Privacy policy for GetComfortable

Last updated: 8 October 2026

GetComfortable is an app with question games for two people. Many of the questions are very personal. So this page says as plainly as we can which data we process, who can see it, and how you delete it again.

1. Who is responsible?

Tobias Kregelin
Rudeloffweg 22
14195 Berlin
Germany
Email: kregelinundkregelin@gmail.com

2. The short version

• You can use the app without an email address and without your real name.
• Your answers are not shown to anybody else. The person you are linked with learns only what the rules of each game provide for (section 4).
• We keep what you answered only until the person you are linked with has answered the same card. Then the two answers are compared once and both are erased. What stays is only that you answered the card.
• Your matches and results are kept on our server only until both of your phones have fetched them. After that they exist only on your two phones: if you lose your phone or delete the app, they are gone.
• Questions about your sex life, notes, and the three games “Have you ever?”, “Who's more likely to?” and “Is that cheating?” exist only with your explicit consent. You can withdraw each consent in the app; the data it covers is then deleted (section 10).
• There are no ads, no tracking and no third-party analytics.
• We count anonymously how often a question was answered yes or no. These counts cannot be traced back to you, and you can switch the counting off for your answers in Settings.

3. What we process, why, and on which legal basis

3.1 Account

At first launch we create an anonymous account for you. It consists of a random identifier and the time it was created.

If you secure your account, we also store your email address, or the link to your Apple ID together with the email address Apple passes on to us (your own, or a relay address that Apple creates if you choose to hide yours), so that you can get back into your account on a new device. You then have your account again, with your link and with which cards you have answered. Your matches and results do not come along, because they are kept on the phone only (section 5). An email address is stored from the moment you enter it, also while you have not confirmed it yet; Settings shows it as waiting. An account you have not secured exists only on your phone and cannot be recovered if you lose it.

Legal basis: Art. 6(1)(b) GDPR (providing the app). For the list of addresses that no further sign-in email is sent to (section 6): Art. 6(1)(f) GDPR (our interest in not sending email to an address that cannot receive it or does not want it).

3.2 Name and character

You enter a name or nickname and make a character (body type, hair, colours including a body colour). The person you are linked with sees both, and nobody else does.

Legal basis: Art. 6(1)(b) GDPR. The character is a drawing that you make up yourself. It does not have to look like you, and we draw no conclusion from it, also not from the colours you choose.

3.3 Gender (optional)

You may give your gender. It decides which body type the character editor starts with, and your answers are counted by gender in the anonymous statistics (3.11). The person you are linked with never sees it. You can change or remove it at any time in Settings.

Legal basis: your consent, Art. 6(1)(a) GDPR. You give it by choosing a gender, during setup or later in Settings: the app says there what it is used for, and nothing is preselected. If you choose "Rather not say", nothing is stored. You withdraw the consent by setting the gender to "Prefer not to say" in Settings; from then on your answers are counted without a gender. Counts already made stay as they are, because they cannot be traced back to you (3.11).

3.4 The link with another person

To play, you link your account with another person's through an invite code. We store that your two accounts are linked, and when the invitation was created; an invitation that nobody accepts runs out after seven days. Together with your gender, if you gave it, this can reveal your sexual orientation.

Legal basis: your explicit consent, Art. 6(1)(a) and Art. 9(2)(a) GDPR. The link only comes into being once both of you have consented.

3.5 Answers to everyday questions and date ideas

In “Get Comfortable” you answer questions with yes, no or “It depends”, or skip them; in “Date Finder” you say yes or no to date ideas. We store each answer to find matches: a question or an idea is shown to the two of you only if you both said yes (or “It depends”).

We keep what you answered only until the person you are linked with has answered the same card. At that moment the two answers are compared once, and what each of you answered is erased, whether you match or not. What stays is only that you answered the card, so that it does not come up again. We do not store when you answered. This holds for every answer in every game, so also for the answers of 3.6 to 3.9. How long an answer can wait, and when the rest is deleted, is in section 8.

Legal basis: Art. 6(1)(b) GDPR.

