This Privacy Policy governs the manner in which the Cuddl mobile application ("App," "we," "our," or "us") collects, uses, maintains, and discloses information collected from users. We are committed to protecting your privacy and ensuring that your personal relationship data remains secure.
1. Information We Collect
To provide our services, we collect limited personal and non-personal information, strictly limited to what is necessary for the App to function.
- Account Information: We collect your email address, chosen display name, and selected gender when you register via Google Sign-In.
- Media Uploads: If you elect to upload a profile picture (avatar), we securely store this image file.
- Relationship Data: We collect the moods you log, status updates, check-in responses, hand-drawn doodles, and encrypted custom text messages explicitly submitted by you.
- Device Identifiers: We collect Firebase Cloud Messaging (FCM) tokens to deliver push notifications regarding your partner's activity.
- Media Playback Metadata: If explicitly enabled by you, we collect the track title and artist name of the audio currently playing on your device.
- Analytics & Advertising ID: We use Google Analytics for Firebase to understand app usage and improve stability. As part of this, the app may collect your device's Advertising ID. We strictly use this data for internal analytics and app performance monitoring, not for serving personalized advertisements.
- Subscription & Billing Metadata (if you purchase Cuddl Plus): We use RevenueCat and Google Play Billing to process subscriptions. We may process your app user ID, purchase status (active/expired/canceled), product identifier, transaction timestamps, renewal/expiration timestamps, and entitlement status to grant or revoke premium features accurately.
2. How We Use Collected Information
Your information is used exclusively to facilitate the secure connection between you and your paired partner. Specifically, we utilize your data to:
- Authenticate your identity and maintain active sessions.
- Securely route and display your relationship data to your designated partner.
- Deliver real-time push notifications regarding partner updates.
- Maintain, optimize, and troubleshoot App functionality.
Prominent Disclosure regarding Notification Listener Services
To enable the "Music Detection" feature, Cuddl requests Android's BIND_NOTIFICATION_LISTENER_SERVICE permission.
Scope of Access: We strictly process active media playback notifications to extract the current song title and artist.
Data Usage: This metadata is synchronized exclusively with your paired partner.
Prohibited Actions: We do not read, process, store, or transmit personal text messages, emails, or any notifications originating from other applications. This data is never monetized, sold, or utilized for advertising purposes.
3. Data Sharing and Disclosure
We absolutely do not sell, trade, or rent your personal identification information to third parties. We may share your information only in the following restricted capacities:
- With Your Partner: By design, all relationship data (moods, pictures, text, music metadata) is shared exclusively with the single user account you have actively paired with.
- Service Providers: We utilize Google Firebase (Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, and Google Analytics) as our backend infrastructure. These providers act as data processors under strict confidentiality agreements.
- Subscription Provider: We use RevenueCat and Google Play Billing for subscription validation and entitlement management.
- Legal Requirements: We will disclose information if required to comply with applicable laws, legal processes, or to report severe violations such as child exploitation to the National Center for Missing & Exploited Children (NCMEC).
4. Payments and Subscriptions
- Billing Processor: In-app subscriptions are processed through Google Play Billing and managed via your Google Play account.
- Subscription Infrastructure: We use RevenueCat to validate purchases and synchronize entitlement state securely.
- No Raw Card Storage: We do not collect or store your full card number, CVV, UPI PIN, or banking credentials on Cuddl servers.
- Webhook Sync: Subscription lifecycle events (including renewal, expiration, refund, and revocation) may be sent to our backend through secure server-to-server webhooks to keep premium access accurate.
- Manage/Cancellation: You can manage or cancel your subscription from Google Play subscription settings.
5. Data Security
We adopt appropriate data collection, storage, processing practices, and security measures to protect against unauthorized access, alteration, disclosure, or destruction of your personal information. Data transmission between the App and our servers occurs over secure, encrypted TLS communication channels. Furthermore, strict database rules ensure data is only accessible by authenticated and explicitly paired partners.
6. Data Retention and Deletion
We adhere to strict data minimization and retention principles:
- Automated Purging: Routine relationship data, including shared moods, custom messages, and doodles, is automatically and irreversibly deleted from our active servers after 30 days.
- Account Deletion: You retain full rights to delete your account entirely. By navigating to the in-app settings (Settings > Privacy & Data > Delete Account), you can trigger an immediate deletion of your authentication credentials, profile data, and all shared historical data. This action is permanent and cannot be reversed.
7. Exclusions
Please note that Cuddl does not track or collect geographical location (GPS) data, does not request access to your device's primary contacts or address book, and does not serve personalized advertisements. While we use Google Analytics (which may collect the anonymous Advertising ID) to monitor app performance, we do not monetize or sell your behavior to ad networks.
8. Contact Information
If you have any questions about this Privacy Policy, the practices of this App, or your dealings with us, please contact our Data Protection Officer at: raahul.yxz@gmail.com