Out of Love — Privacy Policy

Last updated: 11 November 2026
Effective date: 11 November 2026

1. Who we are

Out of Love ("the app", "we", "us") is an iOS app that helps people recover emotionally after a breakup.

Data controller: Beray Seber (individual developer)
Contact email: outofloveapp@gmail.com

2. The short version

The app has no account. You do not give us your email or a password.
Your journal, mood history, habits, and progress are stored on your device.
If you use the AI features, some of what you write is sent off your device to our server and to a third-party AI provider so a reply can be written. This includes the actual text of your messages to Harty and the notes you write when you record reaching out to your ex. See section 5.
That content can be very personal (emotions, relationship details). We treat it as sensitive data and only use it for AI features with your consent (section 6).
We do not use advertising, tracking, or analytics tools, and we do not sell your data. (This is based on what is in the app today.)
The app is for people who are 18 or older.

3. What data the app handles

3.1 Data kept on your device

Data	What it is	Where it is stored
Journal entries	Title, text, date, whether it is a guided or "letter" entry	Local database on your device
"Reached out" (no-contact) events	Date, a risk score, and an optional note you write	Local database
Heart Check check-ins	The emotion words you pick or reject, date, a healing level	Local database
AI-written texts	Weekly Heart Check reflections and contact-pattern reflections	Local database
Habits	Habit names, emoji, weekly goals, completion dates	Local database
Progress	Points (LP), level, streak, daily actions	Local database
Mood history	Your daily mood choices and scores	App settings storage on your device
Breakup date and first launch date	Dates you enter or the app records	App settings storage
First name	The name you give in onboarding. It is used inside the app (for example on the subscription screen).	App settings storage
Today's chat with Harty	The messages of the current day's conversation	App settings storage
AI insight cache	Recently generated insight texts, so they are not re-requested	App settings storage
Preferences	Notification times and on/off choices, haptics, tutorial flags, badges, meditation counters	App settings storage
Your AI choice	Whether you agreed to the AI features and when	App settings storage

We do not add our own encryption to this data. It is protected by the protections of your iPhone (passcode, device encryption). If you back up your device, this data may be included in your backup according to your own iOS backup settings.

3.2 Data sent off your device

Only when you use the AI features and have agreed to them (see section 6) (Harty chat, personalized insights, Heart Check analysis, contact-pattern analysis; these are part of Out of Love Plus), the app sends a request to our server (a Cloudflare Worker at harty-proxy.berayseber.workers.dev), which forwards it to OpenAI (Chat Completions API, model gpt-4o-mini) and returns the reply to the app. The request contains:

AI feature	What is sent
Harty chat	The last up to 20 messages of the conversation exactly as written; the number of days since your breakup; your level; your no-contact streak; the current hour of the day
Contact-pattern analysis	How many times you recorded reaching out in the last 30 days, the most common weekday, the average gap, how long ago the last contact was, and the notes you wrote for those events
Heart Check weekly analysis	The weekday and the emotion words you selected or rejected for the week (and the week before, if available), the day of your recovery, your healing level
Personalized insights (commentary, recovery story, blind spots, habit suggestions)	Days since breakup; mood scores and averages; emotion words from recent check-ins; habit names and emoji; descriptions of patterns found in your data

The request also carries a shared app key that identifies the app (not you). The app does not send your name, email, or an account or device ID with these requests, and no user identifier is sent to OpenAI. Your IP address is necessarily visible to the servers that handle the request (see section 8). Our proxy does not store the content of your messages. It records only a token count for each request (prompt tokens and completion tokens), kept for up to 7 days. We do not record message text, IP addresses, or any user identifier.

Not sent: your journal text, your breakup date as a date (only the day count), your first name.

When nothing is sent: until you tap "I Agree" on the in-app AI consent screen, and again after you turn the AI switch off in Settings, the app sends nothing to our server or OpenAI. In that case the personalized insights show built-in text instead of AI-written text. Harty's opening greeting also needs this consent, because it is generated by the AI (it uses your day count, level, streak, and the hour of the day).

Crisis words in chat: if a message you type to Harty contains certain crisis-related words or phrases (the app checks a fixed list in English and Turkish on your device), the app shows a support screen instead. That message is not sent to our server or OpenAI and is not saved in the chat. This check applies to the Harty chat only, not to notes you write elsewhere.

3.3 Purchases

If you subscribe, the purchase is handled by Apple. We use RevenueCat to manage subscriptions. RevenueCat creates an anonymous app user ID and receives purchase information from Apple so it can tell the app whether Out of Love Plus is active. We do not receive your payment card details. For what RevenueCat collects, see its privacy policy at https://www.revenuecat.com/privacy.

