Carymy · Information and care

Privacy policy

How Carymy handles account data, content, connections, schedules and deletion requests.

Updated November 8, 2026.

1. Responsibility and contact

The party responsible for the app and the data processing described in this policy is Carymy. For privacy, access, correction or deletion requests, contact [email protected].

2. Data we use

• Account: account identifier, name, email and authentication information supplied by your chosen login provider. Carymy does not ask for your Google or Apple account password.
• Content: phrases, names, groups, photos and audio you create, import or share. Text and library metadata are stored in the service. Personal media is kept on the device; when you send content to a connection, files may pass through cloud storage to enable delivery.
• Connections and routines: connections, your chosen relationship labels, times, time zone, scheduling preferences and events such as opening, confirming, pausing or snoozing.
• Delivery and operation: installation identifiers, notification tokens, permissions and technical information needed for synchronization, security and delivery of care messages.
• Premium: customer identifiers, subscription status and purchase information needed to recognize access. The store processes payments; we do not receive your full card number.
• Support and website: messages sent to support and technical access records the hosting provider may generate, such as IP address, date, requested address and browser information.

3. Purposes

We use this data to authenticate access, organize your library, connect people, deliver care messages, record events, recognize subscriptions, provide support, prevent misuse and handle account requests. Device permissions are requested according to the feature you use.

4. Permissions and copied content

Microphone, camera, photo and file access are used for actions you choose, such as recording or importing a smile. The clipboard is read when you tap Paste text. The sharing extension receives content you choose to share and prepares it for review in Carymy; it is not automatically added to your library.

5. Who receives data

Your connections receive the content and information needed for the interactions you choose. We use Google/Firebase services for authentication, databases, storage, server functions and notifications; Apple services for login and delivery on iPhone; and RevenueCat to manage Premium access. These providers may process information in other countries according to their infrastructure and policies.

See the providers’ information: Firebase, Apple and RevenueCat.

Ads. In the free version, Carymy shows ads provided by Google AdMob. We only request non-personalized ads rated for general audiences. To serve and measure ads and prevent fraud, Google's SDK may collect the device advertising identifier, IP address (used for approximate location), technical device information and interactions with ads. Premium subscribers do not load ads. We never show ads when a carinho is opened or received. Learn more at How Google uses data in ads.

Notifications. The title and message text of a carinho appear in the notification and are transmitted through Google (Firebase Cloud Messaging) and Apple (APNs) notification services. Photos and audio are not sent in notifications. Lock-screen display follows your device privacy settings.

6. Storage and deletion

Data needed for operation remains while the account and corresponding records are maintained. You can remove content or request account deletion. Shared files may remain on the server as needed for transfer and cleanup; we do not promise automatic removal after a fixed period for abandoned transfers.

On deletion, we remove your profile, library and files held in the service, schedules, notices and related connections. Copies already saved by other people may remain without attribution to the sender. After completion, a technical marker remains for seven days to block old sessions. Store and provider records, or records needed for security, support and applicable obligations, may have separate retention periods.

Local storage is updated when the device connects. Uninstalling the app may remove local copies and does not delete your server account.

7. Your choices

You may request access, correction and deletion through the contact above, disconnect from people and manage permissions in device settings. Revoking a permission may prevent the related feature from working. We may verify ownership before handling requests affecting personal data.

In the European Union, the United Kingdom and Switzerland, you can review ad consent in the app under Settings → Ad privacy. In any country, you can reset or delete the advertising identifier in your device settings, and Premium removes ads.

8. Security and responsible use

We use authentication and access rules to restrict operations to authorized accounts and relationships. No system is risk-free. Avoid including information you do not want to share, and only send other people’s images, voices or data when you have permission.

9. This website and updates

These pages do not use advertising or audience analytics scripts. Email links open your chosen email service; they do not send messages automatically. The hosting provider may keep technical access logs. Updates to this policy will appear on this page with a revision date.