Privacy Policy

Last updated: July 4, 2026

Ömrüm ("the App", "we", "us") is a private couples app operated by CHA9CHA9NI ("the Operator"). This policy explains what data the App handles, why, where it lives, who can see it, and how you delete it. We wrote it to be read, not skimmed: Ömrüm is built for exactly two people, and privacy is the product.

The short version. No email, no phone number, no password, no ads, no trackers, no selling or renting data, ever. Everything you share inside Ömrüm is visible to exactly one person: the partner you chose to link with. Deleting your account erases your data and the couple's shared content from our servers.

1. Who is responsible for your data

The data controller is CHA9CHA9NI, contactable at support@omrum.space. For any privacy request (access, deletion, complaint, question), this address is the single door; we respond to verified requests within 30 days.

2. What we collect, and why

Ömrüm is deliberately account-less: there is no sign-up. Identity is a random secret generated on your device. We never ask for your email, phone number or real name.

Data	What it is	Why we process it
Device identity	A random secret created on your phone (we store only a cryptographic hash of it), a generated user ID, your device platform (iOS/Android)	To recognise your device as "you" without an account, and to restore your access with your recovery key
Profile	An optional display name, an optional profile photo, an optional mood	So your partner sees who they're linked with; entirely optional and editable any time
Shared content	Photos, notes, drawings, stickers, reactions and "moments" you create in the App	To deliver them to your linked partner; this is the entire purpose of the App
Live location	Your device coordinates, approximate accuracy and battery level, only while you have location sharing switched ON	To show your partner your distance and place on the shared map; OFF by default, opt-in per session, can be turned off at any moment, and switching it off removes your live position from your partner's view
Presence	Whether the App is open, an approximate "last seen" timestamp, which screen you're on	To power the "together right now" presence your partner sees
Push token	A notification token issued by your device's operating system / push service	To deliver notifications (nudges, notes, drawings) when the App is closed
Couple data	The link between two user IDs, your pairing code, an optional "together since" date	To make the two halves of the couple, and only those two, share one space

We do not collect your contacts, browsing history or advertising identifiers, and the App does not build advertising profiles or contain third-party advertising SDKs. Our marketing website may use privacy-friendly, aggregate visit statistics that do not identify you personally.

3. Legal bases (GDPR)

Performance of a contract (Art. 6(1)(b)): storing and delivering the content you ask us to deliver to your partner.
Consent (Art. 6(1)(a)): live location sharing, push notifications and access to your photo library. Each is requested separately inside the App and each can be withdrawn at any time (in-App toggles or your device's system settings).
Legitimate interest (Art. 6(1)(f)): keeping the service secure, preventing abuse, and maintaining minimal operational logs.

4. Who can see your data

Your partner. The one person you linked with sees what you share: your profile, moments, drawings, mood, presence, and your live location only while you share it. Nobody else has an in-App view of your content. There is no public feed, no discovery, no search.

Service providers. To run Ömrüm we rely on a small number of established third-party providers that process data on our behalf, strictly to operate the service, under agreements that require them to protect it. They fall into these categories:

Cloud hosting for our application servers;
Database, realtime and media storage for the content you share;
Push-notification delivery to reach your device when the App is closed.

We choose providers that offer EU-based infrastructure for stored content where reasonably practicable. We do not sell, rent, trade or otherwise commercialise your personal data, and we disclose data to authorities only where legally required by a valid, binding request, and then only the minimum necessary.

5. Where your data lives and how it's protected

Traffic between the App and our servers is encrypted in transit (HTTPS/TLS).
Your device secret is kept in your phone's secure storage, and our servers store only a one-way hash of it rather than the secret itself.
Access to the service is authenticated, and each couple's content is scoped so that one couple's space is separated from another's.
Media you share (photos, drawings) is kept in access-controlled storage.
We aim to keep stored content on EU-based infrastructure where reasonably practicable.

No online service can promise perfect security, but we take reasonable technical and organisational measures to protect your data.

6. Your recovery key

Your recovery key is the only way back into your account. It is generated and kept on your device. If you accept the in-App offer to save a backup card, that image is written to your own photo library (an "Ömrüm" album), which we cannot read, and which follows your own device backup (e.g. iCloud). Anyone holding the key can open the account, so treat the card like a house key. We cannot recover a lost key for you, precisely because we never have it.

7. Retention and deletion

While you use the App: your content is kept so it can be shown to you and your partner.
Unlinking: breaking the couple regenerates both pairing codes and closes the shared space for both halves.
Deleting your account (Profile → Delete account) removes your account and the couple's shared content — such as your profile, device record, push tokens, any location data, the couple link, and shared moments, drawings and nudges — from our active systems. Your partner is notified that the link ended and receives a fresh pairing code. Deletion is designed to be permanent, and we cannot restore content once it is deleted.
Backups and logs: residual copies may persist for a limited period in routine backups and operational logs before being overwritten in the ordinary course.

8. Your rights

Depending on where you live (including under the GDPR and similar laws such as the CCPA/CPRA), you have the right to:

Access the personal data we hold about you, and receive a copy;
Rectify inaccurate data (your profile is editable directly in the App);
Delete your data (the in-App "Delete account" removes your data from our active systems);
Withdraw consent at any time (location, notifications, photos: in-App or system settings);
Portability: receive your data in a machine-readable format;
Object or restrict certain processing;
Complain to your local data protection authority.

Exercise any of these by email at support@omrum.space. Because Ömrüm holds no email or name for you, include your in-App user code or write from the device concerned so we can verify the request.

9. Children

Ömrüm is not directed at children. You must be at least 13 years old (or the higher minimum age your country sets for consenting to data processing, e.g. 16 in parts of the EU) to use the App. If we learn that data of a child below the applicable age was collected, we will delete it.

10. International users

We aim to store your content on EU-based infrastructure where reasonably practicable. If you use the App from elsewhere, your data is processed under this policy. Where a provider (such as push-notification delivery) operates internationally, we rely on that provider's standard contractual safeguards for any transfer.

11. Changes to this policy

If we change this policy in a meaningful way, we will update the date at the top and signal the change inside the App before it takes effect. Continued use after the effective date means the updated policy applies. The current version always lives at this address.

12. Contact

CHA9CHA9NI · Ömrüm
support@omrum.space