Privacy policy
Effective date: 28 September 2026. Replaces the policy of 22 September 2026; the change adds the Google and Apple sign-ins you can link to an account from the app, and the password reset email.
Sincerely, Your Space is a shared chore list for the people you live with. This policy describes what leaves your phone, where it is stored, who can see it, and how it goes away. It applies to the iOS and Android apps and to this website. The service is operated by the owner of sincerelyyourspace.com, reachable at [email protected], who is the data controller for everything below.
What the app is not
There is no advertising SDK and no analytics SDK in the shipped app. There is no advertising identifier, no cross-app tracking, no third-party profile built from your use of the app, and no crash or usage reporting service. Nothing in the app sends telemetry about your habits to anyone, and we do not sell personal information.
The third-party code compiled into the app is its own dependency set: device_info_plus, flutter_web_auth_2, package_info_plus, path_provider_foundation, url_launcher, flutter_local_notifications, home_widget, in_app_purchase, sign_in_with_apple, google_sign_in, plus the state, routing and markdown packages. None of them phone home on their own; in_app_purchase talks to Apple's or Google's store only when you buy or restore a subscription, and the two sign-in packages talk to Apple or Google only when you choose that sign-in.
What we store, and why
| Data | Where it lives | Why it exists |
|---|---|---|
| Your email address and display name | Our Appwrite instance | To sign you in and to show you as yourself in your household |
| Your password, if you use one | Our Appwrite instance, as a salted hash | To sign you in. We never see the password itself |
| The households you belong to, and your role in each | Our Appwrite instance | Membership is the whole product |
| Chores, circles, completions, star reactions, star totals | Our Appwrite instance | These are your household's records; the app is meaningless without them |
| Your household's plan | Our Appwrite instance: the plan's state and end date, the product, the paying member's user id, and a transaction identifier from Apple or Google | To know whether a household is on its free month, subscribed, or read-only, and to confirm that with the store |
| If you sign in with Apple: a token from Apple | Our Appwrite instance, encrypted, readable only by our server, never by the app or anyone else | Kept only to revoke the Sign in with Apple link when the account is deleted; it is deleted with the account |
| Google or Apple sign-ins you add to your account: which provider, an identifier the provider gives for you, the email address it gave, and when you added it | Our Appwrite instance, readable only by our server | So that sign-in opens your account; deleted with the account |
| Your reminder settings | Your phone only | Reminders are scheduled on the device; nothing about them is sent to us |
Everything above is stored on infrastructure we operate. It is not sold, licensed, rented or shared with third parties for their own purposes. There is no analytics destination to share with, so there is no such step in the data path at all.
What we do not collect
Browsing history, contacts, calendar, location, photos, files, microphone, camera, clipboard contents, health data, and advertising identifiers. The app requests no permission to any of them. Notification permission is requested only when you turn on reminders, and revoking it does not disable anything else.
Sign-in through Google or Apple
You can also add Google or Apple to an account you already have, from the You tab (Sign-in methods), so any of them opens the same account. Adding one goes through that provider's own sign-in and stores the row in the table above; we do not receive a password or anything else from the provider for it. A Google or Apple account that already opens a different account here cannot be added; accounts are never merged.
If you forget your password, the sign-in screen can email you a link to choose a new one (it works for an hour, once). The link opens a page on sincerelyyourspace.com that sends the new password straight to our server; the page stores nothing. The same email is how an account made with Google or Apple gets a password.
If you use Google or Apple sign-in, that provider passes us your email address and display name, and we store those as your account identity. Apple sends them on the first authorisation only; later sign-ins do not include them, so what Apple gave us the first time is what the household sees. If you sign in with Apple's private relay address (…@privaterelay.appleid.com), mail addressed to you is delivered only through that relay. Google and Apple each process that sign-in under their own privacy policies.
When you sign in with Apple, Apple also gives our server a token for that sign-in (older versions of the app did not ask for one). A token from Apple is kept only to revoke the Sign in with Apple link when the account is deleted; it is deleted with the account. It is stored encrypted, only our server can read it, and it is never used to sign you in or to ask Apple anything about you. Revoking it removes the app from your Apple ID's list of apps using Sign in with Apple. If you signed in with Apple through the older web sign-in, the token Apple gave that flow is revoked the same way.
