Welcome to CLUSTER ("the App", "we"). We are committed to protecting your privacy. This policy explains what data we collect, how we use it, and how you can control your information.

1. Information We Collect

Information You Provide

• Account details: email address, display name, profile photo
• Shared content: chat messages, album photos, fridge notes
• Open When Letters
• Daily questions and answers
• Bucket list and watch list
• Map destinations
• Morning messages and cosmic messages
• Virtual coins and game scores
• Preferences: language, gender, notification settings

Automatically Collected Information

• Presence status (online/offline)
• Device identifier for push notifications

2. Third-Party Services

Firebase (Google)

We use Firebase Authentication, Firestore, Realtime Database, Cloud Storage, and Cloud Functions. Data is stored on Google servers in accordance with Firebase Privacy Policy.

LiveKit (Video Calls)

Video calls are conducted through a self-hosted LiveKit server. We do not record or store video calls.

OpenAI API

We use the OpenAI API (gpt-4o-mini model) to generate the daily couple question. Text is processed server-side only in accordance with the OpenAI Terms of Use.

The global daily question sent to all users is generated from a system template only and does not include any user content. For couple-personalized content features (when active), the only information that may be sent to OpenAI is first names from your profile and the text of previous questions already seen by you and your partner — used solely to avoid repetition. We never send: chat messages, photos, email addresses, passwords, or any other sensitive information. We rely on OpenAI's API data-handling policy for the limited data shared.

Google Cloud Vision API (report-driven scanning)

Image scanning runs only when a user manually reports a specific photo. On report, the image is scanned via Google Cloud Vision API (SafeSearch) for forensic logging and internal triage before deletion. Automatic scanning of all uploads was discontinued in May 2026. Google does not retain photos after scanning and does not use them to train models. Data is handled in accordance with the Cloud Vision data usage policy.

Report metadata

When you submit a report, we collect: the reported content snapshot, the reason you selected, your user ID, the reported user's ID, and a timestamp. This data is used solely for moderation purposes and is retained for 90 days.

Firebase Analytics (Google)

We use Firebase Analytics for general usage measurement and app improvement. General usage data (number of games, scores, usage events) is collected automatically and processed in accordance with Firebase Privacy Policy.

Firebase Crashlytics (Google)

Firebase Crashlytics collects crash report data (not linked to your identity) to improve app stability. No personal information is collected. Data is processed in accordance with Firebase Privacy Policy.

Capgo (OTA Updates)

We use Capgo (capgo.app) for over-the-air (OTA) app updates. Capgo receives an anonymous device identifier to deliver updates. No personal information, messages, or user content is shared.

Open-Meteo (Weather & Location)

We use Open-Meteo (open-meteo.com) for weather data. Coordinates are rounded to approximately 1km precision (city-level) before being sent to weather services. No personal identifying information is included.

Chat Storage

Chat messages are stored on Firebase (Google) servers and are encrypted in transit but not end-to-end encrypted. Messages are accessible only to you and your partner.

3. How We Use Your Information

• Providing app services (chat, games, video calls, albums)
• Real-time sync between partners
• Sending push notifications (if enabled)
• Sending daily questions
• Managing coin and game systems
• Improving user experience and fixing bugs

4. What We Don't Do

• We do not sell your information to anyone
• We do not show advertisements in the app.
• We do not share personal information with third parties for marketing purposes
• We do not track you outside the app

5. Data Security

We use encryption, Firebase security rules, and token-based authentication to protect your data. Data access is restricted to connected partners only.

6. Data Retention

We retain your data as long as your account is active. Upon account deletion, all personal data is deleted immediately with the account deletion. Some data may be retained in backups for up to 30 days.

7. Your Rights (GDPR & CCPA)

• Access: You can request a copy of all your data
• Correction: You can update your account details at any time
• Deletion: You can delete your account and all associated data
• Portability: You can request an export of your data

To exercise your rights, contact us at the email address below.

8. International Data Transfers

Our service providers (Firebase, OpenAI, Google Cloud Vision, LiveKit, Capgo) primarily operate data centers in the United States and the European Union. If you are located outside these regions, your data may be transferred to these regions to provide the service. We rely on the EU Standard Contractual Clauses (SCCs) and equivalent contractual safeguards to comply with GDPR requirements.

9. Minimum Age

The app is intended for users aged 16 and older. We do not knowingly collect information from children under 16.

10. Policy Changes

We may update this policy from time to time. Material changes will be published in the app.

11. Contact Us