Privacy Policy

Color Your Love is operated by the company named below (“we”, “us”). We serve users in New Zealand and internationally, and we handle your information in line with the New Zealand Privacy Act 2020 and its Information Privacy Principles. Where you are covered by another regime (such as the Australian Privacy Principles or the EU/UK GDPR), we apply the stronger protection.

Not yet published: the registered business name and postal address for this service are still being confirmed. They will appear here before any marketing email is sent from this service.

Who is responsible for your data

The operating company. For any privacy request or question, contact us at hello@coloryourlove.com.

What we collect and why

• Account: email (for authentication, held by our auth provider) and an optional display name.
• Quiz results: your six ComColors color scores and answers, to compute your profile.
• Couple data: membership, mutual-consent records, and a calculated couple profile.
• Daily cards and their status (done/skipped).
• Coach conversations, if you enable the AI coach.
• Purchase status (via Stripe) — we never see or store card numbers.

We never collect date of birth, home address, GPS location, contacts, photos, gender or sexual orientation, health or sex-life data, banking details, or advertising identifiers.

Why we are allowed to use it

• To provide the service you asked for (to perform our agreement with you).
• Your explicit consent for couple sharing and for the AI coach — withdrawable at any time.
• Our legitimate interest in keeping the service secure and working.
• Meeting legal obligations, such as limited accounting records.

Who processes data for us

• Supabase — authentication, database, storage.
• Stripe — payments (hosted checkout; we do not see card data).
• Vercel — application hosting and delivery.
• Dify — the AI coach service, plus a configured language model, when you use the coach.

Sending data overseas

Some of these providers store or process data outside New Zealand (for example in the United States or the European Union). When personal information is handled overseas we take reasonable steps to ensure it is protected by comparable safeguards, as required by Information Privacy Principle 12.

How long we keep data

• Expired couple invitations: purged within 14 days.
• Coach conversations: 90 days by default.
• Couple daily cards: 90 days.
• Audit events: 12 months unless a law requires longer.
• Account deletion: 30-day grace period, then permanent deletion or anonymisation.

Your rights

You can access, correct, delete, and export your information, and object to or limit certain uses. Use the in-app export and deletion tools, or contact us at hello@coloryourlove.com. You do not have to give a reason to ask us to stop contacting you.

If you are not satisfied with how we handle a request, you may complain to the New Zealand Office of the Privacy Commissioner (privacy.org.nz), to the Australian Information Commissioner (oaic.gov.au), or to the privacy regulator in your own country. If you are in the EU, that is your national supervisory authority and you may complain to it directly without contacting us first.

If we contacted you about weddings (business contacts)

This section covers wedding celebrants, planners, photographers and other businesses we write to directly. It applies whether or not you have ever created an account here.

• What we hold: your business name, the email address, and in some cases the postal address published for your business; the region you operate in; and, for New Zealand celebrants, the public register reference for your appointment.
• Where it came from: the New Zealand Department of Internal Affairs register of celebrants and the Australian Attorney-General's register of marriage celebrants, both published for public search. We do not buy lists, we do not buy your address, and we do not purchase your name from anyone.
• Why we may contact you: we are introducing a referral partnership in which you give couples a resource and earn a share of what they buy. For recipients covered by the EU/UK GDPR that is our legitimate interests, balanced against the fact that you publish your business address precisely so that businesses can contact it. For recipients in Australia, our contacting you is an allowed non-workplace message under the Spam Act 2003, and for consenting recipients in New Zealand it falls within the permitted categories of the Unsolicited Electronic Messages Act 2007 — each conditioned on clear identification and a working unsubscribe, which are both in every message we send.
• Consent is not required for us to hold it; your objection is decisive for contacting you. Objecting is free, needs no reason, and you do not need an account. Use the unsubscribe link at the bottom of any email, or email hello@coloryourlove.com. An objection is recorded on a list that is never deleted and never sold, and it survives you changing your email address.
• Who we share it with: our infrastructure providers listed above, and our postal print supplier if we mail you a printed pack. We do not sell business contact data, and we do not pass your address to another business for their campaigns.
• How long: contact details of a business we wrote to are kept for 24 months from our last contact, then deleted. An objection is kept indefinitely — deleting it could let us contact you again, which is the one thing it exists to prevent.

What we never do

• We do not sell your data, yours or a business's.
• We do not train AI models on your data.
• We do not use your content for advertising.
• We do not contact you about weddings after you have objected, for any reason.

Not a medical service

Color Your Love is an educational tool for relationship communication. It is not medical care, therapy, diagnosis, or crisis support.