Snug Privacy Policy

Last updated: August 2026

Snug is a cozy home for two people. We built it to be as private as possible: we do not run a backend that stores your data, we do not collect analytics, we do not show ads, and we do not track you.

What we do not collect

No email, phone number, or password.
No name, birthdate, or profile of any kind on our servers.
No location data.
No advertising IDs or analytics identifiers.
No behavioral or usage data.

What is stored, and where

Everything you do in Snug (your mood, your notes, your doodle, your bonsai, your pet, your photos, your countdowns) lives on your own device. It is written to your device's local storage and, for photos, its private database. We never see it.

How syncing works

To keep your device in sync with your partner's, Snug uses a small public messaging relay called ntfy.sh (the default), or any other ntfy-compatible server you choose. Before anything leaves your device, it is encrypted with a key derived from your private couple code using AES-256-GCM. The relay only ever sees encrypted bytes; it cannot read your messages, and neither can we.

Your couple code is never sent to any server. It exists only on the two devices that know it.

Photos

Photos you choose to share are downscaled to about 640 pixels, compressed, then encrypted and split into small chunks that travel through the ntfy relay to your partner's device, where they are stored in your partner's private database. The relay only sees encrypted chunks. Photos are never uploaded to us.

Notifications

Snug does not send push notifications by default. Sync notifications appear only while the app is open.

Permissions we ask for

Camera (optional) so you can add a photo to your shared album.
Photos (optional) so you can pick an existing image from your gallery.
Notifications (optional) so you can be gently reminded of a partner's message when the app is open.

You can decline any of these; the rest of Snug will still work.

Third parties

Snug talks to exactly one third party by default: the ntfy relay you have selected (ntfy.sh unless you changed it). ntfy is an open source project run by a small team; see their own privacy policy for details. You can point Snug at your own ntfy server at any time from the More tab.

Children

Snug is intended for people 13 and older who are in a relationship together. It is not designed for or directed at children under 13, and we do not knowingly collect information from them.

Deleting your data

Use "Reset this device" in the More tab to erase everything from your device. Because there is no server, that really is the whole delete. The encrypted messages your device previously sent to the ntfy relay are automatically cleared by the relay after up to twelve hours.

Security caveats to know

Your couple code is your entire security. Keep it as private as your house key.
Anyone with your couple code (and the same ntfy server) can join your home. Change your ntfy server in the More tab and reset both devices if you ever need to rotate.
End-to-end encryption protects your data in transit, but if either device is compromised, so is the local copy of your data on it.

Changes to this policy

If we ever change this policy in a meaningful way, we will update the "Last updated" date above and, when we can, mention it in the app.

Contact

Questions or concerns: open an issue on GitHub.