This policy explains how the app Dearest (formerly Love Messages, the “App”), published by piapps, the trading name of Shweta Maheshwari (“we”, “us”), handles your information. It covers the App on Google Play, the App Store and the Samsung Galaxy Store.
| Google Play package | com.cliqs.love.romance.sms |
| Galaxy Store package | app.dearest.galaxy |
| App Store bundle ID | app.dearest |
| Privacy contact | privacy@dearestlove.app |
1. Summary
- Dearest is a private space for two adults. What you send is shared only with the one person you pair with.
- You can start without signing up. You can later link a Google or Apple account so you can sign in again on a new phone.
- Your notes, photos, doodles and answers are stored on our servers so they reach the person you are paired with and stay in your Memories. They are encrypted in transit and at rest, but they are not end-to-end encrypted (section 8).
- Unpairing stops sharing at once and keeps your shared memories for 30 days, so you can pair again and bring them back. Deleting your account deletes you and everything you sent.
- The App shows no ads. We use Firebase for crash reports and usage statistics, and you can turn these off in Settings.
- We do not sell your personal data and we do not use it to track you across other companies’ apps or websites.
2. Data we collect and why
| Data | Examples | Purpose |
|---|---|---|
| Account | A random account ID. If you link Google or Apple: your email address and that sign-in provider | To keep your space yours and let you sign in again |
| Profile | The name the person you pair with sees, an optional profile photo, your time zone and language, notification choices and quiet hours, and, if you add them, your birthday, the date you got together and when you next meet | To show your days together, countdowns and their local time, and to send reminders at sensible hours |
| City (optional) | The city you choose or confirm for Miles apart, with its country and a point rounded to about 11 km. The App never reads your GPS location | To show how far apart you are, on screen and on widgets |
| What you send | Notes, photos, doodles, moods, heartbeats, comments, answers to the daily question and to question decks, ratings of questions, and the memories you mark as favourites | To deliver them, show them in widgets and Memories, and let you search them |
| Journal | Pages, checklists and photos you write in your private journal | To keep your journal on all your phones. Only you can read it |
| Purchases | Which Pro plan you have, its status and any free trial dates. We never see your card details | To give Pro to you and the person you pair with |
| Device | A push notification token, the App’s version, and a check from Google Play Integrity or Apple App Attest that a request comes from a genuine copy of the App | To send you notifications and protect the service from abuse |
| Website contact form | The topic, your name, your email address and your message, the page you wrote from and your country (worked out from your connection, not stored as an IP address) | To answer you. Nothing you write on the website is linked to your account in the App |
| Usage and crashes | Screens opened and features used (counts and IDs, never what you write or send), crash logs, device model and operating system version | To understand how the App is used and fix problems. You can turn this off (section 5) |
Your age. When you first open the App it asks when you were born, to keep it for adults. The date stays on your phone and is never sent to us or stored. The App may also ask Google Play or Apple for an age signal on the same terms; that answer is not stored either.
Permissions. Notifications, to tell you when something arrives and for reminders you choose. Internet and network state, to send and receive and to know when you’re offline. Photos, only the ones you pick, through the system picker. The camera, only when you take a photo to send. Face ID, only if you use it for app lock. On Android, the App also schedules milestone reminders after your phone restarts. The App asks for no location permission.
3. Who can see your content
- Only you and the person you are paired with can see what either of you sends. There are no public profiles and no way for anyone else to find you. Pairing needs a code from one of you and the other’s acceptance.
- Your journal is private to you, even from the person you are paired with, unless you choose to send them a copy of a page.
- Widgets show recent notes and photos on your own phone. You can hide notes on the lock screen and in notifications, and lock the App with a passcode or Face ID.
- Disappearing notes and photos (a Pro feature) are never shown on widgets or in notifications and are deleted after they are seen or after 24 hours. Keep in mind the other person can still take a photo of their screen.
- We do not look at your content except when it is needed to run the service, to act on a report of abuse, or where the law requires.
4. Notifications
Notifications are delivered through Google Firebase Cloud Messaging and the Apple Push Notification service. In current versions of the App a notification carries the sender’s name and the kind of thing they sent (for example “Alex sent you a note”); your phone then fetches the words or photo from us. Older versions of the App (Love Messages and the first Dearest builds) receive the note text in the notification itself until they are updated. To show the newest moment straight away, a copy of the latest note, caption or photo link is also kept in Firebase Realtime Database for the two of you until the next one replaces it.
5. Analytics and your choices
We use Google Firebase Analytics and Crashlytics with your account ID. Events contain IDs and counts only, never the words or photos you send, names or cities. You can turn this off at any time in Settings → Privacy → Share usage and crash reports. Firebase Analytics does not read your advertising ID in the App, and ad storage and personalisation signals are switched off.
