Privacy Policy

§1 Who we are

TimeLink is run by Timelink LLC, a Delaware limited liability company. For anything about your privacy, write to inquiries@timelinklife.com.

In other words: Who is responsible for your information, and how to reach them.

§2 What we collect

• Your account: name, email address and password (stored only as a secure hash).
• What you create: letters, photos, videos, voice recordings and keepsakes, with their titles, dates and occasions.
• If a photo records when and where it was taken, that is stored with it. We use the date to place the photo in time; the place is not used for anything.
• The people in your family tree: names, email addresses, phone numbers, relationships, postal addresses, birthdays, anniversaries, and dates of death if you add them.
• Your Assigned Contacts: their names and email addresses, the order you put them in, and a record of what each did and when — whether they were asked, declined, confirmed your passing or said you were fine.
• Check-in records: each check-in we send you and whether you answered it. This is, in effect, a record of when you confirmed you were alive.
• Delivery records: when each message was sent and when it was first opened.
• Friends you invite: their email address and, if you give it, their name.
• If you turn on Face ID to open TimeLink on your phone: a security key for that phone. It is not a picture or a measurement of your face (see §4).
• Technical information: requests to the site, including IP address and browser, held briefly by our hosting provider.

We do not collect payment information (TimeLink does not charge yet), and we do not use push notifications, analytics or advertising tools.

In other words: What you give us, a record of your check-ins and deliveries, and very little else.

§3 People who did not sign up

This section is still being written.

In other words: to follow, with the text.

§4 Faces and voices

TimeLink does not create a faceprint, voiceprint or any other biometric identifier from the photos, videos or recordings you upload — not itself, and not through any other company or AI feature. Nothing analyses faces or voices.

If you choose to open TimeLink with Face ID, it is your phone that checks your face, the way it does when you unlock it. Your face never leaves your device. We receive only a yes or a no, and keep a security key that cannot be used to recognise anyone.

In other words: We never use your photos or recordings to identify anyone.

§5 How we use it, and what we never do

We use your information to run TimeLink for you: to store what you create, deliver it to the people and on the days you chose, send your check-ins, contact your Assigned Contacts when they are needed, remind you of birthdays and anniversaries if you ask us to, and answer you when you write to us.

We never sell it. We never share it for advertising. TimeLink does not use anything you write, record or upload to train AI models.

In other words: We use it to do what you asked. We never sell it, advertise with it, or train AI on it.

§6 Automated moderation

Nothing you write, record or upload is scanned automatically — by us or by anyone else.

In other words: No software reads your letters or looks at your photos.

§7 Check-ins and confirming a death

Every check-in we send you is recorded, with whether and when you answered it. Signing in to TimeLink also counts as an answer. Only you can see your check-in history.

If your check-ins go unanswered, we ask your first Assigned Contact whether you have passed away or are fine. If they confirm your passing, we wait 72 hours and email you; signing in during that time stops everything. Only then is what you have held sent. We do not ask for a death certificate or any other document.

Your Assigned Contact never sees what you have written. They see only who has something waiting and how many things.

In other words: We keep a record of your check-ins. When the time comes, your Assigned Contact tells us — and sees nothing you wrote.

§8 After a death

This section is still being written.

In other words: to follow, with the text.

§9 Who we share it with

Only the companies that run TimeLink’s systems for us, and only for that:

• Supabase — our database and sign-in
• Cloudflare R2 — file storage
• Vercel — runs the timelink website and app
• Resend — sends our email
• Anthropic — the ai behind letter help, the quote of the day and the help chat

The full list, with what each holds and where, is at timelinklife.com/privacy/subprocessors. And the people you send things to, of course — that is the point.

In other words: Five companies help us run TimeLink. Nobody else gets your information.

§10 Security, and who can read your messages

Your messages and files are encrypted while they travel and while they are stored. They are not end-to-end encrypted: the people at TimeLink with administrator access to our systems could technically open them.

Everything travels over encrypted connections. Photos, videos and recordings are only ever served through links that expire after an hour. The private link in a delivery email does not expire (see §11).

In other words: Your things are encrypted, but not end-to-end — so we tell you plainly that our administrators could technically see them.

§11 How long we keep things

Today we keep everything until you delete it or delete your account. Deleting your account removes everything at once — your files from storage first, then every record about you and the people in your account.

A delivered message stays open to the person it was sent to, through its private link, for as long as your account exists. The link does not expire. It stops working only if you delete that message or your account.

Check-in records, delivery records and invitation records are kept for as long as your account exists.

In other words: Until you delete it. Nothing is thrown away behind your back — but nothing is tidied up automatically either.

§12 Dormant accounts

An inactive account is never treated as a death. If you stop answering check-ins, we ask your Assigned Contact; silence on its own sends nothing.

In other words: Going quiet doesn’t release your messages.

§13 Your rights

• See and take your information: Settings → Download everything gives you all of it, at once.
• Correct it: edit anything in the app, at any time.
• Delete it: Settings → Delete your account removes everything, immediately.
• Object, or ask about anything else: write to us at inquiries@timelinklife.com.

In other words: Download it, fix it or delete it yourself, any time. For anything else, ask us.

§14 Children

This section is still being written.

In other words: to follow, with the text.

§15 If something goes wrong

If your information is exposed in a security breach, we will tell you by email within 72 hours of discovering it.

In other words: If there is a breach, you hear from us within three days.

§16 If TimeLink is sold

If TimeLink is acquired, we will tell you before your information moves, the new owner will be bound by this policy, and you will have the chance to delete your account first.

In other words: A buyer gets our obligations along with your data, and you can leave before it moves.

§17 Cookies and analytics

TimeLink uses only what it needs to work: a cookie that keeps you signed in, cookies that remember whether you use Face ID on that phone, and your browser’s own storage to remember small things, like which tips you have dismissed and which letters you have opened. There are no analytics, advertising or tracking cookies, and no third party sets anything through our site.

In other words: One cookie to keep you signed in. No tracking.

§18 Your rights where you live

This section is still being written.

In other words: to follow, with the text.

§19 Gifts, shops and paid links

This section is still being written.

In other words: to follow, with the text.