Privacy Policy

Cupidsgram is a private couples' service: two people in a relationship create a shared space — photos, captions, birthday notes — styled after familiar social apps. This policy explains what we collect, why, how long we keep it, and what you can do about it.

We collect only what the product needs to function:

• Account data — names, an email address (for verification and receipts), a hashed password, a phone number (for WhatsApp links), and the Instagram handles you provide.
• Your content — the photos you upload, captions, and birthday messages. This is the core of the product.
• Relationship date — the start date you enter; used to compute counts in your page.
• Technical data — IP addresses are stored only as HMAC fingerprints (never raw); emails used for verification are stored as a fingerprint plus an encrypted copy; security tokens are stored hashed.
• Payment data — checkout and billing are handled entirely by Whop. We never see your card details.

A shared space naturally includes details about your partner — their photos, first name, and relationship dates. You are responsible for making sure the person in your uploads knows about and consents to them, and that uploading them does not violate anyone's privacy or rights. Please do not upload information about anyone who has not agreed to it.

We process this data to run the service (show your page, send your emails, secure your login), to prevent fraud and abuse, and to comply with law. We do not sell personal data and we do not use your photos or names to train our own models.

When you select the AI caption option, that post's photo is transmitted to our AI caption provider, OpenRouter (a US service), which forwards it to the model provider that generates the caption — currently Google (Gemini) or OpenAI. This happens together with the first names and relationship context needed to write a personal caption. You can switch to manual or the random caption pool at any time. Paid API tiers do not train models on your data; the photo is not retained by the provider, and only the resulting caption text is stored on our servers.

We keep account data for as long as your account is active, then hard-delete the tenant row when you request deletion or after a grace period for recovery. Media files are deleted from object storage when you remove a post. Email log lines are kept for 90 days. You can request an export of everything we hold at any time by contacting support — a JSON download of your tenant data and media links.

Wherever you live, you have the right to access (get the export above), correction(edit any field), deletion (delete your account), and to complain to a supervisory authority. California residents: CCPA/CPRA rights; residents of other US states with comparable privacy laws (e.g. Virginia, Colorado, Connecticut, Utah) have similar rights; EU/UK residents: GDPR (our legal bases are performance of our contract with you and, for some processing, consent); India residents: these rights are informed by the DPDP Act 2023.

We protect your data with encryption in transit (HTTPS) and at rest for sensitive fields, hashed or fingerprinted identifiers instead of raw values where possible, scoped session cookies, and least-access practices on our infrastructure. No system is perfectly secure; if a breach affects your data, we will notify you as required by law.

Cupidsgram is not directed at children. You must be 18 or older to create an account, and we do not knowingly collect personal data from anyone under 18. If we learn we hold such data, we will delete it promptly.

We set only strictly necessary cookies: a session cookie for login, a media-access cookie (photo delivery requires it), and an admin cookie — no advertising or third-party tracking cookies. See our Cookie Policy.

See our Subprocessors page for every provider we work with.

Our logo is based on the “Love” icon by Firda Wahyu Dianti, from The Noun Project.

We may update this policy as the product evolves. Material changes will be announced in the service or by email before they take effect, and the date above will change.

Questions or requests: email hello@cupidsgram.com. For takedown claims, see the DMCA page.