Privacy Policy

1. Who we are

Ourtide is provided by ReelUse Technologies Limited, a private company limited by shares incorporated in the Federal Republic of Nigeria (RC 9782918), registered office: 1, Olaniyan Close, Off Mobolaji Bank Anthony Way, Ikeja, Lagos State, Nigeria, 100271. We are the “data controller” of your personal data under the Nigeria Data Protection Act 2023 (the “NDP Act”) and the Nigeria Data Protection Commission’s General Application and Implementation Directive 2025 (“GAID 2025”). Where we offer Ourtide to people in the UK or the European Union, we also follow the UK GDPR and the EU GDPR for them.

For anything about privacy, email privacy@ourtide.app.

2. What we collect

We only collect what you enter into Ourtide and the technical data needed to run it securely.

Your account

• Your email address and display name.
• Your password, stored only as a one-way hash (bcrypt). We never store or see your actual password.
• When you created your account, when you confirmed you are 18 or over, whether and when you verified your email, whether you have finished the welcome walkthrough, and roughly when you last opened the app.
• Your setting for sharing your side of entries with your partner.
• Your country, to show local emergency and support numbers. You choose it when you create your account and can change it in settings. It is linked to your account and is not used for tracking or advertising.
• If you set an app-lock PIN on the web, a one-way hash of that PIN.

Sessions and devices

• For each device you sign in on: the device name and platform the app reports, when the session started, when it was last used and when it expires. The token that keeps you signed in is stored only as a hash.
• If you turn on notifications: a push token for your device (from Apple), or on the web a push subscription from your browser.
• Short-lived, single-use links for verifying your email (valid 24 hours) and resetting your password (valid 1 hour), stored only as hashes.

Your couple

• The couple you share with your partner: its invite code, an optional name, your time zone (detected automatically, and changeable in settings), an optional weekly goal, notification and away-mode preferences, and which awards you have earned.
• If you invite your partner by email, we use their email address to send the invitation. We do not store it.

Intimacy log

• Each entry: the date and time, who logged it, whether it was an intimate moment or an affection moment (and which kind, such as a cuddle or a date), whether protection was used and which kind, and any details you add, such as duration, location, who initiated, positions, activities, foreplay, tags and comments.
• Each partner’s own side of an entry: your rating, whether you finished, your moods, your sense of connection, the afterglow (closeness afterwards), and your answer to “did you want this?”. That last answer is always private to you, whatever your sharing setting.
• Your private notes on entries.
• Custom positions and options you create, and your shared wishlist of things to try.

Daily check-ins and gestures

• If you use daily check-ins: for each day, your mood, energy, desire, how connected you feel and an optional note. Check-ins are private to you: your partner never sees them, they are never used in anything your partner can see, and they are never put in a notification. They are encrypted.
• Gestures you send your partner: appreciations and rain checks. We store the message, who sent it and to whom, when, an optional link to an entry, and when it was seen. Your partner (the recipient) can read it. The message is encrypted.
• Which days you used the app (for example, logged a moment, checked in or sent a gesture), so we can show streaks and challenges. This records the kind of action and the day, not what you wrote.

Cycle and pregnancy

• If you turn on cycle tracking: which of you is tracked, your goal (awareness, conceiving, or both), optional average cycle and period lengths, and daily logs of flow, symptoms, moods, energy, sleep, sex drive, cervical fluid and notes.
• If you start the pregnancy journey: which of you is pregnant, the due date, the first day of the last period if you enter it, and whether the pregnancy is ongoing or has ended.

Security data

• Your IP address, used at the moment of a request to limit repeated attempts at signing up, signing in, resetting a password, joining a couple and refreshing a session. Our rate-limit records store only a keyed one-way hash of the IP address or email, never the raw value, and are deleted once the time window passes (at most an hour). A daily limit on sending gestures is kept the same way, keyed by a one-way hash of your account, and deleted after a day.
• Like any web service, our hosting provider keeps standard technical logs (such as IP address, the address requested, device and browser type, and error messages) for a limited period, to keep the service running and secure.

What we do not collect

We do not collect your precise location, contacts, photos or advertising identifier. We do not use advertising, analytics or tracking tools, and we do not track you across other apps or websites. Our public website sets no cookies; the private web app uses a single cookie to keep you signed in.

If you email us, we keep that conversation so we can help you.

3. Health and sexual data

Your intimacy log, the sides and notes on it, your cycle logs and your pregnancy details are information about your sex life and health. Nigerian law treats this as sensitive personal data (and UK and EU law as “special category data”), which needs extra protection.

We process it only on the basis of your explicit consent, which you give with a separate checkbox when you create your account (we record when you gave it), and only to provide the features you use. You can withdraw consent at any time by deleting the information in the app (entries, cycle days, wishlist items) or by deleting your account. Withdrawing consent does not affect processing that happened before.

We never use this data for advertising, never sell it, and never use it to make decisions about you beyond showing you your own insights and estimates.

