Privacy Policy

1. Who we are

Maybe Today is provided by Coreleap (“we”, “us”). Coreleap is the controller of the personal data processed through the Maybe Today apps for iOS and Android, the website at maybetoday.coreleap.digital, and the Maybe Today API. If you have any question about privacy, write to hello@coreleap.digital.

2. What we collect

Account data

• Your name (or nickname) and email address.
• A password, stored only as a salted hash. If you sign in with Apple or Google, we receive a verified identifier and email from that provider instead.
• Your confirmation that you are 18 or older, the date you accepted our terms, your time zone, and app preferences (rhythm goal, reminder settings, notification previews, appearance).

Journal data you choose to enter

• Moments: when an intimate moment happened, and your private reflection on it: a rating, tags such as “tender” or “playful”, who initiated, and an optional note.
• Check-ins: your daily desire answer (not today, maybe or yes), factors you select (for example rested, stressed or on my period), and an optional note.
• Partner features (Maybe Today Plus): the connection between you and your partner, shared moments, Desire Matches, and teases (an emoji and an optional short message) you send or receive.
• Maybe Today Guide (Plus): your conversations with the AI coach and any feedback you give on replies.

Subscription data

If you subscribe to Plus, Apple or Google handles payment. We never see your card details. We receive your subscription status, product, purchase and expiry dates directly from Apple or Google and verify them on our servers. To credit the subscription to the right account, the app attaches your Maybe Today account ID to the purchase (on Google Play, only a one-way hash of it).

Device and technical data

• A push notification token and your device platform, so we can deliver notifications you've enabled.
• The dates on which you used the app (dates only, nothing about what you did), so we can count active users and see whether people come back.
• Standard server logs (IP address, request time, endpoint, error codes), used for security and debugging and kept briefly.
• If crash reporting is enabled in a release, technical crash reports (device model, OS version, app version, stack trace). These are configured to exclude your journal content and identifying details.

Anonymous usage statistics

To learn which features help, the app sends a short list of anonymous events to Maybe Today's own servers, for example that the app was installed or opened, a check-in or moment happened, the paywall was shown, or Insights was viewed with a 30-day, 90-day or 1-year range. Each event carries at most one value from a fixed list (such as the onboarding step or monthly vs annual plan), plus the platform (iOS or Android), app version and time. It never includes what you logged: no desire answers, ratings, tags, factors, notes, names or messages. Events are sent without your sign-in and stored without any identifier: no account ID, device ID, advertising ID or IP address, so they can't be linked to you or to each other. We only look at them as totals, and we use no third-party analytics service. They aren't used for advertising or tracking across apps, and they're deleted after 400 days. You can switch this off at any time in Profile, then Privacy, then Share anonymous usage stats; the app stops sending immediately.

We do not collect your contacts, photos, precise location, advertising identifiers, or browsing history.

3. Sensitive data and consent

Information about your sex life and sexual wellbeing is a special category of personal data under Article 9 of the EU and UK General Data Protection Regulation (GDPR). We process it only on the basis of your explicit consent (Article 9(2)(a)), which you give when you create your account and choose to log moments or check-ins. You can withdraw that consent at any time by deleting the data in the app or deleting your account. Withdrawal doesn't affect processing that happened before it.

For your other data, our legal bases are:

• Contract (Art. 6(1)(b)): to create your account, provide the features you use, and manage your subscription.
• Consent (Art. 6(1)(a)): for push notifications, notification previews, and Maybe Today Guide.
• Legitimate interests (Art. 6(1)(f)): to keep the service secure, prevent abuse, fix crashes, and understand anonymously which features are used, in ways that don't override your privacy. You can turn off anonymous usage statistics in the app.
• Legal obligation (Art. 6(1)(c)): where we must keep records, for example in response to a lawful request.

4. How we use data

• To run Maybe Today: store your journal, calculate your rhythm and insights, send the reminders you set, and sync across your devices.
• To connect you with a partner if you both choose to, and to show Desire Matches only when you both say yes.
• To provide Maybe Today Guide if you turn it on.
• To verify your Plus subscription.
• To send essential service emails, such as password reset codes. We don't send marketing email unless you opt in.
• To keep Maybe Today secure, investigate abuse, and fix problems.

We don't use your journal content for advertising, profiling for third parties, or any purpose unrelated to providing Maybe Today to you.

5. What your partner can see

When you connect with a partner (one Plus subscription covers you both), they can see: that a shared moment exists and when it happened; whether you've added your own reflection to it (not what it says); whether you've checked in today (not your answer); Desire Matches, which happen only when you both answer yes on the same day; teases you send them; and your first name.

Your partner never sees your check-in answers or factors, your ratings, tags, initiator choices or notes, your insights, or your Maybe Today Guide conversations. If either of you disconnects, shared history stays visible read-only to both of you until the person who created a moment deletes it or deletes their account.

6. Maybe Today Guide (AI)

Maybe Today Guide is an optional Plus feature that uses a large language model provided by Google (the Gemini API, on Google's paid tier). Before your first conversation, Maybe Today asks for your explicit consent and explains what's shared.