3.6 Answers to intimate questions

Questions about your sex life and your sexual preferences (in every game) are shown only after you have unlocked them separately. These answers are special-category data. They are kept in the same way as all answers (3.5), so only until the other person has answered the same card.

Legal basis: your explicit consent, Art. 9(2)(a) GDPR. The consent also covers counting these answers anonymously (3.11); its text says so.

3.7 Notes

You can add a note of up to 200 characters to an “It depends” answer. A note is free text: what goes into it is up to you. It is stored readable on our server while your answer waits for the other person's. If the two answers do not make a match, the note is erased with them and kept nowhere. If they do, the note is part of the match: it stays on our server until both of your phones have fetched the match, and after that it exists only on your two phones (3.10). The person you are linked with sees a note only if you match on that question. Notes are never counted or analysed. A note cannot be changed after saving, and cannot be replied to.

Legal basis: your explicit consent, Art. 6(1)(a) and Art. 9(2)(a) GDPR.

3.8 “Have you ever?”

In this game you answer what you have done in your life, with yes, no or “Not sure”. The answers can reveal private matters, for instance about health, sex life, or things that were against the law. No question asks whether you committed a crime or were convicted of one.

The game works differently from “Get Comfortable”: once you have both answered a question, both of you see both answers, whatever they are. Even before that, the other person can see that you have answered questions they have not answered yet — but not which ones and not how.

Some questions are “delicate questions”: about earlier relationships, or about the relationship the two of you are in. You see them only if you switch them on in the game. An answer to a question about your relationship also says something about the other person. Like every answer in this game, it is shown only once that person has agreed to the game and has answered the same question.

Your answer is kept as described in 3.5: only until you have both answered the question. The result, with both of your answers, is then kept as described in 3.10.

Legal basis: your explicit consent to this game, Art. 6(1)(a) and Art. 9(2)(a) GDPR; for the questions about sex life also the consent of 3.6.

3.9 “Who's more likely to?” and “Is that cheating?”

In “Who's more likely to?” you say for each question which of you two it fits better: you, the other person, or “Can't decide”. Each answer is also a statement about the other person. It is shown to nobody until that person has agreed to this game themselves, for a question about sex life also to the intimate questions, and has answered the same question. As in 3.8, both of you see both answers once both have answered, and the other person can see beforehand that you are ahead of them. Answers and results are kept in the same way as in 3.8.

Legal basis: your explicit consent to this game, Art. 6(1)(a) GDPR; for the questions about sex life also the consent of 3.6.

In “Is that cheating?” both of you get the same cards. Each names something a person in a relationship might do, and you say what it is for you: “Cheating”, “Not cheating” or “Grey area”. An answer is your view of where cheating begins. It says what you expect of a relationship and of the other person; it does not say what either of you has done. The cards about sex are shown only if you have also unlocked the intimate questions (3.6). As in 3.8, both of you see both answers once both have answered, and the other person can see beforehand that you are ahead of them. Answers and results are kept in the same way as in 3.8.

Legal basis: your explicit consent to this game, Art. 6(1)(a) GDPR; for the cards about sex also the consent of 3.6.

3.10 The order of the cards, matches and results

So that your next card in “Get Comfortable” stays fixed until you answer it, we store which cards were dealt to you and in which order (without a time). In choosing a card, those the other person has already answered are somewhat preferred — whatever their answer was — so that matches surface sooner.

When the two answers to a card are compared and there is something to show (a match in “Get Comfortable” or “Date Finder”, a result in “Have you ever?”, “Who's more likely to?” or “Is that cheating?”), we store an entry for the two of you: the question; for a match, whose wish it was where the question has two sides, and who said “It depends”, with the notes; for a result, both answers; and the time it came about, which is the moment the second of the two answers arrived. We use this time only to put your matches and results in order.

We keep this entry only until both of your phones have fetched it. Then we erase its content on our server, and the match or result exists only on your two phones (section 5). What stays on our server is an entry without content: which link it belongs to, which game, whether the question was an intimate one, and whose note it carried. We need it so that a later withdrawal can take the match or result off both phones (section 10). From these entries we can see how many matches and results a link has had in each game, and how many of them on intimate questions, but not which questions they were.

