Privacy policy
Last updated: 9 November 2026
This policy explains how Pam's Factory processes personal data when you use the Amore Mio app on Android and iPhone and this website, in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the French Data Protection Act ("loi Informatique et Libertés").
In short: what you share with your partner (notes, photos, videos, voice notes, answers, drawings) is only visible to the two of you. We do not read it, we never sell your data and we never use it for advertising. Usage statistics are only collected if you agree. You can unlink or delete your account at any time.
1. Who is responsible for your data
The data controller is Romain Pamart EI (Pam's Factory), email: pams.factory@gmail.com.
We have not appointed a data protection officer. For any question about your data or to exercise your rights, write to pams.factory@gmail.com.
2. What data we process, why, and on which legal basis
| Data | Purpose | Legal basis (GDPR art. 6) |
|---|---|---|
| Account: email address, sign-in method (Google, Apple, or email and password), user identifier, creation and sign-in dates; with Google sign-in, the name and photo of your Google account | Create and secure your account, recognise you on your devices | Performance of the contract (6.1.b) |
| Profile: first name, emoji, profile picture, happy and sad faces (emoji or selfie stickers), language, time zone, platform (Android or iOS), app version, last activity date, notification settings | Show you to your partner, send notifications in your language and at the right time of your day | Performance of the contract (6.1.b) |
| Couple: the link between your two accounts, the day your relationship started (if you add it), the flame and its record, counters (notes, winks, games), invitation code | Link you with your partner and run the features you share | Performance of the contract (6.1.b) |
| What you share with your partner: notes (text, paper and lettering), photos, videos, voice notes and their captions, winks, reactions, reading dates, notes kept in the memory box, answers to the question of the day, game answers, comments, quiz questions and drawings | Deliver it to your partner and keep your shared history | Performance of the contract (6.1.b); explicit consent for the sensitive information you choose to share (art. 9.2.a, see section 3) |
| Purchases: store, order or transaction number, fingerprint (SHA-256) of the purchase token, product, price, currency, dates, status (completed, refunded) | Deliver Premium to you and your partner, prevent fraud, keep accounting records | Contract (6.1.b) and legal obligation (6.1.c) |
| Notifications: device token (Firebase Cloud Messaging) and the notices shown in the app (replies from the team) | Tell you about your partner’s notes, winks, answers and games, your flame, your anniversaries and our replies | Performance of the contract (6.1.b) |
| Usage statistics (Google Analytics for Firebase), only if you agree: events such as “note sent” or “game started” (never their content), app instance identifier, device model, operating system, approximate country | Understand how Amore Mio is used and improve it | Consent (6.1.a) |
| Crash reports (Firebase Crashlytics): technical state of the app at the time of a crash, device model, operating system, installation identifier | Find and fix bugs | Legitimate interest: app reliability (6.1.f) |
| Advertising, free version only (Google AdMob): advertising identifier, IP address, device information, interactions with ads | Show the ads that fund the free version, measure them, prevent fraud | Consent (6.1.a) for personalised ads and device storage; otherwise non-personalised ads |
| Messages to the team (Settings › Report a bug or an idea): your messages and our replies, app version, platform, device model, language | Fix problems, improve Amore Mio, answer you | Legitimate interest (6.1.f) |
| Support emails: your address and your messages | Answer you | Legitimate interest (6.1.f) |
We do not collect your payment card details (they are handled by Google Play or Apple), your contacts or your location. We never use what you share with your partner for advertising or profiling, nor to train artificial intelligence models.
3. What you share with your partner
What you send in Amore Mio is only visible to you and to the partner linked to your account: notes and their files, winks, reactions, answers to the question of the day (shown to your partner once you have both answered), game answers, comments and drawings. Your partner also sees your profile (first name, emoji, profile picture, stickers), whether a note has been read, and your flame. Nothing is ever public.
