TimeCapsule Privacy Policy

Photos, Videos, and Files

When you attach a photo or video, you choose it with the system photo picker, and the app receives only the items you select. Audio files are chosen through the system file picker. Selected attachments are copied into the app's local storage. TimeCapsule does not access your whole photo library or camera.

Encrypted Backup Files

You can export your capsules to a backup file protected with a passphrase you choose (AES-256-GCM), and import it later. The file is saved or shared only where you choose through the iOS file dialogs. The passphrase is not stored and cannot be recovered by us.

Separately, an attachment that is not shown inline (for example an audio file) can be sent from the capsule screen through the iOS share sheet to another app or location you choose. That copy is the original file, not an encrypted backup, so the backup passphrase does not protect it, and deleting the capsule in TimeCapsule does not delete copies you shared.

App Lock

You can require authentication when opening the app. This uses Apple's Local Authentication (Face ID, Touch ID, or your device passcode). TimeCapsule never receives your biometric data or passcode.

Notifications

TimeCapsule schedules local notifications on your device to tell you when a capsule can be opened. No remote push service is used. You can turn notifications off in iOS Settings.

Purchases

Full Access is a one-time purchase processed by Apple through the App Store. TimeCapsule does not see or store your payment information.

Analytics, Advertising, and Tracking

The free version uses Google AdMob to display banner ads. The Google Mobile Ads SDK may process IP address, approximate (coarse) location, device identifiers, advertising data, product interactions, crash logs, and performance data for advertising, measurement, analytics, and fraud prevention. Consent choices are requested where required through Google's User Messaging Platform, and, while ads are shown, if Google's consent SDK reports that a privacy-options entry point is required for your region and consent state, a privacy-options button appears just above the ad banner so you can review your choices (it is not in the app's Settings screen). Google's consent SDK itself may also process some of this data, such as approximate location, to operate the consent form. Full Access removes ads. Your capsule contents and attachments are not sent to advertisers. TimeCapsule has no other analytics or tracking SDKs.

In the free version, after Google's consent message (if any), the app shows Apple's App Tracking Transparency prompt once, asking whether the app may use your device's advertising identifier (IDFA) to show ads that are more relevant to you. If you allow it, the Google Mobile Ads SDK may use the advertising identifier for advertising and analytics, including tracking. If you do not allow it, the SDK does not send the advertising identifier; ads are still shown, and all app features keep working. You can change your choice at any time in iOS Settings > Privacy & Security > Tracking.

Learn more about how Google uses information from apps that use its services.

Deleting Your Data

Swipe a capsule in the list, tap Delete, and confirm in the dialog to remove it and its attachments. Deleting the app removes the capsules, attachments, and settings stored in the app. If you purchased a paid version before the app became free, a small marker of that entitlement is kept in the iOS Keychain, which iOS may keep after the app is deleted; it contains no personal content. Backup files you exported are separate files that you can delete yourself in the Files app. Ad-related data handled by Google is governed by Google's policies and your device's advertising settings.

Children

TimeCapsule is not directed to children and does not knowingly collect personal information from them.

Changes

If this policy changes, the updated version will be posted here with a new effective date.

Contact

Email: support@smallappworks.com