6. Service providers
We use these providers to run the App. Each processes data only to provide its service to us.
- Cloudflare (Workers, D1, R2, Durable Objects, Turnstile, Email Routing and Email Sending): our servers, database and photo storage, the check on our website’s contact form that a message comes from a person, and our dearestlove.app email, which carries contact form messages and the emails you send us to our inbox.
- Google Firebase: sign-in, live updates (Realtime Database), push notifications (Cloud Messaging), App Check, Analytics and Crashlytics.
- Google: Google sign-in, Play Integrity and Play Age Signals.
- Apple: Sign in with Apple, App Attest, push notifications and the Declared Age Range check.
- RevenueCat: manages Pro purchases. It receives a private purchase ID (not your account ID) and purchase details.
- Google Play, the App Store and the Samsung Galaxy Store: handle payment for Pro under their own privacy policies.
These providers may process data in countries other than yours, including the United States, under their own safeguards for international transfers. The App includes Google’s Mobile Ads SDK, but it is switched off and is never started. If we ever show ads, we will update this policy first and ask for your consent where the law requires.
7. Retention and deletion
- While you use the App, we keep your data so it works on every phone you sign in on.
- Free plan photos and doodles are deleted 30 days after they are sent; the App tells you a week before. Notes and answers older than 90 days are hidden on the free plan, not deleted, and come back with Pro. With Pro, memories and photos are kept for good. If Pro ends, there is a 30-day grace period before the free rules apply.
- Delete for both of us removes something you sent, at once, for both of you.
- Unpair stops sharing at once. Your shared memories are kept for 30 days, during which either of you can download a copy, delete what you sent, or pair again to bring them back. After 30 days they are deleted for both of you.
- Delete my account (Settings) deletes at once everything you sent, your journal, your profile photo, your profile, your purchase records we hold and your sign-in account. The person you were paired with keeps what they sent for 30 days, as after an unpair.
- Inactive accounts. An account that is not paired and has not been opened for 12 months, and a couple where neither person has opened the App for 24 months, are deleted. We warn you by notification 30 and 7 days before, and opening the App stops it. These rules are counted from 18 November 2026 and never apply while you have Pro.
- Backups. Deleted data can remain in encrypted database backups for up to 30 days before it is gone for good.
- Safety holds. If something is reported to us for child safety or another serious harm, we may keep it, even after a deletion, for as long as an investigation and the law require.
- Messages sent through the website contact form, and emails you send us, are kept for up to 24 months, then deleted. Ask us and we delete yours sooner.
- Analytics data is kept for up to 14 months and crash reports for 90 days. Purchase records are kept by the stores and RevenueCat for the periods they set, and by us as long as the law requires.
Deleting your account without the App. Email privacy@dearestlove.app with the subject “Delete my Dearest account”, from the email address linked to your account, or tell us your name and the name of the person you are paired with as they appear in the App. We will confirm and delete the data listed above within 30 days.
8. Security
Everything is encrypted in transit (HTTPS) and our database and storage are encrypted at rest. Photos are served only through signed links that expire within 2 days, and requests are checked with Firebase App Check. Sign-in tokens on your phone are kept in the Android Keystore or the iOS Keychain, and Android cloud backup of the App is off.
Dearest is not end-to-end encrypted. Besides the two of you, our servers, and people we authorise to run the service, can technically access what you send. We limit that access and use it only as described in section 3. No system is perfectly secure, but we work to protect your data.
9. Your rights
Depending on where you live (for example under the GDPR, the UK GDPR, India’s Digital Personal Data Protection Act 2023 or US state privacy laws), you may have the right to access, correct, delete or port your personal data, to object to or restrict its processing, and to withdraw consent. Many of these are built into the App: Download a copy gives you your memories and profile, and you can edit or delete what you added. For anything else, email privacy@dearestlove.app. You may also complain to your local data protection authority.
10. Children
Dearest is for adults aged 18 and over and is not directed at children. We do not knowingly collect data from anyone under 18; if we learn that we have, we delete it. See our child safety standards.
11. Changes to this policy
If we change this policy, we will update this page and its effective date. We will also tell you in the App about significant changes.
12. Contact and developer details
| App | Dearest (formerly Love Messages) |
| Developer | piapps |
| Legal name | Shweta Maheshwari |
| Address | VILL Najibabad road, Kotdwara - 246149, India |
| privacy@dearestlove.app |
piapps is the trading name of Shweta Maheshwari, who is the data controller (and, under India’s Digital Personal Data Protection Act 2023, the Data Fiduciary) for the personal data described in this policy.