Privacy policy

Last updated: 9 November 2026

This policy explains how Pam's Factory processes personal data when you use the Amore Mio app on Android and iPhone and this website, in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the French Data Protection Act ("loi Informatique et Libertés").

In short: what you share with your partner (notes, photos, videos, voice notes, answers, drawings) is only visible to the two of you. We do not read it, we never sell your data and we never use it for advertising. Usage statistics are only collected if you agree. You can unlink or delete your account at any time.

1. Who is responsible for your data

The data controller is Romain Pamart EI (Pam's Factory), email: pams.factory@gmail.com.

We have not appointed a data protection officer. For any question about your data or to exercise your rights, write to pams.factory@gmail.com.

2. What data we process, why, and on which legal basis

DataPurposeLegal basis (GDPR art. 6)
Account: email address, sign-in method (Google, Apple, or email and password), user identifier, creation and sign-in dates; with Google sign-in, the name and photo of your Google accountCreate and secure your account, recognise you on your devicesPerformance of the contract (6.1.b)
Profile: first name, emoji, profile picture, happy and sad faces (emoji or selfie stickers), language, time zone, platform (Android or iOS), app version, last activity date, notification settingsShow you to your partner, send notifications in your language and at the right time of your dayPerformance of the contract (6.1.b)
Couple: the link between your two accounts, the day your relationship started (if you add it), the flame and its record, counters (notes, winks, games), invitation codeLink you with your partner and run the features you sharePerformance of the contract (6.1.b)
What you share with your partner: notes (text, paper and lettering), photos, videos, voice notes and their captions, winks, reactions, reading dates, notes kept in the memory box, answers to the question of the day, game answers, comments, quiz questions and drawingsDeliver it to your partner and keep your shared historyPerformance of the contract (6.1.b); explicit consent for the sensitive information you choose to share (art. 9.2.a, see section 3)
Purchases: store, order or transaction number, fingerprint (SHA-256) of the purchase token, product, price, currency, dates, status (completed, refunded)Deliver Premium to you and your partner, prevent fraud, keep accounting recordsContract (6.1.b) and legal obligation (6.1.c)
Notifications: device token (Firebase Cloud Messaging) and the notices shown in the app (replies from the team)Tell you about your partner’s notes, winks, answers and games, your flame, your anniversaries and our repliesPerformance of the contract (6.1.b)
Usage statistics (Google Analytics for Firebase), only if you agree: events such as “note sent” or “game started” (never their content), app instance identifier, device model, operating system, approximate countryUnderstand how Amore Mio is used and improve itConsent (6.1.a)
Crash reports (Firebase Crashlytics): technical state of the app at the time of a crash, device model, operating system, installation identifierFind and fix bugsLegitimate interest: app reliability (6.1.f)
Advertising, free version only (Google AdMob): advertising identifier, IP address, device information, interactions with adsShow the ads that fund the free version, measure them, prevent fraudConsent (6.1.a) for personalised ads and device storage; otherwise non-personalised ads
Messages to the team (Settings › Report a bug or an idea): your messages and our replies, app version, platform, device model, languageFix problems, improve Amore Mio, answer youLegitimate interest (6.1.f)
Support emails: your address and your messagesAnswer youLegitimate interest (6.1.f)

We do not collect your payment card details (they are handled by Google Play or Apple), your contacts or your location. We never use what you share with your partner for advertising or profiling, nor to train artificial intelligence models.

3. What you share with your partner

What you send in Amore Mio is only visible to you and to the partner linked to your account: notes and their files, winks, reactions, answers to the question of the day (shown to your partner once you have both answered), game answers, comments and drawings. Your partner also sees your profile (first name, emoji, profile picture, stickers), whether a note has been read, and your flame. Nothing is ever public.

Our team does not read what you share: our administration tools do not show notes, files, answers or drawings. They show the details of an account and of its couple (first name, email address, dates, counters, list of games, purchases), to help you and to handle purchases. We would only access what you share if the law required it.

What you share may reveal sensitive information about you (for example about your private life, your health or your beliefs), in particular in the Naked truth mode, whose questions are intimate. We only process it to deliver it to your partner and keep it for the two of you, on the basis of your explicit consent, which you give by choosing to share it (and, for this mode, by confirming that you both want to play it). You can withdraw it at any time by deleting a note you wrote, by unlinking or by deleting your account.

Remember that your partner can keep what you send them (screenshots, saved copies): only send what you are comfortable sharing.

4. Invitations and unlinking

To link your accounts, one of you shares an invitation: a code of 6 characters valid for 7 days, and a link to this website. Whoever has the code or the link can see your first name and your emoji until the invitation is used or expires: keep it for your partner. Once you are linked, the code is deleted.

Either of you can unlink at any time (Settings › Our couple). What the couple shared is then no longer accessible to anyone and is kept 30 days, so that everything comes back if the same two accounts link again within that time; after that, it is deleted for good, files included.

5. Profile picture and selfie stickers

Your profile picture and your happy and sad faces are optional. When you make a selfie sticker, the person is cut out on your phone by its system (Apple Vision on iPhone, Google ML Kit on Android); only the finished sticker is sent to our servers. Your pictures and stickers are only shown to your partner. A picture you replace or remove is deleted.

6. Purchases

Premium is bought through Google Play or the App Store, which process the payment as independent controllers under their own privacy policies. They send us a proof of purchase, which our server checks with them before unlocking Premium on your account, and on your partner’s for as long as you are linked. We keep a record of each purchase for 10 years, as required by French accounting law (Commercial Code, art. L123-22); when you delete your account, this record is kept without any link to you.

