Privacy Policy
Did We Cross? · Effective date: August 1, 2026
The short version: we do not collect your data. Any of it.
The entire product is engineered so that we couldn't see your
information even if we wanted to.
What the app accesses
- Photo library (metadata only). With your permission, the app
reads the capture time and GPS coordinates stored inside your own
photos. Photo images themselves are never opened, uploaded, or copied.
What happens to that data
- All processing happens in your phone's memory. Locations and
times are rounded into coarse buckets (~40 meters, 1 hour), then
scrambled with a one-time secret key using HMAC-SHA-256.
- The secret key is created on your phone and shared only inside
the invite link you personally send to your friend. Our server
never receives it.
- Only the scrambled, irreversible codes are exchanged between you
and your friend. They cannot be converted back into places or times by
us or anyone else.
- When you close the app, everything from the session is gone. The
app has no accounts, no local database, and writes nothing to disk.
What our server does
- Our relay server is a stateless bridge: it passes the scrambled
codes between two phones and deletes them from memory the moment they
are forwarded.
- It has no database, keeps no logs of user activity,
and stores nothing on disk. Server and proxy request logging are
disabled.
- Standard network information (your IP address) is technically
visible to the server while you are connected, as with any internet
service. It is not recorded.
What we collect
Nothing. No analytics, no advertising SDKs, no tracking, no
accounts, no identifiers. We cannot see who you are, where you have
been, or whether you matched.
Third parties
We share no data with third parties, because we hold no data to
share. The invite link travels through whichever messaging app you
choose to send it with; that app's own privacy policy applies to the
message itself.
Children
The app does not knowingly collect personal information from anyone,
including children, because it collects no personal information at all.
Changes
If this policy ever changes, the new version will be posted at this
address with an updated effective date. Because the architecture cannot
transmit raw personal data, any future change would only ever narrow —
never widen — what is processed.
Contact
Questions: emreyildiz183@gmail.com