Privacy

Last updated 31 August 2026

What we store

The agreements you write, who they're with, and whether each person has confirmed them. An agreement exists between two people, so it has to live somewhere both can reach. It's stored on Google Firebase, in the EU.

You don't need an account

The app gives your device an anonymous identity so you can start straight away. It isn't linked to your name, email or phone number unless you choose to sign in with Apple.

What we don't collect

No contacts, no location, no advertising identifiers, no analytics about how you use the app. We don't ask for your email or phone number, and we never need the other person's.

This website

Everything above is about the app, and it stays true: there are no analytics of any kind inside it. This website is a separate thing. If you agree to it, we use Google Analytics here to count visits and see which pages people actually read, so we know what is worth writing.

We ask before anything is set, and nothing is sent to Google unless you say yes. If your browser sends a Do Not Track or Global Privacy Control signal we treat that as a no and do not ask you at all. We do not use it for advertising. It is only on the pages that describe the product, never on the app, never on the page where you open an agreement somebody sent you, and never on this page. Your agreements are not on this website, so it never sees them.

Who can see an agreement

Only the people in it. Access comes from being a participant. Anyone sent a link joins by using that link, and holding an agreement's identifier alone grants nothing.

The people you share with

When you send an agreement, the person you send it to can read its text, the deadline and the name you gave them. Only send agreements to people you mean to.

Deleting things

Deleting an agreement removes it for both people. Deleting the app removes your anonymous identity from this device. If you never signed in, that data can no longer be reached by anyone, including us.

Deleting everything. Settings has a Delete my account button. It removes your account, every agreement you created (for both people), your saved reminder tokens and your record on our servers. It happens immediately and cannot be undone. Anything somebody else created and sent to you belongs to their record and stays with them; you are simply removed from it.

How long we keep it

Agreements are kept until they are deleted — there is no automatic expiry, because an agreement you wrote two years ago is exactly the one you may need. Reminder tokens are removed as soon as a device stops accepting them. Feedback you send us is kept until we have acted on it.

Who can delete an agreement depends on whether anybody has answered it. Before the other person has replied, whoever wrote it can delete it outright and it is gone. Once they have replied, it is a record of something they said as well, so it can no longer be destroyed by one side. You can remove it from your own agreements at any time, which stops us showing it to you or reminding you about it, and leaves it with the other person. Deleting your account does the same thing across everything you were sent.

Withdrawing consent

Notifications can be turned off at any time in Settings, or in iOS Settings, and we delete the token when you do. Turning them off stops us being able to reach that device at all. Withdrawing consent entirely means deleting your account, which is the button described above.

Who else is involved

Two companies process data on our behalf, and no others. Google Firebase stores agreements and delivers notifications, in the EU. Apple handles sign-in and subscriptions. Both are bound to protect this data to the same standard we do. We do not sell data, and there are no advertising networks, analytics services or third-party trackers in this app.

Purchases

Subscriptions are handled by Apple. We never see your payment details.

Getting in touch

Questions about your data: hello@fossastudios.co.uk.