Privacy policy

What we collect, and why

• Your account: name, email, and a phone number if you want text check-ins. To reach you, and to know it's you.
• Your people: the names and emails of your recipients and trusted contact. To ask your trusted contact one question if we can't reach you, and to deliver each message to the right person.
• Your messages: the videos you choose to keep safe. Encrypted at rest and in transit, with a key unique to you.
• Check-ins and delivery records: when you checked in and how (email, text or the app), and when each message was sent and delivered. This is the record the safety steps run on, and you can see it on your Activity page in the app.
• View records: when a recipient first opened their message and first downloaded it. We use these only to send recipients the reminders described below, and as part of the delivery record.
• Billing: handled by Stripe. We never see your full card number. Stripe collects your billing address to work out sales tax, GST or HST, and we use its country to check that plans are available where you live.
• Technical logs: like any website, our servers record each request: the time, your IP address, the page or file asked for, the response, and your browser type. We use them only to keep the service secure and working. They never include the links or codes that open a message or a check-in, or the contents of anything you send.

Who can see your videos

You, any time. The people you choose, when the time comes, and only their own messages. Not advertisers, not data brokers, not AI training, not your trusted contact. Staff don't watch your videos: no one at iyawt has routine access, and the rare exceptions, like a legal requirement, need two people to approve and are logged.

Recipients and trusted contacts

If someone named you, we hold your name and email address only to reach you about their messages. Recipient pages have no ads or trackers. A recipient can decline further messages from a sender, or report a message, from their page.

The sender's Activity page shows when we sent and delivered a message to you, never whether you opened, downloaded or declined it. If you're someone's trusted contact, their Activity page shows that we asked you, and whether you told us they're okay or couldn't confirm it, and nothing more.

We never sell your data

We don't sell, rent or trade personal data. We don't show ads. We share data only with the services that make delivery work (email and text providers, payment processing, cloud hosting), under contracts that limit them to that job.

Analytics

On the marketing site and in the app, with your OK, we use Google Analytics to see which pages help people and where people get stuck (for example, whether a recording was saved or a plan was chosen). We ask everyone first, wherever you live, and nothing loads until you say yes; saying no changes nothing about the service. It never runs on recipient message pages, check-in pages, trusted-contact pages or any page you reach from a link we emailed or texted.

We send Google no personal data: no names, email addresses, phone numbers, message titles or account identifiers, and no lengths more exact than a rough range. See the cookie policy.

How long we keep things

• Your messages: for as long as your account is open. When you close it, there's a 30-day window to change your mind; then the key that unlocks your messages is destroyed, which makes every copy unreadable, and the encrypted files are deleted.
• A message you delete: it leaves your account and your delivery plan straight away, and its copies go with it. We also keep a sealed, encrypted backup of every message for safety; a deleted message's backup is never used again and is erased within about 45 days.
• Delivered messages: the recipient has 12 months from delivery to watch and download, with reminders after 30, 90 and 330 days; then the message is erased the same way.
• Messages we couldn't deliver after trying every address: held for 24 months, then erased.
• An audit log of what happened and when (never message content): kept for 7 years, so we can answer questions about a delivery and show you your Activity page.
• Technical logs: 30 days. Security records of our own systems' activity, such as unlocking encryption keys (no content and no contact details): 1 year.

Your rights

Correct your details or delete your account from your settings at any time. You can download a copy of your messages from Account › Download my messages (a ZIP file, kept for 7 days and then deleted). For any other request about your data, contact us. If you're in the EU, UK or California you have additional rights, and we honor them regardless of where you live.