• What's sent: your messages, recent conversation history, and the context needed to personalise replies: your rhythm stats, check-in history and factors, and moments including your notes. Your name may be included. Your partner's private data is never sent.
• How it's used: only to generate replies to you. We use the paid tier of the Gemini API, under which Google doesn't use your prompts or replies to train or improve its models. Google may retain inputs and outputs for a limited period solely to detect abuse and meet legal obligations before deleting them, as described in the Gemini API terms.
• Your control: you can withdraw consent in Settings at any time. Maybe Today Guide then stops sending any data. You can delete individual conversations, or all of them by deleting your account.

Maybe Today Guide is a coaching tool and not a medical, psychological or therapeutic service.

7. Service providers

We use a small number of carefully chosen providers (processors) who handle data on our behalf, under contracts that restrict them to our instructions and require appropriate security.

Provider	Purpose	Data involved
Cloud hosting provider	Servers and encrypted database that run the Maybe Today API and website	All account and journal data (sensitive text encrypted at rest)
Google Firebase	Push notification delivery (Firebase Cloud Messaging) and, if you use it, Sign in with Apple or Google (Firebase Authentication)	Push token, device platform, notification payload; sign-in identifier and email
Google (Gemini API, paid tier)	Maybe Today Guide replies, only after your in-app consent	The Guide context described in section 6
Sentry (only if enabled in a release)	Crash and error reporting	Technical crash data, with personal data scrubbed
Transactional email provider	Sending password reset codes and essential service emails	Your email address and the message content
Apple and Google	App distribution and in-app purchase payments, as independent controllers under their own privacy policies	Purchase and payment data; the account identifier attached to your purchase

Notification content is discreet by default (“You have something new.”). If you turn on previews, the text of the notification, such as “Alex sent you 😏”, passes through Apple's or Google's push services.

This website loads its typefaces from Google Fonts, so your browser connects to Google's servers, which receive your IP address. The website sets no cookies and runs no analytics.

8. What we never do

• We never sell, rent or trade your personal data.
• We don't show ads, and we don't share data with advertisers or data brokers.
• We don't use advertising identifiers or tracking SDKs in the app or on this website. The only analytics is the anonymous, opt-out usage statistics described in section 2, which we collect and store ourselves and which never include your journal content.
• We don't read your notes or conversations as part of running the service. Access to production systems is limited to the few people who operate Maybe Today and is used only to keep it running, to respond to your request, or when the law requires it.

9. Security

• All traffic between the app and our servers is encrypted in transit with TLS.
• Moment notes, check-in notes and Maybe Today Guide messages are additionally encrypted at rest in our database, using keys kept separate from the data.
• Passwords are stored as salted hashes. Sign-in and reset attempts are rate limited.
• You can lock the app with Face ID, Touch ID or your device passcode, and Maybe Today hides its content in the app switcher.

No system is perfectly secure. If we become aware of a breach that affects your personal data, we'll notify you and the relevant authority as required by law.

10. Retention

• We keep your account and journal data for as long as your account exists.
• When you delete a moment, check-in or conversation, it's removed from our active database right away.
• When you delete your account, we delete your profile and everything you've logged. Moments you created in a partnership are deleted for both partners. Your partner's own reflections on shared moments are deleted with them.
• Encrypted database backups roll over and are fully purged within 30 days.
• Server logs are kept for up to 30 days. Crash reports, if enabled, are kept for up to 90 days.
• Anonymous usage statistics are deleted after 400 days.
• Subscription records may be kept longer by Apple and Google where they're needed for tax and accounting.

11. Your rights

Wherever you live, you can:

• Access and port your data: Settings, then Export my data, gives you a complete copy in a machine-readable JSON file.
• Correct your data by editing it in the app.
• Delete your data: delete individual entries in the app, or delete your account under Profile, then Delete account, or on the web at maybetoday.coreleap.digital/delete-account.
• Withdraw consent for notifications, previews or Maybe Today Guide in Settings.
• Object to or restrict certain processing, by emailing us.

If you're in the EU, EEA or UK, you also have the right to lodge a complaint with your local data protection authority, for example the Dutch Autoriteit Persoonsgegevens. If you're in California or another US state with a privacy law, you have equivalent rights to know, delete and correct, and we don't sell or share personal information as those laws define it. We'll answer requests sent to hello@coreleap.digital within 30 days, and we may need to verify that the request comes from the account holder.

12. International transfers

Some of our providers, including Google and Sentry, are based in or process data in the United States. When personal data from the EU, EEA, UK or Switzerland is transferred to a country without an adequacy decision, we rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses (and the UK addendum) together with additional safeguards such as encryption.

13. Age requirement

Maybe Today is for adults only. You must be at least 18 years old to create an account. We don't knowingly collect data from anyone under 18. If you believe a minor has created an account, contact us and we'll delete it.

14. Changes and contact

If we make a material change to this policy, we'll tell you in the app or by email before it takes effect. The effective date at the top always shows the current version.

Questions, requests or concerns: hello@coreleap.digital. Controller: Coreleap.