Privacy Policy

1. What Timavo is on your phone

Timavo is a local-first wax vault on iPhone. You seal a message for a later you — speak or type a take, attach an optional still, Accept a seal with an unlock day, and talk between dates with a nested agent that must cite those seals. On the due day Timavo plays your recording, not a clone. Timavo does not create a Timavo account. Seals, recordings, talks, notes, and stills stay on this phone unless you Allow cloud help for a specific outbound draft.

Optional App Tracking Transparency and the Adjust measurement SDK help us understand which campaigns led you to lock a dated message. Timavo does not show third-party ads inside the vault and does not sell your seals to data brokers for advertising.

2. What you create

You may create or keep VaultProfile fields (display name, AI-sharing choice), Seal records (body, unlock date, transcript, optional still), SealDrafts, TalkTurns, MemoryNotes, learning summaries, live-activity / widget App Group snapshots, and Accept-after system-voice Utterance audio. Timavo does not require a Timavo account and does not run an account-backed cloud backup of your vault.

3. Permissions and media

When you choose the related feature, Timavo may use:

• Camera to attach one still to the seal you are locking
• Photos so you can pick a still already on this phone, and optionally save a seal still / dated wax cover back to Photos
• Microphone so you can record a short take that unlock can play later
• Speech recognition to turn your spoken take into text on this phone (Apple Speech may process the audio briefly; Timavo requests on-device recognition when available)
• Local notifications for optional due-seal and quiet-interval reminders (no remote push account)
• App Tracking Transparency so iOS can ask whether Timavo may use the advertising identifier for campaign measurement (see section 5)

You can deny a permission and keep using features that do not need it — for example, typing instead of talking, or sealing without allowing tracking.

4. No In-App Purchases in this build

The reviewed build does not include StoreKit purchases, subscriptions, consumable credits, or Restore. There is no Timavo paywall in the inspected source.

5. App Tracking Transparency and Adjust (Guideline 5.1.2)

Purpose

After your first successful seal lock on this install (or when Timavo is about to first-initialize Adjust while you already have at least one seal), and only when home is the visible root without splash, story, wax-consent, or other system permission sheets, iOS may show the App Tracking Transparency prompt. If you allow tracking, Timavo may use the advertising identifier (IDFA) together with the Adjust SDK so we can measure which campaigns led you to lock a dated message for a later you. If IDFA is unavailable, the app may fall back to an on-device vendor identifier for the same measurement path. Adjust callback parameters intentionally omit transcript text, seal body, photo bytes, filenames, display names, and raw IDFA fields. This path never enables ads inside Timavo.

What happens if you decline

Choosing Ask App Not to Track (or later withdrawing permission in iOS Settings) does not block sealing, unlock playback of your recording, local talks, stills, due reminders you opted into, or optional cloud AI drafts that you separately Allow. Measurement that requires tracking authorization is limited or omitted; the wax vault keeps working.

Third parties

Adjust (Adjust GmbH / related entities) processes measurement signals under its own terms when the SDK is primed. Consent-related Adjust endpoints declared in our privacy nutrition label include: consent.adjust.com, consent.adjust.io, consent.adjust.net.in, consent.eu.adjust.com, consent.tr.adjust.com, and consent.us.adjust.com. Device ID is declared as linked data used for Analytics tracking. We do not use that path to run a third-party ad network inside the app.

How to withdraw

Change the permission anytime in iOS Settings → Timavo → Allow Tracking, or reset advertising permissions system-wide. You can keep using the vault without enabling tracking.

6. Optional cloud AI

Optional cloud inference runs only after you tap Allow on the wax consent card (or later re-enable Settings → Sharing / AI data sharing). Decline keeps the vault local — due seals still open in your recording, and no outbound AI draft is sent. Turning sharing off stops every outbound draft immediately. The consent card links Privacy and provider policy pages in-app.

When allowed, Timavo may send what the nested agent needs to draft a seal or a reply, or (after you Accept a talk) to synthesize a system-voice line:

• Recording transcript, typed words, spoken interview answers, and related seal / talk / note context the agent packs
• Optional seal-still pixels when a still is attached (object/scene only — not a face index)
• Accepted talk text plus an internal system-voice id for speech synthesis

Those requests go to DeepSeek (api.deepseek.com) for chat/vision turns and to MiniMax (api.minimax.cn) for speech synthesis. Timavo does not collect face data for a face profile. Raw microphone buffers and the unlock recording file are not uploaded as memory. Timavo does not pack contacts, precise location, HealthKit data, or undeclined consent state into those AI requests. Timavo does not generate images with a third-party image model in this build.

DeepSeek’s policy: https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html MiniMax’s policy: https://platform.minimax.io/protocol/privacy-policy

7. Network and other services

Network access may be used for consent-gated DeepSeek and MiniMax calls, Adjust measurement when authorized, Firebase Remote Config / App Check used by the build, and for loading in-app Privacy, Terms, and provider policy pages. There is no Timavo account backend. Apple may process Speech, Photos, Camera, Microphone, local notification delivery, and the system tracking prompt under Apple’s terms.

8. Retention and deletion

Seals, recordings, talks, notes, stills, consent choice, and related local records remain on your device until you delete them in-app (Settings → Delete all data) or remove the App. Removing the App removes on-device App data, including the App Group widget snapshot. Data already sent to DeepSeek, MiniMax, or Adjust after the relevant permission is handled under those providers’ retention practices. OS-level tracking permission is controlled by Apple settings as described above.

9. Advice boundary

Timavo is a Lifestyle creation tool for personal dated seals and self-talk. It is not medical, therapeutic, legal, or emergency advice and does not guarantee outcomes.

10. Changes

We may update this policy; the effective and updated dates above will change when we do.

11. Contact

Email seals@timavo.app.