Privacy Policy
Last updated: August 9, 2026
Rewind ("we", "us", or "our") operates the Rewind mobile application (the "App") and tryrewind.app (the "Website"). This Privacy Policy explains how we collect, use, and protect information when you use the App or Website.
1. Information We Collect
We collect the following types of information:
- Account Information: Your name, email address, and/or phone number when you create an account.
- User Content: Photos and videos you upload to share with your groups.
- Device Information: Push notification tokens (via Expo Push Notifications), app and operating-system information, and identifiers described in the Attribution and Analytics section below.
- Usage Data: Basic interaction data such as group membership, posting activity, comments/reactions, app launches, account registration, and onboarding progress.
- Campaign Information: Source, medium, campaign, campaign ID, ad/creative, and keyword identifiers included in a marketing link. We reject malformed or personal-information-like campaign values and do not use campaign parameters for email addresses, phone numbers, names, invite codes, or user content.
2. How We Use Your Information
We use the information we collect to:
- Create and manage your account.
- Enable you to share photos and videos with your groups.
- Send push notifications about drops, comments, reactions, and group activity.
- Maintain and improve the App's functionality and reliability.
- Measure which owned marketing campaigns lead to downloads and new accounts.
3. How We Store Your Information
Your data is stored using Google Firebase services:
- Firebase Authentication: Securely manages your login credentials.
- Cloud Firestore: Stores your profile, group memberships, posts, comments, and reactions.
- Firebase Cloud Storage: Stores your uploaded photos and videos.
All data is transmitted over encrypted connections (HTTPS/TLS) and stored on Google Cloud infrastructure.
4. Push Notifications
We use Expo Push Notifications to send you alerts about group activity (new drops, comments, reactions, nudges). You can disable push notifications at any time through your device settings.
5. Attribution and Analytics
We use Google Analytics for Firebase and Google Analytics to understand Website and App usage. We use AppsFlyer as a service provider to measure whether an owned campaign link led to an install and account registration.
- Website measurement: Validated campaign identifiers and download interactions are sent to Google Analytics. Website campaign links do not include your Rewind account ID.
- Mobile attribution: AppsFlyer may process an AppsFlyer-generated install identifier, IP address, device and app information, store-referrer data, install/session events, campaign identifiers, and the account-registration event. After you authenticate, we send your opaque Firebase account ID as an AppsFlyer Customer User ID; we do not send your name, email address, phone number, invite code, photos, videos, comments, or other content.
- Privacy controls: The iOS integration uses AppsFlyer's strict SDK variant, which excludes IDFA and tracking APIs. The Android integration disables advertising-identifier collection and relies on store-referrer and other privacy-preserving attribution methods. Rewind does not show an App Tracking Transparency prompt for this attribution-only configuration.
- Rewind account record: For a genuinely new account, we store one private, normalized first-touch acquisition snapshot. We do not store the raw AppsFlyer callback, and returning logins cannot replace the snapshot.
Learn more in AppsFlyer's Services Privacy Policy and Google's Privacy Policy.
6. Data Sharing
We do not sell or rent your personal information. We disclose information to service providers such as Google Firebase, Google Analytics, Expo, AppsFlyer, and our infrastructure providers only as needed to operate, secure, analyze, and measure Rewind. Your content is visible only to members of the groups you belong to, subject to the App's sharing features. We may also disclose data if required by law or to protect legal rights and safety.
7. Data Retention and Deletion
We generally retain Rewind account data while your account is active. The private acquisition snapshot is deleted with your Rewind user document. AppsFlyer's published policy states that it does not retain end-user data for more than 24 months unless otherwise directed or permitted by law; shorter access or partner-specific periods may apply. You can delete your account at any time from the Profile screen in the App. When you delete your account:
- Your profile information is permanently deleted.
- Your posts, comments, and reactions are permanently deleted.
- Your uploaded photos and videos are permanently removed from storage.
- Your private Rewind acquisition snapshot is deleted.
Deleting your Rewind account does not itself submit a provider-side AppsFlyer OpenDSR request. To ask us to access, correct, export, or erase data processed by AppsFlyer, contact us at the address below. After verifying the request, we will submit the applicable provider request. You may also review AppsFlyer's own opt-out choices in its Services Privacy Policy.
8. Children's Privacy
The App is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will take steps to delete it promptly.
9. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data (via account deletion).
- Withdraw consent for push notifications at any time.
- Request that we submit an access, portability, correction, or erasure request to a service provider where applicable.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy in the App or on this page. Your continued use of the App after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy, please contact us at: