Effective 28 July 2026
Privacy policy
How Then We and the thenwe.app website handle information.
Local-first archive
The app does not require an account. Memories, children’s profiles, photos, scans, audio, notes, dates, and local backups are stored on your device. They are not uploaded to our servers or cloud by default.
Actions you control
If you export a backup, share a file, or send an email, the service or app you choose receives that information under its own privacy terms. Deleting the app can also delete its local archive, so keep a manual backup when the memories matter.
Optional account
You may separately create an account through id.thenwe.app after accepting the standalone versioned personal-data consent. Keycloak receives your email address, optional name, password hash, technical account identifier, and the authentication, security, session, network, browser, or device data needed to operate and protect the account. Passwords are entered only on Keycloak pages and are not provided to the app. Creating an account does not upload your local profile, memories, media, or backups and does not enable cloud sync. If you expressly enable Family Cloud, the backend receives a random internal device UUID, platform, and commercial model name only to label connected devices. The user-assigned device name, serial, identifierForVendor, advertising ID, and hardware machine identifier are not sent, and the model name is not used for identity or authorization. You can delete the identity from Profile after re-authentication; the local archive remains on your device.
Feedback and surveys
When you explicitly save in-app feedback or a completed survey, our backend in Russia may receive a submission identifier, platform, app version, locale, the submitted text or answers, and receipt time. Saving from another country sends that form to Russia. These forms do not request an email address or archive content. Please do not include personal or sensitive information in free text.
Analytics and diagnostics
The app uses AppMetrica only after you choose to allow limited analytics and diagnostics. Yandex LLC may process app and OS versions, locale, feature-use events, technical installation identifiers, and crash data. AppMetricaAdSupport, IDFA, advertising tracking, location tracking, and archive content are not used. You can withdraw this choice in the app settings without losing archive features.
Permissions
Camera, photo library, and microphone access are used only when you choose the related capture or import feature. The resulting memory stays in the local archive unless you explicitly export or share it.
Children
Then We is intended for parents and other adult family members. It does not create child accounts or ask children for contact details. Adults using the app control the family content stored on their device.
Website data
The website can be viewed without an account or contact form. Hosting may process technical request and security data. Yandex Metrica loads only after analytics consent; session replay, form analysis, and advertising tracking are disabled.
Purposes and legal bases
We process optional account data to create and secure the identity, verify email, restore access, and delete the account; submitted feedback and surveys to review your request or product preferences; optional analytics and diagnostics with your consent; and minimal security data to protect the service. Refusing or withdrawing optional analytics does not affect the local archive.
Retention and recipients
Account identity is kept until you delete it or withdraw consent and is removed from active systems within 30 days; backup copies expire during the next 14-day rotation. Minimum versioned consent evidence is retained for three years after account deletion. Feedback and completed survey responses are retained for up to 24 months, direct support emails for up to 12 months when no longer needed, and abuse-prevention hashes for no more than 24 hours. Timeweb Cloud LLC processes Russian hosting, backend, identity, database, and backup data; Registrar of Domain Names REG.RU LLC processes system email; and Yandex LLC processes consented AppMetrica analytics. Each receives only the information needed for its service. We do not sell personal information.
Your choices and rights
You can use the local archive without optional analytics, manage local memories and backups on your device, and change mobile or website analytics consent at any time. Depending on your location, you may request access, correction, deletion, restriction, portability, objection, or withdrawal of consent, and may complain to your local regulator. Email privacy@thenwe.app.
Changes
We may update this policy when the app, providers, or legal requirements change. The effective date above identifies the current version.
Controller and contacts
The controller and individual developer of Then We is Gleb Buiankin. Privacy enquiries: privacy@thenwe.app. General and support enquiries: hello@thenwe.app.