Privacy Policy
Coupla · in effect from 5 November 2026
English · Türkçe
Coupla keeps private shared spaces: one just for you, one for you and your partner, one for you and one other person, or one for a group of any size. This policy describes what the app stores, where, who can see it, and how to have it removed. The rules for using Coupla are in the terms of use.
Coupla is made by Yunus Sina Gülşen, Istanbul, Türkiye, who decides how your data is used. Write to coupla@sinaware.com.
What we store
About you
| Display name | Taken from your sign-in provider the first time, and editable afterwards. |
|---|---|
| Profile picture | Optional. Either one you upload, or the one your sign-in provider offers. |
| Date of birth | Optional. If you add it, the calendar of every space you are in puts your birthday on it and says how old you are turning. You can remove it at any time, and your birthday leaves those calendars with it. |
| Time zone and language | So dates and reminders are right for you. |
| The terms you accepted, and this policy's version | Which version of the terms of use you accepted, and of this policy you were shown, and when — you pressed Agree after you first signed in, or Accept when the terms changed. |
| What you agreed to | When you pressed Agree for a Couple you are in, and for what you tell a space about yourself. |
We do not store your email address. Signing in with Google, Google sends it to us and we discard it — there is no field for it anywhere in our storage. We keep only a keyed one-way hash of the email address, which cannot be turned back into it, so that if you ask us by email to delete your account we can find it. Signing in with Apple, Coupla is never given your email address.
Your account identifier is stored hashed. We never keep the user id your sign-in provider gives us. We keep a one-way SHA-256 hash of it, alongside the name of the provider, and that is what recognises you when you sign in again.
What you put in the app
Links, titles, notes and tags you save; which collections you filed them in; calendar entries and reminders you create; what you tell a space about yourself; and a record of what happened in each space, so the people in it can see what changed.
Pictures, videos and documents you share reach the others in the space through our server, which keeps them only until they have them. Each phone keeps its own copy. Coupla is not a backup.
A picture chosen for something is kept with it. A picture chosen for an item, a collection or a space, and the preview pictures of the links you save, are kept until they are removed, or what they belong to is deleted.
About other people
Pictures, notes and plans can be about people who are not in the space. Add them only as they would be happy with. Somebody who finds themselves in a space they are not in can write to us, and we will look at it.
Your phone
A push token, the platform, and the app version, for every phone you are signed in on — so its screens update by themselves when something changes in one of your spaces. Notifications are optional: turned off, nothing is shown, and you can mute any one space.
When you use an invite code
Your network address, and your account, are counted for an hour, so that nobody can guess codes; the count is deleted within a day.
When you report something
What you report, by its identifiers — the space, and the item or the person — never the thing itself; your words; your name, if you give it; and who sent it. We read it to act on it, and delete it a year after it arrives.
What we do about a report, or an account
Our record of what we did — an item removed, somebody warned, an account suspended, lifted or closed — with when, the rule of the terms, and our words. We keep it a year, then delete it.
Usage, only if you agree
The first time you sign in, Coupla asks whether you will share usage counts. If you say yes, Google Analytics for Firebase counts which screens are opened and how often things are done — a save, a share, an event added — with your phone's model, its system, the app's version and your country. It never sees anything you save, write or share, it is tied to a random id for this installation of the app — Google is never told who you are — and no advertising id is collected. Say no, and nothing is counted; you can change your mind at any time on the Profile tab, under Share usage counts.
How the app performs, only if you agree
With the same yes, Firebase Performance Monitoring measures how long the app takes to start, how long its requests to Coupla's servers take, how long its own work takes — saving a share, making a picture smaller, keeping your phone's calendar — and how smoothly its screens draw, with your phone's model, its system, the app's version and your country. Requests are recorded by their route, with no ids in them; it never sees anything you save, write or share, nor the sites you save links from. It is tied to the same random id, and Google is never told who you are. Say no, and nothing is measured.
