Privacy policy
Who is responsible for your data
The Naughty Plans app is published by Alexandre Colot, Rue de l'église 5, 1121 Bremblens, Switzerland, an individual, who is the controller of your data. Contact for any question about your data: privacy@naughtyplans.com.
This policy applies the Swiss Federal Act on Data Protection (FADP) and, for people located in the European Union, the General Data Protection Regulation (GDPR).
What we collect
- Account: sign-in identifier (Sign in with Apple, possibly with the hidden email address provided by Apple, or an email address to receive a code).
- Profile: first name, date of birth (required, to check that you are at least 18), gender, city and country of residence, profile photo. Gender, city and photo are optional.
- Couple: chosen rhythm (days, who chooses, reminder time and day), time zone, places and moods added by the couple.
- Moments: dates, status (to choose, chosen, done, skipped), who chose, place, mood, time of day (morning, afternoon, evening), foreplay preference, desired position, comment and photo. This also applies to moments added afterwards, outside the planning. Only the place, mood and time of day are needed to make a choice; the rest is optional.
- Notifications: technical identifier of your device for notifications, notification preferences, app language, history of birthday reminders sent (so they are not sent twice).
We do not collect your location. The city search uses Apple Maps without accessing your location; the letters typed in the search are sent to Apple to suggest cities.
What stays on your iPhone
- Face ID: the app lock is handled by your iPhone; we have no access to it.
- Statistics: they are computed on your iPhone from the couple's moments; nothing more is sent.
- Offline copy: the latest version of the planning is kept on your iPhone so it can be viewed without a network. It is encrypted by iOS while the iPhone is locked, excluded from iCloud and computer backups, and erased when you sign out or delete your account.
- Apple Health (optional): if you turn on the option in the settings, the app adds a "sexual activity" entry in the Health app of your iPhone when a moment is marked as done. The app reads no Health data and sends nothing from Health to our servers. You can withdraw the permission at any time in the Health app.
Photos are cropped and resized on your iPhone, and their metadata (GPS location, device, date) is removed before upload.
Personal coach (optional)
The personal coach is an optional feature that each partner turns on separately, after accepting an information screen. To answer you, the app sends, at the time of each exchange and encrypted in transit, what the coach needs: your message, your recent exchanges with it, its memory sheet and a summary of the couple's data (rhythm, recent moments with place, mood, time of day, foreplay preference, desired position and comment). This information is processed by Anthropic, which provides the artificial intelligence model. Anthropic does not use it to train its models and only keeps it for the limited period set out in its terms (security, abuse prevention), then deletes it. This is the only exception to end-to-end encryption, and it only applies if you turn on the coach.
- Your conversations with the coach and its memory sheet are stored encrypted with a key that belongs to you alone: your partner cannot read them, and neither can we.
- To improve the days when the app chooses for you, the coach deduces preferences as weights on the places, moods and times of day offered by the app. These weights are readable by our server to make the draw, but never by your partner; only the combined result of both is used.
- The coach may write to you at most once a day. Our server only picks the reason (for example a moment marked as done); the message is written when you open the app. You can turn these check-ins off.
- You can erase the conversation and the coach's memory, or turn the coach off, at any time.
- The coach is an artificial intelligence: its answers may be inaccurate and do not replace the advice of a health professional.
Sensitive data
Naughty Plans is about the couple's intimate life. This information is sensitive data within the meaning of the FADP (intimate sphere) and may be data concerning sex life within the meaning of Article 9 GDPR. It is processed only with your express consent, given by creating your account and using the app, and you can withdraw it at any time by deleting your account.
Why we use it
- To provide the service: create your account and couple, plan moments, make the app's suggestions, send reminders and notifications.
- To check that the app is used by adults (18 and over).
- To keep the service secure.
Legal basis: performance of the service you request and, for sensitive data, your express consent.
No advertising, no audience measurement tools, no sale of data.
Who can see it
- Your partner: your first name, photo, profile, the couple's rhythm and the shared moments (with all their details, including comment and photo).
- Nobody else in the app: each couple can only access its own data.
- Our technical providers, only to run the service: Supabase (hosting of the database and photos, servers located in the European Union, in Frankfurt); Apple (sign-in, sending notifications, city search); GoDaddy (hosting of the naughtyplans.com website only, without any app data); Anthropic (provider of the personal coach's artificial intelligence model, United States), only if you turn on the coach. Apple Inc. is certified under the Swiss-U.S. Data Privacy Framework and the EU-U.S. Data Privacy Framework, which govern these transfers to the United States.
End-to-end encryption: comments, desired positions, moment photos and the places and moods added by the couple are encrypted on your iPhones before being sent, with a key that only your two iPhones hold. Neither the publisher nor the host can read them. The key is kept in each partner's iCloud Keychain, itself encrypted by Apple; if both partners lose it, this content becomes permanently unreadable and we cannot recover it. Other data (dates, statuses, who chooses, time of day, foreplay preference, profile) remains readable by the server to run the service; it is encrypted in transit and on the host's disks.
Notification texts stay discreet: they never mention the place, mood, comment, position or photo of a moment.
How long we keep it
- As long as your account exists.
- When you delete your account (Settings > Delete my account), your account, profile and photo are deleted, along with all of the couple's data (moments, photos, lists, rhythm, invitations). Your partner keeps their own account and is told that the planning was erased.
- Technical backups by the host: kept for 7 days at most, then erased.
Security
Exchanges are encrypted (HTTPS). Photos are stored in private spaces, accessible only to the two members of the couple through temporary links. The database access rules prevent any couple from reading another couple's data.
Your rights
You can access your data, correct it (Settings > My profile), delete it (Settings > Delete my account), ask for its portability, object to processing or ask for it to be restricted, by writing to privacy@naughtyplans.com. You can also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch) or, if you are in the European Union, the data protection authority of your country.
Minimum age
Naughty Plans is for people aged 18 and over. The date of birth is checked at sign-up.
Changes
We will let you know in the app about any significant change to this policy.