3.4 What the app does not do

Based on the app's code, Out of Love does not: require an account; use your location, camera, microphone, photos, contacts, or health data; use advertising or tracking identifiers; use analytics or crash-reporting services; or show ads.

3.5 Notifications

If you allow notifications, the app schedules local reminders on your device (for example daily, streak, bedtime, habit, weekly summary, Heart Check, and follow-up reminders). They are not sent from a server and do not contain your personal content. You can turn them off in the app's Settings or in iOS Settings.

3.6 This website and the waitlist

This applies to the Out of Love website, not to the app. If you join the waitlist on the website, we collect the email address you type and the time you signed up. We use it only to send you a message when the app is available on the App Store, and we do not use it for advertising or share it with anyone else. The list is kept in a Google Sheet that only we can open (Google acts as our infrastructure provider). Our website does not use cookies, analytics, or advertising trackers. To be removed from the waitlist, email outofloveapp@gmail.com and we will delete your address. We keep it until the app has launched and we have sent that one message, or until you ask us to remove it.

4. Why we use your data

Purpose	Data	Legal basis (GDPR)
Run the app and its features on your device	Section 3.1 data	Contract (Art. 6(1)(b))
Write AI replies and insights	Section 3.2 data	Your explicit consent (Art. 6(1)(a) and 9(2)(a))
Manage your subscription and check access to Plus	Purchase data via Apple and RevenueCat	Contract (Art. 6(1)(b))
Keep the AI service working and secure (for example, limiting abuse)	Technical request data	Legitimate interests (Art. 6(1)(f))
Legal obligations (tax, accounting, disputes)	Purchase-related records	Legal obligation / legitimate interests

5. Third parties that receive data

Recipient	Role	What they receive
Cloudflare (hosts our proxy server)	Infrastructure provider	The AI request content passes through it. Cloudflare may process standard technical data (such as IP addresses) as infrastructure provider. In our own logs we record only a token count per request, kept for up to 7 days.
OpenAI (Chat Completions API, model gpt-4o-mini)	AI processing; acts as our data processor	The AI request content in section 3.2. Data may be processed outside Türkiye and the EEA, including in the United States; we have not configured a regional data residency setting. According to OpenAI, API inputs and outputs may be kept up to 30 days to provide the service and detect abuse, and longer if legally required; we have not requested zero data retention. According to OpenAI, API data is not used to train its models unless the customer opts in; we have not opted in.
Apple	App Store, payments	Purchase and subscription data under Apple's own policies
RevenueCat, Inc.	Subscription management	Anonymous app user ID and purchase data

We do not sell your data and do not share it for advertising.

Whether AI requests are stored: Our proxy does not store message content. OpenAI may keep API inputs and outputs for up to 30 days, as described above. We signed OpenAI's Data Processing Agreement on 8 October 2026, and OpenAI acts as our data processor. (OpenAI statements were checked on 8 October 2026 against OpenAI's enterprise privacy page and API data-controls documentation.)

6. Sensitive data and your consent

What you write in the app (feelings, a breakup, thoughts about an ex) can reveal things about your emotional and mental well-being. Data about health, including mental health, is treated as special-category (sensitive) personal data under the GDPR and the Turkish KVKK. We handle it as follows:

The data you keep on your device (journal, mood, check-ins) stays there unless you choose to use an AI feature that uses it.
Before the first use of any AI feature, the app shows a consent screen. It names OpenAI as the provider, lists what is sent (your chat messages, your reflection notes, emotion words, and mood and activity summaries), links to this policy, and has two buttons: I Agree and Not Now. We send sensitive content to our server and OpenAI only if you tap I Agree. The app stores your choice and the date on your device.
You can say no. If you tap Not Now, the AI features stay off. The main non-AI features of the app (journal, mood, habits, meditation, progress, no-contact tools) do not need this consent.
You can withdraw consent at any time with the AI Features (OpenAI) switch in Settings. Turning it off stops all sending right away. Turning it back on shows the consent screen again. Withdrawing does not affect processing done before, and it does not delete what OpenAI may already hold (see below).
Please do not write other people's sensitive data (names, health details, addresses) in your messages to Harty.
Data may be processed outside Türkiye and the EEA, including in the United States (see section 5). We ask for your explicit consent before any AI feature sends data to OpenAI.