Legal basis: as for the answers behind it.

3.11 Anonymous statistics

When an answer is saved, we increase a counter: per question, how often yes, no or “It depends” was said (in “Who's more likely to?”: how often "me" and how often the other person; in “Is that cheating?”: how often “Cheating” and how often “Not cheating”), separately by gender if given. The counters hold no account identifier, no link and no time. Skipped questions and notes are not counted, and neither is “Not sure”, “Can't decide” or “Grey area”. If you answer a card again because it comes again (section 8), that answer is counted again. Our reports show a question only from ten answers on, and leave out every yes or no count below ten.

Because the counts cannot be assigned to a person, they stay even if you withdraw a consent or delete your account. A withdrawal only stops further counting.

You can switch the counting off for your answers at any time: Settings → "Anonymous statistics" → "Count my answers". From then on none of your answers is counted, in any game. We store with your profile that you switched it off.

Legal basis for counting everyday answers: Art. 6(1)(f) GDPR (our interest in understanding which questions work); the switch is how you object to it (Art. 21 GDPR). For intimate answers and the three games of 3.8 and 3.9: the respective consent.

3.12 Proof of your consents

For each consent we store when you gave it, which version of the consent text the app showed you and in which language, and when you withdrew it, to be able to prove the consent. These records are deleted with your account.

Legal basis: Art. 6(1)(c) with Art. 7(1) GDPR.

3.13 Technical data when the app connects

When the app reaches our server, our hosting provider logs the connection: your IP address and the approximate location derived from it (city, region, country), the time, the version of the app and of the operating system, which function of the app was called, and the identifier of your account. If you secured your account with an email address, the sign-in service logs it as well. What you answer is not logged. We can read these logs for one day. How long our hosting provider keeps copies of its own beyond that, it does not publish.

For each device you are signed in on, the IP address and the app and system version are also stored with your account, until you sign that device out or delete the account. If you secured your account, Settings → "Signed-in devices" shows when each device signed in and when it was last used, and lets you sign out this phone or all the others. It can take up to an hour until a device that was signed out is locked out. Signing out on a phone deletes the matches and results kept on it.

Legal basis: Art. 6(1)(b) GDPR for keeping you signed in, and Art. 6(1)(f) GDPR for the logs (our interest in running the app securely and in finding faults).

3.14 Reports of a note

If you report a note of the person you are linked with, your phone sends us the note as it holds it, together with the question it belongs to and, where the question has two sides, the side. As a rule our server no longer has the note by then (3.7). So the report holds what your phone sends, and we cannot check that the wording is the one the other person wrote. We store the report: this note and its question, who wrote the note, who reported it, your reason if you give one, and later our decision. We read the note in order to check the report, and you can read our decision in the app. If we remove the note, it disappears from the match on both of your phones, on each the next time its app is opened; the match itself stays. The app does not show the other person that you reported the note. If we remove it, however, we have to tell them so and why, where we can reach them (Art. 17 of the Digital Services Act). A report is deleted six months after our decision, and earlier if you or the other person delete the account.

Legal basis: Art. 6(1)(c) GDPR with Art. 16 of the Digital Services Act. Where a reported note contains special categories of data: Art. 9(2)(g) GDPR with Art. 16 of the Digital Services Act, and Art. 9(2)(f) GDPR where the note is needed to establish or to defend against a legal claim. We keep a report for six months after our decision so that you can question the decision in that time and we can account for it.

3.15 When you write to us

If you write to us by email, we process your email address, what you write and the time, in order to answer you. Please write only what we need for your request, and nothing about your answers in the app.

Our mailbox is at Gmail (section 6). Only the provider named in section 1 reads it.

We delete your message and our answer six months after the matter is settled. A message with which you use one of your rights under section 9 we keep, with our answer, for three years from that answer, so that we can show that we answered and how.

Legal basis: Art. 6(1)(b) GDPR where your message is about your use of the app, otherwise Art. 6(1)(f) GDPR (our interest in answering what we are asked). Where you use one of your rights: Art. 6(1)(c) with Art. 12 GDPR, and for keeping the message afterwards Art. 6(1)(f) GDPR (our interest in being able to prove our answer, Art. 5(2) GDPR).