4. Apple Health

On iPhone, if you choose, Ourtide can import your sexual activity and period and spotting records from Apple Health. It asks for permission first, and it reads from Health only when you tap import; you then pick which records to bring in.

• The records you pick are stored on our servers as ordinary Ourtide data: sexual activity becomes moments (the date and time, and whether protection was used), and period records become cycle days (the flow). They are protected like everything else, as described below.
• Imported moments are shared with your partner like any moment you log. Imported cycle days follow your cycle sharing, like any cycle day.
• So the same record is never imported twice, we keep Apple Health’s identifier for each record you imported (an opaque code, with nothing about the record itself) until you delete your account.
• Data from Apple Health is never used for advertising, marketing or data mining, never sold, and never shared with third parties, apart from the service providers that host Ourtide for us (section 8). The operator does not access it, as with all your content.
• Ourtide never writes anything to Apple Health.
• Deleting an imported moment or cycle day deletes that imported data. Deleting your account deletes all of it. You can also turn off Ourtide’s access in the Health app at any time.

5. How we use it, and why

• To provide Ourtide (performing our contract with you): your account, your shared couple space, syncing between your devices and your partner’s, insights, awards, cycle estimates, the pregnancy journey, and emails for verifying your address, resetting your password and inviting your partner.
• Health and sexual data: on the basis of your explicit consent, as described above.
• To keep the service secure and working (our legitimate interests): rate limiting, preventing abuse, fixing errors and keeping backups so data is not lost.
• To meet legal obligations, where the law requires it.

Insights, awards and cycle estimates are calculated automatically, only to show them to you and your partner. We make no automated decisions that have legal or similarly significant effects on you.

6. What your partner can see

Your couple has at most two members, and only someone with your invite code can join. Nobody else sees your space. Your partner can see:

• Your display name. Not your email address.
• Every entry in your shared log and its shared details (date and time, who logged it, protection, duration, location, who initiated, positions, activities, foreplay, tags and comments).
• Your side of an entry (your rating, whether you finished, your moods, connection and afterglow) only if you turn on sharing in settings. It is off by default. When it is off, any overall rating your partner sees is worked out without your answers, so they cannot be worked back out.
• The shared wishlist, custom positions and options, and couple settings.
• If cycle tracking is on, the tracked partner’s cycle logs, including their notes, and the estimates made from them. Both of you can view and add cycle days.
• The pregnancy journey, if one of you starts it.
• Gestures (appreciations and rain checks) you send them.

Your partner can never see your private notes on entries, your answer to “did you want this?”, or your daily check-ins, whatever your sharing setting. None of them are used in anything your partner sees or included in your partner’s data export.

We do not share your data with anyone else, apart from the service providers below who help us run Ourtide. We may disclose information if the law requires us to, for example in response to a valid court order, and where we are allowed to, we will tell you.

7. How we protect it

• In transit: every connection to Ourtide uses HTTPS (TLS). Our database is reachable only on Google Cloud’s private network, and connections to it require encryption.
• At rest: our database and its backups are hosted on Google Cloud, which encrypts stored data at rest.
• An extra layer for sensitive fields: before they reach the database, we encrypt them with AES-256-GCM using a key kept in Google Secret Manager, readable only by the Ourtide service. This covers entry details (location, who initiated, positions, activities, foreplay, duration, contraception, tags and comments, and the kind of affection moment), each partner’s side, private notes, daily check-ins, gesture messages, cycle-log notes, wishlist items, and custom positions and options. A copy of the database on its own is unreadable without that key.
• A few structured values are stored without that extra layer so the app can calculate insights, reminders and estimates: each entry’s date and time, whether it is an intimate or affection moment, protection status and overall rating; the date of each check-in; the kind of each gesture and when it was sent and seen; the structured parts of cycle logs (flow, symptoms, moods, energy, sleep, sex drive, cervical fluid); and pregnancy dates. Your email address and display name are stored the same way. These are still covered by Google Cloud’s encryption at rest and our access controls.
• When you log a new entry from the app, the server keeps a temporary copy of its reply for up to about a day, so that a retried request on a poor connection does not create a duplicate. This copy is encrypted in the same way as your entries, and it is deleted automatically.
• Our access: the operator can technically decrypt data, because the service has to in order to run, but does not access user content. Our support tools show account information only (such as email address, display name, sign-up and last-seen dates, and how many entries an account has), never what is in them, and every support action is recorded in an audit log.
• Your account: passwords are hashed with bcrypt, repeated sign-in attempts are rate-limited, and changing your password signs out all your other devices.

No system is perfectly secure. If a breach affected your personal data, we would tell you and the relevant authorities as the law requires.

8. Service providers

We use a small number of providers to run Ourtide. They process data only on our instructions and only to provide their service to us.

