Privacy policy

Last updated: 11 November 2026

People write very personal things in Dear You. This page says, in plain words, what we keep, who can see it, how the AI is used, and how you can take your data out or remove it.

1. Who we are

Dear You is run by Lux Labs Technology, based in Malaysia ("we", "us"). We decide how your personal data is used and we are responsible for it. You can reach us at luxlabsio@gmail.com.

Dear You is for adults. You must be 18 or older to have an account.

2. What we keep

Your account

• The name you ask to be called, and your email address.
• Your password, stored only in a scrambled form (a hash) that cannot be read back.
• Your confirmation that you are 18 or older.
• Optional details you choose to give: your language, age range, how you like to be spoken to, some background about your relationship, your MBTI type, and your answers about how you handle disagreements.

What you write

• Your vents and the replies Dear You gives you.
• Your journal entries.
• In Partner: what you type before approving it (your drafts), the suggested wording, and the messages you approve and send.
• Everyday chat messages between you and your partner.
• Notes Dear You adds to a shared discussion.

What Dear You remembers

To give better help next time, Dear You keeps short notes taken from what you write: important dates and events, lasting facts, and how you said you felt on a given day. You can see every note and remove any of them in the app.

Your connection with your partner

• That the two of you share a space, and when each of you joined or left.
• Invitation codes, kept only in a scrambled form. A code stops working after 48 hours.
• What each of you chose to share with the other about yourselves.

Records we need to run the app

• When you agreed to the use of AI, and if you withdrew that agreement.
• Your sign-in sessions, with the internet address (IP address) and the type of device or browser used. This helps keep accounts safe.
• If you turn notifications on: a notification address for your phone (a "push token") and whether it is an iPhone or an Android phone.
• A count of how much the AI was used on your account: which feature, which AI model, how long the text was, and when. This count does not contain what you wrote.
• If you report a reply or a message: the kind of problem, anything you add, and a copy of the reported message, so that we can look at it.

What we do not collect

We do not collect your location, contacts, photos or advertising identifier. The app contains no advertising and no analytics or tracking tools from other companies. If you use Face ID or a fingerprint to lock the app, that check is done by your phone. We never receive it.

3. What we use it for

• To run the app: sign you in, save what you write, and deliver messages to your partner.
• To write AI replies and suggested wording, and to keep the notes described above.
• To check messages in Vent and Partner for signs that someone may be at risk of serious harm, so that the app can show support information. This check is automatic. It does not alert us, your partner, or anyone else.
• To send you notifications, sign-in codes and password reset codes.
• To keep the service safe: limit misuse, find faults and fix them.
• To look into reports and to answer you when you write to us.

We do not sell or rent your data. We do not use it for advertising. We do not use what you write to train AI models of our own.

4. How the AI is used

Dear You uses Claude, an AI model made by Anthropic, a company in the United States. Before any AI feature works, the app explains this and asks for your agreement.

When you have agreed, this is sent to Anthropic to be processed:

• What you write in Vent, and your drafts and messages in Partner, together with the earlier part of that conversation.
• The notes Dear You remembers that are relevant, and the optional details you gave about yourself.
• The names you and your partner asked to be called.
• In a shared discussion, your recent everyday chat with your partner, which both of you can already see.
• Your journal entries and everyday chat, only so that key dates, events and facts can be noted. The AI never replies to them or changes them.

Your email address and password are never sent to the AI provider.

Anthropic handles this text under its terms for business customers. At the time of writing, Anthropic states that it does not use this text to train its models, and that it deletes it from its systems within 30 days, unless it must keep it longer to enforce its usage rules or to follow the law. You can read this in Anthropic's own words here: training and how long data is kept.

If you do not agree, or you withdraw your agreement: Vent and Partner stop working, because they cannot work without the AI. Your journal still works, nothing from it is sent to the AI, and nothing new is remembered. Nothing you have already written is deleted. You can withdraw under Profile, Privacy and safety.

