Short version: the app keeps everything on your own device. If you also turn on the optional Discord add-on, one specific thing changes, and this page exists to tell you exactly what and why — before you decide, not after.
The Dynamics app runs entirely in your browser. There is no account, no login, no server holding your things. Your Vetting notes, Flags, Constitution, kink list and journal are written to your own device and never leave it.
One part is different, and only because it has to be. The Ledger — the day-to-day running of a dynamic you already share with someone — can sync between two devices, because a shared thing is no use if only one person can see it.
Before anything leaves your device it is scrambled with a key that exists only inside your share code. The relay it passes through stores the scrambled version and holds no accounts and no names. It cannot read a single word of your Ledger, and neither can we.
end-to-end encryptedno accountsblind relay
You can lock, export or wipe your data whenever you like, from inside the app. Unpairing the Ledger also offers to erase the encrypted copy from the relay, so nothing remains anywhere.
The add-on is optional and off by default. You have to deliberately connect it with
/link, and it will show you this same information and ask before it stores anything.
It works by becoming a third device on your existing pair. You give it the same share code your phones use, and it reads and writes the same Ledger. Anything you log in Discord shows up in the app, and the other way round.
To answer a question like "what's due today?", the bot has to actually open your Ledger. That means the share code it holds is a working key, not a sealed envelope.
So the person who runs this bot can technically read your Ledger — tasks, rewards, punishments, check-ins, all of it.
The app's relay genuinely cannot read your data. The bot can. That is a real difference and it is the whole cost of the convenience. If that isn't a trade you want to make, don't link it — the app works perfectly well on its own, and nothing else changes.
| What | Why |
|---|---|
| Your Discord user ID | To know which Ledger is yours when you type a command |
| Your Ledger share code, encrypted | To open your Ledger. This is the sensitive one. |
| Which side of the pair you are | So your check-in is yours and not your partner's |
| A scrambled tag for your pair | To match you with your partner without storing your real pair ID |
| When you consented, and to which version | Required by law, and it lets us re-ask if the terms change |
Nothing from inside your Ledger is copied into the bot's database. No tasks, no entries, no check-ins, no names — only the key that opens it. Share codes are encrypted where they are stored, so a stolen copy of the database is useless on its own. That protection does not extend to someone who can run the bot's own code; being straight about that limit is more useful than a reassuring phrase.
Your Vetting, Flags, Constitution, kink list and journal are unreachable from Discord by design, and will stay that way. Vetting in particular promises in writing that the person being assessed can never read the assessment — a chat app cannot hold that promise, because messages can be screenshotted, servers have admins, and Discord keeps its own copy.
Because a Ledger describes a sexual relationship, UK GDPR treats it as special category data (Article 9). The legal basis for the add-on is your explicit consent under Article 9(2)(a) — which is why linking takes a deliberate button press and not just a command.
/mydata prints the complete record./forgetme or /unlink. This is real deletion,
not a flag, and it happens immediately. Your Ledger itself is untouched — it stays in your app./link replaces it.If a link goes unused for 400 days it is deleted automatically.
Neither is given your data for their own purposes, and it is not sold, shared or used for advertising, ever. It is also never used to train anything.
If data is ever exposed, anyone affected will be told directly and promptly, and the ICO informed within 72 hours where the law requires it.
If you are unhappy with how your data has been handled you can contact us at cindiekinzz@gmail.com, and you have the right to complain to the Information Commissioner's Office at ico.org.uk.