Either of you can release the other. Neither can release themselves. That's the whole idea.

No accounts, no server, no analytics. Locks, pairing and history live only on your two phones. Requests travel through your own iCloud, readable by nobody else. Read the privacy policy.