Privacy Policy

Last updated: August 1, 2026

uuuu ("the app") is made by pointless, inc. uuuu does not sell your data, does not serve ads, and does not track you across other apps or websites. This policy describes what we collect, how it is used, and the choices you have.

Information we collect

• Account details. Your email address, display name, and an internal account identifier, stored by our authentication provider (Supabase) to sign you in and manage membership.
• Phone number. If you choose to verify a phone number, we store it to confirm the number belongs to you, to match invitations that were addressed to you, and to send you the account notifications described below.
• Your content. Vault and collection names, notes, captions, invitations, assignments, unlock events, and the moments you choose to save — which can include photos, short videos, audio recordings, letters, links, and story text. Content is stored in our cloud database and in private cloud storage so it can be delivered to the person you choose.
• Purchases. Our subscription processor (RevenueCat) receives your internal account identifier and App Store purchase history to provide and restore subscriptions. It does not receive your email or your vault content.

What stays on your device

• Photo-library scanning runs entirely on your device. Photos are uploaded only after you explicitly import them and enable cloud sync.
• When you invite someone from your contacts, their details are used locally to compose the invitation. A contact's name and, where you choose to send to them by text, their phone number may be stored with the invitation so it can be claimed.

Text messages (SMS)

If you verify your phone number in the app, we send you a one-time passcode by SMS, and may send occasional account notifications (for example, that something left for you is ready to view). SMS is sent only in response to your own in-app request or to a notification setting you control. Phone numbers and SMS opt-in consent are never sold and are never shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data will not be shared with any third party except as required to deliver the messages themselves.

Sharing and access

Content you place in someone's vault is sealed to its recipient: only the recipient can view it once it unlocks. Stewards and contributors cannot read a recipient's content. We share data only with the service providers needed to run the app (cloud database, private cloud storage, subscription processing, and SMS delivery), and never for their own marketing use.

Retention and deletion

You can delete your cloud account in the app's Settings. Deletion removes your stored media objects and cascades through owned vaults, memberships, and metadata. Invitation secrets expire after 30 days and are stored only as hashes. App Store subscriptions must be canceled separately through Apple.

Contact

Questions about this policy: hi@usepointless.com