What we know about you.

The short version

StrictWife is built so that we cannot read your content, even if we wanted to. Your phone encrypts every rule, task, consequence, reward, check-in, message, photo, and video before it leaves the device. Our servers only ever see ciphertext — opaque blobs we have no key for.

No accounts, no email

Inside the app there is no signup. The wife generates a pair ID and a shared encryption key on her device and gives them to her husband out-of-band. We never see the key. There is no email address, password, or recovery question tied to your pair.

The waitlist on this website is the one exception: until launch we collect an email and a chosen role (wife or husband) so we can quietly tell you when the app is ready. That email is stored in our waitlist database and is not used for anything else. You can ask us to delete it at any time by emailing [email protected].

What our servers store

• A pair record: the pair ID and the two public signing keys (one per role). We use these to verify that requests really come from your devices.
• An append-only log of encrypted records, one per couple. We cannot decrypt them.
• Encrypted media blobs (proof photos and videos) in object storage. Same story — encrypted on your device first.
• Push notification tokens, so we can wake your other device when there is something new to sync. Push payloads carry no plaintext content.
• A short-lived nonce table to prevent request replay. Rows older than ten minutes are deleted automatically.

What we do not store

• Plaintext rules, tasks, messages, check-ins, or media.
• The shared encryption key. It only lives on your phones.
• Names, addresses, phone numbers, or contacts.
• Advertising identifiers, third-party trackers, or analytics that profile you.

Where things run

The website is hosted on Cloudflare Pages. The API is a Cloudflare Worker. Encrypted media lives in Cloudflare R2 object storage. Push delivery uses Apple Push Notification service (APNs) and Firebase Cloud Messaging (FCM) — both receive only opaque routing payloads.

Your rights

You can revoke a pair from inside the app, which severs the link between the two devices and stops new records from being accepted. You can ask us to delete your waitlist email at any time. Because we cannot read your content, requests for a copy of your data will return only the ciphertext we hold on your behalf.

Changes

If we update this policy in a way that materially affects what we collect or how we handle it, we will update the date at the top and, where possible, notify you in the app.

Contact

Questions, requests, or concerns: [email protected].