Plain language.
No dark patterns.

Couchette ("the app", "we", "us") is designed to be private by default. This page describes exactly what we collect, what we do with it, what we do not collect, and the rights you have. If anything here is unclear, write to privacy@couchette.app and we'll explain it like a person.

TL;DR

• There is no account system. We don't know your email, name, or face.
• We don't sell or share your data with advertising networks. We don't request IDFA. We don't carry third-party advertising SDKs.
• Your location stays on your device. We use it once, to label your departure city for the journey metaphor.
• Anonymous diagnostics (crash reports, basic funnel counts) may be sent so we can fix bugs and understand which features are reached.
• Payments are processed by Apple. We never see your card or billing address. Subscription state is brokered through RevenueCat, which receives only an anonymous installation ID.

What Couchette collects

On your device only — never transmitted

• Your departure city (latitude / longitude / city name), if you set one
• Sound preferences (rain layer, whistle, master volume), Focus-prompt preference, session-length preference
• Your passport — a local list of completed and partial journeys, with route name, origin and destination cities, distances, durations, and timestamps
• Whether you have premium entitlement (mirrored from RevenueCat / the App Store)

Anonymous diagnostics — transmitted if you have not opted out

• An anonymous install identifier (a random UUID generated on first launch, or the equivalent identifier from RevenueCat — never linked to your real identity)
• Crash reports (Sentry): stack traces and the device model that crashed. Stack traces are scrubbed of any user-supplied strings before transmission.
• Funnel events: app_opened, paywall_viewed, journey_started, journey_completed, and a small number of similar product-usage events. No payload contains personal data — just route identifiers, durations, and counts.

Payment + subscription data

• Apple handles all payment processing through the App Store. We do not see your card number, expiry, billing address, or Apple ID.
• RevenueCat receives an anonymous installation identifier and the product identifier you purchased (e.g. couchette_annual). It uses these to broker subscription state back to the app. RevenueCat's own privacy policy lives at revenuecat.com/privacy.

Location use — clarified

Couchette requests "while using the app" location once during onboarding so it can suggest your departure city. The coordinates are reverse-geocoded against Open-Meteo's free geocoder (open-meteo.com/en/terms), which receives only the lat/lng to return a place name. After that, only the city name and a rounded lat/lng pair are kept on your device. No location data is transmitted to us or stored on our servers (we don't operate any).

What Couchette does not collect

• Email address
• Real name
• Photos, contacts, microphone audio, calendar, files
• Location coordinates as a stream (no background tracking)
• Browsing history outside Couchette
• IDFA, AAID, or any other device identifier that survives a clean reinstall
• Any data that links you across apps

Third parties with access to data

The complete list of services Couchette communicates with:

• Apple — processes your payment, hosts the app, restores purchases by Apple ID.
• RevenueCat — brokers subscription state. Receives an anonymous installation identifier and a product identifier.
• Open-Meteo — reverse-geocodes a single lat/lng pair (during city setup) and provides worldwide place-name search.
• Sentry — optional crash reporting. Receives stack traces and device metadata only when an error occurs. Disabled in builds that don't carry a configured DSN.

We do not use any advertising network, analytics broker, attribution SDK, or social-login provider.

How long we keep data

• On-device data: kept until you uninstall the app or reset it from Settings. Uninstall wipes it immediately.
• Crash reports: retained for 90 days then deleted by Sentry per their data-retention policy.
• Analytics events: retained for 13 months in aggregate, then deleted. Per-event raw records are deleted at the same cadence.
• Subscription records (with Apple and RevenueCat): retained per their respective policies; we do not control these.

Your rights

Delete everything

• Uninstall the app. All local data is wiped automatically.
• Email privacy@couchette.app and we'll purge any diagnostics tied to your anonymous install ID within 30 days. You'll need to share the install ID — find it in Settings → About → Diagnostic ID (shipping in a future update; until then, a request by Apple ID or by approximate first-use date is sufficient).

Opt out of diagnostics

• Toggle "Send anonymous diagnostics" off in Settings → About. Until that toggle ships, blocking outbound network for the app at the OS level disables all transmission.

Subscription cancellation

• All cancellations happen in App Store Settings (iOS). Couchette cannot cancel for you. Cancellation takes effect at the end of the current billing period; you keep access until then.

Access

• Your passport, settings, and preferences are visible to you inside the app. We do not hold any server-side personal record that you cannot already see on your device.

Children's privacy

Couchette is rated 4+ for content but is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe we have inadvertently done so, please contact privacy@couchette.app and we will delete the relevant records.

International transfers

Sentry and RevenueCat may process data on servers located in jurisdictions different from yours, typically the United States and the European Union. We rely on the standard contractual clauses and equivalent safeguards published by those processors for cross-border transfers. The data transferred is limited to what is described above.

Changes to this policy

Material changes will be announced inside the app before they take effect. The date at the top of this page reflects the latest revision. We will not retroactively reduce your rights without notice and an opportunity to opt out by cancelling.

Contact

• privacy@couchette.app — privacy questions, deletion requests, data-rights requests
• hello@couchette.app — anything else

Couchette is operated by Czr Dev (the publisher listed on the App Store).