Privacy Policy
Last updated: October 26, 2026
This Privacy Policy explains how Pigeon Mobile Limited (“we”, “us”, “our”) collects, uses, shares and protects information when you use the OnlyWe mobile application (the “App”) and the website onlywe.app (the “Website”, together with the App, the “Services”). Please read it carefully. By using the Services you acknowledge the practices described in this policy.
1. Who we are
The Services are operated by Pigeon Mobile Limited, which is the controller responsible for your personal information. For any privacy questions or requests contact us at [email protected].
2. Scope of this policy
This policy applies to personal information we process through the App, the Website and our support channels. It does not apply to third-party services that you access through the App, such as the App Store, which are governed by their own privacy policies.
3. Information we collect
Account information. You sign in to the App with Sign in with Apple. Apple shares with us a unique user identifier and, if you allow it, your name and email address (which may be a private relay address created by Apple). We never receive your Apple ID password.
Profile information. The name you enter, the avatar you choose from the set provided in the App, and the date your relationship started. We do not ask you to upload photos.
Partner connection. When you connect with your partner, we store the link between your two accounts.
Content you create. Your answers to daily questions, moods, “I miss you” moments, and date ideas and items you save to your shared list (“User Content”).
Purchase information. If you buy a subscription, we receive information about it from Apple and our subscription provider — such as the product, purchase date, renewal status, trial status, price and country. Payments are processed by Apple; we never receive your payment card details.
Device and usage information. Device model, operating system version, app version, language, time zone, IP address, app installs, sessions, in-app events and crash information. If you allow tracking in the App Tracking Transparency prompt on iOS, we may also receive your device's advertising identifier (IDFA).
Crash reports. If the App crashes, Firebase Crashlytics collects a crash report: the stack trace, device model, operating system and app version, the state of the App at the time of the crash and a random installation identifier. Crash reports do not include your name, email address or User Content.
Saving your OnlyWe card. If you choose to save your OnlyWe card, the App asks for permission to add that image to your Photos. This permission is add-only: OnlyWe can only add images and never reads, accesses or uploads your photo library.
Push notification token. If you allow notifications, we receive a token that lets us send notifications to your device.
Support communications. Information you send us when you contact support, such as your email address and the content of your message.
4. Information we do not collect
We do not collect your precise location, contacts, photos or other content of your photo library, camera or microphone data, health data or payment card details. We do not ask you to provide sensitive personal information (such as information about health, religion or sexual orientation) and ask you not to include it in your User Content.
5. How we use information
- To create your account, sign you in and keep your account secure.
- To connect you with your partner and provide the App's features — daily questions, moods, “I miss you” moments, date ideas and your shared list.
- To sell, manage and restore subscriptions.
- To measure which marketing campaigns bring users to the App and to understand how the App is used, so we can improve it.
- To diagnose crashes and fix bugs.
- To save your OnlyWe card to your Photos when you ask us to.
- To send notifications you have enabled.
- To respond to support requests and send important service notices, such as changes to our terms or policies.
- To detect, prevent and investigate fraud, abuse, security incidents and violations of our Terms of Use.
- To comply with legal obligations and enforce our rights.
6. Legal bases for processing (EEA and UK users)
If you are in the European Economic Area or the United Kingdom, we process your personal information on the following legal bases:
| Purpose | Legal basis |
|---|---|
| Account, partner connection and App features | Performance of a contract with you |
| Subscriptions and purchase records | Performance of a contract; legal obligation (tax and accounting) |
| Analytics, crash reports, App improvement, security and fraud prevention | Our legitimate interests |
| Saving your OnlyWe card to Photos | Your consent (iOS Photos permission) |
| Marketing attribution using the IDFA | Your consent (App Tracking Transparency) |
| Push notifications | Your consent |
| Support requests | Performance of a contract; our legitimate interests |
| Responding to legal requests | Legal obligation |
Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of processing before the withdrawal.
7. What your partner can see
When you connect with a partner, your profile (name, avatar and relationship start date) and the User Content you create in your shared space — answers to daily questions, moods, “I miss you” moments and your shared list — are visible to your connected partner. Please think about what you share. If you disconnect or delete your account, you stop sharing new content with that partner.
8. How we share information
We do not sell your personal information. We share it only with the following service providers, which process it on our behalf and under our instructions:
- Our own servers — store your profile, partner connection and User Content and send push notifications. Our servers are located in the European Union.
- Apple — Sign in with Apple, in-app purchases and delivery of push notifications through the Apple Push Notification service (Apple Privacy Policy).
- Google Firebase — Firebase Authentication handles sign-in with Apple and stores your account identifier; Firebase Crashlytics collects crash reports (Firebase Privacy).
- Adapty — subscription management and paywall analytics (Adapty Privacy Policy).
- Adjust — app install attribution and marketing measurement (Adjust Privacy Policy).