The AI can be wrong. It is not a therapist, a judge or an emergency service.

5. Who can see what

Connecting with a partner does not give either of you access to the other's vents, journal or drafts. A notification tells you that something is waiting. It never contains the text of a message.

Please keep in mind that your partner can keep, copy or screenshot anything you send them, and that anyone who can open your unlocked phone can open the app. You can turn on the app lock under Profile.

6. Other companies that help us run Dear You

Sign-in codes are sent from our own mail server, which keeps a record that the email was sent. Encrypted backups are kept with a storage provider, separate from the main server.

This means your data is stored and processed outside Malaysia, in the places listed above. By using Dear You you agree to this. We share data with these companies only so that they can provide their service to us.

We may also have to give information to a court, the police or a regulator when the law requires it. If we are allowed to, we will tell you. If Dear You is ever taken over by another company, we will tell you before your data moves, and you will be able to delete your account first.

7. How we protect it, and the limits

• Everything travels between your phone and our server over an encrypted connection.
• Messages, vents, journal entries, drafts and remembered notes are encrypted before they are saved (AES-256-GCM). The key is kept outside the database, so a copy of the database or a backup cannot be read without it.
• Private writing is kept apart from shared content, with rules in the database that let only its owner's account reach it.
• Passwords are stored only as a hash. Invitation codes too.
• You can lock the app with Face ID, a fingerprint or your phone's passcode.

Nobody at Dear You reads your vents, journal, drafts or messages as part of running the service, and we have built no screen for staff to do so. The one exception is a message you report: a copy is saved with the report so that we can look at it. That copy can be a message your partner wrote.

8. How long we keep it

• Vents, journal entries and drafts: until you delete them or delete your account. Deleting one removes it for good, together with the private notes that came from it.
• Everyday chat and shared discussions: neither of you can delete these for the other. If one of you leaves the shared space, it becomes read-only and both of you can still read it. Once both of you have left, the space and everything in it is deleted 90 days later.
• If you delete your account: your vents, journal, drafts, private notes, profile, reports and sign-in records are removed. Messages you had already sent to your partner stay visible to them, marked with the name you used, for as long as they have an account.
• Backups: deleted content may remain in encrypted backups for up to 14 days, after which the backup itself is deleted.
• Sign-in and reset codes: they expire within minutes. Invitation codes expire after 48 hours.
• At the AI provider: as described in section 4.

9. Your choices and rights

Inside the app you can:

• see and remove anything Dear You remembers;
• delete any vent, journal entry or draft;
• download everything you have written and set, under Profile, Privacy and safety;
• change your name and the optional details about you;
• withdraw your agreement to AI;
• turn notifications off;
• leave the shared space;
• delete your account.

Under Malaysia's Personal Data Protection Act 2010 you have the right to ask what personal data we hold about you, to have it corrected, to limit how we use it, and to withdraw your consent. If you live in another country, its law may give you further rights. To use any of these rights, or if something in the app does not let you do what you need, write to luxlabsio@gmail.com.

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You can also complain to the Personal Data Protection Commissioner of Malaysia.

10. Sensitive things, and other people

What people write in Dear You often includes sensitive matters such as health, beliefs or intimate life. We do not ask for these, and you decide what to write. When you write them, you agree that we store and process them as this policy describes, so that the app can work.

You will also write about your partner and perhaps other people. Please write about them as you would want to be written about, and do not put in details such as their identity card, bank or password information.

11. Children

Dear You is not for anyone under 18. If we learn that an account belongs to someone under 18, we will delete it. If you believe this has happened, please write to us.

12. Changes to this policy

If we change this policy, we will change the date at the top. If a change affects how your data is used in a way that matters, we will tell you in the app before it takes effect, and where the law requires your agreement we will ask for it.

13. Contact

Lux Labs Technology
Email: luxlabsio@gmail.com