Privacy

Who is responsible for your data

The data controller is Our Little Town. For anything about privacy, write to hello@ourlittletown.app.

What we keep and why

• Account: an email address or Apple identifier, so you can sign in. With Sign in with Apple you can hide your address. We then also keep Apple's token, only to end the link with Apple when you delete your account.
• Profile: the name you enter, language and time zone. The zone is used for notification timing and the time of day in the town. It isn't your location.
• Town: the town's name, the date you got together, the names you entered and the invite code.
• Memories: photos, short videos and voice messages, titles, dates, places you type in, and your thoughts.
• Challenges: your picks, saved and custom challenges, small gestures and reminders.
• Subscription: plan, trial status and expiry date. We never see your card details, only Apple has them.
• Notifications: the device token and your notification settings. In a browser, that browser's subscription to notifications.
• Web version: your sign-in and the data for working offline stay in your browser until you sign out.
• “Write to us” messages: the text, screenshots you add, app and iOS version, device model, language and region, screen size, Pro status, town and user identifiers, and your email address if you allow a reply.
• Android waiting list: email, language, country based on IP address and signup date.
• Crash reports: when the app crashes, a technical report with the app and iOS version, device model and where in the code the error happened. It has no names, email addresses, photos or thoughts, and is used only to fix bugs.

What we don't do

• No ads, and we don't sell data.
• We don't use your photos or thoughts to train artificial intelligence.
• We don't track you across apps and websites.
• We don't use your phone's location or contacts. We only see the photos you pick.
• The app has no analytics and no usage tracking. We work out totals, such as how many couples are active, from the database, without personal data.

Legal basis

• Performing our contract with you: account, town, memories, challenges and subscription, because the app doesn't work without them.
• Consent: notifications, replying to your message and the waiting list. You can withdraw consent at any time.
• Legitimate interest: keeping the service secure, preventing abuse, for example the limit on signups per IP address, and fixing bugs from crash reports.

Who sees your memories

Only the two of you see your memories. You see your partner's thought about a memory only after you write your own.

Data is encrypted in transit and at rest on the servers, but this is not end-to-end encryption: a service administrator can technically access it. We do that only when it's needed to fix a problem you reported or when the law requires it.

Anyone with an invite link or code can see the town's name, your names and a small picture of the first house while the invite is valid. Invites last 7 days.

Who handles your data

• Supabase: database, sign-in and files, on servers in Ireland (EU).
• Apple: sign-in, purchases and notification delivery.
• RevenueCat: subscription status. It receives only a random account identifier, no name or email address.
• Expo: passes notifications on to Apple. A notification's text can contain your names and the name of your town or challenge, never your thoughts.
• The browser you use (Google, Mozilla, Apple and others): delivers web notifications. The text arrives encrypted.
• Resend: sends the sign-in emails, messages from "Write to us", the waiting list email, and the key moments if your browser has no notifications. You turn those off in the settings.
• Cloudflare: hosts this website and protects it from attacks. The website sets no tracking cookies, only one for the language you pick and one that remembers you're signed in, so this address opens your town.
• Sentry (Functional Software, Inc.), data stored in the EU (Frankfurt): receives crash reports only, without personal data, and keeps them for at most 90 days.

Some of these companies are based in the USA, so data can leave the EU and Serbia. In those cases we rely on standard contractual clauses or other lawful transfer mechanisms.

How long we keep it

• Account and town: until you delete them.
• A deleted memory: 30 days in “Recently deleted”, then it's gone for good. You can also delete it right away.
• A deleted town: 30 days, so you can change your mind, then it's gone for good for both of you.
• An archived town: until you delete it.
• Files of deleted content: removed from the servers within the next few days.
• Notification queue: 30 days. Invites: 7 days.
• “Write to us” messages: 12 months after sending, then they're gone for good, screenshots included. The copy that reaches our email is deleted by hand within the same period. When you delete your account, we delete the reply address, screenshots and town identifier right away; the text and technical details stay until the period ends, no longer tied to the account. Write to us if you'd like a message deleted sooner.
• Waiting list: until we send that one email or you unsubscribe.
• Purchase records: when you delete your account, we also delete your record at RevenueCat. Apple keeps its own purchase records under its own rules and for accounting obligations.

Data on your phone

So your town is there right away, the app keeps a copy of data on your phone, including names and the thoughts you can already read, and the widget keeps the town's name and a picture of it. The sign-in key is in the iOS Keychain. When you delete the app, all of that leaves your phone.

Export and deletion

• Export: Settings → Privacy & data → Export our memories gives you a ZIP with photos and text.
• Parting ways: Settings → Parting ways lets you keep your memories, archive the town or delete it.
• Deleting your account: Settings → Delete account deletes the account right away, with your photos and thoughts, ends the link with your Apple sign-in and deletes your record at RevenueCat. It doesn't cancel a subscription, you do that in Apple settings. Memories (title, place, date), your partner's photos and thoughts, and the name you entered in the town stay with your partner.
• Waiting list: every email from us has an unsubscribe link that deletes your address.

Your rights

Under the GDPR and Serbia's Law on Personal Data Protection, you have the right to access, correct, delete, restrict processing, port your data and object, and to withdraw consent. Write to hello@ourlittletown.app and we'll answer within a month.

You can complain to Serbia's Commissioner for Information of Public Importance and Personal Data Protection or to the authority in your country.

Age

Our Little Town is meant for people aged 16 and over.

Changes

When something important changes, we'll update the date at the top and let you know.