Thrum Privacy Policy

Effective date: October 23, 2026

App: Thrum: Couples Widget & Love (iOS)
Developer / data controller: Berkay Egeli, Turkey
Contact: hello@berkaegean.com

Thrum is an app for two people in a relationship. You tap rhythms (“thrums”), send heartbeats, notes and doodles, and answer a daily question together. Everything you send is shared only with the one partner you pair with. We built Thrum to collect as little as possible, and we never sell your data or show ads.

1. What we collect

Account (Sign in with Apple)

  • A unique Apple user identifier, and the name and email address Apple shares with us when you sign in. If you choose “Hide My Email”, we receive an Apple relay address instead of your real email.
  • We never see or store your Apple ID password.

Profile

  • The display name you choose, your avatar emoji and color, and your time zone (so your partner can see your local time).
  • The dates you enter: when you got together and when you meet next (optional).

Content you create

  • Thrums (the rhythm you tapped and, only if you choose to share it, its meaning), heartbeats, notes, doodles (drawings stored as images), and your answers to the daily question.
  • This content is visible only to you and your paired partner.

Device and notifications

  • A push notification token, so we can notify your partner’s device when you send something. We delete it when you sign out or delete your account.

Purchases

  • If you subscribe to Thrum Premium, Apple processes the payment. We never receive your card or payment details. We receive the subscription status (product, start and expiry dates) linked to your account so both partners can get Premium.

Safety reports

  • If you report a problem with your partner, we receive the text of your report and the IDs of the account and couple involved.

We do not collect your location, contacts, photos library, health data, or browsing activity, and we do not use advertising identifiers or third-party tracking.

2. How we use it

  • To create and run your account and connect you with your partner.
  • To deliver what you send (in the app, on widgets and as notifications).
  • To show the daily question and reveal answers once you both have answered.
  • To provide Premium to both partners when one of you subscribes.
  • To review safety reports (we aim to respond within 24 hours) and to prevent abuse (for example, limits on how many messages can be sent per day).
  • To answer you when you contact us.

We do not use your content to train AI models, and we do not sell or rent personal data.

3. Who processes data for us

We use a small number of service providers, only to run Thrum:

  • Supabase — database, file storage and server functions (servers in the European Union, Frankfurt).
  • Apple — Sign in with Apple, push notifications, and App Store payments.
  • RevenueCat — subscription status tracking (linked to your Thrum account ID).
  • Resend — sends safety-report emails to our own inbox.

Each provider may only use the data to provide its service to us.

4. How long we keep it

  • We keep your account and content while your account exists.
  • Unpair: when either partner unpairs, the couple and all shared content (thrums, heartbeats, notes, doodles and answers) are deleted.
  • Delete account: you can delete your account at any time in Settings → Delete account. This permanently deletes your profile, your couple’s shared content and doodles, your push token, and revokes the Sign in with Apple connection. Backups are overwritten within 30 days.
  • Saved thrum codes are stored only on your device and are removed when you delete the app or your account.
  • Deleting your account does not cancel an App Store subscription. You can cancel it in iPhone Settings → Apple Account → Subscriptions.

5. Security

Data is sent over encrypted connections (HTTPS). Access rules on our database ensure that each person can only read their own data and their partner’s shared content. No system is 100% secure, but we work to protect your information.

6. Your rights

Depending on where you live (including under the EU/UK GDPR and Turkey’s KVKK), you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. You can delete your account in the app, or email us at hello@berkaegean.com and we will respond within 30 days. You can also lodge a complaint with your local data protection authority.

Legal bases (EU/UK): performance of our contract with you (running the app), our legitimate interests (safety and abuse prevention), and your consent (notifications, which you can turn off at any time).

7. Children

Thrum is not intended for children under 13 (or under the minimum age required in your country). We do not knowingly collect data from children. If you believe a child has used Thrum, contact us and we will delete the account.

8. International transfers

Our providers may process data outside your country (for example in the EU or the US). Where required, they use appropriate safeguards such as the EU Standard Contractual Clauses.

9. Changes

If we change this policy, we will update the date above and, for important changes, let you know in the app.

10. Contact

Berkay Egeli — hello@berkaegean.com