Privacy Policy
Effective date: 22 October 2026 · Last updated: 22 October 2026
Make Her Smile is a relationship-support app that suggests thoughtful messages and actions, helps you remember important moments, and lets you keep information you choose to share about your partner. This Privacy Policy explains how we handle personal information when you use the Make Her Smile iOS app, our website at makehersmile.app, the web quiz at quiz.makehersmile.app, and related services (together, the Service).
1. Who is responsible for your information?
The data controller is Flaresense Technologies Ltd (company number 15313000), registered at 61 Bridge Street, Kington, HR5 3DJ, United Kingdom ("Make Her Smile", "we", "us").
For questions, privacy requests, or complaints, email [email protected]. This is also the contact for exercising the rights described below.
2. Information we process
Depending on how you use the Service, we process:
- Account and authentication details: your email address, display name (if provided), account identifiers, sign-in status, and protected authentication/session information. Verification emails are used to sign you in.
- Information you provide about your relationship: your partner's name, preferences, communication style, important dates, notes, memories, quiz and onboarding responses, and details of situations for which you request recommendations. This may include personal information about another person. Please share only information you are entitled to provide, and avoid unnecessary sensitive details.
- AI requests and results: the prompts, selected profile or memory context, language preference, generated messages and suggestions, and feedback that you choose to submit or retain. Some content stays on your device; content used for an online AI request is transmitted to our backend and the relevant AI service provider.
- Voice recordings and transcripts: if you use the microphone, your recording is handled on your device and its audio segments are transmitted through our backend to a transcription provider. We use the returned text for the feature you requested. We do not intentionally store raw audio recordings or transcripts in our backend logs or database as part of the transcription service, although text you choose to save may form part of your profile or memories. Temporary audio can remain on your device until you discard it or it is cleared by the app; the provider processes audio under its own applicable service terms.
- Purchases and subscriptions: product identifiers, purchase and subscription status, transaction references, renewal and expiry information, and identifiers needed to verify entitlements. We do not receive your full payment card number. Apple handles in-app purchases; Stripe processes purchases made through our website.
- Device, operational and support data: app version, device or installation identifiers, notification permission and push token (if enabled), selected language, time zone, technical events, approximate network location inferred from IP, rate-limit and usage records, and information you send to support.
- Web quiz and website information: quiz responses, any email you submit, whether you agreed to the quiz submission, checkout state and limited attribution information (such as campaign or referring-source parameters, if provided). The quiz may use browser session storage to preserve progress through checkout. Payment and hosting providers may set cookies or process technical information necessary for their services.
We do not require access to your contacts, camera or precise location to provide the core Service.
3. Why we use information and our legal bases
Where UK GDPR or EU GDPR applies, our principal purposes and legal bases are:
| Purpose | Legal basis |
|---|---|
| Operate your account, restore purchases, provide reminders, keep your saved information and deliver requested features | Performance of a contract |
| Process the content you choose to send for AI recommendations or voice transcription | Performance of a contract for the requested feature; where required, your separate consent or permission for third-party AI processing |
| Handle purchases, tax and accounting, and respond to legally valid requests | Legal obligation and/or performance of a contract |
| Prevent abuse, protect the Service, investigate faults and maintain basic security/usage records | Legitimate interests in security, reliability and fraud prevention, balanced against your rights |
| Send optional notifications or optional communications | Your choices and consent where required; you can change notification permissions on your device |
| Respond to support requests and privacy requests | Performance of a contract, legitimate interests, or legal obligation, as appropriate |
AI processing requires particular care. When you choose an AI feature, relevant relationship information may be disclosed to third-party AI providers to produce the answer. Only include details you are comfortable submitting for this purpose. If you prefer not to send your relationship details to third-party AI, do not use an online AI feature. Voice input and optional relationship details are not required for basic navigation.
4. Service providers and disclosures
We use providers in the following categories, only as reasonably needed for their roles:
- Cloudflare: hosting, backend execution, security and database infrastructure.
- Anthropic: processing relevant text and context to generate AI recommendations.
- OpenAI: processing audio submitted for speech-to-text transcription.
- Resend: sending email sign-in codes and service emails.
- Apple: distributing the iOS app, handling App Store purchases, and delivering push notifications through Apple Push Notification service (where enabled).
- Stripe: web checkout, payments, subscription administration and related fraud-prevention services.
Our providers may act as processors or independent controllers for particular activities as described in their terms and privacy notices. We expect service providers acting on our behalf to protect data appropriately. We may also disclose information when legally required, to protect users and our rights, or as part of a business transaction subject to applicable safeguards. We do not sell relationship profiles or memories to advertisers.
If you tap Share on an AI-generated message, you choose the recipient and service through the device's sharing controls; we do not send that message directly to your partner on your behalf.
5. International data transfers
We are based in the United Kingdom and work with providers that may process data in other countries, including the United States. When required, international transfers are made using applicable adequacy arrangements, approved contractual safeguards or another lawful transfer mechanism. Contact us for information about the safeguards relevant to your data.
6. Retention, security and deletion
We keep account information and saved data for as long as needed to operate your account, unless you remove it earlier or ask us to delete it. Some memories, recommendations and drafts are stored locally on your device; other information you explicitly sync or submit is stored on our backend. Account/profile, memory and quiz information stored by our backend is encrypted at rest. Session credentials and verification codes receive additional technical protections.
- Account deletion: use Settings → Delete Account in the app or contact [email protected]. Server-side account deletion is designed to remove the associated profile, memories, moments, quiz submissions, account sessions and web entitlements. Locally stored data is also cleared through the app's deletion flow.
- Subscriptions: deleting an account does not itself cancel an Apple-billed subscription. Cancel it separately in Apple Account → Subscriptions. Where applicable, our deletion flow attempts to cancel linked Stripe subscriptions; contact us if it fails.
- Operational records: limited rate-limit, security, usage and transaction records may be retained for their operational or legal purpose, then deleted or aggregated. Voice-service usage counters are configured for approximately 90 days. Billing and tax records may be retained for the period required by law. Provider retention practices may differ from ours.
- Backups: deleted information may remain in restricted, rotating backups temporarily before expiring under normal retention cycles.
No online system can promise absolute security, but we use reasonable technical and organisational protections, including transport encryption and access controls.
7. Your privacy choices and rights
Depending on your location and the circumstances, you may have rights to access, correct, delete, restrict, object to certain processing, and receive a portable copy of your personal data. Where we rely on consent, you may withdraw it for future processing without affecting prior lawful processing. You may object to processing based on legitimate interests.
To exercise your rights, email [email protected]. We may need to verify your identity before acting. You can also edit or delete information in the app, manage notification permissions in iOS Settings, and choose not to use voice input or optional AI features.
If you have a complaint, please contact us first. You may also complain to the UK Information Commissioner's Office (ICO) or the relevant data protection authority in your country if EU law applies.
8. Information about other people
Make Her Smile is designed for your own use, but your notes may concern your partner. Be respectful of their privacy. Do not submit highly sensitive information, private communications, or details about another person unless you have an appropriate basis to do so. We do not independently verify the accuracy of user-provided relationship details.
9. Children
The Service is intended for adults aged 18 or older, not children. If you believe a child has provided personal information to us, contact us so we can investigate and delete it when required.
10. Changes to this policy
We may update this Policy as the Service changes. We will publish the updated text with a revised date and provide additional notice where required by law. Material changes to how we use your data may require a renewed choice or consent.
11. Contact
Flaresense Technologies Ltd · Company no. 15313000
61 Bridge Street, Kington, HR5 3DJ, United Kingdom
[email protected]