Privacy Policy
What you keep in Us belongs to the two of you. We store it so you can reach it from both phones. We don't sell it, we don't use it for advertising, and we don't show it to anyone outside your space.
This policy explains what the Us app ("Us", "we") collects, why, who helps us process it, and the choices you have. Us is operated by Linsen Zhang, New York, USA. Questions: hello@usmoments.app.
What we collect
- Account information. Your email address, or your Apple ID sign-in identifier if you use Sign in with Apple (which may be a private relay address). The name you choose to show your partner.
- Optional contact details. A phone number and a shipping address, only if you add them, used to deliver a printed yearbook.
- What you add to your space. Photos, voice recordings, titles, notes, milestones, plans, and the text transcriptions of your voice recordings.
- Photo metadata. When you add a photo we read the date it was taken and, if present, its location (GPS) from the photo's EXIF data. We use these to place the moment in time and on your map, and to recognise the same photo if it is added twice.
- Device and service data. A push-notification token so we can notify you about your partner's activity, and basic technical logs (such as errors) needed to keep the service working.
We do not collect your contacts, browsing history, or advertising identifiers, and we do not track you across other apps or websites.
How we use it
- To store your space and show it to you and the one person you share it with.
- To organise and make your moments searchable — for example, to find "the dinner in Kyoto last spring". This includes automated analysis of your photos and voice recordings (see below).
- To add context you'd otherwise type yourself: the city or place a photo was taken, and the weather that day.
- To send notifications you can turn off in iOS Settings.
- To respond to you when you contact us.
Automated analysis (AI)
To make your moments searchable, photos you add are sent to OpenAI, which returns a description of what is in them (for example: food, places, signs, how many people). Voice recordings are sent to OpenAI to be transcribed into text, and questions you ask in the app are answered by OpenAI using your space's descriptions. The results are stored with your space and are used only for your space.
OpenAI processes this data on our behalf under its API terms, and does not use data sent through its API to train its models. OpenAI may retain it for a limited period for abuse monitoring.
Who helps us
We use a small number of service providers to run Us. Each receives only what it needs:
- Supabase — database, file storage, sign-in and server functions. All of your space's data is stored here.
- OpenAI — photo descriptions, voice transcription, and answering questions about your moments.
- Google Places — suggesting the name of a nearby place for a photo's location.
- OpenStreetMap (Nominatim) — turning a photo's location into a city name.
- Open-Meteo — the weather on the date and at the location of a moment.
- Apple — Sign in with Apple, and push notification delivery.
- Expo — app updates and push notification delivery.
For the location services above we send coordinates and dates, not your photos, your name or your email.
We do not sell or rent personal information, and we do not share it for advertising. We may disclose information if required by law, or to protect the safety of a person.
Your partner
Everything in a shared space — including photos, voice recordings and their transcriptions, and the shipping address — is visible to both members of that space. Your phone number is visible to your partner. Please only add content you're comfortable sharing with them.
How long we keep it
- Your data is kept while your account is active.
- When you delete a moment it disappears from your space right away, and is permanently removed, with its files, within 30 days.
- Deleting your account (Settings → Delete account) permanently removes your profile and sign-in. If you were the only member of a space, the whole space and all of its files are deleted. If your partner is still in the space, the shared moments remain with them — including ones you added — because they belong to both of you.
- If you leave a space, each of you keeps a copy of what you shared up to that point.
Your choices and rights
- You can edit or delete moments, photos, and voice recordings at any time.
- You can export your memories from Settings → Export our memories.
- You can withhold location access for the app, or remove location from photos before adding them.
- You can delete your account in the app at any time.
- Depending on where you live (for example California or the EU/UK), you may have rights to access, correct, delete, or receive a copy of your data, and to object to certain processing. Email hello@usmoments.app and we'll respond within 30 days.
Security
Data is encrypted in transit and at rest. Access to a space is restricted at the database level to its members. No system is perfectly secure, but we work to protect your data and will notify you of a breach where required by law.
Children
Us is not intended for anyone under 13, and we do not knowingly collect information from children under 13.
Where data is stored
Us is operated from the United States, and your data is stored and processed in the United States. By using Us from outside the US, you understand your data will be transferred there.
Changes
If we change this policy in a meaningful way we'll update the date above and let you know in the app.