7. How long we keep data and how to delete it

On your device. Your data stays until you delete it:

Delete the app and iOS removes the app's data from your device. A copy may remain in your own device backups until you delete them.
Delete All My Data (Settings) permanently deletes everything the app stores on your device: journal entries, mood history, Heart Check check-ins and the saved AI reflections, no-contact events and notes, habits and their history, Harty chat and its daily counter, progress, badges, your name, your breakup date, your AI consent choice, your reminder and other preferences, and caches. It also cancels all scheduled reminders and returns the app to the start. It does not change your subscription (that is managed by Apple), does not change the iOS notification permission, does not remove copies in your own device backups, and does not delete data that OpenAI may already hold.
The app only shows the current day's Harty chat. Older chat data is overwritten when you next chat, or removed by Delete All My Data.

On our server and with the AI provider. The app sends requests but, as far as the app code shows, does not tell our server who you are, so we cannot look up "your" requests. Our proxy keeps no message content and records only a token count per request for up to 7 days. OpenAI may keep API inputs and outputs up to 30 days (longer if legally required), according to OpenAI. Because no user identifier is sent, we cannot find or delete a particular person's requests at OpenAI.

Subscription records are kept by Apple and RevenueCat under their policies. You can ask us to delete subscription-related data by emailing us at outofloveapp@gmail.com, and we will process the request through RevenueCat where possible.

8. Data security

The app stores data in your device's local storage and relies on iOS protections (device passcode and encryption). The app does not add its own encryption layer.
Requests to our server are made over HTTPS.
No system is perfectly secure. If you share a device or have no passcode, others may see what you wrote in the app.
Your IP address is visible to Cloudflare, OpenAI, Apple, and RevenueCat when your device connects to them. Our own proxy logs do not record IP addresses.

9. Children's privacy

Out of Love is not intended for anyone under 18. We do not knowingly collect personal data from people under 18. If you believe a person under 18 has used the app, contact us at outofloveapp@gmail.com and we will help delete any data we hold. Because the app has no account, we may not be able to identify a user without their help.

10. Your rights

10.1 General

Depending on where you live, you may have the right to know what data we process, get a copy, correct it, delete it, limit or object to processing, withdraw consent, and complain to a regulator. Most of your data is only on your device, so you can view and change much of it in the app, and delete all of it with Delete All My Data in Settings.

10.2 GDPR (EEA, UK)

Controller: see section 1.
Legal bases: see section 4.
Rights: access, rectification, erasure, restriction, portability, objection, and withdrawal of consent (Arts. 15–21 and 7(3)).
How to apply: email outofloveapp@gmail.com. We will respond within one month.
Complaints: you can complain to your local data protection authority.

10.3 Turkish KVKK (Law No. 6698)

Data controller: see section 1.
Legal basis: explicit consent (Art. 5/1 and Art. 6 for special-category data) for the AI features; contract and legal obligation for the rest.
Rights (Art. 11): learn whether your data is processed; ask for information; learn the purpose; learn the third parties to whom data is transferred in Türkiye or abroad; ask for correction; ask for deletion or destruction; ask for notice of these actions to third parties; object to outcomes against you from automated analysis; ask for compensation for damages from unlawful processing.
How to apply: send your application with your identity details by email to outofloveapp@gmail.com, following the Communiqué on Procedures and Principles of Applications to the Data Controller. We reply within 30 days.
Complaint: to the Personal Data Protection Board (KVKK) if you are not satisfied.

11. US users and consumer health data

The app handles information about your emotional state. Some US state laws, for example Washington's My Health My Data Act, treat this kind of information as consumer health data.

We use it only to run the features you use.
We send it to OpenAI only after your explicit consent to the AI features. We do not sell it and do not share it for advertising.
You can withdraw your consent in Settings, delete all data in the app with Delete All My Data, or email us at outofloveapp@gmail.com with a request.
The app does not track you across other apps or websites, so it does not respond to Do Not Track signals.

12. Harty and safety

Harty is an AI companion. It is not a human and not a therapist, and it is for adults 18 or older.
If a message in the Harty chat matches the app's crisis word list (fixed English and Turkish phrases, checked on your device), the app shows a crisis screen with the text "You're not alone. Real support is available for you." The message is not sent to OpenAI and is not saved. The screen has a Find Support Near You button that opens a helpline directory (findahelpline.com) in your browser, and an "I'm okay, go back" button that returns you to the chat and clears what you typed. This check applies to the Harty chat only.
In an emergency, call your local emergency services. In the US you can call or text 988 (Suicide & Crisis Lifeline).
If Harty's replies seem harmful, you can stop using the AI features with the AI Features (OpenAI) switch in Settings and contact us by email at outofloveapp@gmail.com.

13. Changes to this policy

We may update this policy. We will tell you by updating the "Last updated" date on this page and, for important changes, by a notice in the app. If a change affects how we use sensitive data, we will ask for your consent again where the law requires it.

14. Contact

outofloveapp@gmail.com

If you need our postal address for a legal request, email us and we will provide it.