Privacy Policy

Last updated: 27 September 2026

Corbie is an iOS application for couples, operated by Ilya Voronin (sole proprietorship), referred to here as "we". This policy explains what we collect, what we do not, and the choices you have.

The short version

• Your content lives in your own iCloud account, not on our servers.
• We do not sell your data, show advertising, or use third-party tracking or analytics SDKs.
• Our server stores invite codes, subscription records, anonymous usage counts and short-lived technical caches. Never your content.

Where your content is stored

Tasks, calendar events, wishes, plans, lists, letters, votes, answers and contacts you create in Corbie are stored on your device and synchronised through Apple CloudKit using your own iCloud account. When you connect with a partner, that content is shared with them through Apple's sharing mechanism. We have no access to it and cannot read it.

Apple's handling of iCloud data is governed by Apple's Privacy Policy.

What our server stores

• Invite codes. A short code, the associated iCloud sharing link, the environment it was created in, and a one-way hash of the inviting iCloud account, used only to tell you if both phones are signed into the same iCloud account. Kept for 15 minutes and then deleted. No names, no content.
• Subscription records. For each subscription: Apple’s transaction identifiers, the plan (monthly or yearly), its status, renewal and expiry dates, whether it started with a trial or an offer, and the shared space it unlocks, so that both partners get access from a single subscription. This comes from Apple. We never receive your name, email address or payment details.
• Anonymous usage events. Counts such as "a task was created" or "the paywall was shown", tied to a random identifier generated on your device. Not linked to your name, email, Apple ID or any content. Values are limited to categories and numbers — never text you wrote. Raw events are deleted after 30 days.
• A cache of link previews. When you add a wish from a link, the address is sent to our server to fetch the title, price and image. The cache is keyed by a hash of the address, is not linked to you, and expires after 24 hours.
• Rate-limit counters. To stop abuse we count requests per device and per network address. Both are stored as salted hashes, never in the clear, and expire within minutes.
• Currency rates. A cache of public exchange rates. Not personal data.

Our hosting provider, Supabase, records the network address of incoming requests in its own operational logs, as every web host does. We do not control or use those logs for anything beyond diagnosing outages, and they are retained according to the provider’s own policy.

Sign in

Corbie uses Sign in with Apple. We receive an anonymous identifier and, if you choose to share it, your name. We never receive your password. You may use Apple's private email relay.

Calendar and busy times

If you turn on "share my busy times", Corbie reads your device calendar and publishes time ranges only to your shared space so you can find windows when you are both free. Event titles, locations, notes and guests never leave your device. Turning the setting off deletes those ranges immediately.

What we never collect

Location tracking, contacts, photos other than those you attach yourself, browsing history, device advertising identifiers, or biometric data. Face ID, where used, is verified by iOS and never leaves your device.

Your rights

• Access and portability. Settings contains "Export my data", which produces a machine-readable file of everything in your space.
• Deletion. Settings contains "Delete account". This removes your membership, deletes your space if you created it, revokes the Sign in with Apple token and clears local data.
• Objection and restriction. Anonymous usage events can be disabled in Settings.

If you are in the European Economic Area or the United Kingdom, our legal basis for processing is performance of the contract (providing the app) and legitimate interest (keeping it working and secure). If you are a California resident, we do not sell or share personal information as those terms are defined by the CCPA.

Children

Corbie is not directed at children under 13 and we do not knowingly collect data from them.

Changes and contact

If this policy changes materially we will update the date above and notify you in the app. Questions, requests or complaints: hello@yourcorbie.app.