Privacy

Last updated 15 October 2026.

The short version

The daily widget works without an app account. Preferences, favourites, hidden photos, pins and history stay on your device and are shared with the widget through Apple’s app-group storage. There is no analytics or advertising SDK.

Offline pairing invitations

An offline invitation contains a random pairing seed, collection choice, catalog version, timezone, and starting day. Anyone holding this link can reproduce that image schedule. It does not include your name, email address, contacts, personal photos or shared reactions.

Optional private iCloud reactions

If you enable shared reactions, both people use their Apple iCloud accounts. Apple’s private sharing controls grant access to the people you invite. The app does not offer public sharing. Your pairing schedule, CloudKit account identifiers, selected photo identifiers and reaction update times are stored in the owner’s private CloudKit database and made available to invited participants through Apple’s shared database. Favourites, hidden-photo choices, local pins and history are not uploaded.

Reactions refresh when you open the app or request a refresh. The widget displays a locally saved snapshot, not a live presence indicator or read receipt. Disconnecting on a device clears its local reaction cache but does not delete cloud records or revoke another participant’s access. Use Apple’s Manage Sharing controls to stop sharing or remove a participant. Sign-out or an account change clears the app’s local reaction connection when the app receives the account-change notification.

Retention and deletion

Local preferences remain in app storage until removed or the app’s data is deleted; Apple device backups may retain earlier copies. Cloud records remain until the owner deletes that pairing or removes the app’s cloud data through Apple’s iCloud storage controls. Stopping sharing revokes access but is not a promise that all cloud records are deleted. In the public-release candidate, Delete my shared reactions removes your reaction record; the owner’s Delete shared pairing from iCloud removes that pairing’s entire custom zone, including the invitation and both people’s reactions. Earlier beta1015 does not include these deletion buttons. Apple manages its own backup retention. We cannot inspect or delete your private CloudKit records from a developer dashboard.

Other network use

The prepared collection ships with the app. Future catalog downloads may request versioned image packs from our site. Daily image selection happens locally; viewing an image does not send a reaction automatically.

Opening this public website sends normal web requests to its hosting providers, OpenAI Sites and Cloudflare, including your IP address and browser/request information for delivery and security. We do not add advertising trackers or analytics scripts to the site. Offline pairing links contain a schedule code in the URL; treat the full link as private and avoid sharing it publicly. It is not an iCloud access credential.

Photos

If you choose “Set wallpaper,” iOS asks for permission to add the prepared image to your photo library. The app does not read your library. Shared images and wallpapers include credits where the photograph’s licence requires attribution.

Support correspondence

If you email us, we receive the address and information you choose to send. We use it to answer your request, not for marketing. Ask us to delete the correspondence when it is no longer needed; we may retain information required for legitimate record-keeping. Do not send passwords or private sharing links.

Contact

Email in-another-life-app@proton.me for support or privacy questions.