Private, and built that way.
What PlzYou holds is about as personal as it gets, so it is designed so that we can't read it. Here is exactly what that means.
What we can't see
Answers are locked on the phone they were written on, before they are sent. Our servers only ever hold the locked version.
The key that opens them is created in your browser and never leaves it. We don't have it, so we can't read answers even if we wanted to, and neither can anyone who got into our database.
Your look-backs are locked the same way.
No AI reads, summarises or learns from anything you or your partner write.
The shared word
Your partner types it to open a link. You type it to open their answers.
We store only a scrambled check value for it, never the word itself.
On your device it also locks your key. Answers lock again after 10 minutes without activity, and whenever the page is closed or reloaded.
A link gives up after 10 wrong words. Choose a word that isn't easy to guess: it is what protects your key if someone gets hold of your device.
What we do store
Your email address, so you can sign in.
The two names you chose, and which questions you picked.
Those two first names show on your partner's first screen before the shared word, so anyone holding a live link can see them. Settings can switch either one off.
For each link: when it was made, when it expires, and whether it has been answered.
The locked answers and locked look-backs.
If you use Face ID or Touch ID, the public half of that passkey. Your face and fingerprint never leave your device.
What we never store
Your partner's phone number or email. They stay in your browser. If you email a link, the address is used for that one message and not kept.
Your partner doesn't have an account at all.
No tracking
No analytics, no advertising, no trackers, and no scripts from other companies on any page.
Nothing is sold or shared.
Emails
You get one when a link is answered and one the next day inviting you to look back. Neither says anything about what was asked or answered.
If you email a link to your partner, it carries the link only. Never the shared word.
Links
Each link works once and expires. Making a new one retires the old one.
Deleting everything
Settings has a delete button. It removes your account's names, links, answers and look-backs straight away, and removes the key from your browser. It can't be undone.
Who runs the servers
The site is served by Cloudflare. Sign-in and the locked data live with Supabase. Emails are sent through Resend. None of them can read your answers.