Privacy policy

Information we handle

• Account and profile: account identifiers, sign-in details supplied by your chosen sign-in method, your display name, and any profile image or icon you choose. Authentication and cloud storage are provided through Supabase.
• Habits and memories: goals, schedules, reminders, check-ins, completion history, notes, moods, journal text, and photos you add. Saved content may be held on your device and synced to your account so you can use it across supported devices.
• Circle activity: memberships, invitations, shared posts, comments, reactions, and reports you submit. We use these to provide group features and investigate safety or support issues.
• Support and service operation: information you send when asking for help, and necessary authentication, security, and technical request information used to operate and protect the service. Hosting providers can receive ordinary connection information, such as an IP address, when a device connects.

We use this information to provide the features you request, sync your progress, manage access, respond to support requests, prevent misuse, and meet applicable obligations. Camera, photo selection, notifications, and Apple Health permissions are requested for the features that need them. We do not read your address book or track precise location.

Private and shared spaces

Memories and notes marked Only me are private to your account and are not shown in your circle’s feed. Circle posts, check-ins you share, comments, reactions, and profile details are visible to the relevant circle members. Service providers process account-private content to host and sync it; “Only me” does not mean end-to-end encryption.

You choose when to share a memory. Making a post private or deleting it removes its availability through Together’s sharing features. Other people may already have seen or saved a copy, and we cannot erase their screenshots or independent copies. Keep invitation codes private and share them only with people you want to invite.

We share data with service providers only to operate the relevant features, with people or services you choose, and when needed to comply with law or protect people and the service. Reports and support requests may be reviewed by authorized support staff and recorded in our issue-management service, Linear. Please avoid sending passwords, payment-card details, or unnecessary sensitive information in a support report.

Apple Health

Connecting Apple Health is optional. With your permission, Together reads the categories you choose—steps, exercise minutes, water, or sleep—to help complete your goals. Together does not write data to Apple Health.

Raw Health readings stay on your iPhone. Your habit settings and completed days can sync to your Together account; if you share a check-in, circle members can see that shared completion. We do not send raw Health readings to analytics providers, advertising services, or connected assistants.

You can revoke access in Apple’s Health or Settings app at any time. Revoking access stops future reads; it does not automatically erase check-ins or goals already saved in Together. You can manage or delete those separately in the app.

Subscriptions and complimentary access

Apple handles subscription checkout and payment details. Together does not receive your full payment-card number. When purchases are available, RevenueCat processes purchase and subscription information, including a Together account identifier, product and transaction identifiers, entitlement status, and purchase or renewal dates, to validate access and restore purchases.

Special invitation codes may grant complimentary access. We store the access grant with your account so it remains available when you sign in again. Deleting the app or your Together account does not cancel an Apple subscription; manage cancellation through your Apple Account’s subscription settings.

Optional app activity and diagnostics

App activity sharing is optional and starts only after you enable it in the app. It can include the screens you use, time spent while the app is visible, basic action counts, app version, and subscription-screen interactions. Individual usage events are linked to your account within Together and retained for no more than 90 days. They exclude journal text, photos, habit names, raw Health readings, message content, and API keys.

Only anonymous grouped reports go to PostHog. Reports omit account identifiers, suppress small groups, and round counts. The app does not send individual user events or profiles to PostHog, and it does not use session replay or automatic screen recording. Anonymous reports already created may be retained after you opt out because they cannot be separated back into an individual person’s contribution.

When optional crash reporting is available and enabled through the same usage-sharing choice, Sentry receives a minimized technical error report, such as the app release and error type. Together removes personal content, user identity, request contents, screenshots, and interaction breadcrumbs from these reports. Crash collection remains disabled in beta builds until its retention and privacy checks are complete. Error summaries may create engineering issues in Linear.

Assistant connections you choose

If you use Supporter or connect another assistant, Together sends the conversation and habit summary you explicitly choose to the selected provider. Information you type into a conversation may itself be sensitive. The provider’s own privacy terms apply to the information you send it.

If you supply a provider API key for an in-app conversation, it passes through Together to that provider for the request and is not saved as a permanent Together credential. Advanced connections are limited to your selected habits and can read their names, plans, and completion counts; they do not expose your journals, photos, raw Health data, or friends. You can revoke these connections in the app. Revocation does not delete copies the other provider already received.

Retention and deletion

We retain your account and saved content while needed to provide the service or until you delete it. Use the app’s controls to delete memories, posts, habits, or your account. Account deletion is available in Account settings; contact us if you cannot access it or a request does not complete.

Turning off app activity sharing deletes your previous individual usage events when the change is successfully saved. Individual usage events are otherwise removed within the 90-day limit. This limit also applies to backup handling for individual app activity; collection must remain off where the storage configuration cannot honor it. Anonymous aggregate reports may remain. Necessary transaction, security, support, or legal records may be retained where needed for those purposes; the 90-day usage limit is not a limit on your saved habit history or required purchase records.

Deletion from active services may require processing time. Restricted backup copies may remain until their normal backup lifecycle expires and are not used for ordinary app access. If data is restored for recovery, deletion requests must be reapplied. Contact us for the status of a deletion request or information about backup handling.

Your choices and rights

• Edit or delete saved content and choose whether a memory is private or shared.
• Manage Health, photo, camera, and notification permissions through iOS.
• Turn optional app activity sharing off and revoke assistant connections in Together.
• Cancel a paid subscription in Apple subscription settings.
• Request access, correction, export, or deletion of your personal information by contacting us. We may need to verify account ownership before acting.

Depending on where you live, you may have additional rights to object to or restrict processing, withdraw consent, or complain to a privacy regulator. Service providers may process information in countries other than your own. We use access controls and encrypted connections to protect data, but no service can guarantee absolute security.

Together is not designed as a service specifically for children. If you believe a child has supplied personal information without the required permission, contact us so we can investigate and take appropriate action.

This page does not use analytics scripts, advertising cookies, or sign-in. Its hosting provider necessarily processes requests to deliver and protect the page.

Contact and updates

For privacy questions, account help, or data requests, email customer-service@togethermy.com.

We may update this policy as Together changes. The effective date above identifies the current version. We will provide appropriate notice of material changes and obtain consent where required before applying a new optional use of your information.