Legal

Privacy policy

Collar and Key · Effective July 24, 2026 · Last updated October 16, 2026

Collar and Key is operated by V&B Software, LLC ("V&B Software," "Collar and Key," "we," "us," or "our"), which builds a private companion app for adults who manage consensual Dominant/submissive (D/s) and kink relationships. Because the app helps you record deeply personal information, protecting that information is central to how we build the product. This policy explains what we collect, why, how it is stored, and the choices and rights you have.

Adults only. Collar and Key is intended solely for people aged 18 or older (or the age of majority in your jurisdiction, if higher). We do not knowingly collect information from anyone under 18.

1. Who we are

Collar and Key is a cross-platform application (available on mobile and web) that lets consenting adult partners organize their dynamic, including profiles, rules and protocols, tasks, scenes, journals, agreements, and an optional community. It is operated by V&B Software, LLC, the data controller responsible for the personal information described in this policy.

2. Information we collect

We collect only the information needed to provide the app's features. This falls into the following categories:

Account information

  • Your email address or phone number, or the account identifier provided by Sign in with Apple or Google if you sign in that way, used to create and secure your account and to sign you in.
  • If you start as a guest, an anonymous account with no email or phone number attached until you choose to add one.
  • Authentication metadata such as sign-in timestamps and session tokens.

Profile information

  • A display name and optional community handle.
  • An optional photo for each dynamic you belong to, visible only to the members of that dynamic and never shown in the community.
  • Time zone and related preferences, used to schedule tasks, reminders, and check-ins correctly.

Content you create

The core purpose of the app is to store information you enter, which may include:

  • Relationship and dynamic settings, roles, rules, protocols, and agreements/contracts.
  • Tasks, schedules, reminders, and their completion history, including commitments the Dominant marks as kept.
  • Commands, permission requests and their answers, and confessions, together with any photos or videos attached to them.
  • Check-in answers, the prompts you add, and the decisions you record, as well as your daily headspace answers.
  • Your progress through guided programs.
  • Scenes, activities, timers, and related notes, including follow-up check-ins after a scene.
  • Chastity keyholding records: lock terms, timings, pauses, release requests, keyholder notes, saved templates and, where you use them, verification photos. Verification photos are visible only to the two members of the dynamic.
  • Kink and interest lists, categories, limits, and ratings/preferences.
  • Journal entries and other private notes.
  • Photos and videos you attach to a journal entry or submit as proof of a completed task, together with any caption or note you add to them. These are stored so both partners in the dynamic can see them, and they appear together in the dynamic's Storage.
  • Items you store in vaults, calendars, and lists (such as toys or activities).

Subscription and purchase information

  • If you buy a subscription, purchases are processed by the Apple App Store or Google Play and managed through our subscription provider, RevenueCat. We receive your subscription status, plan, and purchase/renewal events. We do not receive or store your full payment card details. Those are handled by the app store.

Technical and usage information

  • Basic device and app information (such as app version, device type, and operating system) needed to run and support the app.
  • Diagnostic and error information used to keep the app stable and secure.
  • Usage analytics: which screens you open and which features you use, together with device, browser, and operating system details. You can turn this off at any time in Settings › Share usage analytics.
  • A push notification token for your device, if you allow notifications, so that reminders and alerts can be delivered to it.
  • Online status: while the app is open, your partner can see that you are online. Each partner can switch this off for themselves at any time. We do not keep a record of when you were last seen.
  • Age range signal: on iOS and Android the app asks your app store for the age range on your store account. We do not receive or store your age. If the store reports that the account belongs to someone under 18, the app stores only a flag on your device that keeps it from opening.

3. Sensitive information

Collar and Key is designed for adult intimate relationships, so the content you enter may reveal information about your sex life and sexual preferences. Under laws such as the EU/UK GDPR this is treated as a "special category" of personal data, and comparable U.S. laws treat it as "sensitive" personal information.

We process this information only to provide the features you use, and only on the basis of the information you voluntarily choose to enter. We do not sell this information, and we do not use it for advertising or profiling. Where the law requires it, our legal basis for processing this data is your explicit consent, which you can withdraw at any time by deleting the relevant content or your account.

Scene generation. If you ask the app to generate a scene, the settings and notes you provide, the gear you have chosen for the scene, whether a chastity lock is currently active, and the interests and limits recorded in your dynamic are sent to our processing provider, OpenAI, so that what comes back reflects what you want and avoids what you have ruled out. This happens only when you ask for a scene, and the request does not include your name, email address, or account identifier. Under OpenAI's API terms, data sent this way is not used to train OpenAI's models.

4. How we use your information

We use the information described above to:

  • Provide, maintain, and secure your account and the app's features.
  • Sync your data across your devices and support offline access.
  • Deliver reminders, notifications, and check-ins you have configured.
  • Generate scene suggestions when you request them.
  • Screen submissions to the shared Discover library against our content rules before they are published.
  • Understand how features are used so we can improve the app (you can opt out of usage analytics in Settings).
  • Process and manage subscriptions and entitlements.
  • Respond to your support requests.
  • Diagnose problems, prevent abuse, and improve reliability and safety.
  • Comply with legal obligations and enforce our terms.

We do not sell your personal information, and we do not use your content to serve third-party advertising.

