Privacy Policy
Last updated: September 29, 2026
Rewind ("we", "us", or "our") operates the Rewind mobile application (the "App") and tryrewind.app (the "Website"). This Privacy Policy explains how we collect, use, and protect information when you use the App or Website.
1. Information We Collect
We collect the following types of information:
- Account Information: Your name, email address, and/or phone number when you create an account.
- User Content: Photos and videos you upload to share with your groups.
- Device Information: Push notification tokens (via Expo Push Notifications), app and operating-system information, and identifiers described in the Analytics section below.
- Usage Data: Basic interaction data such as group membership, posting activity, comments/reactions, app launches, account registration, and onboarding progress.
- Campaign Information: Source, medium, campaign, campaign ID, ad/creative, and keyword identifiers included in a marketing link. We reject malformed or personal-information-like campaign values and do not use campaign parameters for email addresses, phone numbers, names, invite codes, or user content.
2. How We Use Your Information
We use the information we collect to:
- Create and manage your account.
- Enable you to share photos and videos with your groups.
- Send push notifications about drops, comments, reactions, and group activity.
- Maintain and improve the App's functionality and reliability.
- Measure Website campaign visits and download-button interactions.
- Where acquisition measurement is enabled, associate available install campaign results with accounts and measure subsequent photo contributions and participation.
3. How We Store Your Information
Your data is stored using Google Firebase services:
- Firebase Authentication: Securely manages your login credentials.
- Cloud Firestore: Stores your profile, group memberships, posts, comments, and reactions.
- Firebase Cloud Storage: Stores your uploaded photos and videos.
All data is transmitted over encrypted connections (HTTPS/TLS) and stored on Google Cloud infrastructure.
4. Push Notifications
We use Expo Push Notifications to send you alerts about group activity (new drops, comments, reactions, nudges). You can disable push notifications at any time through your device settings.
5. Analytics
We use Google Analytics for Firebase and Google Analytics to understand Website and App usage.
- Website measurement: Validated campaign identifiers and download interactions are sent to Google Analytics. Website campaign links do not include your Rewind account ID.
- App measurement: App analytics may include screen views, feature interactions, authentication method, reliability information, and an opaque Firebase account identifier. We do not send your photos, videos, comments, or message content to Google Analytics.
- Install and campaign measurement: In app versions and environments where AppsFlyer measurement is enabled, AppsFlyer receives install and registration events, device and app information, network information such as IP address (which it may use to estimate your city or region), its installation identifier, and an opaque Rewind account identifier after signup. Enabled Website campaign links may also route through AppsFlyer. We do not send your photos, videos, comments, phone number, or email address to AppsFlyer through this integration.
- Private acquisition records: We may store the campaign result supplied by AppsFlyer, its matching method when available, installation identifier, app version, processing status, and timestamps with your private account record. We also record the timing of qualifying media contributions to measure first-week and second-week participation. A campaign association may be an estimate, and some accounts have no attributed campaign. These fields are not included in public profiles.
- Mobile advertising identifiers: This acquisition integration does not introduce an App Tracking Transparency prompt on iOS. Android advertising-ID permissions remain excluded, and enabled Android builds configure AppsFlyer before startup not to collect Google, Open, or Amazon advertising IDs, Android ID, or IMEI. Google App Set ID is a separate app- or developer-scoped analytics identifier; this integration does not add the optional dependency AppsFlyer requires to collect it. Measurement availability depends on the installed version and whether measurement is enabled for that environment.
- Historical attribution: Earlier versions also used AppsFlyer. AppsFlyer may retain historical provider records under its retention policy even when the currently installed version does not send new events.
Learn more in Google's Privacy Policy and AppsFlyer's Services Privacy Policy.
6. Data Sharing
We do not sell or rent your personal information. We disclose information to service providers such as Google Firebase, Google Analytics, Expo, AppsFlyer where acquisition measurement is enabled, and our infrastructure providers only as needed to operate, secure, and analyze Rewind. Historical attribution records may also remain with AppsFlyer from earlier versions. Your content is visible only to members of the groups you belong to, subject to the App's sharing features. We may also disclose data if required by law or to protect legal rights and safety.
7. Data Retention and Deletion
We generally retain Rewind account data while your account is active. Private acquisition and participation records, where present, are deleted with your Rewind user document. You can delete your account at any time from the Profile screen in the App. When you delete your account:
- Your profile information is permanently deleted.
- Your posts, comments, and reactions are permanently deleted.
- Your uploaded photos and videos are permanently removed from storage.
- Your private Rewind acquisition and participation records are deleted.
When you delete your account in the app, we automatically submit erasure requests to AppsFlyer for account-linked installations when we have the installation ID and app information AppsFlyer requires. AppsFlyer processes them asynchronously, so its records may remain after your Rewind account is deleted. We keep a private request record while processing or manual review is needed. When AppsFlyer confirms an individual request is complete, we remove its installation identifier from that record; fully completed records are scheduled for deletion after 30 days. Older records and installations missing the required information may not be covered automatically. Contact us below to ask us to investigate those records, or to request access, correction, or export of AppsFlyer data. After verifying your request, we will submit an applicable provider request where possible.
8. Children's Privacy
The App is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will take steps to delete it promptly.
9. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data (via account deletion).
- Withdraw consent for push notifications at any time.
- Request that we submit an access, portability, correction, or erasure request to a service provider where applicable.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy in the App or on this page. Your continued use of the App after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy, please contact us at: