device to yours.
- Your shared content: bucket list items, adventures you log (a title, optional notes, a date, and the coordinates and name of a place selected via Apple Maps search), daily question answers, love letters, games you play together, and "thinking of you" taps.
- Approximate location and time zone: if you grant location permission, Carluci stores a coarse, rounded approximation of your location (to roughly the nearest kilometre) and your device's time zone. These are used only to show you and your partner how far apart you are and each other's local time. Location is optional — the rest of the app works without it.
Information we do not collect
- No precise or continuous location tracking. Location is captured only as a coarse, rounded snapshot when the app is open, and only if you grant permission.
- No contacts, microphone, calendar, or browsing data.
- No advertising identifiers. No analytics SDKs. No third-party trackers.
3. Why we collect it
- To sign you in and recognize you across launches and devices.
- To sync your shared content between your phone and your partner's phone in near real time.
- To enforce that only you and your paired partner can see your data.
The legal basis under the EU General Data Protection Regulation (GDPR) is the performance of the contract you accept by using the app (Article 6(1)(b) GDPR), and your consent for any optional data you choose to add.
4. Where it's stored
Carluci uses Google Firebase (Cloud Firestore + Firebase Authentication) as its backend. Your data is stored in the eur3 multi-region (European Union). Firebase is operated by Google LLC and Google Ireland Limited.
Google may process your data in other locations as part of its global infrastructure. Google maintains Standard Contractual Clauses and other safeguards required by GDPR for any international transfers.
5. Who can see it
- You and your paired partner can see your shared couple data. This is enforced by Firestore Security Rules: only user IDs listed in your couple's member list are allowed to read or write your data.
- Carles Pascuet (operator) has administrative access to the Firebase project for the purpose of maintaining the service, fixing bugs, and responding to legal requests. He does not browse user content for any other purpose.
- Google processes the data on our behalf as a sub-processor (see section 6).
- We do not sell, rent, or share your data with advertisers or any other third party.
6. Third-party services
Carluci uses the following services. Each has its own privacy policy.
- Google Firebase (Authentication, Firestore, Hosting) — policy
- Sign in with Apple — policy
- Google Sign-In — policy
- Apple MapKit, used in-app to search for places when you add an Adventure. Search queries are sent to Apple. Apple's terms apply.
7. How long we keep it
We keep your account and content for as long as your account exists. When you delete your account (see section 9), your data is removed from our database within a reasonable period. Backups maintained by Firebase may retain your data for a short additional window before being overwritten.
8. Your rights
If you are in the European Economic Area, the United Kingdom, or another region with comparable privacy laws, you have the right to:
- Access a copy of the personal data we hold about you.
- Rectify data that is inaccurate or incomplete — most of this is editable directly inside the app.
- Erase your data, by deleting your account in the app (see section 9).
- Restrict or object to certain processing.
- Port your data to another service.
- Withdraw consent at any time, where consent is the legal basis.
- Lodge a complaint with your local data protection authority (for example, the Spanish AEPD).
To exercise any of these rights, email projectand1969@gmail.com. We aim to respond within 30 days.
9. Deleting your account
If you can't reach the in-app option for any reason, email projectand1969@gmail.com from the address on file and we will delete the account manually.
10. Children
Carluci is not directed at children under 13 (or under 16 in jurisdictions where that is the applicable age of digital consent, such as parts of the EU). We do not knowingly collect data from anyone under that age. If you believe a child has provided us with personal data, please contact us and we will delete it.
11. Security
Your data is encrypted in transit (HTTPS / TLS) and at rest by Google's infrastructure. Firestore Security Rules restrict access to authenticated members of each couple. Passwords (for email sign-in) are stored only as salted cryptographic hashes managed by Firebase Authentication.
No internet service can be 100% secure, but we follow industry best practices appropriate to the scale of this app.
12. Changes to this policy
If we make material changes, we will update the date above and, where reasonably possible, notify you in the app or by email before the changes take effect.
13. Contact
Questions, requests, or concerns? Email projectand1969@gmail.com.