Privacy

The short version

Otay is a private journal for two people. To make that work, the app needs an account and a backend, so we do store your account and your memories on our servers. We use them only to run the app for you and your partner. We do not sell your data, we do not show ads, we do not track you across other apps, and we never train any model on your photos or captions.

What Otay collects

• Your account. When you sign in with Apple, Google, or email, we store the email address linked to that account and an account identifier. If you use Sign in with Apple and choose to hide your email, we only ever see Apple's private relay address.
• Your display name. The name you choose so your partner knows who's who.
• Your memories. The photos, captions, moods, and — only if you choose to add one — the place attached to each memory.
• Your relationship. Which account you are paired with, your quest history, streak, and settings.
• A notification token. If you turn on notifications, a device token so we can let you know when your partner has been active.
• Subscription status. Whether your relationship has Otay Premium, so the app can unlock Premium features for both partners. Payment itself is handled entirely by Apple — we never see your card or billing details.

Where your data lives

Otay runs on a backend rather than on your own iCloud. Your account and memory data are stored in a Postgres database hosted by Supabase, and your photos are stored in Cloudflare R2 object storage. Data is encrypted in transit (HTTPS/TLS) and encrypted at rest by those providers. This is standard provider encryption — it is not user-controlled end-to-end encryption, and Otay can technically access your data in order to operate the service. We access it only when needed to run, debug, or support the app, and never to read your memories for any other purpose.

Photo retention

On the free plan, photos and memories are kept for 30 days and then removed from our servers. With Otay Premium, your memories are kept for as long as your subscription is active. You can save any memory to your own device's photo library at any time, on either plan.

Who can see your memories

Only you and the partner you are paired with. Otay has no public feed, no profiles, no followers, and no way to share a memory with anyone outside your pair from inside the app. If you export a memory to share it elsewhere, that is your choice and outside Otay's control.

What we never do

• No ads, ever.
• No selling or trading of your data.
• No third-party advertising or analytics SDKs inside the app.
• No tracking you across other apps or websites.
• No training any AI model on your photos or captions.

Your rights and deleting your data

You can delete your account from inside the app, in the Us tab. Deleting your account removes your account and your memories from our servers. You can also email hi@otay.app to request a copy of your data or to ask us to delete it.

Children

Otay is intended for adults in a relationship and is not directed at children. We do not knowingly collect data from children under 13.

The otay.app website

This website is hosted on Vercel, which collects anonymous request metrics (page views, response times) to keep the site running. We use privacy-friendly product analytics (PostHog) to count page views and form submissions, with no personal identifiers beyond an opaque session id. If you join a waitlist or use a contact form on otay.app, we store the email you give us only to reply to you.

Changes

If we change how Otay handles your data, we will update this page and the date above. Meaningful changes will be announced on otay.app.

Contact

Questions, data requests, or just hellos: hi@otay.app.