3.16 These web pages

This privacy policy and our legal notice are web pages. Cloudflare delivers them for us (section 6). When you open one, Cloudflare's servers process what every web server needs in order to answer: your IP address, the time, the page you asked for, and what your browser sends about itself (its type and version, the operating system, the language and, if there is one, the page you came from).

The pages set no cookies, use no analytics and load nothing from other providers. We keep no record of who opened a page. Cloudflare names no fixed period for its own records of a connection; its privacy policy is at https://www.cloudflare.com/privacypolicy/.

Legal basis: Art. 6(1)(f) GDPR (our interest in making these texts available reliably and securely).

4. What the person you are linked with sees

• your name and your character;
• in “Get Comfortable” and “Date Finder”: only the questions and ideas you both said yes to, and on a match whether an answer was “It depends”, with its note;
• in “Have you ever?”, “Who's more likely to?” and “Is that cheating?”: both answers to every question you have both answered, and whether you have answered questions they have not.

Nothing else. In particular, in “Get Comfortable” and “Date Finder” they never learn what you answered no to or skipped, and in no game the gender you gave.

Please note:

• Someone who answers yes to everything in “Get Comfortable” sees all your yes answers that way. The app cannot protect against that.
• What the other person has already seen in “Have you ever?”, “Who's more likely to?” or “Is that cheating?” cannot be taken back by a withdrawal. The withdrawal does remove the result from their phone, the next time their app is opened (section 10).
• A result on an intimate question in those three games shows the other person that you have unlocked the intimate questions.
• If either of you unlinks or deletes their account, the shared answers, matches and results are deleted for both of you: on our server at once, on the other person's phone the next time their app is opened.

5. What stays on your device

These are stored in the app on your phone and not sent to us: the age confirmation, the chosen language, how the app refers to your partner (German only), categories you switched off, which matches and results you have opened, the filter in “Date Finder”, whether you tried a date and whether you liked it, and which prompts to secure your account you have seen.

Your sign-in is stored on your phone too, in the phone's keychain, so that you stay signed in. It can be part of an encrypted device backup and move to a new phone with it. The phone can keep it when you delete the app, so that installing the app again on the same phone can open the same account; your matches and results do not come back that way.

Your matches and results are kept on your phone too. We send them to your phone once and erase them on our server as soon as both of your phones have them (3.10); from then on your two phones are the only place they exist. On your phone they are in a file of the app that can be read only while the phone is unlocked and that is left out of device backups. The app does not encrypt the file itself. What follows from that:

• If you lose your phone, delete the app or sign out on the phone, your matches and results are gone for you. We cannot restore them.
• They are not on a second device you sign in on.
• Securing your account (3.1) brings back your link and which cards you have answered, but not your matches and results.
• The other person keeps their own copy on their phone.

Two things leave the device without being stored by us: the chosen categories are sent with the request for the next card, and whether you play the “delicate questions” is sent with the request that asks whether results are waiting for you.

This storage on your device is strictly necessary for the functions you asked for (§ 25(2) no. 2 of the German TDDDG). The settings named in the first paragraph may be part of a device backup; the file with your matches and results is not.

