Aham - Privacy Policy

Last updated: 4 June 2026

Aham is an app for couples. This policy explains what we collect, how we use it, and the choices you have. We have built Aham to collect as little as possible.

What we collect

• Account: your name, email address, and (optionally) a profile photo.
• Relationship details you choose to add: your start date, relationship type, long-distance flag, and your device time-zone offset.
• Your content: the answers, reflections, appreciation notes, and any photos or voice notes you and your partner write or record. This content is stored so we can show it back to you.
• A device push token (so we can send notifications) and basic technical logs needed to operate the service.

How we use it

• To run the core experience: the daily prompt, the mutual reveal, your shared timeline, appreciation feed, and notifications.
• To understand whether the product works, we look only at usage signals - counts and timestamps (for example, both partners answered, and retention over time). We cannot read your answers - they are end-to-end encrypted (see below).

How your content is protected

Your answers, reflections, appreciation notes, photos, and voice notes are end-to-end encrypted. They are encrypted on your phone with a key that only you and your partner hold, before they ever reach our servers. We store only encrypted data and cannot read your content - not our team, not anyone with database access. Encryption turns on automatically once both partners have opened the app, and protects content created from that point on. Everything is additionally protected by encryption in transit (HTTPS) and at rest. Some information needed to run the service is not encrypted: your name, email, profile photo, relationship details, and the fact and timing that an answer exists (so we can show the reveal and your timeline). You can confirm your private connection any time with the in-app safety code in the Us tab.

Who we share it with (service providers)

We use trusted providers only to operate Aham: MongoDB Atlas (database), Cloudinary (photo/voice storage), Resend (one-time login codes), Brevo (welcome and occasional re-engagement emails), Firebase Cloud Messaging (push notifications), Render (hosting), and Google reCAPTCHA (bot protection at sign-up). These providers handle only what they need to deliver a message (such as your email address); they never receive your encrypted answers. We do not sell your data, and we do not use it for advertising.

Your choices and deletion

• You can edit your name, photo, and relationship details in the app at any time.
• You can delete your account from Profile - Account and Privacy - Delete my account. This permanently removes your data from our systems.
• To request data access or deletion by email, contact us at the address below.

Children

Aham is intended for adults in a relationship and is not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect data from children.

Future changes

If we make material changes to this policy, we will notify you in the app and update the date above.

Contact

Questions about your privacy? Email us at twousapp@gmail.com.