• Google Cloud (Google): hosting, database, backups, key storage and scheduled jobs, in the europe-west1 region (Belgium).
• Resend: sending account emails (email verification, password reset and partner invitations). It receives the recipient’s email address and the email itself. We use its EU sending region.
• Apple: Apple Push Notification service delivers notifications to your iPhone using your device’s push token. Apple also distributes the app through the App Store, under Apple’s own privacy policy.
• Your browser’s push service (for example Apple, Google or Mozilla), only if you use Ourtide on the web and turn on notifications there.
• Cloudflare hosts our domain’s DNS records. Your traffic to Ourtide does not pass through Cloudflare.

Your data is stored in Google Cloud’s data centre in Belgium (European Union), so it is transferred outside Nigeria and, for some providers, to other countries such as the United States. We only make these transfers with the protections the Nigeria Data Protection Act 2023 requires, relying on the data protection laws of the destination and on the safeguards in each provider’s data processing terms (such as the EU Standard Contractual Clauses and, for UK users, the UK International Data Transfer Addendum).

We do not sell your data, and we do not share it with advertisers or data brokers.

9. Notifications

Notifications pass through Apple’s (or your browser’s) servers and can appear on a lock screen, so they are content-free by design. Every notification uses fixed, generic wording such as “Something new in Ourtide”. They never include names, entry details, ratings, counts, cycle details or pregnancy weeks. You can turn notifications off, or pause them with away mode, at any time.

10. How long we keep it

• While your account exists, we keep your data so the app works. Anything you delete in the app (an entry, a cycle day, a wishlist item) is removed from our live database straight away.
• When you delete your account, we delete your account, your sessions and push tokens, your side of every entry and all your private notes.
  • If you are the last member of your couple, the whole couple space is deleted with it: all entries, cycle logs, pregnancy details, the wishlist and custom options.
  • If your partner is still a member, the shared space stays with them. Entries you logged stay in the shared log (now shown as logged by your partner), along with the wishlist and custom options. Your own cycle logs, period history and any pregnancy recorded for you are deleted with your account, and cycle tracking is turned off if it was tracking your cycle. If you want shared entries removed too, delete them in the app first or email privacy@ourtide.app and we will remove them.
• Backups: our database is backed up daily. Backups are kept for up to 14 days, and point-in-time recovery logs for 7 days. Deleted data disappears from them as they expire, so within about 14 days.
• Security records: rate-limit records are deleted once their window ends (at most an hour). Signed-out or expired device sessions are deleted after 30 days. Temporary copies made to prevent duplicate entries are deleted after about a day.
• If we take a support action on an account (for example, signing out all devices at a user’s request), we keep a record of it, including the account’s email address, for security and accountability.

11. Your rights

Under the Nigeria Data Protection Act 2023 (and, where they apply to you, the UK and EU GDPR), you have the right to:

• Access and portability: download your intimacy log as a CSV file from the app’s settings (Export your data). It includes your own side and private notes, never your partner’s. For a copy of anything else we hold, such as cycle logs, email us.
• Correction: edit your display name, entries and cycle days in the app, or ask us to correct anything else.
• Deletion: delete individual items, or your whole account, in the app at any time.
• Withdraw consent for health and sexual data, by deleting it or your account.
• Object to or restrict certain processing.
• Complain to the Nigeria Data Protection Commission (ndpc.gov.ng). If you live in the UK you can also complain to the Information Commissioner’s Office (ico.org.uk), and in the EU to the data protection authority where you live. We would appreciate the chance to help first.

To use any of these rights, email privacy@ourtide.app from the address on your account. We will reply within one month.

California and other US states

We do not sell personal information, and we do not share it for cross-context behavioural advertising or use it for targeted advertising. We use sensitive personal information, including consumer health data, only to provide the service you ask for, and we do not sell it. If you live in California or another US state with a privacy or consumer health data law (such as Washington’s My Health My Data Act), you can ask to know, access, correct or delete your personal information by emailing privacy@ourtide.app. If we decline a request, you can appeal by replying to our answer. We will not treat you differently for using these rights.

12. Adults only

Ourtide is for adults aged 18 and over, and you must confirm you are 18 or over to create an account. We do not knowingly collect data from anyone under 18. If you believe a minor is using Ourtide, email privacy@ourtide.app and we will delete the account.

13. Cycle and pregnancy features

Cycle estimates, the cycle guide and the pregnancy journey give general information only. Estimates are based on the dates you log and can be wrong, because cycles vary. Ourtide is not medical advice, is not a medical device, and must never be used as a form of contraception or to plan or avoid pregnancy. Talk to a clinician about anything that concerns you, and in an emergency contact your local emergency services.

14. Changes to this policy

If we change how we handle your data, we will update this page and the date at the top. If a change is significant, we will tell you in the app or by email before it takes effect.

15. Contact us

ReelUse Technologies Limited
1, Olaniyan Close, Off Mobolaji Bank Anthony Way, Ikeja, Lagos State, Nigeria, 100271
Email: privacy@ourtide.app

For help using the app, see our Support page.