Effective date: September 13, 2026
Date Night Jar ("the App") is developed by Andrew Mitchell. The App is designed to be local-first and private. This policy explains what data the App handles and when, if ever, it leaves your device.
The content you create — date ideas, jar names, jar styles, decorations, and drawings — is stored on your device. There are no usernames or passwords, and we never ask for your name, email, or phone number. Where the App does need to recognise you across devices — for purchases, and for the optional assistant connector below — it uses your Apple-provided iCloud user identifier, and our servers only ever store a one-way hash of it, never the identifier itself.
So your jars stay in sync across your own devices, the App stores your content in your personal iCloud account using Apple's CloudKit private database. This data is tied to your Apple ID and is accessible only to you — we (the developer) cannot read it. If you choose to share a jar privately with a partner, that sharing also happens through Apple's iCloud sharing and stays within iCloud. Your use of iCloud is governed by Apple's Privacy Policy. You can disable iCloud sync for the App in your device's Settings.
Separately from iCloud, the App lets you publish a jar to share it publicly via a link or in the App's jar feed. This is entirely optional and only happens when you explicitly choose to publish a specific jar. When you publish, the following is uploaded to our servers:
• The jar's title, optional description, and idea list (each idea's title, description, tags, and any music or map references you added);
• Jar images (a full image and a thumbnail);
• An optional creator display name, if you set one;
• Optional location you choose to attach (such as a city, or coordinates) — this comes from your selection in the App, not from your device's GPS;
• A category and any tags you add.
Published jars are reviewed by an automated content-moderation step and may then be visible to anyone with the link or, depending on visibility, in the public feed. Device photos you attach to completed dates are never uploaded. Jars you never publish are never sent to our servers.
The App can connect to Claude or ChatGPT so that they can create jars and ideas in your account. This is entirely optional, off until you set it up, and does the following:
• Pairing. You generate a one-time code in the App and type it into an authorization page. We store only a keyed hash of that code — never the code itself — along with the account it belongs to and its expiry. Codes expire after ten minutes, work once, and are marked used when redeemed.
• Access. Once paired, we store an access token for the assistant, tied to your account. It permits creating a jar or an idea and nothing else — the assistant cannot read, change, or delete anything already in your jars, and cannot see your existing ideas, photos, memories, or shared jars.
• What arrives. Jars and ideas the assistant creates are stored on our servers until the App pulls them in. These are not published, never enter the public feed, and are not moderated as published jars are.
We do not send your content to Claude or ChatGPT. Whatever you type into your assistant, and whatever it generates, is handled by that company under its own privacy policy — Anthropic or OpenAI respectively. You can disconnect at any time by removing the Date Night Jar connector in Claude or ChatGPT, which stops access immediately.
Payment is handled entirely by Apple; we never see your card details. To keep a purchase working across your devices we use RevenueCat, a third-party subscription service, which receives a hash of your iCloud user identifier and your App Store transaction details. See RevenueCat's Privacy Policy.
For jars you choose to publish, our servers store the jar content listed above, a randomly generated jar identifier used in the link, and basic engagement counts (such as views, likes, and how a share link was used). If you make a purchase or connect an assistant, they also store a one-way hash of your iCloud user identifier, what you are entitled to, and — while a connector is set up — hashed pairing codes and an access token for that assistant. We do not store passwords, email addresses, phone numbers, contact lists, IP-based profiles, or your precise device location.
The App generates a random, anonymous installation identifier stored on your device. It is sent with requests to our servers so we can associate a published jar with the device that created it (so only you can edit, unpublish, or delete it). It is not linked to your name, email, or Apple ID. To prevent abuse of publishing, the App also uses Apple's App Attest to confirm requests come from a genuine, unmodified copy of the App.
The App uses lightweight, first-party analytics to understand how it is used and to improve it. These are anonymous usage events (for example, an event name, the date, and optionally a category or city associated with a published jar), tied only to the anonymous installation identifier above. This data is processed on our own infrastructure (Cloudflare). The App contains no third-party advertising, no third-party analytics SDKs, and no cross-app tracking. We do not sell or share your data, and we do not use it for advertising.
The App is not directed to children under 13 and does not knowingly collect personal information from them.
Content on your device is removed when you delete the App. Content in iCloud can be removed by deleting the App's data in your iCloud settings. For published jars: unpublishing a jar from within the App removes it from public view, and deleting it permanently purges its images and content from our servers. Once a jar has been public, copies that others saved or remixed are independent of yours. Pairing codes are deleted or expire within minutes; removing the connector in Claude or ChatGPT revokes its access token. To request deletion or ask a privacy question, contact us below.
If this policy changes, the updated version will be posted at this URL with a new effective date.
Questions about privacy? Email [email protected].