If the app fails
A crash report, sent to Firebase Crashlytics so we can find what broke and fix it: where in Coupla's code it failed and what kind of failure it was, the app's last steps before it from a fixed list (such as “sync: 2 owed”), your phone's model, its system version and the app's version. It is tied to a random id for this installation of the app — Google is never told who you are — and it carries nothing you have put in the app: no names, links, notes or files. Deleting your account gives the installation a new id, so nothing reported afterwards is joined to what was reported before.
Why we use it
| Your account, your spaces, what you save and share, the calendar and notifications | To do what you asked Coupla to do. |
|---|---|
| Your date of birth and your picture | Your choice to add them; take them away at any time. |
| That you and somebody are a Couple, and what you tell a space about yourself | Your explicit consent, asked for in the app before either is kept: either can say who you are with or something about your health. Take it back at any time — make the Couple a Duo or leave it, and remove what you told the space. |
| Usage counts and how the app performs | Your consent, given when asked; take it back at any time on the Profile tab. |
| Crash reports | Our interest in an app that works. |
| Counting invite tries, our logs, and the copies we keep to recover from a mistake | Keeping Coupla safe, and able to recover from a mistake. |
| Reports, and our record of what we did about them | Keeping Coupla safe, as the terms promise, and the law. |
| Asking your phone's app store whether you are 18 or older | The law of the place you are in, where it asks for it. |
| Answering a court or an authority | The law. |
No decision about you is made by a program alone.
Who can see it
The people in each space, and nobody else. That is the whole point of a shared space: everything you file, save, plan or share in it is visible to everybody in it. A space just for you is visible to you alone; in a group, it is everybody the group has invited. Your name and your picture, and your date of birth with your age if you add it, are visible to the people in every space you are in. Nothing is public, nothing is shared with Coupla users outside the space, and there is no feed, discovery or search outside your own spaces. We look at what is in a space only to act on a report, or when the law makes us.
Who can remove somebody from a space. In a space for two, either of you can remove the other; in a group, whoever made it can — or, once they have left, whoever has been in it longest. Somebody removed is told they are no longer in the space, not who removed them; what they added stays, under their name, unless whoever removed them chooses to delete it; and they can come back only with a new code. An invitation is a code that works once, for 72 hours, and anybody in the space can cancel it.
We do not sell your data and we do not share it with advertisers. There is no advertising in Coupla, and no advertising id is collected. We do not respond to Do Not Track signals; nothing in Coupla tracks you across other sites or apps.
Where it is, and who handles it
What you save, and your account, are stored by Microsoft Azure in the Netherlands. Every request to our servers passes through Cloudflare, which opens and forwards it wherever the request enters its network. Google (Firebase) carries notifications — with who did what, and its name — and keeps crash reports, and the usage counts and performance measurements you agreed to, in the United States and elsewhere; to an iPhone, Apple carries notifications too. Each handles it on our behalf and is bound to protect it as this policy says. So your data is held in the Netherlands and the United States, passes through Cloudflare wherever your request enters its network, and is reached from Türkiye, where we run Coupla. Everything travels over HTTPS.
