1. Who we are
Us (“the Service”, “we”, “us”) is operated by Daniel Atherton, based in the United Kingdom. Daniel Atherton is the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Contact: privacy@us-app.co.uk
2. What data we collect
When you use Us, we collect:
- Account information — your name and email address, provided when you sign up via Clerk (our authentication provider).
- Profile information — a display name and optional profile photo you choose to upload.
- Content you create — memories, journal entries, recipes, wishlists, plans, and any photos you upload. This content is stored securely and is only visible to you and your partner.
- Relationship data — your relationship start date and any milestones or events you create.
- Usage data — basic technical logs (IP address, browser type, timestamps) generated automatically when you access the Service.
3. How we use your data
We use your data to:
- Provide and operate the Service (lawful basis: contract performance)
- Authenticate your identity and keep your account secure (legitimate interests)
- Display your shared content to you and your partner (contract performance)
- Generate a partner invite link for you to share yourself — we do not send this by email on your behalf (contract performance)
- Diagnose technical issues and improve the Service (legitimate interests)
We do not sell your data to third parties. We do not use your content for advertising or machine-learning training.
4. Third-party services
We use the following sub-processors to operate the Service:
- Clerk — authentication and session management. Your email address and name are stored with Clerk. Clerk Privacy Policy.
- Neon — PostgreSQL database hosting. All structured app data (memories, journal entries, recipes, etc.) is stored here. Servers are located in the EU (eu-west-2). Neon Privacy Policy.
- Amazon Web Services (AWS S3) — photo and file storage. Photos you upload are stored in an S3 bucket located in the EU (eu-north-1). AWS Privacy Policy.
- Vercel — hosting and deployment. Vercel Privacy Policy.
- Sentry — error monitoring, so we can find and fix bugs. May receive technical details about a request when something goes wrong (not your journal or photo content). Sentry Privacy Policy.
- Upstash — short-lived rate-limiting counters used to stop abusive request patterns. Does not store your content. Upstash Privacy Policy.
5. Data sharing
Your content is shared only with the one partner account linked to yours — nobody else can see it. We will not disclose your data to any other third party except where required by law (e.g. a valid legal request from a UK authority).
6. Data retention and deletion
We retain your data for as long as your account is active. You can delete your account at any time from Settings — this takes effect immediately, not after a waiting period.
What happens next depends on whether you have a partner sharing your space:
- No partner connected — your account and everything in it (entries, memories, photos, recipes, places, wishlists, plans) is permanently deleted.
- Partner connected — your personal account details (name, email, profile photo, login) are permanently deleted and you are signed out everywhere. The entries, photos, and other content you created together remain visible to your partner, since it is jointly created content they continue to rely on — we do not unilaterally delete it out from under them. If you would like your individual contributions removed as well in this situation, contact us and we will action it manually.
Photos stored in AWS S3 are deleted alongside any content that is deleted under the above.
7. Your rights under UK GDPR
You have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate data.
- Erasure — ask us to delete your data (“right to be forgotten”).
- Restriction — ask us to restrict processing of your data.
- Portability — receive your data in a structured, machine-readable format.
- Object — object to processing based on legitimate interests.
To exercise any of these rights, email privacy@us-app.co.uk. We will respond within one calendar month. You also have the right to lodge a complaint with the UK's supervisory authority, the Information Commissioner's Office (ICO).
8. Cookies and local storage
We use cookies and browser local storage solely to keep you signed in and remember small UI preferences (such as whether you have dismissed the install banner). We do not use tracking or advertising cookies.
9. Security
All data is transmitted over HTTPS. Passwords are never stored by us — authentication is handled entirely by Clerk. Photos are stored in a private AWS S3 bucket with access controlled via short-lived signed URLs.
10. Changes to this policy
We may update this policy from time to time. We will notify you of material changes by posting a notice within the Service. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.