Timeless

Privacy Policy

Effective: October 11, 2026

Timeless is an iOS app for organizing personal collections, made by an independent developer. We value your privacy and collect as little information as possible. This Privacy Policy explains what we collect, how we use it, and how we protect it. It covers the Timeless app and the website at timelesscollections.net.

This policy applies to Timeless as offered on the App Store outside China mainland. If you downloaded the app from the China mainland App Store, the Chinese 《隐私政策》 applies instead.

Timeless has no accounts. We do not collect your name, email address, or contact details through the app. Timeless is not directed at children under 13.

1. Information We Collect

1.1 Data on Your Device and in Your iCloud

Your collections, items, photos, settings, and assistant chat history are stored on your device. If iCloud is available, they also sync to the private database of your own iCloud account through Apple's CloudKit. That database belongs to your Apple Account and we cannot read it.

Photos enter the app only when you select them with Apple's photo picker or take them with the camera. Image processing such as background removal runs on your device.

1.2 Data Sent to the AI Assistant

The assistant is the only feature that sends your content off your device. Each message transmits the following to our server over an encrypted connection:

• the messages in the current chat;
• up to three images you attached to it. Photos stored on your items are not sent;
• a text listing of the collection the chat is about: its property names and options, and each item's name and values. Item photos are not included.

Our server passes this to the AI provider named in section 6, streams the answer back, and keeps none of it.

1.3 Subscription and Technical Data

Apple handles the payment. We never see your name, billing address, or payment details. To confirm your subscription is active, we receive the subscription record Apple signs for your purchase.

Our server logs request paths, timing, and errors. Your IP address is used to rate-limit abuse and may appear in our hosting provider's logs.

1.4 Usage Analytics

The app sends usage events, such as which features are used and how fast the assistant responds, to PostHog, our analytics provider. Events are linked to a random identifier that is not connected to your name, email address, or Apple Account. PostHog also receives standard device information such as device model, OS and app version, language, and time zone, and the IP address of the request. Analytics never include the content of your collections, your messages, or any photos or images.

2. How We Use Your Information

We use this information to:

• provide core features: storing your collections, syncing them to your own iCloud, and answering your questions with the assistant;
• confirm your subscription and apply fair-use rate limits;
• keep the service running and secure, and troubleshoot errors;
• understand how features are used and improve the app, using the analytics described in section 1.4;
• comply with legal obligations.

We do not use your information for advertising, for building advertising profiles, or for training AI models.

3. Data Protection

• Encryption: all connections use HTTPS, and your iCloud data is protected by Apple.
• No server-side copy: your collections, photos, and chat history are never stored on our server. Assistant messages are processed in memory only.
• Access control: the authorization token is stored in your device's Keychain and expires within 24 hours. Access to our server is restricted to the developer.

4. Data Access

• Viewing and updating: everything you create is visible and editable in the app.
• Deleting: delete items or collections in the app and empty its trash. To remove everything, delete the app and remove its iCloud data under Settings > your name > iCloud > Manage Account Storage.
• Asking us: email [email protected] to see, correct, or delete anything we hold about you. Because the analytics identifier is not connected to your identity, we may need details such as the dates you used the app to find your analytics data.

There is no account to create and no account to delete. If a child under 13 has given us personal information, contact us and we will delete it.

5. Data Retention

• Assistant messages and images: kept by our server for the length of the request only. Alibaba Cloud then handles them under its own privacy notice, which states that this data is never used for model training.
• Server logs: retained by our hosting provider for 7 days, then deleted.
• Subscription status: held in server memory only and cleared when the server restarts.

We may retain data longer where the law requires it or to resolve a dispute.

6. Information Sharing

We do not sell your personal information or share it for advertising. We use four service providers, each only for what is listed here:

• Alibaba Cloud Model Studio (Singapore) processes assistant requests. When the chat includes an image, the request is answered by a Qwen model; otherwise it is answered by a GLM model from Zhipu AI on the same platform. Because each request carries the chat's most recent images, a text-only follow-up in a chat that contains an image is also answered by the Qwen model. Alibaba Cloud states that it does not use this content to train AI models. See the Model Studio privacy notice.
• Apple handles your payment, the App Store, and your iCloud data. See Apple's Privacy Policy.
• Railway (Singapore) hosts our server and retains its logs. See Railway's Privacy Policy.
• PostHog (United States) receives and stores the usage analytics described in section 1.4. See PostHog's Privacy Policy.

We may also disclose information where the law or a government request requires it, or to protect the rights and safety of Timeless and its users.

Apart from the usage analytics in section 1.4, the app contains no advertising and no tracking. Analytics data is not combined with data from other companies and is not used to follow your activity across other apps or websites. The website contains no analytics and sets no cookies. A "Do Not Track" signal or an opt-out preference signal such as Global Privacy Control changes nothing, and no third party tracks your activity across other websites or apps through Timeless.

7. Changes to the Privacy Policy

We may update this policy. The new version is posted at this address with a new effective date, and for a material change we will show a notice in the app or on the website before it takes effect. Your continued use of Timeless constitutes acceptance of the updated policy.

8. Contact Us

Wanlin Li
[email protected]

This address serves all requests under this policy, including privacy questions, data deletion, and content reports.