Privacy Policy

What Almost reads

Almost reads only the date, time and GPS location attached to the photos and videos you took before the date you met.

It doesn’t upload, copy or analyse the images themselves. When you look at a matched moment, Almost shows you your own photos from it, on your phone only.

What stays on your phone

• All the matching happens on your phone.
• Your name, your partner’s name, the date you met and your results stay on your phone. The only copy that leaves it is inside the encrypted invite described below.
• Once your partner’s data reaches your phone, it’s stored only there. It isn’t synced to iCloud or anywhere else, and your photo dates and locations, your partner’s and your results are left out of your phone’s backups.
• Your names, the date you met and any invite in progress are kept in the app’s settings, which your phone’s backup does include.
• “On this day” reminders are scheduled on your phone.

How the invite works

To find your moments, your two phones need to swap photo dates and locations. This is how they do it.

• When you invite your partner, Almost encrypts your photo dates and locations, along with both your first names and the date you met, on your phone. It uses AES-256-GCM with a random key made just for that invite.
• The key lives only in the invite link, in the part after the # sign. That part of a link isn’t sent to websites, so it never reaches our server.
• The scrambled data waits in Apple’s CloudKit public database until your partner’s phone collects it. Without the link, neither Apple nor Almost can read it, so send the link only to your partner.
• Your partner’s reply comes back to you the same way.
• Your app deletes your invite once your partner’s reply has reached you, and their app deletes its reply the next time it’s opened after that. Anything never collected is cleared out after seven days, the next time the phone that sent it opens Almost.
• Only open an invite from your partner. Following one sends your earlier photo dates and locations to whoever sent it, and Almost tells you so before it does.

What goes to Apple

• To show place names, Almost sends the coordinates of matched moments to Apple’s geocoding service, as any Maps lookup would.
• Map images come from Apple Maps.

Analytics

Almost sends anonymous usage events to Mixpanel: which onboarding steps were reached, roughly how many moments were found and which buttons were used, plus the device and app version details Mixpanel collects automatically. Mixpanel is told not to use your IP address to work out where you are.

These events never include your locations, photos, names or the date you met.

Sharing

• When you share your story, a card or your numbers on a photo, Almost makes it on your phone. It goes only where you send it.
• If you put your numbers on a photo, you choose it in Apple’s photo picker, which shows Almost only that photo. It’s used on your phone to make the image and isn’t kept.
• If you add something straight to an Instagram story, Almost hands it to Instagram through your phone’s clipboard, as Instagram asks apps to.

What Almost doesn’t do

There are no accounts and no ads. We don’t sell your data, and we don’t share it with data brokers.

Deleting your data

Delete All Data in Almost’s Settings removes everything Almost keeps on your phone, plus any of your invite data still waiting in iCloud. If iCloud can’t be reached just then, Almost removes it the next time it’s open with a connection.

If you delete the app without doing this first, anything still waiting stays in iCloud, encrypted, with no way to read it without the link.

Children

Almost isn’t directed at children under 13.

Contact

Questions about your privacy? Email privacy@getalmost.app.