Vol. 1FreeUpdated October 12, 2026

Remember When

Your Local Edition

Draft: pending legal review. This page describes how the app is designed to work. It is not yet a reviewed legal document, and the retention times below are proposed defaults that may change. Last updated October 12, 2026.

Privacy policy

Privacy policy

What the app keeps, why it keeps it, for how long, who can see it, and which services touch it.

Who this covers

People aged 18 and over who use Remember When and visit this website. The site itself uses no cookies, no analytics and no third-party scripts, fonts or embeds. When you open the demo full screen it remembers its own state in your browser; nothing is sent anywhere.

What the app keeps

Data Why How long (proposed) Who sees it
Email address and sign-in sessions To sign you in and to reach you about your account Until you delete the account You. Never other members.
Over-18 answer (not your date of birth) To keep the app adults-only You type your date of birth once; the app keeps only "over 18: yes" and what it was based on ("self-declared date of birth") and discards the date. If the answer is no, the account is closed and erased. You and our systems
Profile: the name you show, your interests, and if you set them, who you are and who you are looking for (dating preferences), and a birthday (month and day, no year) So the people you pick can see what you chose to share, and so dating matching works only when both sides fit Until you change it or delete the account Only the audiences you choose. A birthday is visible only to an active pen pal.
Dating and friends ads To show your ad to others A 30-day publishing window; a paused or deleted ad leaves discovery at once Other adults who can see the Paper's section it is in
Verified mobile number Some features need a verified phone. We send a six-digit code by text message to a US mobile number; internet, landline and premium numbers are refused. One number belongs to one account. Until you remove it or delete the account. The code itself is not kept in clear. You (the last four digits). Not other members. The text-message service receives the number (see Services).
Scrambled codes of the numbers in your phone's contacts ("Find friends from my phone"). These are data about people who may never have joined. So two people can be suggested to each other only when both turned it on, both verified a phone, and each is in the other's contacts. Your phone sends codes (a keyed scramble of each number), never numbers or names. The scrambling is not unbreakable by the operator, and the screen says so. Off unless you turn it on. Switching it off deletes the codes at once; deleting the account removes them too. Nobody sees them. A suggestion shows only a person who is already a member and also opted in.
Device check record and install id To confirm the app runs on a real, unmodified phone before actions that involve strangers (on Android, through Google Play Integrity). The app also makes a random install id and sends it with requests. A check lasts 30 days. The check's raw token is not stored. You (platform and date) and our systems
Push tokens To send alerts to your phone when push is on Until you sign out of that phone or delete the account Our systems and Google's push service (see Services)
Gatherings you host or join, invitations, check-ins, House Rules choices To run the gathering Operational records 90 days after it closes The host and the guests, as the gathering allows. The host sees how many joined House Rules time, not what you do.
Gathering photos The shared album that only the people at that gathering see 90 days after the event ends (you are told 14 days before). Hidden details such as location are removed before anyone sees a photo. People at that gathering, from an album that opens after it ends
Voice recordings: your answering-machine greeting, and message tapes people leave you So callers hear your greeting and you can hear your messages. Nothing is transcribed or analysed. A greeting stays until you remove or replace it. Tapes disappear after 30 days, and are deleted for both of you when you block someone or stop being connected. A tape you report is kept as evidence until the report is closed. Greeting: only connections who may leave you a message. Tapes: you. Live calls are not recorded.
Letters between pen pals: typed text, photographed handwritten pages, and the birthday you set To deliver letters (always at nine the next morning where the reader is) A letter is erased for good when both of you have deleted it. A waiting letter that is declined is deleted unread. A letter you report is hidden and kept until the report is closed. The two pen pals. A photographed page is shown only in the app's secure viewer.
Call, message, game, rescue-call and meet-up records (who, when, how long, your answers after a meeting) To ring the right person, show your machine and keep the safety tools working Purged 90 days after the item closes The people involved; for meet-up answers, you
Green Light session and yellow "on my way" light To show that your light is on to others nearby with lights on An hour at most, then ended; a yellow light lasts until 45 minutes after your expected arrival. Abuse-prevention metadata about 24 hours to seven days. Others nearby see a card; "on the way" shows a place and a word, never who
Reports and safety cases To review a report fairly and keep people safe Proposed 180 days after a case closes; longer only for an open case or a legal requirement Staff who review reports; their actions are logged
Security logs To spot and stop abuse and break-ins Proposed 90 days Staff
Backups To recover from a failure Proposed maximum of 35 days. Deleted data can remain in a backup until it expires. Nobody routinely

A date plan you write in the safety kit stays on your phone. Places you lit at are remembered on your phone only.

Services we use

We use these services to run the app. None of them receives your location (it is rounded on your phone, and the place list is public map data kept on our own server).

Location

Green Light takes a precise location read once when you turn your light on, so two phones in one room land together. When Today opens and location is already allowed on your phone, the app takes one coarse read to ask whether another light is on in your area. In both cases your phone rounds the position to an area on the phone itself and sends only that area, not your coordinates, and no trail of where you have been is kept. "Find places near me" and "Check a place" work the same way. Places you lit at are remembered on your phone only.

Who can see what

Photos and screenshots

Photos stay in the app and are shown only to the people at that gathering. The app uses the protections each phone offers, but it cannot promise that a photo of a screen taken with another device is impossible.

Deleting your data

In the app: Me, then Account, then Delete account. Or from this website: delete your account. Your account is hidden at once and every device is signed out; ordinary data is removed within 30 days. Other people's albums stay, without your name or profile. A few records can remain for a safety or legal reason and are listed on the status page during deletion.

Children

The app is not for anyone under 18. If you think someone under 18 has an account, tell us.

Changes and contact

When this draft is reviewed and finalised the date at the top will change and the app will tell you about significant changes. Questions: dev@darksteelstudios.com.