We may also disclose information: (a) when required by law, regulation, court order or a valid request from public authorities; (b) to protect the rights, safety and property of our users, the public or Pigeon Mobile Limited; (c) in connection with a merger, acquisition, financing or sale of all or part of our business, in which case we will require the recipient to honour this policy; and (d) with your consent.
9. Refund requests
If you ask Apple for a refund of an in-app purchase, Apple may ask us for information about how the purchase was used, and we (directly or through Adapty) may provide it to help Apple decide on the request. This may include: time since the App was installed, total time spent in the App, an anonymous account identifier, whether the purchased content was used, whether the purchase included a free trial, the total amount spent and the total amount refunded. We do not share your name, email address or User Content.
10. Tracking and advertising identifiers
We access your advertising identifier (IDFA) only if you allow it in the iOS App Tracking Transparency prompt. You can change this at any time in iOS Settings → Privacy & Security → Tracking. If you decline, Adjust measures installs without the IDFA. We do not show third-party advertising in the App.
11. Cookies and the Website
The Website does not use cookies for analytics or advertising and does not include third-party trackers. Our content delivery provider (Cloudflare) may set strictly necessary security cookies and, together with our hosting provider, may log technical information such as IP address, browser type and the pages requested, for security and to keep the Website running.
12. Notifications and communications
We send push notifications only if you allow them. You can turn them off at any time in iOS Settings → Notifications → OnlyWe. We may email you about your account, security or important changes to our Services; these service messages are not marketing.
13. Data retention
We keep your information for as long as your account is active and as needed to provide the Services. When you delete your account, we delete your profile and User Content from our servers within 30 days; backups are overwritten in the normal course of operations. We may keep limited records longer where required by law or for legitimate business purposes, for example purchase records needed for tax and accounting, or information needed to resolve disputes and enforce our agreements. Support emails are kept for up to 2 years.
14. Deleting your account
You can delete your account at any time in the App: open the Profile tab and tap “Delete account”. You can also email us at [email protected]. Deleting the App from your device does not delete your account. Deleting your account does not cancel an active subscription — manage subscriptions in iOS Settings → Apple ID → Subscriptions. You can also stop using Sign in with Apple for the App in iOS Settings → Apple ID → Sign-In & Security → Sign in with Apple.
15. Security
We protect your information with appropriate technical and organisational measures, including encryption in transit (HTTPS/TLS), access controls, firewalls and restricted administrative access to our servers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a data breach that affects your personal information, we will notify you and the relevant authorities as required by law.
16. International transfers
Your information is stored on our servers in the European Union and may be processed by our service providers in other countries, including the United States and Hong Kong. Where required, we rely on appropriate safeguards for such transfers, such as the European Commission's Standard Contractual Clauses or adequacy decisions.
17. Your rights
Depending on where you live, you may have the right to:
- access the personal information we hold about you and receive a copy of it;
- correct inaccurate or incomplete information;
- delete your personal information;
- receive your information in a portable format;
- object to or restrict certain processing;
- withdraw consent at any time;
- lodge a complaint with your local data protection authority.
To exercise these rights, email us at [email protected] from the address linked to your account. We may need to verify your identity before responding. We will respond within the time required by applicable law (usually 30 days). We will not discriminate against you for exercising your rights.
18. Additional information for California residents
This section supplements this policy for California residents under the California Consumer Privacy Act (CCPA), as amended.
| Category collected | Examples | Disclosed to |
|---|---|---|
| Identifiers | Account ID, email (if shared by Apple), IP address, IDFA (if allowed) | Service providers listed above |
| Personal records | Name | Service providers |
| Commercial information | Subscription and purchase history | Apple, Adapty |
| Internet or other electronic activity | App usage, sessions, in-app events, crash reports | Service providers |
| Inferences and user content | Answers, moods, shared list | Your connected partner; our servers |
We collect this information from you, your device and our service providers for the purposes described in section 5. We do not sell personal information. If you allow tracking, sharing your IDFA with Adjust for marketing measurement may be considered “sharing” for cross-context behavioral advertising under California law; you can opt out at any time by turning off tracking in iOS Settings → Privacy & Security → Tracking. We do not use or disclose sensitive personal information for purposes that require a right to limit. You may designate an authorised agent to make a request on your behalf. We do not knowingly sell or share the personal information of consumers under 16.
19. Do Not Track and automated decisions
Because there is no common industry standard for “Do Not Track” browser signals, the Website does not respond to them; it does not track you in any case. We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.
20. Children
The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13 (or under the minimum age required by the laws of your country). If you believe a child has provided us with personal information, please contact us at [email protected] and we will delete it.
21. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and change the “Last updated” date. If changes are significant, we will notify you in the App or by other appropriate means before they take effect.
22. Contact us
If you have any questions about this Privacy Policy or our data practices, contact us:
Pigeon Mobile Limited
Grand Millennium Plaza, 181 Queen's Road Central, Sheung Wan, Hong Kong
[email protected]