Other services involved
| Google Sign-In, or Sign in with Apple | To prove who you are. Whichever you use tells us your provider id, and may tell us your name and your email address; we keep a hash of the id and your name, and discard the email. |
|---|---|
| Cloudflare | Every request to our servers passes through it: it opens each one, so it handles your network address, what you send and what we answer, on its way to us. On our web pages, not in the app, Cloudflare Web Analytics also counts visits: a small script from Cloudflare reports the page you opened, the page you came from, your browser and country, and how fast the page loaded — with no cookies, and nothing that follows you to other sites. |
| Firebase Cloud Messaging | To tell your phone something changed, and to show notifications when you have them on. A notification's words — who did something, and the names of the space and the thing — pass through it, and it holds one for a phone that is off for up to four weeks. |
| Apple Push Notification service | The same, to an iPhone: Firebase hands the notification to Apple, which delivers it. |
| Firebase Crashlytics | To receive the crash reports described above. Google keeps each one for 90 days. |
| Google Analytics for Firebase | Only if you agree when asked, to count usage as described above. Off until you say yes, and turned off again on the Profile tab. |
| Firebase Performance Monitoring | Only with the same yes, to measure how the app performs, as described above. |
| The websites you save | When you save a link, our server fetches that page to read its title and preview image, so the item looks like something rather than a bare address. Some sites will not answer a server, and for those the app on your phone opens the page itself, over your own connection — so that site sees a request from your phone, as it would if you opened the link. We do not send either anything about you. |
| YouTube, for our website's video | The video on our website is played by YouTube only when you press it: until then the page asks nothing of YouTube. Once pressed, YouTube, in its privacy-enhanced mode, receives your network address and what your browser sends it, under Google's own privacy policy. |
| Your phone's calendar | If you turn on calendar sync, Coupla creates a calendar on your device and writes your plans into it. That copy lives on your phone, not with us. |
How long we keep it
Until you delete it — or until nobody in a space has opened Coupla for three months. Then the space is deleted, with everything in it, after a notification to everybody in it a week before and again the day before. Opening Coupla keeps it.
If you leave a space, you lose it at once, and what you told it about yourself is deleted. What you added stays in it, under your name, for the people who are still there — who may invite others to see it. A space is deleted, with everything in it, only by the last person in it.
A report you send is kept a year after it arrives, and so is our record of what we did about a report or an account; then each is deleted.
Deleting your account
In the app: the Profile tab, then Delete account at the bottom. It says what will happen to each of your spaces before you confirm, and it is done at once.
It takes you out of every space you are in. A space you are the only person in is deleted with everything in it. In a space other people are still in, you choose: what you added goes with your account — the things only you saved, the events you added and the lines about them — or it stays with them. Whatever stays reads a former member, not your name. Your name, picture, date of birth and what you told a space about yourself are erased, your devices are forgotten, and so is the link from your Google or Apple account to you — signing in with it again makes a new, empty account.
What you delete can stay up to a month in the copies we keep to recover from a mistake, and in our logs; then it is gone. A report you sent, and our record of anything we did about a report or your account, stay for the year we keep them.
Without the app: see how to delete your account.
Your rights
You can ask us for a copy of what we hold about you, in a form you can take elsewhere; to correct it; to stop or limit something we do with it; or to delete it (above). Write from the address you signed in with: we reply to that address, and act once you confirm from it, within a month — for a complex request two more, and we tell you so within the first — and within thirty days in Türkiye, always. What rests on your consent you can take back at any time: the usage counts, with the switch on the Profile tab; that you and somebody are a Couple, by leaving it or changing its type; and what you told a space about yourself, by removing it.
If you are unhappy with how we handle your data, tell us first, at the same address: we acknowledge a complaint within thirty days, and answer it.
You can also complain to the data protection authority where you live: in Türkiye the Kişisel Verileri Koruma Kurumu, in the United Kingdom the Information Commissioner's Office, in the European Union your country's.
Children
Coupla is for people 18 and over, and we do not knowingly keep anything of anybody younger. If you think somebody under 18 is using Coupla, write to us and we will delete their account.
Where a law asks for it, the app asks your phone's app store whether you are 18 or older when you sign in. It uses the answer there and then, and keeps nothing of it.
Changes
If this policy changes materially, the app will say so before you carry on using it.
Where you live
Everything above holds wherever you are. Some places ask for more, and this is it.
