Privacy Policy
Three & One handles some of the most personal information there is. This policy explains exactly what we collect, why, and how it's protected. Snapedia, Inc. is the data controller.
What we collect
- Account details: your email address, first name, whether you're the husband or the wife, and your time zone.
- Your private preferences: your ratings of your spouse's dates, how excited you are about your own, your limits, items you've marked private, and your reflections after each date. This is information about your sex life and is treated as sensitive data.
- Shared couple data: your weekly schedule, upcoming dates, which partner drives, the shared item list, and notes you send each other.
- Device data: push notification subscriptions and passkey public keys. An optional PIN is stored only on your device, never on our servers.
- Purchase records: order identifiers from our payment provider. We never see or store card numbers.
- Free guide sign-ups: your email address and whether you've unsubscribed.
What we don't do
We don't sell or rent your data, we don't use advertising trackers inside the app, and we don't show your private preferences to your spouse. Your spouse sees your ratings of their dates only as guidance when planning, never as a list, and never your limits, private items or reflections.
How it's protected
Data is encrypted in transit (TLS) and at rest. Private preferences, notes and reflections are additionally encrypted with a key unique to your couple, managed by AWS Key Management Service. Access by our staff is limited to what's needed to support you.
Why we use it
To run the app (with your explicit consent for sensitive data), to send the reminders you've chosen, to process purchases, and to send the free guide and follow-ups you asked for. You can withdraw consent at any time by closing your account.
Your choices and rights
- Download all of your data from Settings at any time.
- Close your account from Settings. Your personal data is deleted immediately from our live systems, and your spouse is told only that the account was closed.
- Unsubscribe from marketing emails with one click.
- Depending on where you live, you may have additional rights to access, correct, delete or port your data, or to complain to a regulator.
Service providers
We host on Amazon Web Services in the United States. Email is sent through Amazon SES. Push notifications pass through your browser vendor's push service (Apple, Google or Mozilla) as encrypted payloads with neutral text.
Retention
We keep your data while your account is open. Sign-in links expire in 20 minutes; sessions expire after 180 days. Backups age out within 35 days.
Contact
Snapedia, Inc. · [postal address] · privacy@threeandone.life