Your privacy.

Updated October 16, 2026

OurLater helps you collect ideas you want to return to. This page describes the data involved when you use the app and this website.

Information in the app

You can sign in with an email verification code, a password for accounts that have one, Google, or Apple on iPhone. Google and Apple provide an account identifier and the profile information you authorize, such as your email and name. Apple may provide a private relay email. Authentication is handled by Supabase. Supabase provides authentication and stores account and collection records. Resend delivers sign-in emails. A save can contain a title, note, category and links. Your account and collection are also cached on your device so previously loaded ideas and new saves can be available offline.

Sharing and other collection information

The app’s shared-collection features use profile names, partner membership, invitations, likes, completion status and any place name or coordinates you enter. When you pair, your collection becomes visible to your partner and either of you can edit or delete shared ideas. Contributions are associated with their author so the app can separate them if you unpair. Unpairing keeps each person’s original saves and removes the other person’s contributions; it does not create an extra copy of the partner’s collection. Changes that require the shared service depend on its availability.

Photos you choose

The photo feature prepares a smaller JPEG and thumbnail from each image you select and removes EXIF location metadata before those copies can be uploaded. Prepared photos are stored on your device so pending saves can survive restarting the app. Browser previews use browser storage, which can be cleared by you or your browser. Photo uploads and partner access depend on the private photo service being available. The app does not copy your entire photo library.

Links and their previews

When supported links load a preview or image, the app contacts the source provider. That provider receives network information, such as your IP address, and the requested URL. For Instagram posts and reels, our server requests public preview information from Instagram and may use Microlink as a fallback. It sends the post URL with tracking parameters removed, without your OurLater email, notes, partner details or Instagram login credentials. For supported Instagram, YouTube and Spotify links, we may store a copy of the preview image in private storage and on your device so it remains available without repeatedly fetching it. These copies are associated with the saved link and follow its collection permissions. Removing the idea or link queues the stored image for deletion. Loading an image that has not yet been saved may connect your device to its source image service. Opening a link takes you to a service with its own privacy policy. Previews can change or become unavailable.

Optional Google Maps previews

Where enabled, opening a Maps preview sends the linked place or search to Google through our server. Loading a place photo also connects your device to Google's image service. We retain the selected place identifier, a fingerprint of your link and request counts to remember your choice and limit usage. Google-provided names, addresses and photos are displayed as live previews rather than copied into your permanent collection. Account-linked matches and counters are removed when account deletion begins. Google's handling of this information is described in the Google Privacy Policy.

Subscriptions

Apple or Google processes subscription payments. OurLater receives store purchase identifiers, product, renewal, expiry and refund status, and associates verified access with your OurLater account and current partner. OurLater does not receive your full payment-card or bank details. Supabase verifies purchases with the store; Cloudflare processes signed Apple purchase data for signature validation. Purchase records are retained to reconcile subscriptions, prevent duplicate use and handle refunds. Deleting an OurLater account removes its ownership link from those records but does not cancel a store subscription. Manage or cancel it with the store separately.

Usage and errors

The app is configured to send selected usage events and filtered JavaScript error reports to PostHog in its EU region. These include events such as opening the app, saving an idea and synchronization results, with anonymous installation and session identifiers. The client filters event properties and error contents. Session replay, automatic screen-content capture, console capture, GeoIP enrichment and person profiles are disabled in this configuration. Native crash reporting is not enabled in the current build.

Optional notifications

On Android, Firebase may initialize and create an app installation identifier before you turn notifications on. OurLater registers a notification delivery token with your signed-in session after notification permission is enabled. The service stores your new-save and reminder preferences, reminder times and recipients, and short-lived delivery records. Firebase on Android, Apple Push Notification service on iPhone and Expo process installation or device identifiers and the information needed to deliver notifications. This setup does not add Firebase Analytics or Crashlytics and does not automatically upload your saved content. Titles are hidden by default and are included only if you enable that option. You can change these preferences in the app or disable permission in phone settings. Delivery is not guaranteed. The scheduled cleanup removes delivery records one day after expiry and inactive device registrations after 30 days.

Support and reports

If you use the in-app support or shared-content report form, we store the topic and description you choose with your account reference and the request time. Saved ideas, photos and device logs are not attached automatically. A receipt confirms that the request entered the private support queue; it does not guarantee a response time. Account deletion removes these requests.

This website

This website offers optional Google Analytics measurement. It stays off until you select Allow analytics. If you agree, Google receives page visits, app-store click events, browser and device information, and network information needed to receive those requests. Analytics cookies help measure visits. We do not enable advertising personalization or Google signals, and our event code removes query strings and fragments from page URLs and sends only the origin of referring websites. We do not send your OurLater app account, saved ideas or partner information to website analytics. You can decline without losing any website features, or change your choice using Analytics preferences in the footer. Your choice is stored in this browser for up to 180 days. Withdrawing consent stops measurement and removes the analytics cookies accessible to this site. Google’s privacy policy describes its processing. Fonts and illustrations are served with the site. Network requests are still needed to load each page.

Storage and deletion

Signing out removes the app’s cached collection and preview records through its normal sign-out flow. Signing out or uninstalling does not by itself delete your cloud account or collection.

See account deletion for the available request route and what it covers.

Your choices and questions

You can choose which ideas and links you add, and whether to open an external service. This page will be updated as the app’s data handling changes.

For privacy questions, contact support@ourlater.com.