Privacy Policy

1. Introduction

EWA DIGITAL LTD ("we", "our", "us") operates the Sacred mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.

We are committed to protecting your privacy. Given the sensitive nature of our App, we take extra care to ensure your personal information is handled securely and confidentially.

By using Sacred, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Display name
• Profile image (optional)
• Password (stored securely via Firebase Authentication)

2.2 Relationship Data

When you use the App's features, we store:

• Relationship details and partner connections
• Messages exchanged between partners
• Tasks, corrections, and session records
• Documents created within the App
• Photos and media uploaded to shared galleries

2.3 Location Data

If you enable location sharing:

• Real-time GPS coordinates (only when actively sharing)
• Location sharing is entirely optional and requires explicit consent
• You can stop sharing your location at any time

2.4 Device Information

We automatically collect:

• Device type and operating system
• App version
• Crash reports and performance data (via Firebase Crashlytics)
• Push notification tokens (for delivering notifications)

2.5 Biometric Data

If you enable biometric authentication:

• We do not store your biometric data (fingerprint, face scan)
• Biometric authentication is handled entirely by your device's operating system
• We only store your preference for whether biometric lock is enabled

3. How We Use Your Information

We use your information to:

• Provide and maintain the App's functionality
• Enable communication between you and your partner
• Sync your data across devices
• Send push notifications (messages, task updates, etc.)
• Process subscriptions and in-app purchases
• Improve the App through crash reports and analytics
• Provide customer support

4. Data Storage & Security

Your data is stored using Google Firebase services, with servers primarily located in the European Union (europe-north1 and europe-west1 regions).

We implement the following security measures:

• Secure authentication via Firebase Authentication
• Firestore security rules that restrict data access to authorized users only
• Relationship-based access controls ensuring only partners can view shared content
• Separate user profiles for public and private data
• Encrypted data transmission (HTTPS/TLS)

5. Third-Party Services

We use the following third-party services:

• Google Firebase — Authentication, database, storage, cloud functions, messaging, analytics, and crash reporting
• RevenueCat — Subscription and in-app purchase management
• Google Maps — Location display and mapping services
• Apple App Store / Google Play Store — App distribution and payment processing

Each of these services has their own privacy policies. We encourage you to review them.

6. Data Sharing

We do not sell, trade, or rent your personal information to third parties.

Your data may be shared in the following limited circumstances:

• With your partner — Content you share within a relationship is visible to your partner
• Service providers — Third-party services listed above that help us operate the App
• Legal requirements — If required by law, court order, or governmental authority

7. Your Rights

Under applicable data protection laws (including GDPR), you have the right to:

• Access — Request a copy of the personal data we hold about you
• Rectification — Request correction of inaccurate data
• Erasure — Request deletion of your personal data
• Portability — Request your data in a machine-readable format
• Restriction — Request that we limit processing of your data
• Object — Object to processing of your data
• Withdraw consent — Withdraw consent for data processing at any time

To exercise any of these rights, please contact us at the email address below.

8. Data Retention

We retain your data for as long as your account is active. When you delete your account:

• Your personal profile data is permanently deleted
• Your messages, documents, and uploaded media are removed
• Some anonymized analytical data may be retained

You can delete your account at any time from the Settings page within the App.

9. Children's Privacy

Sacred is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the App or via email. Continued use of the App after changes constitutes acceptance of the updated policy.

11. Contact Us