Privacy Policy

1. Who we are

Sakura (celebrating a life together) is operated by Simon van Meegdenburg as an individual developer, not as a company or legal entity. This policy explains what personal data Sakura collects, how it is used, and what rights you have over it.

Contact: contact@sakuracalt.com

2. What data we collect

Account data

• Email address — used to identify your account and send transactional emails (invite emails, waitlist confirmation).
• Password — stored as a secure hash. Your password is never readable in plain text, including by us.

Relationship data

• Activities, moments, notes, and photos you submit to the app.
• Special occasions and dates you record.
• Celebration configurations you define.

This data is content you choose to create. It is yours.

Technical data

• Basic server logs (IP address, request timestamps), retained for a maximum of 30 days for security and debugging purposes only.
• No behavioural analytics, no tracking pixels, no advertising identifiers, no session recordings.

3. How we use your data

Your data is used solely to provide the Sakura service:

• To authenticate your account and keep your session secure.
• To store and display your relationship data to you and your relationship partner.
• To send transactional emails you have requested or that result directly from your actions.

Your data is never used for advertising, sale to third parties, training machine learning models, or any purpose beyond operating the service.

4. Data sharing

Sakura does not sell, rent, or share your personal data with third parties for their own purposes. The application is hosted on Vercel, with its servers running in Frankfurt, Germany. Your data is stored by Supabase (database and file storage), also in Frankfurt, Germany. These providers act as data processors under Sakura's instruction.

5. Security

All connections to Sakura are encrypted via HTTPS. Passwords are stored using a secure hashing algorithm. If you believe your account has been compromised, contact contact@sakuracalt.com immediately.

6. Data retention

Your data is retained for as long as your account exists.

When you delete your account:

• Your authentication credentials are permanently deleted.
• Any personal data tied specifically to you is removed or anonymised.
• Shared relationship data is retained for any remaining partner. If you are the last member, all relationship data including uploaded photos is permanently deleted.

7. Your rights

You may request access, rectification, erasure, restriction, objection, and data portability. Export and account deletion are available directly in the app. For other requests, contact contact@sakuracalt.com. Requests will be responded to within 30 days.

8. Exercising your rights in the app

Data export. Go to account settings and select "Export your data". You will receive a downloadable file containing all moments, activities, notes, photos, special occasions, and celebration configurations associated with your relationship.

Account deletion. Go to account settings and select "Delete account". You will be asked to confirm. The deletion is permanent and cannot be undone. Export your data first if you want to keep a copy.

9. Cookies

Sakura uses only cookies that are strictly necessary for authentication and session management. No advertising, tracking, analytics, or third-party cookies are used.

10. Contact and complaints

For privacy-related questions or to exercise your rights: contact@sakuracalt.com. If you are located in the EEA and believe your data protection rights have not been respected, you may lodge a complaint with your local supervisory authority.