Türkiye
The data controller (veri sorumlusu) is Yunus Sina Gülşen, Istanbul, Türkiye, coupla@sinaware.com. Your personal data is collected electronically, through the app, for the purposes and for as long as this page says: what you keep in Coupla, to make and carry out our agreement with you; that you and somebody are a Couple, and what you tell a space about yourself — which can be about your health, a special category of data — only with your explicit consent; counting invite tries, our logs and crash reports, for our legitimate interest in keeping Coupla safe and working; reports, and our record of what we did about them, for the same interest and as the law asks; answering a court or an authority, as the law asks; usage counts, only with your explicit consent. The question whether you are 18 or older keeps nothing of your answer. It goes abroad as Where it is, and who handles it says. Under Article 11 of the Personal Data Protection Law (KVKK) you can learn whether your data is processed, ask for information about it, learn why it is processed and whether it is used for that, learn whom it is passed to at home or abroad, have it corrected, deleted or destroyed and those it was passed to told, object to a result reached by automated processing alone, and claim compensation for harm. Write from the address you signed in with; we answer within thirty days. You can complain to the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu).
Brazil
Our contact channel for your data, under the LGPD, is coupla@sinaware.com; Yunus Sina Gülşen answers it. Your data is kept by Microsoft Azure in the Netherlands, in the European Union, which the ANPD recognises as protecting it adequately. Notifications pass through Google in the United States and other countries, and every request through Cloudflare, because Coupla cannot work without them (LGPD, Article 33, IX); crash reports go to Google too, and usage counts only if you agree. That you are a Couple, and what you tell a space about yourself, are kept only with your specific consent, asked for in the app. You can complain to the National Data Protection Authority (ANPD).
Switzerland
The countries your data goes to: the Netherlands, where Microsoft Azure keeps it, which Swiss law counts as adequate; the United States and other countries, through Google — notifications, crash reports and, if you agree, usage counts — and wherever your request enters Cloudflare's network, which every request passes through, each certified under the Swiss-U.S. Data Privacy Framework, which Swiss law counts as adequate; through Apple — notifications to an iPhone, and signing in with Apple — under standard contractual clauses; and Türkiye, from where we run Coupla, as carrying out our agreement with you requires (Article 17 of the Federal Act on Data Protection). Each provider handles it under the data processing terms it has with us. You can complain to the Federal Data Protection and Information Commissioner (FDPIC).
Canada, and Québec
The person accountable for your personal information — in Québec, the person in charge of protecting it — is Yunus Sina Gülşen, coupla@sinaware.com. Your information is kept in the Netherlands and passes through the United States, where the authorities of those countries may be able to reach it. You can complain to the Office of the Privacy Commissioner of Canada, or in Québec to the Commission d'accès à l'information.
Japan
Your data is kept in the Netherlands, where the EU's General Data Protection Regulation applies; passes through the United States, which has no comprehensive federal privacy law — state laws and our providers' terms apply there; and is reached from Türkiye, where its law on personal data (KVKK) applies. How we keep it safe: every request travels over HTTPS through Cloudflare, to servers that refuse anything that did not come that way; our storage is never public, and a file is reached only by a short-lived signed address; your sign-in id and email are kept only as one-way hashes; signing out of every phone, or deleting your account, ends every session; and Coupla's security was reviewed in October 2026. Ask us at coupla@sinaware.com for what we hold about you.
South Korea
Our privacy officer is Yunus Sina Gülşen, coupla@sinaware.com. Your data goes abroad to: Microsoft (the Netherlands — everything you keep in Coupla, to run it, until you delete it); Google (the United States and other countries — notifications, crash reports, and usage counts if you agree, to deliver notifications, find what breaks and count usage, for as long as this page says); Cloudflare (wherever your request enters its network — every request, to carry it, not kept); Apple (the United States — notifications to an iPhone, and signing in with Apple, as Apple keeps them). You can refuse by not using Coupla, or delete your account at any time. You can complain to the Personal Information Protection Commission.
Singapore
Our data protection officer is Yunus Sina Gülşen, coupla@sinaware.com. You can complain to the Personal Data Protection Commission.
South Africa
Our information officer is Yunus Sina Gülşen, coupla@sinaware.com. You can complain to the Information Regulator.
Washington State: consumer health data
What you tell a space about yourself can be health data — an allergy, say. Our Consumer Health Data Privacy Policy is a page of its own: what health data Coupla can hold, why, who sees it, and how to see it, take back your consent or have it deleted.
The United States
We do not sell or share your personal information.