Rotation ("we," "us," "our") is a private dating journal. This policy explains what we collect, what we don't, and how we keep your moments yours. We wrote it in plain English because you deserve that.
What we collect
- Account basics: an email address (so you can log in and recover your account) and, optionally, a display name.
- Encrypted journal data: your entries, men, moments, text decodes, and drafts are stored as ciphertext — a pile of unreadable bytes — that only your device can decrypt.
- Subscription status: whether you're on a free or paid plan (via our payments provider).
- Pseudonymous analytics: anonymous events like "journal entry created" or "app opened" — never the content of entries.
- Crash logs: to fix bugs. Stripped of personal content.
What we don't collect
- The content of your journal entries in any readable form.
- The men you log — their names, photos, or info. That lives on your device only.
- Your location, contacts, or camera roll.
- Advertising identifiers. We don't run ads and we don't sell your data. Ever.
Client-side encryption, explained like a friend
When you write an entry, your phone generates a random encryption key that only lives on your device. Your entries get scrambled with that key before they ever leave your phone. The scrambled version is what we store. Without the key, it's noise. We never see the key. We can never unscramble it. Not for a subpoena, not for a hacker, not for ourselves.
The key loss warning (please read this)
Because we never see your encryption key, we cannot recover your journal if you lose it. If you delete the app without backing up, or if you lose your phone without enabling backup, your entries are gone forever. The app will walk you through backing up your key to your own iCloud or Google account. Please do that.
Third parties we use
- Firebase (Google): auth, database storage of encrypted blobs, crash reporting, and pseudonymous analytics.
- RevenueCat: handles subscriptions with Apple and Google. They see your purchase, not your journal.
- OpenRouter: routes text-decode requests to AI models. We strip identifiers before sending. Model providers do not train on your data.
Analytics
We use Firebase Analytics to count events (not content). All identifiers are pseudonymous. You can opt out in Settings → Privacy.
Your rights
You can access, export, or delete your account at any time from Settings → Account. Deletion wipes your server-side ciphertext within 30 days. Under GDPR/CCPA you have additional rights; email privacy@rotation.app.
Children
Rotation is rated 17+ and not intended for anyone under 17. We do not knowingly collect data from minors.
Changes to this policy
If we change anything meaningful, we'll notify you in the app before it takes effect.
Contact
Privacy questions: privacy@rotation.app.