Privacy architecture

What stays local, what gets shared, and what has a separate path.

BaeMax Love keeps the primary readable record on the phone. When a user chooses partner sharing, selected updates are encrypted before leaving the sending phone. Some features, such as notifications, maps, beta email, and delivery metadata, work differently and are called out here.

Data flow diagram

Your phoneReadable check-ins, cycle logs, symptoms, tasks, notes, settings, and local reminders.
Encrypted partner updateOnly selected categories leave the phone, encrypted before sending.
Partner phoneThe paired person sees the categories you chose to share.
Notification text, map providers, beta email, and operational metadata are not the same path as local app records. Read the table before quoting a privacy claim.

Data paths

AreaWhat it containsWhere it goesControl or limit
Local app recordCheck-ins, period logs, symptoms, mood, tasks, notes, settings, reminders.Readable on the user's phone.Clear local data from the app. Export supported app state where available.
Partner syncOnly categories the tracker chose to share.Encrypted before leaving the sending phone, then delivered to the paired partner.Change sharing categories or unpair to stop future partner updates.
Notification textPush alerts for partner updates, reminders, beta email flows, and related events.Through the push provider path described in the privacy policy.Use discreet wording, quiet hours, or disable notifications.
Maps and locationLocation only when the user intentionally shares a location check-in or live session.Map and location provider paths apply when those features are used.Choose no location, stop live location, or revoke OS permission.
Beta emailEmail address, confirmation state, cancellation-token hashes, and request metadata.Signup and email providers described in the privacy policy.Use the cancellation link or email support for removal.
Operational metadataServer request metadata needed for delivery, abuse prevention, and service operation.Service logs and providers as described in the privacy policy.Kept separate from the readable local app record.

Claims that are safe to quote

  • Primary readable records live on the phone.
  • Chosen partner updates are encrypted before leaving the sending phone.
  • BaeMax Love states that it does not run ads, sell personal data, request contacts, or include a general-purpose analytics SDK.
  • BaeMax Love does not analyze text threads, dating messages, or screenshots.

Claims to avoid

  • Do not say every byte is local. Partner sync, notifications, maps, beta email, and service metadata have separate paths.
  • Do not say anonymous, unhackable, bank-grade, military-grade, or zero risk.
  • Do not say BaeMax Love is medical advice, contraception, or emergency monitoring.
  • Do not call optional chat a finished secure messenger.