6. Who receives your data

• Supabase (Supabase Pte. Ltd., 65 Chulia Street #38-02/03, OCBC Centre, Singapore 049513) runs servers, database and sign-in for us, as a processor under Art. 28 GDPR. The database is in the Frankfurt region (eu-central-1). Supabase uses further companies for this: Amazon Web Services (the servers in Frankfurt), Cloudflare (every connection between the app and the server passes through its network), Google (hosting and, as far as we know, the server logs) and Supabase, Inc. in the USA (support). The current list: https://supabase.com/legal/customer-resources/subprocessor-list.
• Cloudflare (Cloudflare, Inc., 101 Townsend St., San Francisco, California 94107, USA) delivers the web pages with this privacy policy and our legal notice, as a processor under Art. 28 GDPR (section 3.16). Nothing from the app is stored there.
• Mailgun (Mailgun Technologies, Inc., One North Wacker Drive, Suite 2500, Chicago, Illinois 60606, USA, a company of the Swedish Sinch group) sends the sign-in codes by email, as a processor under Art. 28 GDPR. For that it receives your email address and the email with the code, and it keeps a record of the delivery: we can read that record for one day, and Mailgun's documentation says it stores such records for at least two days. Opens and clicks are not recorded: that tracking is switched off for our emails. If an email to your address cannot be delivered, or if you mark it as spam, Mailgun puts the address on a list so that no further email is sent to it. While an address is on that list, no sign-in code reaches it; write to us and we take it off. We empty the list at least every six months. Our sending domain is in Mailgun's EU region, where the emails, these records and this list are processed in Germany and Belgium.
• Apple, if you use Sign in with Apple: Apple learns that you sign in to this app. Apple's own terms apply to the download and to crash reports.
• Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) provides Gmail, where the mailbox for our contact address is. Google receives what you send to that address by email, and our answer (section 3.15). It provides Gmail as the controller of its own service, under its own privacy policy (https://policies.google.com/privacy), not as our processor. Nothing from the app goes there.
• If you report a note, we read the reported note and its question in order to handle the report (section 3.14).

We do not sell data and do not pass it on for advertising.

7. Transfers outside the EU

Your account, your answers and your notes are stored in Frankfurt. Even so, data can be processed outside the EU:

• Singapore: our contract partner Supabase Pte. Ltd. is based there. There is no EU adequacy decision for Singapore. The safeguard is the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR), which are part of our contract with Supabase.
• USA: Supabase, Inc., which helps us with support, and Amazon Web Services, Cloudflare and Google are based there. The safeguard is again the standard contractual clauses. Amazon Web Services, Inc. (through its parent company Amazon.com, Inc.), Cloudflare, Inc. and Google LLC are in addition certified under the EU-U.S. Data Privacy Framework, for which the European Commission adopted an adequacy decision on 10 July 2023 (Art. 45 GDPR). Supabase, Inc. is not.
• USA, our web pages: Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework (adequacy decision of 10 July 2023, Art. 45 GDPR), and our contract with it also contains the standard contractual clauses. Cloudflare delivers a page from one of its servers near you.
• Emails you send us: Google runs Gmail on servers around the world, so an email you send us can be processed outside the EU. Google LLC in the USA is certified under the EU-U.S. Data Privacy Framework (adequacy decision of 10 July 2023, Art. 45 GDPR); for other countries Google states that it relies on adequacy decisions and on the standard contractual clauses.
• USA, sign-in emails: Mailgun Technologies, Inc. is certified under the EU-U.S. Data Privacy Framework, for which the European Commission adopted an adequacy decision on 10 July 2023 (Art. 45 GDPR). Our contract with it also contains the standard contractual clauses. The emails themselves are processed in the EU (Germany and Belgium); the company and its support staff are in the USA and could reach them from there.

For the app, this concerns three things in practice: every connection between the app and the server passes through Cloudflare's network; the server logs (section 3.13); and the case that staff of these companies have to reach the server in order to run it or to help us. You can ask us for a copy of the standard contractual clauses at kregelinundkregelin@gmail.com.

8. How long we keep data

An account that is not secured lives on one phone only. If that phone is lost or reset, nobody can reach the account again. That is why we delete such an account when the app has not been opened with it for 12 months. A secured account is never deleted this way.

If you do not open the app for 90 days, we delete from our server what still waits there for you: all your answers, also the entries that only say that you answered a card, and the cards dealt to you. Matches and results your phone has not fetched by then count as fetched: we erase them on our server once the other person's phone has them, and you do not get them any more. This holds for every account, secured or not; the account and the link stay. When you come back, every card comes again. We delete all your answers and not only those that still wait, because otherwise the cards that come again would be exactly the ones the other person has not answered yet. Answers you give again are counted again in the anonymous statistics (3.11).

An answer that waits has no time limit of its own: we keep it until the other person answers the same card, for as long as you keep using the app. If the other person plays less than you, has switched a category off or has not unlocked the intimate questions, many of your answers can stay on our server for a long time.

9. Your rights

You have the right of access (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20), and to object to processing based on Art. 6(1)(f) GDPR (Art. 21).

