Privacy Policy

What we process

Hourfold processes your email address, display name, optional profile photo, private group membership, photos and captions so that the app can provide private group recaps. We also process subscription status when you choose Premium, and a record of which actions you take in the app — see Usage data.

Why and where

Your data is used only to operate Hourfold, secure accounts, store private moments, provide support and comply with legal obligations. Authentication, database records and media storage are provided by Supabase. Native subscription processing is provided by Apple, Google and RevenueCat. We do not sell personal data or show advertising.

Who can see your content

Only members of your private group can access group information. Photos are not available to other members until the recap time selected for that group. Your own newly captured photo remains visible to you.

Reports and blocks

When you report a photo we record who reported it, whose photo it was, the group, the reason you chose, any note you added and a reference to the photo itself, so that a person can review it. Reports are kept while the case is open and afterwards only as long as needed to act on repeat offences. When you block someone we record that the block exists; it is visible to you and to no one else.

Usage data

Hourfold records which actions you take in the app, so that we can tell whether it works: signing in, creating an account, creating or joining a group, copying an invite code, capturing a moment, deleting your own photo, starting and finishing a recap, saving a recap, reporting a photo, blocking or unblocking someone, and opening, starting, completing or restoring a purchase.

Each record holds the name of the action, the time, and your user ID. Some records also hold the ID of the group it happened in, how many moments a recap contained, which subscription option you chose, the reason you picked when reporting, and — for a recap — whose day you were viewing. No photo, caption, display name, email address or message content is ever part of these records.

This data is stored in our own Supabase database and is not shared with any advertising or analytics company. It is deleted together with your account.

Diagnostic data

If the app encounters a software error while you are signed in, it records the type of error, its message, the part of the code involved, your user ID, which screen you were on, your device platform and your screen size. This is separate from usage data — it is a record of the app misbehaving, not of something you did — and exists so that errors can be found and fixed. It is stored in our own Supabase database, not shared with any third party, and deleted together with your account.

Retention and deletion

A photo belongs to the day it was taken. Once that day has ended in your group’s time zone, the photo is deleted automatically — the file itself, not only the entry pointing at it — usually within a few hours of midnight. Hourfold keeps no archive of earlier days, and there is no way to open one. The caption and the reactions go with the photo.

There is one exception. A photo that has been reported is kept while the report is open, and for up to 90 days after it was reviewed, so that we can look into it and recognise repeat offences. It stays out of the app for everyone during that time; it is retained as evidence, not as content.

A profile photo is kept while it is your profile photo. Replace it and the previous file is removed.

You can delete your account in Profile → Delete account. That removes your authentication record, your database records and your files: your photos, your profile photo, and — because the group goes with you — the photos other members left in any group you created. Photos under an open or recent report are the exception described above. Backups held by our provider expire on their own schedule.

Your choices

You may decline camera access, but cannot capture new moments without it. Depending on your location, you may have rights to access, correct, delete or restrict processing of personal data.

Contact

Before launch, replace this paragraph with the controller’s legal name, postal address and privacy contact email: privacy@YOUR-DOMAIN.example.