최종 수정 / Last updated: 2026-10-25
요약: 아두에는 당신이 누구인지 알지 못합니다. 계정도, 로그인도, 광고도, 분석 도구도 없습니다. 연애 기록은 당신의 아이폰에(맥에서도 쓰면 그 맥에도) 저장됩니다. 커플 연결을 켜지 않으면 여러분의 기록은 아무것도 서버로 가지 않고, 켜더라도 서버를 지나는 것은 읽을 수 없는 암호문과 알림 주소, 그리고 커플 코드의 해시 · 기기마다의 익명 ID · 행의 종류 표시 · 쓰인 시각뿐입니다(2절). 연결 여부와 무관하게 앱이 스스로 하는 통신은 장애 공지 파일 한 개를 읽어 오는 것뿐이며 올라가는 것은 없습니다 — 연결이 끊긴 뒤, 그 연결의 알림 주소를 서버에서 지우는 요청이 닿을 때까지 앱을 열 때마다 다시 보내는 것만 예외입니다(2절).
A DUE does not know who you are. No account, no sign-in, no ads, no analytics. Your story is stored on your iPhone (and on your Mac, if you use A DUE there too). Pairing is optional — without it none of your records go to our server. (The app does fetch one small static notice file from the same site that serves this policy, so it can tell you when the sync service is down: a plain GET with no query string, no cookies, no body and no account or device identifier — nothing is uploaded. The one exception is after pairing ends: until it goes through, the app resends a request to delete that pairing's notification address from our server each time it opens.) If you pair, your records — day one, names, anniversaries, theme and color preferences, plans (with their notes and checklists), bucket list, wishes, preference notes, memories, love language, moods and the like — plus your battery level, your time-zone name (read from the system's time-zone setting; no location permission is used) and the awake hours you set (both can be turned off with "Share my time zone" — turning it off only stops future sends and takes nothing back: the last time-zone name and awake hours sent stay on our server until one of you uses "Erase from server", and also remain on your partner's phone, where they can keep showing, marked with how many days old they are once 7 days have passed since they were sent), and your busy half-hours (only if turned on, never what or where — see "Share busy times" below) are encrypted on-device before being relayed through our server (Supabase, Sydney region); the server holds only a hash of your couple code, the ciphertext and when each row was written — plus, for rows a device uploads on its own (signals, photos and the like), that device's anonymous identifier and a label for the row's kind (battery, time zone, busy times and so on). No one without the code, including us, can read the contents. Photos: the original always stays on each iPhone. The downscaled copy that travels to your partner is encrypted on-device before it passes through our server, which keeps at most 400 per couple and clears the oldest first; ticket and booking captures attached to a plan share that same store and cap. "Erase from server" removes those copies too. Signals ("miss you" etc.) travel the same way — encrypted on-device, unreadable to the server. The thumb-kiss screen (2.0) sends your finger position, encrypted on-device, through a realtime broadcast channel while your thumb-kiss screen is open — whether or not your partner's is — and nothing is stored; closing the screen closes the channel.
Calendar (1.5). The optional "Show my phone's events" layer only reads this device's calendar to draw it on screen (on a Mac it is called "Show my device's events" and reads the Mac's calendar); the layer itself stores nothing, uploads nothing and shows nothing to your partner. It is off by default and asks for permission when you turn it on; the same calendar permission is also asked, if you haven't decided yet, when you turn on "Mirror plans to phone calendar" or "Share busy times", or open "Evenings you're both free". (Apple provides no read-only access to events, so the prompt says full access; this layer itself only reads.) Copying one event (3.0): if you tap a phone event and choose "As my plan" or "As a plan together", that single event (title, date, time and place — never its notes) fills in the plan sheet, and only if you save it does it become an A DUE plan — from then on it is encrypted and shared with your partner like any other plan. Before you save, the event's details leave only if you tap one of two things yourself: "Ask: how about this day?" sends just the title, date and time to your partner, encrypted the same way, and the map button next to the place hands the place text to the map app you pick (see "Show in Maps" below). A capture or ticket you attach on that sheet is uploaded as an encrypted copy the moment you pick it, while paired, even before you save (the same path as other photos); if you close the sheet without saving, the app asks our server to delete that copy. Nothing is copied automatically, and the original stays in your phone calendar. A separate setting, also off by default — "Mirror plans to phone calendar" (2.0) — creates a calendar named "A DUE" and writes only your A DUE plans, only into that calendar, so they show on the Lock Screen, Apple Watch and other calendar apps. It touches no other calendar and sends nothing to our server or your partner, but if you use iCloud Calendar, Apple syncs the "A DUE" calendar to your other devices signed in to the same Apple Account. Turning it off deletes the "A DUE" calendar the app created, including any events you added to it yourself (a calendar an older version adopted by name keeps its other events). Plans you type into the app are a different thing: whether marked "Together" or "Mine", your partner sees them — that is the point of the feature — and they travel the same encrypted path as before. Show in Maps (3.0): the map button next to a plan's place hands what you typed there to the map app you pick — Apple Maps, NAVER Map or KakaoMap, or its website if the app isn't installed (a link into the NAVER Map app also names A DUE as the app that opened it). No location permission or coordinates are used and nothing goes to our server; from there, that map service's own policy applies.
