1. Core principles
- Every member must be 18 or older.
- Supporting internal-beta builds include user-selected encrypted photos alongside optional adult text. Earlier text-only/no-imagery descriptions do not cover that functionality. This September 6 update describes the feature's safety rules, not a public rollout or Apple approval.
- Choosing Not now, pausing, revising, removing a reward, changing an optional setting, blocking, leaving, and deleting are always permitted.
- One explicitly sent appreciation creates one immutable history record. It adds exactly one stamp only when it is non-intimate, sent by the reward's chosen contributor to its owner, and their mutually approved reward is active, unpaused, and below its target.
- Without an eligible active reward, the moment remains appreciation. It cannot change a reward later, and scanning a QR creates nothing.
- A reward is a shared invitation between one owner and one chosen contributor, not cash, a member score, or entitlement to affection, sex, money, or labor.
- The owner and contributor must approve the same reward version. Either participant may decline, pause, revise, or remove it without penalty, and revisions require fresh approval. Other circle members do not vote on or fulfill it.
- Rewards must be non-intimate. Intimacy can never be attached to stamp progress or redemption.
- Optional Intimacy Space remains unavailable unless a circle has exactly two active members and both independently enable it. A person's raw choice is not shown to the other member, although aggregate availability may allow an inference.
- Private photos require separate mutual opt-in and compared safety codes. Share only images you are entitled to share and that every depicted person has consented to sharing. Never share images involving minors, exploitation, coercion, or non-consensual intimate content. Receiving access is not consent to copy or redistribute.
- A private spark expires after two hours. A third member joining, either person opting out, a member leaving or blocking, or account deletion erases the circle's Intimacy Space moments, invitations, and live sparks.
2. Prohibited conduct
PairJar may not be used for threats, stalking, harassment, hate, blackmail, coercive control, punishment, non-consensual sexual pressure, sexual exploitation, trafficking, grooming, impersonation, unlawful content, emergency communication, or attempts to evade another person's block or decision to leave.
Do not use stamp progress, a reward, appreciation history, a response, or lack of response to shame, monitor, bargain with, compare, or pressure another person.
3. Product protections
PairJar is designed with:
- private safety reporting with a reason and optional details;
- block-and-leave, unilateral circle leave, and in-app account deletion without another member's approval;
- server-enforced circle membership, exactly-two intimacy availability, exact reward-version approval, eligible +1 stamp binding, and owner-only redemption;
- QR routes that never add stamps automatically and require an authenticated eligible circle member plus explicit confirmation;
- independent Off/Discreet-only private spark, invitation/reply, and photo alerts, all default Off: fixed waiting copy only, no private phrase, title, note, reply, name, image, identifier, URL, or action; a photo alert never opens or consumes a photo automatically;
- no public discovery, public profiles, member comparisons, leaderboard, fairness score, contribution ranking, guilt streak, relationship grade, or read receipts;
- baseline filtering for direct threats, self-harm coercion, and common coercive phrases.
Baseline filtering applies to supported text, not the visual contents of encrypted photos. Photo preparation checks structure and removes source metadata; it is not objectionable-image moderation. No automatic photo-analysis service is claimed. This remains a documented safety/distribution limitation. Reporting, blocking, human judgment, trusted support, and emergency services are not replaced by encryption or mutual opt-in.
To report or block, open Circle, choose the member, then Report a concern or Block and leave. A report contains only the reason/details deliberately submitted; no shared text, photo, screenshot, ciphertext, or key is attached automatically. The service cannot decrypt photo plaintext. You are not asked to save or email sensitive photos for an ordinary report. You can close or decline a photo and turn off sharing without the other person's approval. Blocking/leaving ends access; other members retain unrelated content under the Privacy Policy.
4. Reports and review
Ordinary app accounts cannot browse safety reports. Authorized reviewers may use a report only to assess safety, enforce these standards, respond to legal requirements, and prevent repeated misuse.
Safety reports are retained for no more than 90 days from submission, unless applicable law requires a longer period. Access must be limited, auditable, and removed when no longer needed.
PairJar may warn, restrict, suspend, or terminate an account and preserve information where reasonably necessary for safety or law. Where appropriate and safe, a user may request review of an enforcement decision through the support contact below.
5. Immediate danger
PairJar is not an emergency service, and reports are not monitored continuously.
If someone may be in immediate danger, contact local emergency services or a trusted local support organization. Leave the app and device if doing so is safer. Do not wait for an in-app response.
6. Contact
Safety and support email: p.hlavatik@gmail.com
Support page: https://pairjar.vercel.app/support/
For privacy questions about a report, read the Privacy Policy.