Your household, and other members
Households are groups of people who share a board. Members of a household can see that household's chores, completions, reactions and star totals, including the names and email addresses attached to them, which is the point of the feature. That sharing is confined to members of that household. Nothing about one household is shown to another, and nothing is public.
What a household member sees is not "third-party sharing" in the regulatory sense, and we treat it as content you generate together rather than as data we hand onward.
Companies that handle part of the service
These are the only other parties that touch your data, and each only for the reason given:
| Who | What they handle |
|---|---|
| Apple and Google | Sign-in, if you choose it; subscription purchases and renewals; and the app's distribution. They hold your payment details, and we never see them. In return we receive a transaction identifier and the subscription's state. |
| Cloudflare | Fronts this website and our API, and routes our incoming email. It processes connection metadata (your IP address, the request) to serve and protect the service, under its own privacy policy. |
| Google (Gmail) | Relays the email the service sends: invites, password resets, address verifications. The message and its recipient address pass through Google's mail servers. |
Our own reverse proxy keeps no access log for this service.
Children
The app is rated 4+ on the App Store and Everyone on Google Play, which describes its content. It is built for households, not for children on their own, and it is not directed at children under 13. An account is a person with an email address and a sign-in; where a person is too young to agree to our terms, a parent or guardian creates and manages the account. If you believe a child has created an account without that, tell us at [email protected] and we will delete it.
How long we keep things
For as long as the account or the household exists, because the records are the product. A household's history stays while the household has members. Deleted data is removed from the live database immediately. We take occasional full copies of the database for disaster recovery; a deleted record can persist in such a copy until that copy is replaced, and we do not restore copies to bring deleted accounts back.
Deleting your account, and how it goes away
You can delete your account from the You tab in the app, or by email; this page has both routes and the full list. In short: your user record, sign-in identities and memberships are deleted at once, and you are removed from every household. If you signed in with Apple and we hold a token from Apple for it, the Sign in with Apple link is revoked at Apple and the token is deleted with the account. If Apple cannot be reached at that moment, or we hold no token (for example, your last Apple sign-in was on an older version of the app), your account is deleted all the same; remove the app yourself on your iPhone under Settings → your name → Sign-In & Security → Sign in with Apple. A household you were the only member of is deleted with everything in it. In households that keep going, the chores, completions and reactions you created remain as that household's history with your name replaced by "Former member", because deleting them would silently rewrite records belonging to other people.
To have records removed that are yours alone, or to leave a household without deleting the account, ask us and we will do it. A request about your account does not need to wait for a court.
Your rights
Wherever you live, you can ask us what we hold about you, ask for it to be corrected or deleted, ask for a copy of it, and object to how it is used. Write to [email protected] from the email address you sign in with and we will answer within thirty days. People in the European Economic Area, the United Kingdom and California have these rights in law; we honour them for everyone, and we do not treat anyone differently for using them. We rely on the agreement between us (our terms) as the legal basis for processing what the app needs to work, and on our legitimate interest in keeping the service running and safe for the rest.
Infrastructure and security
The backend is a self-hosted Appwrite instance on hardware we control, not a multi-tenant cloud service. The public API endpoint, api.sincerelyyourspace.com, is served over HTTPS through a reverse proxy with a publicly trusted certificate, fronted by Cloudflare. The app only ever talks to that one endpoint. Access to the server is limited to the operator, over authenticated connections. No system is perfectly secure; if we learn of a breach that affects your data, we will tell you.
Payments
Subscriptions are bought through Apple or Google, and any card or payment details stay with them; we never see them. What we keep is the plan's state, when it ends, which product it is, which member pays, and a transaction identifier so we can confirm the subscription with the store. The first month is free and needs no payment details at all.
Email we send
The service sends email only when you or a household member cause it to: an invite, a password reset, or an address verification. It comes from [email protected]. There is no newsletter and no marketing list.
Changes to this policy
If we change what the app collects, this page changes in the same release, the effective date at the top moves, and the app tells you the next time you open it. Older versions are kept in the app's public source history.
Contact
Questions, deletion requests, or questions about what a household can see: [email protected]. General help: [email protected].
This page is kept in step with docs/PRIVACY.md in the app's repository and changes in the same commit as the code it describes.