Share busy times (3.0). A switch in A DUE's Settings under "Busy times", shown only while paired and off by default. Each of you turns it on yourself, and only when both of you have it on do each other's busy times appear, as gray rows in the day list on the Calendar tab. Turning it on asks for calendar access if you haven't decided yet — Apple offers no read-only access to events, so the prompt says full access, but it only reads to count busy times. What goes out is only which 30-minute blocks are busy, for the next 3 weeks starting today — never what or where: there is no place in it for titles, places, notes or calendar names. It counts timed events in your phone calendar (except ones marked Free), all-day events marked Busy or Out of Office, and your A DUE plans (together and your own); it leaves out subscribed calendars (including ones subscribed through iCloud), birthdays, invitations you declined, canceled events and the "A DUE" calendar, while calendars shared with you are included. Like your other records, it is encrypted on-device before passing through our server, which cannot read it. If only one of you has it on, only an "on" marker goes out — no busy times — and the same holds while calendar access is off (on iPhone: Settings > Privacy & Security > Calendars). "Evenings you're both free" matches the busy times you have already received from your partner against this device's calendar and your A DUE plans on the device itself, and sends nothing; opening it asks for calendar access if you haven't decided yet. Our server can see only that this device's anonymous identifier has one row labeled as busy times (the label is not encrypted) and when that row was last written; the encrypted row is the same length whether it says off, on or busy. A device with it on rewrites that row whenever what it would send differs from what it last sent (a new day, changed busy blocks, your partner turning theirs on or off, and so on), usually when the app syncs (when you open it, for example), so the timing of those writes could hint that it is on (and roughly when such changes happened). And every 3.0 device except a Mac continuing on your iPhone uploads one content-free "off" marker the first time it syncs after pairing, even if it never turns the switch on (again after a reinstall or re-pairing). Turning it off takes your busy times back: your row on our server is overwritten at once with a content-free "off" marker (resent the next time you open the app if it could not reach the server), and the gray rows disappear from your partner's screen when their app next fetches. Disconnecting also takes them back once, at that moment, but is not retried if it cannot reach the server. Deleting the app with it on sends nothing, so your partner's app can keep drawing the last busy times it received for up to 14 days after they were sent, and the encrypted row stays on our server until one of you uses "Erase from server" — to be sure, turn the switch off or use "Erase from server" first, which deletes this row too.
While you're paired, your device's notification address (APNs token) is stored alongside the hash of your couple code, the random identifier the app created at install, the address type (app or widget) and the notification language (Korean or English), so a signal can arrive without waiting. It is stored even if you don't allow notifications, because silent updates need no permission, and a device that uses an A DUE widget also stores a second, widget-only address. That address is issued by Apple for the device itself; it is not tied to your name, contacts or any account, and since we cannot unlock the hash sitting next to it, it does not tell us who you are. The notification carries no signal content — we could not read it anyway, so the server sends only a fixed line ("A heart arrived") and your own phone unlocks the rest with your code. Without pairing, no address is ever sent. When pairing ends, the app sends a request to delete this address (with the hashed couple code) from our server and, if it does not go through, resends it each time the app opens until it does — a delete-only request.
"Erase from server" deletes the ciphertext (signals included) and the notification address immediately; addresses unused for six months are cleared automatically. Your records always remain on your own devices. The one-time signal pack purchase is handled by Apple.
Using A DUE on your Mac (3.0). On your main iPhone, Settings › "Use on my other devices" (under "Switching phones") shows a code — it is your couple code. Pasted into "I already use A DUE on another device" in A DUE on an Apple silicon Mac, it lets the Mac download the encrypted records and unlock them with that code, so the Mac holds everything the couple code syncs; it borrows your iPhone's anonymous device identifier and carries on as a second device of the same person. No account is created. The seven things that live only on your iPhone — the hearts you made, your signal history, the mood log, past weekly recap summaries, alert settings, the home background photo and your own love language — do not come over. The Mac sends what your iPhone would — encrypted edits, signals, moods and the like — plus its own notification address, kept under the same anonymous identifier with a tag marking it as a continuing device (the first six characters of that Mac's own random identifier), so our server can tell the two addresses belong to the same person and that one of them is a continuing device. The Mac never sends your battery level, time zone or busy times, and it doesn't send or answer "Ask: how about this day?" proposals, open the thumb-kiss screen, mirror plans to the calendar or offer "Erase from server": instead it has "Disconnect this device only", which leaves our records on the server as they are and only asks the server to delete that Mac's notification address. Disconnecting leaves the records the Mac already downloaded, and the borrowed identifier, on that Mac. If your main iPhone and your partner both have "Share busy times" on, the Mac shows your partner's busy times too (view only). Turning on "Show my device's events" or opening "Evenings you're both free" on the Mac reads the Mac's calendar (asking for access if you haven't decided yet) for that screen only and sends nothing — except that, as on the iPhone, an event you tap, copy and save becomes an encrypted A DUE plan.
문의 / Contact: schizoapp@icloud.com