How to use them:

• Rectify: change your name, character and gender in Settings. Answers cannot be changed. What you answered is erased as soon as the other person has answered the same card (3.5).
• Object: you object to the anonymous counting of your answers by switching it off under Settings → "Anonymous statistics" (3.11). For the other processing that rests on Art. 6(1)(f) GDPR (the server logs, 3.13; the list of addresses no further email is sent to, section 6; emails you send us, 3.15), write to us.
• Erase: "Delete account" in Settings deletes everything stored about you on our server, and the matches and results on your phone. You delete single areas by withdrawing the respective consent or by unlinking. What the other person's phone holds goes the next time their app is opened (section 10).
• Access and a copy of your data: Settings → Your data → "Export my data" gives you a file with what our server stores about your account, in a format other programs can read too (JSON): your account and the devices you are signed in on, your profile, your consents, your link, which cards you have answered, how many matches and results your link has had in each game, the cards dealt to you, and your own reports. What you answered is not in the file. We keep an answer only until the other person has answered the same card, so which of your answers are still kept would tell you which cards the other person has answered; we leave them out to protect that person's rights (Art. 15(4) GDPR). Your matches and results are not in the file either, only how many there have been: they are kept on your phone, where the app shows them to you. Also not in the file: the server logs (section 3.13), an email address you entered that is not confirmed yet (Settings shows it to you), and reports somebody else made about one of your notes, because those also concern the person who made them.
• Everything else: write to kregelinundkregelin@gmail.com. We have to be sure the account is yours, so write from the email address your account is secured with. An account without an email address we cannot tell from anyone else's by email; for such an account we can answer in the app only, which is why the export is there.

10. Withdrawing consent

You can withdraw each consent in the app at any time, with effect for the future:

• The link: Settings → Partner connection → "Unlink & withdraw consent"
• Intimate questions, notes, “Have you ever?”, “Who's more likely to?”, “Is that cheating?”: each under "Withdraw consent" in Settings

What a withdrawal deletes is deleted on our server at once. A match, a result or a note that the other person's phone holds is removed from it the next time their app is opened and asks our server. The same holds when we remove a reported note (3.14), when one of you unlinks and when an account is deleted. We cannot reach a phone on which the app is never opened again. A match or result that a withdrawal deleted does not come back if you give the consent again later: two answers are compared only once.

The lawfulness of processing before the withdrawal is not affected. The rest of the app can be used without these consents; without the consent to the link, however, you cannot play, because every game needs two linked people.

11. Complaint to a supervisory authority

You can complain to a data protection supervisory authority, for example where you live. The one responsible for us is: the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59-61, 10555 Berlin, Germany.

12. Minimum age

GetComfortable is meant only for people aged 18 and over. You confirm that you are 18 or older when you first open the app, and again when you unlock the intimate questions. We do not knowingly process data of minors. If we learn that someone under 18 uses the app, we delete their account.

13. No obligation to provide data, no automated decisions

You are not obliged to give us data; without an account, a name and a link, however, the app cannot be used. There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

14. Security

Transmission is encrypted, and the database itself enforces the access rules described above: another person's answers are not sent to your device at all, except where a game reveals them (section 4). There is no end-to-end encryption: whoever has administrator access could technically read what is on our server at that moment, that is answers and notes that still wait for the other person's answer, and matches and results that not both phones have fetched yet. Because we keep an answer only until the other person has answered the same card, and a match or result only until both phones have fetched it (section 8), that is less than everything you have ever answered. It can still be a lot: an answer to a card the other person has not answered yet stays there, readable. On our side one person has this access, the provider named in section 1. The access is protected by two-step sign-in and is used only where running the app requires it, for example to handle a report (section 3.14) or a request from you. Staff of our hosting provider can open the database only with our permission, which is asked for each single support case. The tools we use to develop the app are not allowed to read stored user data. What is kept on your phone is protected by the phone's own lock (section 5).

15. Changes

When we change this policy, we publish the new version here with a new date. If the text of a consent changes, the app asks you again the next time you open it: you can agree to the new text or withdraw the consent.