Your privacy.

Boyfriend Tracker is made by the Boyfriend Tracker team. Questions or data requests: support@notgrey.store.

Last updated: 10 October 2026. This notice describes version 0.4.0 and its optional beta services. The app is preparing for beta; AI analysis and starter credits are connected; purchases are not available in this beta.

Your journal stays on your device

Your saved journal, nickname, intentions, corrections, original accounts and assessment explanations are encrypted on your device. The encryption key stays in that device’s Keychain. Signing in does not upload or synchronize the journal.

The journal is excluded from backups. Erasing the local journal removes its encrypted file and encryption key. You can export a copy before changing devices or uninstalling. Exporting requires a warning and fresh authentication when app locking is enabled. Exported text is unencrypted and is shared only to the destination you choose. A partner with access to that destination, shared cloud account or downloaded files could read it. Copies remain outside app protection.

Protecting access on your phone

Journal locking is on by default. Face ID or Touch ID is used without automatic device-passcode fallback. After authentication, you can explicitly allow the phone’s passcode or disable locking. Before creating the first journal, you can choose passcode access or continue without a lock.

Anyone who knows an allowed passcode, has enrolled biometrics or controls device settings may gain access. App locking cannot protect against coercion or every form of device access. Background previews are hidden even when locking is off, including open forms. Detected screen recording or mirroring hides the journal, but screenshots cannot be prevented and capture detection is not a guarantee.

Account sessions use device-only Keychain storage. AI requests and responses use a session without disk caching. The app disables third-party keyboard extensions and autocorrection for journal forms. These controls do not make AI-provider processing local or eliminate provider retention.

Optional accounts

If you create an account, Supabase processes your email address, authentication credentials and account identifier to authenticate you and authorize AI requests. Boyfriend Tracker uses the same Supabase authentication project as AmberCoast. Signing out of this app is separate from signing out everywhere.

Deleting the shared cloud account also affects your AmberCoast login. It is separate from erasing the local journal on your device.

Optional AI analysis

After you explicitly agree, the text you submit for analysis is sent through our Supabase server to KIE and its model provider. We do not automatically include your stored journal, nickname or profile. Your record saves immediately on this device. The model returns reported observations, interpretations and assessments that are added automatically. For a correction, only the selected assessment context and the extra text you add are sent; previous assessments remain visible locally.

Your submitted text may contain sensitive information about you or other people. Leave out names, contact details and any information unnecessary for your reflection. Do not submit anything you do not want these providers to process.

AI can be wrong. It does not independently verify events, establish another person’s intentions or determine whether someone is safe.

Retention and providers

Our analysis function does not write submitted account text or AI output to its database or application logs. It stores account-linked daily request counts to enforce usage limits, plus credit balances, grant records and request receipts. Credit records contain identifiers and counts, never journal text, and are removed with cloud account deletion. Counts older than 30 days are removed when the usage function next runs; this is not automatic expiry when there is no further use.

We request disabled response storage. KIE and its model provider may retain information under their own policies: abuse-monitoring logs may contain inputs and outputs, and other applicable service retention may apply. Read OpenAI’s API data controls, KIE’s privacy information and Supabase’s privacy information for their policies.

Infrastructure providers may process IP addresses and operational or security logs. Providers may process information outside your country. Their applicable terms and safeguards govern that processing.

Website visits and support

This website does not include advertising trackers, analytics scripts, a mailing-list form or an app sign-in form. Its hosting provider may process connection and security information to serve the pages. If you email support, we receive the information you send and use it to respond and handle your request. Please avoid including private journal content.

Your choices

• Withdraw AI sharing in the app to prevent future submissions. Withdrawing permission does not undo earlier processing.
• Use manual recording, with your own rating or an unscored note, without sending content for AI analysis.
• Export your journal, delete individual entries or erase all local journal content.
• Delete your cloud account in Account & AI access. Erase the local journal separately if you also want to remove that device’s copy. Neither action removes screenshots, exported files or copies retained by AI providers.
• Contact us for access, correction, deletion or other applicable privacy requests. Depending on where you live, you may also have rights to object, restrict processing, portability and complain to your data-protection authority.

No surveillance or advertising

The app does not collect location, read messages, access contacts or serve ads. Boyfriend Tracker does not sell journal content or use it for advertising. Boyfriend Tracker is intended for adults.

Changes to this notice

We will update this page when the app’s data handling changes. The date above identifies the latest version. For questions about this notice or help using your privacy controls, visit support.