Privacy Policy

The short version

uWarmly exists to help you stay close to people — so we treat the data you trust us with the way you'd want a friend to. We store only what powers reminders and message drafts. We never sell or share your contacts. We never send messages on your behalf. You can export or erase everything, anytime.

What we collect

• Account data: email, name, avatar, locale, timezone, authentication identifiers (via Supabase Auth, including Google or Apple sign-in when you choose them).
• People & dates you add: names, relationship labels, birthdays/anniversaries/custom dates, optional phone or email (used only to open your messaging app with a prefilled draft), optional notes you write.
• Contacts import: only the contacts you explicitly select on the consent screen are uploaded — never your full address book. Contact photos stay on your device.
• Generated messages: the drafts created for you, your edits, and your feedback — kept so the assistant can learn your style.
• Usage & device data: push notification tokens, app events, crash reports.

How AI generation works

When you ask for a message, the relevant details (recipient first name, relationship, event, your notes and writing style) are sent to our AI provider (Anthropic or OpenAI) to produce drafts. We use API tiers whose terms do not permit training on your data. Drafts are stored in your account; you can delete them at any time.

What we never do

• Sell, rent or share your contacts or any personal data with advertisers.
• Send a message to anyone on your behalf — every message requires your explicit tap in your own messaging app.
• Read your conversations in any messaging app. We can't, and we wouldn't.

Processors we rely on

Supabase (database & auth), Stripe (payments — card details never touch our servers), Anthropic/OpenAI (message drafting), Resend (email reminders), Expo (push delivery), Sentry (error reports), PostHog (privacy-respecting product analytics, no ad tracking). Each processes data under its own data-processing agreement.

Your rights (GDPR / CCPA)

• Access & portability: Settings → Export my data downloads your people, dates and messages as JSON.
• Rectification: edit anything in the app.
• Erasure: Settings → Delete account erases your account and all associated data immediately; backups purge within 30 days. Also honored by email.
• CCPA: we do not sell personal information; California residents may exercise know/delete rights via the same tools.

Contact: privacy@uwarmly.com.

Retention & security

Data is kept while your account is active and deleted on account deletion. Everything is encrypted in transit (TLS) and at rest; access is scoped by row-level security so your data is only ever readable by you. Notification and audit logs contain no message bodies.

Children

uWarmly is not directed at children under 16 and we do not knowingly collect their data.

Changes

We'll email you about material changes before they take effect. Continued use after that means you accept the updated policy.