7. Notifications

To tell you about a note, a wink, an answer, a game, the flame or an anniversary, our server sends push notifications through Firebase Cloud Messaging and, on iPhone, the Apple Push Notification service. They show your partner’s first name and what happened (“sent you a little note”), never the text of your notes or answers; your phone may display them on its lock screen. You choose which ones you receive in Settings › Notifications, and you can turn them off in the settings of your phone.

8. Statistics and crash reports

Usage statistics (Google Analytics for Firebase) are only collected if you turn them on, in Settings › Privacy › Share anonymous usage statistics: they are off until then, and you can turn them off at any time. They are pseudonymous (tied to an identifier of the app installation, not to your account, your name or your email address) and never contain what you write. We use them in aggregate form only (for example: how many games were played this week).

Crash reports (Firebase Crashlytics) contain technical information about the crash and the device, never the content of your notes. They are kept 90 days.

9. Advertising in the free version

The free version shows ads served by Google AdMob; Premium (yours or your partner’s) shows none. In the European Economic Area, the United Kingdom and Switzerland, a consent form (Google User Messaging Platform, IAB TCF framework) asks you at first launch whether ads may be personalised and whether information may be stored on or read from your device. Without consent, only non-personalised or limited ads are shown. On iPhone, the app also asks for your permission before accessing the advertising identifier (App Tracking Transparency).

You can change your choice at any time in Settings › Privacy › Ad preferences, and reset or delete the advertising identifier in the settings of your device. How Google uses data for advertising: policies.google.com/technologies/ads.

10. This website

This website uses no cookies, no analytics and no advertising. It remembers the language you choose in your browser (local storage), without sending it to us. The account deletion page uses Firebase Authentication to sign you in: your session is kept in this browser tab only and is removed when you sign out or close it. The invitation page asks our server for the first name and emoji of the person who invites you. Our hosting provider keeps technical logs (IP address, browser, pages requested) for security, for 30 days.

11. Who receives your data

Your data is only accessible to Pam's Factory and to the following recipients, within the limits of their task:

  • Your partner: what you share with them and your profile, as described in section 3.
  • Google (Google Ireland Limited and Google LLC), as processor: Firebase Authentication, Cloud Firestore, Cloud Storage, Cloud Run, Firebase Hosting, Firebase Cloud Messaging, Google Analytics for Firebase, Firebase Crashlytics, under the Google Cloud and Firebase data processing terms.
  • Google AdMob for the ads of the free version, as independent controller for personalised advertising, under Google’s privacy policy.
  • Google and Apple, as independent controllers, when you sign in with your Google account or with Apple; Apple also delivers the notifications of iPhones (Apple Push Notification service).
  • Google Play and Apple (App Store) for purchases and payments, as independent controllers.

We never sell or rent your data. We may disclose it to the authorities when the law requires it.

12. Transfers outside the European Union

Our server and our database are hosted in the European Union (Google Cloud, Belgium). The files you share (photos, videos, voice notes and their thumbnails) and your profile pictures and stickers are stored in the United States (Google Cloud Storage, Iowa), and Google may process some data in other countries for its services. These transfers are covered by the standard contractual clauses of the European Commission (Decision 2021/914) included in Google’s data processing terms, and by the EU-U.S. Data Privacy Framework, under which Google LLC is certified, with additional security measures such as encryption in transit and at rest. You can ask us for a copy of these safeguards.

13. How long we keep your data

DataRetention
Account and profileUntil you delete your account
Profile picture and stickersUntil you replace or remove them, or delete your account
What the couple sharesAs long as you are linked (a note deleted by its author disappears at once); after unlinking or the deletion of one of the two accounts, 30 days, then deleted. The notes of a deleted account are deleted at once
Invitation code7 days, or until it is used
Purchase records10 years (accounting obligations), without link to you once your account is deleted
Usage statistics14 months at most (Google Analytics setting)
Crash reports90 days
Messages to the team2 years after the last message, or until you delete your account
NotificationsNotices in the app: 180 days; device token: 270 days without activity, or until you sign out
Support emails3 years after our last exchange
Technical and security logs30 days; audit log of administrative actions: 400 days

14. Security

Data is encrypted in transit (HTTPS) and at rest. Access to what a couple shares is restricted to its two members by security rules checked by our servers; purchase tokens are only stored as fingerprints. Access to our administration tools is limited to Pam's Factory and logged, and does not include what you share.

15. Your rights

You have the right to access your data, to have it corrected or deleted, to restrict its processing, to receive it in a portable format, to object to processing based on our legitimate interest, and to withdraw your consent at any time (without affecting the processing carried out before). Under French law, you can also give instructions about what happens to your data after your death.

Many of these rights can be exercised directly in the app: change your first name, your picture and your stickers, choose your notifications, turn statistics off and change your ad preferences (Settings › Privacy), delete a note you wrote, unlink, or delete your account. For anything else, for example to receive a copy of your data, write to pams.factory@gmail.com. We answer within one month; we may ask you to prove your identity, for example by writing from the email address of your account.

If you think your rights are not respected, you can lodge a complaint with the French data protection authority, the CNIL (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr), or with the authority of your country of residence.

16. Deleting your account

You can delete your account at any time in the app (Settings › Delete my account) or on this page. Your account, your profile, your pictures and stickers, the notes you wrote (with their files), your invitation and your messages to the team are deleted immediately. Your couple ends and your partner is told; the rest of what you shared becomes inaccessible and is deleted 30 days later. Purchase records are kept without any link to you, as explained above.

17. Minimum age

Amore Mio is intended for adults: you must be 18 or over to use it, in particular because it offers an intimate mode for adults. We do not knowingly collect data from minors; if you think a minor has created an account, write to us and we will delete it.

18. Changes

We may update this policy, for example when a feature changes. The date at the top shows the latest version; we will tell you in the app before any important change takes effect.

19. Contact

Romain Pamart EI (Pam's Factory), pams.factory@gmail.com.