5. Community and sharing features

Collar and Key includes optional features that let you connect a partner to your dynamic and, if you choose, share content to a community or discovery area. Please note:

  • Content you share with a linked partner is visible to that partner.
  • Content you choose to publish to the community (for example, using a community handle) is visible to other users according to the audience you select. Anything you publish publicly may be seen, saved, or copied by others, so share thoughtfully.
  • Each dynamic's shared journal is visible to both members. Journal topics you create as private, and your kink notes, are visible only to you.
  • Publishing a community profile for your dynamic requires both members' agreement. While a profile is published, followers see brief status updates (for example, that a contract was signed, that the dynamic is paused, or that a command was completed), with members named only by role. The text of commands, requests and confessions is included only if both members turn that on. Other items, such as tasks or journal entries, appear only when you share them individually.

6. Service providers

We rely on a small number of trusted providers to run the app. They process data on our behalf under agreements that require them to protect it:

ProviderPurpose
SupabaseAccount authentication, database hosting, and file storage for your app data, including avatars and the photos and videos you attach to journal entries or task submissions.
RevenueCatManaging in-app subscriptions and entitlements.
OneSignalDelivering push notifications. OneSignal receives your account identifier, your device's push token, and the text of each notification.
PostHogUsage analytics and crash reporting. PostHog receives an identifier for your account, how you use features, and diagnostic details about your device and any errors. It does not receive the content you write, though it does record which features you use. PostHog processes this data in the United States. Usage analytics can be switched off in Settings; error reports are still sent so we can keep the app working.
SMS and email delivery providersSending the one-time sign-in codes for phone and email sign-in. They receive your phone number or email address and the code.
Apple / Google sign-inAuthenticating you if you choose Sign in with Apple or Google. We receive an account identifier and, where you allow it, your email address.
Google Web RiskChecking links submitted to the Discover library against lists of known unsafe sites.
Discover lookup services (YouTube, TMDB, Google Books, Open Library, Apple iTunes)Filling in details such as titles and cover images when you search for or add a book, podcast or video to Discover. They receive your search text or the link you entered, sent from our servers rather than your device.
OpenAIGenerating scenes when you request one, and screening submissions to the Discover library against our content rules. No name, email address, or account identifier is included. See Sensitive information.
Apple App Store / Google PlayApp distribution and payment processing for purchases.
Google Firebase HostingHosting this website.

We share only the information each provider needs to perform its function. We do not otherwise disclose your personal information except where required to comply with the law, to protect the rights, safety, and property of our users or the public, or in connection with a business transfer (in which case this policy will continue to govern your information).

7. Where your data is stored

Your data is stored on secure cloud infrastructure operated by our service providers. A copy of your data may also be stored locally on your device to support offline use; this local copy is removed when you sign out or uninstall the app. Depending on your and our providers' locations, your information may be processed in countries other than your own; where required, we rely on appropriate safeguards for such transfers.

8. Data retention

We retain your information for as long as your account is active or as needed to provide the app. When you delete specific content, it is removed from our active systems. When you delete your account, we delete or anonymize your personal information within a reasonable period, except where we are required to retain certain records to comply with legal, tax, or security obligations. Backups are cycled out on a rolling basis.

Photos and videos. Media you attach to a journal entry is kept for as long as that entry exists, subject to the storage rule below. Video submitted as proof of a task is removed automatically 30 days after the task is settled, unless someone in the dynamic chooses to keep it from the dynamic's Storage (a paid feature). You can delete any photo or video yourself at any time, on any plan, and deleting it removes it from our active systems.

When paid coverage ends. Each dynamic has a storage allowance, which is larger while it is covered by a paid plan. If paid coverage ends and the dynamic holds more than the free allowance, or holds kept clips, we notify its members and allow 30 days' grace, with a reminder 2 days before it ends. After that, kept clips expire as normal, and the oldest photos and videos in the dynamic are deleted until it is back within the free allowance. Restoring paid coverage during the grace period cancels this.

Dynamics and guest accounts. When the last remaining member leaves or deletes a dynamic that still holds a former partner's history, the dynamic is erased 30 days later; a dynamic that only ever had one member is erased straight away. Guest accounts that have not been used for 90 days are deleted.

9. Your rights and choices

Depending on where you live, you may have the right to:

  • Access the personal information we hold about you.
  • Correct inaccurate information.
  • Delete your information or your account.
  • Export a copy of your data (portability).
  • Withdraw consent for processing sensitive information at any time.
  • Object to or restrict certain processing.

You can turn off usage analytics in Settings › Share usage analytics, and turn off push notifications in the app or in your device settings. You can edit or delete most content directly in the app, and download a copy of your information from Settings › Export data. The export is a JSON file of your records; it does not include photos or videos, community content, or your private kink notes, which you can request from us instead. To delete your entire account or exercise any right above, use the in-app account controls, visit our account deletion page, or contact us at the email below. We will not discriminate against you for exercising these rights. If you are in the EU/UK, you also have the right to lodge a complaint with your local data protection authority.

10. Security

We use industry-standard measures to protect your information, including encryption in transit, access controls, and safeguards that restrict each account to its own data. No method of transmission or storage is completely secure, but we work continuously to safeguard your information and to respond promptly to any issues.

11. Children's privacy

Collar and Key is strictly for adults 18 years or older. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected such information, we will delete it. If you believe a minor has provided us information, please contact us immediately.

12. Changes to this policy

We may update this policy from time to time. When we make material changes, we will revise the "Last updated" date above and, where appropriate, notify you in the app. Your continued use of Collar and Key after an update means you accept the revised policy.

13. Contact us

If you have questions about this policy or your personal information, or if you wish to exercise your privacy rights, contact us at:

V&B Software, LLC
contact@vandbsoftware.com