YOUR DATA

Dearwhile privacy notice

Updated 11 October 2026. This notice describes the current Dearwhile private beta and this website. Dearwhile helps you keep memories, moments, places, and the stories behind them with people you choose. For privacy questions, contact [email protected].

Information you provide

• Account information received when you sign in with Apple or Google, including an account identifier, email address and name when provided, plus profile information and an optional avatar.
• Photos and videos you choose to upload; memory titles, dates, captions, notes and places you enter or select; reactions, member tags and shared-memory activity.
• People you save by email, the optional names you give them, memory memberships, roles and invitation requests. Saved people are separate from memory membership.
• Information you send us when requesting support.

How we use information

We use this information to authenticate you, save and display your memories, manage access, process uploads and downloads, deliver in-app and optional device activity notifications, and support and protect the service. We do not receive your Apple or Google password.

Permissions and your device

The app requests photo or video access when you choose media, and may request location access when you choose your current location or use the map. Memory locations you save are stored with the memory. Device settings let you manage these permissions. The app also stores session information, cached media and pending uploads on your device. If you enable device notifications, the app requests notification permission and stores a device push token to deliver notifications to that device. You can manage notification permission in your device settings.

Sharing and service providers

Memory members can access shared content according to their role. The owner controls membership and contributor or viewer access. People with access can download or copy shared content, so choose recipients carefully. Invitation links contain private access tokens: do not publish them.

Supabase provides authentication, database and backend services. Cloudflare provides private media storage and website delivery. Apple and Google process sign-in information through their services. Expo provides push-notification delivery; Apple and Google notification services deliver notifications to your device. Apple or Google map services process map requests; the Android fallback map uses OpenFreeMap, which receives requests for map styles and tiles for the area being viewed. Photon (hosted by komoot) receives place-search text when you search for a location. Providers may process data outside your country. Media storage is private and the app uses time-limited access links; this is not a promise of end-to-end encryption.

Website and technical records

This website does not use advertising scripts, third-party analytics or advertising cookies. The invitation page does not request or display private memory content. Hosting and backend providers may process technical records such as IP addresses, timestamps and requests to deliver and secure the service. An invitation token is part of its URL, so keep invitation URLs private.

Retention and deletion

Your account and memories remain stored while you use the service, including memories placed in Trash until permanently deleted. Account deletion removes your account and memories you own, and queues their stored media for background cleanup. Photos, videos and notes you contributed to memories owned by others remain, with your account identity removed. You can delete your own contributions before deleting your account. This cleanup is not instantaneous. Service-provider backups and technical records may persist according to their operational retention.

You can update your profile, delete your own contributions where permitted, and use Delete account from your profile. Owners can remove members and permanently delete their memories. Deleting content cannot remove copies another person has already saved. For detailed steps or to submit a deletion request from the web, visit our Account and data deletion page.

When paid or time-limited gifted creator access is confirmed to have ended, we start a 60-day recovery window. During this window, you can view and download your owned memories; new owned memories and uploads are paused. We display the deletion deadline in Your membership and send recovery notices. Renewing or receiving new active gifted access before deletion cancels the countdown. After the window, your owned memories—including their moments and notes—are permanently deleted and stored media is queued for removal. Your account and memories owned by others remain. Provider verification failures alone do not trigger deletion. Accounts already expired when this policy is enabled receive a new 60-day window.

Members can leave shared memories. Leaving removes access but keeps their contributed moments and notes in the memory for its remaining members. Activity notifications can be cleared; read notifications are removed after 12 hours by scheduled cleanup.

Your choices and requests

You can manage device permissions, leave content unshared, ask an owner to change access, download accessible moments and request account deletion. You can submit an online deletion request anytime at Request account and data deletion, or email [email protected]. We may need to verify your account before acting.

Waitlist and email

If you join our waitlist, we store your email, optional name and consent so we can send beta and launch updates. Server rate limits help protect this form from spam. Resend delivers our emails. Marketing messages include an unsubscribe link; transactional messages include account, invitation, subscription and storage notices. Personal beta activation links connect a gift to the signed-in account that claims it, even when its email differs from the waitlist email.

Changes

We will update this notice as Dearwhile changes. Any automatic deletion policy will need clear information before activation.