Privacy policy
Who is responsible for your data
The Naughty Plans app is published by Alexandre Colot, Rue de l'église 5, 1121 Bremblens, Switzerland, an individual, who is the controller of your data. Contact for any question about your data: privacy@naughtyplans.com.
This policy applies the Swiss Federal Act on Data Protection (FADP) and, for people located in the European Union, the General Data Protection Regulation (GDPR).
What we collect
- Account: sign-in identifier (Sign in with Apple, possibly with the hidden email address provided by Apple, or an email address to receive a code).
- Profile: first name, date of birth (required, to check that you are at least 18), gender, city and country of residence, profile photo. Gender, city and photo are optional.
- Couple: chosen rhythm (days, who chooses, reminder time and day), time zone, places and moods added by the couple.
- Moments: dates, status (to choose, chosen, done, skipped), who chose, place, mood, time of day (morning, afternoon, evening), foreplay preference, desired position, comment and photo. This also applies to moments added afterwards, outside the planning. Only the place, mood and time of day are needed to make a choice; the rest is optional.
- Notifications: technical identifier of your device for notifications, notification preferences, app language, history of birthday reminders sent (so they are not sent twice).
We do not collect your location. The city search uses Apple Maps without accessing your location; the letters typed in the search are sent to Apple to suggest cities.
What stays on your iPhone
- Face ID: the app lock is handled by your iPhone; we have no access to it.
- Statistics: they are computed on your iPhone from the couple's moments; nothing more is sent.
- Offline copy: the latest version of the planning is kept on your iPhone so it can be viewed without a network. It is encrypted by iOS while the iPhone is locked, excluded from iCloud and computer backups, and erased when you sign out or delete your account.
- Apple Health (optional): if you turn on the option in the settings, the app adds a "sexual activity" entry in the Health app of your iPhone when a moment is marked as done. The app reads no Health data and sends nothing from Health to our servers. You can withdraw the permission at any time in the Health app.
Photos are cropped and resized on your iPhone, and their metadata (GPS location, device, date) is removed before upload.
Sensitive data
Naughty Plans is about the couple's intimate life. This information is sensitive data within the meaning of the FADP (intimate sphere) and may be data concerning sex life within the meaning of Article 9 GDPR. It is processed only with your express consent, given by creating your account and using the app, and you can withdraw it at any time by deleting your account.
Why we use it
- To provide the service: create your account and couple, plan moments, make the app's suggestions, send reminders and notifications.
- To check that the app is used by adults (18 and over).
- To keep the service secure.
Legal basis: performance of the service you request and, for sensitive data, your express consent.
No advertising, no audience measurement tools, no sale of data.
Who can see it
- Your partner: your first name, photo, profile, the couple's rhythm and the shared moments (with all their details, including comment and photo).
- Nobody else in the app: each couple can only access its own data.
- Our technical providers, only to run the service: Supabase (hosting of the database and photos, servers located in the European Union, in Frankfurt); Apple (sign-in, sending notifications, city search); GoDaddy (hosting of the naughtyplans.com website only, without any app data). Apple Inc. is certified under the Swiss-U.S. Data Privacy Framework and the EU-U.S. Data Privacy Framework, which govern these transfers to the United States.
Data is currently encrypted in transit and on the host's disks, but not yet end-to-end: the person who administers the service could technically access it. They only do so when needed to run the service or at your request. End-to-end encryption of comments, photos, positions and items added by the couple is planned; this policy will be updated then.
Notification texts stay discreet: they never mention the place, mood, comment, position or photo of a moment.
How long we keep it
- As long as your account exists.
- When you delete your account (Settings > Delete my account), your account, profile and photo are deleted, along with all of the couple's data (moments, photos, lists, rhythm, invitations). Your partner keeps their own account and is told that the planning was erased.
- Technical backups by the host: kept for 7 days at most, then erased.
Security
Exchanges are encrypted (HTTPS). Photos are stored in private spaces, accessible only to the two members of the couple through temporary links. The database access rules prevent any couple from reading another couple's data.
Your rights
You can access your data, correct it (Settings > My profile), delete it (Settings > Delete my account), ask for its portability, object to processing or ask for it to be restricted, by writing to privacy@naughtyplans.com. You can also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch) or, if you are in the European Union, the data protection authority of your country.
Minimum age
Naughty Plans is for people aged 18 and over. The date of birth is checked at sign-up.
Changes
We will let you know in the app about any significant change to this policy.