Privacy Policy

Last updated: 28 July 2026 · Applies to ournest.love and the OurNest apps

OurNest is a shared game for two partners. Because relationship data is sensitive, this policy is written to be actually read. If anything is unclear, email [email protected].

Who operates OurNest

CodifyAI S.R.L., a company registered in Romania (CUI 51174729). Contact: [email protected]. Romanian and EU law (GDPR) apply.

What we collect

• Account: your email address and the display name you choose.
• Nest data: your creature, garden, upgrades, XP/level, and the care actions both partners perform.
• Things you write: chirps (short notes to your partner), quest notes, love-map quiz answers, monthly Relationship Weather check-ins and wishes, and — if you set them — your "day one" date and Celebration Day dates.
• Photos you choose to hang: the photo shelf holds up to 24 small images you deliberately add to your shared room. They are compressed on your device before upload, visible only to the two of you, and deletable one-by-one at any time. Please only add photos you both are comfortable with; photos of other people are your responsibility to have permission for.
• Push notifications (optional): if you turn them on, we store the anonymous delivery address your browser issues (a "push subscription") so we can nudge your device when your partner sends a chirp or gift. Turning notifications off, signing out, or deleting your account removes it. Notification content is minimal ("Your partner sent you a chirp 💌") — never your message text.
• Closeness pack answers (only if you both switch it on): if you and your partner each opt in to the optional intimacy prompts, we store what you mark as "yes", "curious" or "not for me". Under EU law (GDPR Article 9) this is special category data concerning your sex life, and we treat it accordingly: it is stored only on your separate, explicit opt-in — never bundled into signing up — and only after you confirm you are 18 or older. Your partner is only ever shown items you both marked yes or curious; anything you decline is invisible to them, and so is anything you simply have not answered, so silence can never be read as an answer. Switching the pack off deletes all of it immediately.
• Pet colour matching (nothing is collected): if you use "match your real pet" in the Creature Studio, the photo is read by your own browser to sample one colour and is never uploaded, stored or sent anywhere. We receive only the resulting colour choice, which is the same thing you could have picked by hand.
• Pet avatar and motion pack (this one does send the photo): "make an avatar of them" is the exception, and it needs its own tap. Your photo is resized to 512 pixels in your browser and sent through our image endpoint to Cloudflare's AI, which turns it into an illustration. We do not keep your original photo. If you adopt the illustration, Cloudflare's AI also derives a private set of movement poses from that illustration so the same pet can walk, blink and play. We retain only the resulting avatar and movement pack for your Nest; both are visible only to the two of you and are removed when the Nest or account owning them is deleted. The wording of both requests is fixed by us; you cannot type a prompt, and nor can anyone else.
• Purchases: if you buy Bond Energy, gifts or OurNest Plus, Stripe processes the payment. We store only the pack, amount and a Stripe reference — never card numbers.
• Technical basics: standard server logs (IP address, timestamps) kept briefly for security and abuse prevention.

We use no analytics, no advertising trackers, no third-party cookies and no fingerprinting. There is nothing to opt out of, because we never opted you in.

Special category data, and your explicit consent

Everything else in OurNest runs on the contract between us — you asked for the service, we provide it. The closeness pack is different: because it concerns your sex life, GDPR forbids processing it at all unless a narrow exception applies. The one we rely on is Article 9(2)(a), your explicit consent.

• It is separate. Agreeing to these terms does not turn it on. It has its own switch, its own explanation, and its own 18+ confirmation.
• It is withdrawable, alone, instantly. One tap in the app switches it off — no email, no waiting, no explaining, and your partner is not told why. That is Article 7(3): withdrawing must be as easy as consenting.
• Withdrawing erases it. We do not keep special category data after the consent for it is gone (Article 17(1)(b)). Switching off deletes your answers in the same action.
• It is never used to profile you, never used for advertising, never shared, and never used to train anyone's AI models.

What your partner can and cannot see

• Shared by design: the creature, garden, care activity, chirps you send, quest completions and notes, photos on the shelf, celebration dates, and the weekly contribution bars.
• Love-map quiz: your answer is revealed only after your partner has also answered that day's question.
• Relationship Weather: your monthly check-in is revealed only if both of you submitted and both chose to share. Otherwise it stays private, and the app never says who chose privacy.
• OurNest never computes or shows any score of "who loves more".

Where your data lives

Everything is hosted in the EU: application database and API on servers in Finland/Germany (Hetzner), website delivery and DNS by Cloudflare, e-mail sent from our own EU mail server. Payments are processed by Stripe. These are our only processors.

Leaving the EEA: your core account content is stored in the EU, but two processors are US-headquartered. Cloudflare delivers the site and, only when you deliberately request a pet avatar or motion pack, processes that resized pet image or derived illustration with its AI service. Stripe processes payments. Both may handle those specific data outside the EEA and are covered by the European Commission's Standard Contractual Clauses and the EU–US Data Privacy Framework. Your writing, ordinary photo-shelf images and anything in the closeness pack stay on our EU infrastructure and are never sent to Stripe or Cloudflare AI.

Security, honestly

All traffic is encrypted in transit (TLS). Data is stored on encrypted-at-rest infrastructure. Each Nest is isolated by database-level access rules ("row level security") — one couple can never query another couple's data, and consent rules (like Weather reveals) are enforced in the database, not just in the app. Like almost every service, a very small number of operators can technically access the database for maintenance and support; we do not browse user content, and access is limited to the founders. Read more: How we protect your Nest.

Retention and deletion

• Your data is kept while your account exists.
• Delete account (in Settings) removes your account and your personal data immediately; encrypted backups roll off within 30 days.
• If you leave a Nest, chirps and quest notes you already sent remain visible to your partner (like messages you have sent), but your account data goes with you. Photos are part of the shared Nest and are deleted with it; you can also delete photos you added at any time before leaving.

Your rights (GDPR)

You can access, export, correct and delete your data. Export my data and Delete account are built into Settings — no email required. For anything else (objection, restriction, portability questions, complaints) write to [email protected]. You may also complain to your local data-protection authority (in Romania: ANSPDCP).

Age

OurNest is an adults-only service: you must be 18 or older to use it. Parts of it deal with intimacy between partners, so we do not offer it to minors and we do not knowingly collect anything from them. If you believe someone under 18 has an account, write to [email protected] and we will close it and delete its data.

Changes

If this policy changes materially, we will note it here with a new date and inform you in the app before the change applies.