Belvantis
  • Products
  • OmniThink
  • Candor: Private AI Journal
  • Candor AI Note
  • Parallax
  • About
Effective: before public TestFlight · Last updated: 2026-05-20

privacy policy

Parallax is a relationship insight app for couples. Both partners answer the same question; the app holds both answers privately until you've both submitted, then reveals them side by side. Over time it measures how well you understand each other.

This policy explains what we collect, what we don't, what we can and can't see, and what choices you have. We have written it plainly. If anything here is unclear, write to us at info@belvantis.com and we will revise the language.


What we collect

Account identifier

When you sign in, we receive a stable identifier from your identity provider (Apple, Google, or email-and-password via Microsoft Entra). This identifier is unique to you and to Parallax. We use it to associate your device with your dyad. We do not receive your password.

Pairing data

When you pair with your partner, we store the dyad relationship — that your account is linked to theirs — along with each device's public key. The public keys are mathematical artifacts; they cannot be used to read your answers.

Answer envelopes

Every answer and prediction you write is encrypted on your phone before it leaves the device. The encryption key lives only on your and your partner's phones. The data we store on our servers is opaque ciphertext. We cannot decrypt it. Nobody can but you and your partner.

Reflection notes

Parallax has two kinds of reflection notes. Private notes never leave your device — they are stored locally on your phone alone and we never receive them. Shared notes are written by one partner for the other; we encrypt them on your phone with the same end-to-end key your answers use, and store the opaque ciphertext on our servers so your partner can fetch and decrypt it. We cannot read shared notes.

Custom questions

If you write your own question for your partner, the question text is end-to-end encrypted on your device before it is stored. We hold opaque ciphertext for the question metadata and never see the question text.

Subscription status

If you subscribe, we store the subscription state (active, in trial, cancelled, etc.) so we know whether your account has access. Payment is handled entirely by Apple (App Store) or Google (Play Store). We never see your card, your billing address, or your payment history.

App usage telemetry

We measure broad navigation events — app open, button taps on non-answer screens, screen views excluding answer entry and reveal screens — using Aptabase, a privacy-first analytics service. These events do not include any of your answer content, predictions, or partner data. We do not use Google Analytics, Meta SDK, or any advertising identifier (IDFA / AAID).

Crash reports

When the app crashes, we capture a stack trace using Sentry. Crash reports from the answer-entry, pending, and reveal screens are dropped entirely; reports from other screens have any free-text fields scrubbed before they leave the device.

What we explicitly do not collect

  • We do not collect your contacts.
  • We do not collect your location.
  • We do not access your camera, microphone, photos, or other media.
  • We do not collect device identifiers used for advertising.
  • We do not collect biometric data.
  • We do not collect health or fitness data.
  • We do not share data with third parties for advertising.

What we can and cannot see

We cannot see:

  • Your answers.
  • Your predictions of your partner's answers.
  • Your trends or empathy match scores. (These are computed entirely on your device.)
  • Which specific question you answered when the question is one you or your partner wrote. (We see only that a question instance exists; both the question text and the answer envelopes are opaque to us.)
  • Your private reflection notes (they never leave your device).
  • The contents of your shared reflection notes (encrypted end-to-end; we hold the opaque ciphertext but cannot decrypt it).
  • Your partner's identity from your account alone. The dyad relationship is recorded, but we have no way to view either side of it as readable content.

We can see:

  • Your account identifier and pairing-time public keys.
  • Your subscription status.
  • The number of questions you've been issued and the number of envelopes you've submitted (but not their contents).
  • Aggregate navigation events (app opens, non-content button taps).

Account recovery and device loss

If you lose your phone and your partner has their phone, you can re-pair on a new device. You and your partner will generate fresh keys; your past answer history is not recoverable by us or by anyone else — the keys that could decrypt it are gone. We told you this in onboarding. It is the cost of nobody else being able to read your answers.

If you both lose your phones at the same time, your history goes with them.

Counselor mode (v2)

If you choose to share insights with a therapist or counselor, you can grant them read-only access to per-domain match rates and large-gap flags — not your raw answers. You can revoke their access at any time. Counselor mode is not enabled by default and requires both partners to opt in.

Children

Parallax is intended for adults in a romantic, committed dyad. We do not knowingly collect data from anyone under 18. If you believe a minor is using Parallax, write to us at info@belvantis.com and we will delete the account.

International transfers

Parallax stores data on Microsoft Azure servers in the eastern United States. If you are using Parallax from outside the United States, your data is transferred to and processed in the United States. The data is encrypted both in transit and at rest, with the end-to-end encryption layer described above ensuring that your answer content is unreadable to us regardless of where it is stored.

Your rights

You have the right to:

  • Access the data we hold about your account. Open Settings → Account → Export data, or write to info@belvantis.com.
  • Delete your account. Open Settings → Account → Delete account. This deletes your account record, your encrypted envelopes, and your dyad's encrypted trends blob. The deletion is immediate and irreversible. Your partner is notified that the dyad is dissolved.
  • Object to any specific processing. Write to info@belvantis.com.
  • Withdraw consent at any time by deleting your account.

For users in the EU/UK: your supervisory authority is whichever data protection authority is established in your country.

Changes to this policy

If we make material changes, we will notify you in-app before the changes take effect. The current effective date is at the top.

Contact

Privacy questions: info@belvantis.com
Security disclosures: info@belvantis.com
General contact: info@belvantis.com

Belvantis · USA

← back to parallax  ·  terms of service

© 2026 belvantis. all rights reserved.