Just Us

Privacy Policy

Last updated October 31, 2026

At a glance

A visual summary. The full policy below is what applies.

Stays on your phone

  • Messages, photos and voice notes
  • Calendar, lists and budget
  • Personal records
  • Not included in iCloud or device backups
  • Personal records and budget need Face ID or your passcode

Passes through our relay

  • Messages and attachments, encrypted so the relay can't read them
  • The name you enter when you pair
  • Device identifiers, public keys and push token
  • Technical request data, such as IP addresses

Never

  • Advertising
  • Analytics
  • Tracking across other apps or sites
  • Selling data

Who we are

Just Us is a private messaging app for two people, made by Ian Mills. Contact: info@thejustusapp.com.

What stays on your phone

Your messages, photos, voice notes, calendar, lists, budget and personal records are stored on your phone and are not included in iCloud or device backups. Personal records are kept in a separate encrypted store that needs Face ID or your passcode, and the budget opens only with Face ID or your passcode.

What our server handles

To deliver your messages we run a relay on Cloudflare. It handles:

  • your messages and attachments, encrypted on your phone before they are sent. Our relay cannot read them. Messages are deleted once your partner's phone receives them, and after 30 days at most. Encrypted attachments are deleted after 90 days at most;
  • the name you enter when you pair, your devices' identifiers and public keys, and the push notification token Apple gives your phone;
  • technical request data, such as IP addresses, which Cloudflare processes to run and protect the service. We keep a sample of request logs to find faults, with query strings removed.

What we do not do

We do not run advertising or analytics, we do not track you across other apps or sites, and we do not sell data.

Others who see some data

  • Apple delivers notifications and TestFlight builds, and converts your location to a city and state if you turn on location sharing.
  • Cloudflare hosts the relay.
  • Giphy: if you search for GIFs, your search words and IP address go to Giphy.
  • Websites you open: links you tap open in a Safari view and follow that site's own policy.

Location and Wi-Fi

If you allow it, the app shows your partner the city and state you are in, encrypted, never your exact location. If you set a home Wi-Fi network, its name stays on your phone; your partner sees only that you are at home.

Your partner sees Austin, TX At home
Your partner never seesYour exact locationYour Wi-Fi network name

Crash information

Basic crash signatures, with no message content, are sent encrypted to your partner's phone so the two of you can report a problem. They don't come to us unless you send them.

Deleting your data

Removing a message deletes it from both phones; an encrypted copy can remain on the relay for up to 90 days.

In the app, go to SettingsDevice & supportSever. This ends the bond for both of you. It removes the bond from the relay, deletes your stored attachments there, and wipes the data on your phone. A small record that the bond was deleted stays on the relay, with no message content. Your partner's phone keeps its own copy of your shared history until your partner severs too.

What encryption does and does not mean

Messages are encrypted end to end. A person who obtains your unlocked phone can read what is on it. No app can promise that messages stay secret if a phone itself is compromised.

Changes and contact

We will post changes on this page. Questions: info@thejustusapp.com.