Our team does not read what you share: our administration tools do not show notes, files, answers or drawings. They show the details of an account and of its couple (first name, email address, dates, counters, list of games, purchases), to help you and to handle purchases. We would only access what you share if the law required it.
What you share may reveal sensitive information about you (for example about your private life, your health or your beliefs), in particular in the Naked truth mode, whose questions are intimate. We only process it to deliver it to your partner and keep it for the two of you, on the basis of your explicit consent, which you give by choosing to share it (and, for this mode, by confirming that you both want to play it). You can withdraw it at any time by deleting a note you wrote, by unlinking or by deleting your account.
Remember that your partner can keep what you send them (screenshots, saved copies): only send what you are comfortable sharing.
4. Invitations and unlinking
To link your accounts, one of you shares an invitation: a code of 6 characters valid for 7 days, and a link to this website. Whoever has the code or the link can see your first name and your emoji until the invitation is used or expires: keep it for your partner. Once you are linked, the code is deleted.
Either of you can unlink at any time (Settings › Our couple). What the couple shared is then no longer accessible to anyone and is kept 30 days, so that everything comes back if the same two accounts link again within that time; after that, it is deleted for good, files included.
5. Profile picture and selfie stickers
Your profile picture and your happy and sad faces are optional. When you make a selfie sticker, the person is cut out on your phone by its system (Apple Vision on iPhone, Google ML Kit on Android); only the finished sticker is sent to our servers. Your pictures and stickers are only shown to your partner. A picture you replace or remove is deleted.
6. Purchases
Premium is bought through Google Play or the App Store, which process the payment as independent controllers under their own privacy policies. They send us a proof of purchase, which our server checks with them before unlocking Premium on your account, and on your partner’s for as long as you are linked. We keep a record of each purchase for 10 years, as required by French accounting law (Commercial Code, art. L123-22); when you delete your account, this record is kept without any link to you.
7. Notifications
To tell you about a note, a wink, an answer, a game, the flame or an anniversary, our server sends push notifications through Firebase Cloud Messaging and, on iPhone, the Apple Push Notification service. They show your partner’s first name and what happened (“sent you a little note”), never the text of your notes or answers; your phone may display them on its lock screen. You choose which ones you receive in Settings › Notifications, and you can turn them off in the settings of your phone.
8. Statistics and crash reports
Usage statistics (Google Analytics for Firebase) are only collected if you turn them on, in Settings › Privacy › Share anonymous usage statistics: they are off until then, and you can turn them off at any time. They are pseudonymous (tied to an identifier of the app installation, not to your account, your name or your email address) and never contain what you write. We use them in aggregate form only (for example: how many games were played this week).
Crash reports (Firebase Crashlytics) contain technical information about the crash and the device, never the content of your notes. They are kept 90 days.
9. Advertising in the free version
The free version shows ads served by Google AdMob; Premium (yours or your partner’s) shows none. In the European Economic Area, the United Kingdom and Switzerland, a consent form (Google User Messaging Platform, IAB TCF framework) asks you at first launch whether ads may be personalised and whether information may be stored on or read from your device. Without consent, only non-personalised or limited ads are shown. On iPhone, the app also asks for your permission before accessing the advertising identifier (App Tracking Transparency).
You can change your choice at any time in Settings › Privacy › Ad preferences, and reset or delete the advertising identifier in the settings of your device. How Google uses data for advertising: policies.google.com/technologies/ads.
10. This website
This website uses no cookies, no analytics and no advertising. It remembers the language you choose in your browser (local storage), without sending it to us. The account deletion page uses Firebase Authentication to sign you in: your session is kept in this browser tab only and is removed when you sign out or close it. The invitation page asks our server for the first name and emoji of the person who invites you. Our hosting provider keeps technical logs (IP address, browser, pages requested) for security, for 30 days.
11. Who receives your data
Your data is only accessible to Pam's Factory and to the following recipients, within the limits of their task:
- Your partner: what you share with them and your profile, as described in section 3.
