Privacy Policy

This policy explains what personal data the Futura app for iPhone (“the app”) collects, why, who processes it on our behalf, how to delete it, and the rights you have. “We” and “us” mean the data controller named below.

Data controller

Pavel Vaitsikhouski, Germany. Contact: lyncilapp@gmail.com.

What we collect

Your account

• A random user ID. The app signs you in anonymously the first time it opens. No email or password is needed. The sign-in is kept on your iPhone, so unless you sign in with Apple it is the only key to your capsules.
• Your Apple ID, only if you choose Sign in with Apple in Settings: Apple’s identifier for you and the email address Apple shares, which may be a relay address instead of your own. We don’t ask for your name. It lets you open the same capsules on another iPhone. Futura and Lyncil are made by us and use the same sign-in service, so if you sign in with Apple in both apps, they share one account; each app’s data stays separate.
• Your name and birthday, if you enter them, and your time zone, so capsules arrive at the right moment.

Your capsules

• The title and message you write, who the capsule is for (you, or a name you enter), the name you sign it with, and its delivery date.
• Photos you add, from your library or taken with the camera.
• Voice notes you record with the microphone.
• A place, if you add one. If you choose your current location, the app reads your iPhone’s location once, with your permission, and stores the coordinates with the capsule.

Capsules are kept on our servers until their delivery date and after it, so you can open them again. Sealed capsules are hidden from you in the app until they arrive, but they are stored like every other capsule, not end-to-end encrypted.

Usage and device data

• Which screens and features you use and your onboarding answers, recorded by Amplitude under a random device identifier, not your user ID or name. Amplitude also receives your device type, operating system, app version, IP address and an approximate location derived from it.

Purchases

Subscriptions are paid through the App Store; we never see your card or Apple account details. Adapty tells the app whether you have a subscription and keeps the record of it for this install.

Kept only on your iPhone

• The notifications that tell you a capsule has arrived, and whether you allowed them.

The app shows no ads and does not use your device’s advertising ID. We do not sell your data.

Why we use it, and the legal basis

• To provide the app: your account, storing and delivering your capsules, and subscriptions (performance of a contract, Art. 6(1)(b) GDPR).
• To understand and improve the app: usage analytics, and keeping the service secure (legitimate interests, Art. 6(1)(f) GDPR).
• Location, camera, microphone and notifications: only when you allow them in iOS (consent, which you can withdraw in your iPhone’s settings).
• To meet legal obligations, such as keeping purchase records (Art. 6(1)(c) GDPR).

Who processes your data

• Supabase: sign-in, and the database and file storage that hold your profile and capsules. supabase.com/privacy
• Amplitude: usage analytics. amplitude.com/privacy
• Adapty: subscription management. adapty.io/privacy
• Apple: Sign in with Apple, App Store purchases and notifications. apple.com/legal/privacy

Where your data is processed

Our providers may process data outside your country, including in the United States. Where data leaves the EU, it is protected by the provider’s Standard Contractual Clauses or an adequacy decision such as the EU–US Data Privacy Framework.

How long we keep it

Your profile and capsules are kept until you delete them. Deleting a capsule deletes its photos and voice notes too. Usage analytics are kept while they help us improve the app, and deleted on request. Purchase records are kept as long as tax and accounting law requires. Deleted data can remain in encrypted database backups for up to 30 days.

Deleting your data

In the app, open Settings (the gear on the home screen) and tap Delete my data. This permanently deletes every capsule, sealed ones included, with all their photos, voice notes and places, and your profile; the app then starts again as a new user. It cannot be undone, and it does not cancel a subscription: manage that in your Apple ID settings. You can also ask us by email at lyncilapp@gmail.com.

Your rights

Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent at any time without affecting earlier processing. Write to lyncilapp@gmail.com; we answer within one month. You can also complain to a data protection authority, in particular in the EU country where you live or work. Ours is the Berliner Beauftragte für Datenschutz und Informationsfreiheit (datenschutz-berlin.de).

Disclosure

We disclose personal data only to the processors above, when the law requires it (for example a court order), to protect the rights and safety of users or of the service, or, if the app changes hands, to its new owner, who would be bound by this policy and of which we would tell you in advance.

Security

Data travels encrypted between the app and our servers. Your capsules, photos and voice notes can be read only through your own sign-in. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children

The app is not directed at children under 13, and we do not knowingly collect their data. If you believe a child under 13 has given us personal data, write to us and we will delete it.

Changes to this policy

We may update this policy. The date at the top shows the latest version; for significant changes we will also tell you in the app before they take effect.

Contact

lyncilapp@gmail.com