Timeline Planner

Privacy Policy

Last updated 26 July 2026

Timeline Planner helps you plan a day hour by hour β€” a wedding, a trip, a conference, a move. It's made by Sought & Found.

This policy covers the Timeline Planner iPhone app and the web app at timelineplanner.soughtandfound.co.

In short: we collect as little as we can, we don't track you, we don't show ads, and we don't sell anything about you to anyone.

What we collect

If you don't sign in

Nothing leaves your device. Timelines you make are stored on your phone, or in your browser's local storage. We can't see them, and clearing your browser data or deleting the app deletes them for good.

If you create an account

Your email address. You sign in with Apple, with Google, or with a link emailed to you. We receive your email address and store it with your account. We never receive or store a password.

If you use Sign in with Apple and choose to hide your email, we only ever see Apple's private relay address β€” we can't see your real one.

Your timelines. Once you're signed in, your timelines are saved to your account so they're available on your other devices and on the web. That includes whatever you put in them: titles, event names and times, locations and addresses, and notes. Please don't put anything in a timeline you wouldn't want stored on our servers.

Your subscription status. Whether your account is subscribed, which plan, and when it renews.

Photos

Photos you attach to events in the iPhone app stay on your phone. They are not uploaded, not synced, and not visible to us. They aren't included when you share a timeline via a link β€” only when you export a timeline as a file and send it yourself.

What we don't collect

No analytics, no tracking pixels, no advertising identifiers, no third-party trackers, no location tracking, no profiling. We don't know how you use the app, because we don't measure it.

Who else is involved

We use a small number of companies to run the service. They process data on our behalf and only for these purposes.

WhoWhat they handle
SupabaseHosts the database and accounts. Your email, timelines and subscription status are stored here.
NetlifyHosts the web app. Serves the site to your browser.
StripeTakes payment for web subscriptions. Card details go straight to Stripe β€” they never touch our servers and we never see them. We store only your Stripe customer reference.
AppleRuns App Store subscriptions and Sign in with Apple. We never see your payment details.
GoogleSign in with Google, if you choose it.
ResendSends sign-in emails.
GroqOnly if you use β€œEnhance with AI” when importing a schedule: the text you paste is sent to Groq to tidy it up. Don't paste anything sensitive. Nothing else is ever sent to an AI service.
OpenStreetMapOnly when you type an address on the web: what you type is sent to their Nominatim service to suggest matches.

On iPhone, address suggestions use Apple Maps, which is handled by your device under Apple's own privacy policy.

If you ask to be told when the app launches, we store the email address you give us and use it only for that, and for occasional updates if you tick the box.

Sharing timelines

You choose what happens to a timeline you share:

A share link is a secret: anyone you send it to can pass it on. If you turn sharing off, the link stops working.

When you invite someone by email, we look up whether that address has an account so we can add them. Your collaborators can see your name and email on a shared timeline, and you can see theirs.

Keeping it

We keep your account and timelines until you delete them.

Sign-in sessions expire on their own. Signing out on a shared computer removes your timelines from that browser.

Your rights

Depending on where you live, you may have the right to see the data we hold about you, to correct it, to have it deleted, to get a copy in a portable format, or to object to how we use it. Email us and we'll help β€” no charge, no hoops.

You can export any timeline as a file from either app at any time, without asking us.

Children

Timeline Planner isn't aimed at children under 13, and we don't knowingly collect anything from them. If you believe a child has given us personal information, email us and we'll delete it.

Security

Connections use HTTPS. Access to your data is enforced at the database level, so one account cannot read another's timelines. Payment details never reach our servers.

No service can promise perfect security, but we don't hold much: an email address, your timelines, and whether you're subscribed.

Changes

If we change this policy we'll update the date at the top, and we'll tell you in the app if the change is significant.

Contact

Questions, corrections, or to delete your account:
hello@soughtandfound.co