- Google (Google Ireland Limited and Google LLC), as processor: Firebase Authentication, Cloud Firestore, Cloud Storage, Cloud Run, Firebase Hosting, Firebase Cloud Messaging, Google Analytics for Firebase, Firebase Crashlytics, under the Google Cloud and Firebase data processing terms.
- Google AdMob for the ads of the free version, as independent controller for personalised advertising, under Google’s privacy policy.
- Google and Apple, as independent controllers, when you sign in with your Google account or with Apple; Apple also delivers the notifications of iPhones (Apple Push Notification service).
- Google Play and Apple (App Store) for purchases and payments, as independent controllers.
We never sell or rent your data. We may disclose it to the authorities when the law requires it.
12. Transfers outside the European Union
Our server and our database are hosted in the European Union (Google Cloud, Belgium). The files you share (photos, videos, voice notes and their thumbnails) and your profile pictures and stickers are stored in the United States (Google Cloud Storage, Iowa), and Google may process some data in other countries for its services. These transfers are covered by the standard contractual clauses of the European Commission (Decision 2021/914) included in Google’s data processing terms, and by the EU-U.S. Data Privacy Framework, under which Google LLC is certified, with additional security measures such as encryption in transit and at rest. You can ask us for a copy of these safeguards.
13. How long we keep your data
| Data | Retention |
|---|---|
| Account and profile | Until you delete your account |
| Profile picture and stickers | Until you replace or remove them, or delete your account |
| What the couple shares | As long as you are linked (a note deleted by its author disappears at once); after unlinking or the deletion of one of the two accounts, 30 days, then deleted. The notes of a deleted account are deleted at once |
| Invitation code | 7 days, or until it is used |
| Purchase records | 10 years (accounting obligations), without link to you once your account is deleted |
| Usage statistics | 14 months at most (Google Analytics setting) |
| Crash reports | 90 days |
| Messages to the team | 2 years after the last message, or until you delete your account |
| Notifications | Notices in the app: 180 days; device token: 270 days without activity, or until you sign out |
| Support emails | 3 years after our last exchange |
| Technical and security logs | 30 days; audit log of administrative actions: 400 days |
14. Security
Data is encrypted in transit (HTTPS) and at rest. Access to what a couple shares is restricted to its two members by security rules checked by our servers; purchase tokens are only stored as fingerprints. Access to our administration tools is limited to Pam's Factory and logged, and does not include what you share.
15. Your rights
You have the right to access your data, to have it corrected or deleted, to restrict its processing, to receive it in a portable format, to object to processing based on our legitimate interest, and to withdraw your consent at any time (without affecting the processing carried out before). Under French law, you can also give instructions about what happens to your data after your death.
Many of these rights can be exercised directly in the app: change your first name, your picture and your stickers, choose your notifications, turn statistics off and change your ad preferences (Settings › Privacy), delete a note you wrote, unlink, or delete your account. For anything else, for example to receive a copy of your data, write to pams.factory@gmail.com. We answer within one month; we may ask you to prove your identity, for example by writing from the email address of your account.
If you think your rights are not respected, you can lodge a complaint with the French data protection authority, the CNIL (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr), or with the authority of your country of residence.
16. Deleting your account
You can delete your account at any time in the app (Settings › Delete my account) or on this page. Your account, your profile, your pictures and stickers, the notes you wrote (with their files), your invitation and your messages to the team are deleted immediately. Your couple ends and your partner is told; the rest of what you shared becomes inaccessible and is deleted 30 days later. Purchase records are kept without any link to you, as explained above.
17. Minimum age
Amore Mio is intended for adults: you must be 18 or over to use it, in particular because it offers an intimate mode for adults. We do not knowingly collect data from minors; if you think a minor has created an account, write to us and we will delete it.
18. Changes
We may update this policy, for example when a feature changes. The date at the top shows the latest version; we will tell you in the app before any important change takes effect.
19. Contact
Romain Pamart EI (Pam's Factory), pams.factory@gmail.com.