Who is responsible for your information?
Together is operated by Connor Williams as CR Studios. For privacy questions or requests, email support@crstudios.app. In this policy, “we” means CR Studios.
Information Together handles
- Account details: your email address, password credentials (managed by our authentication provider), display name and account identifier.
- Shared-space details: your and your partner’s names, shared-space settings, currency, relationship dates and preferences, and invitation records.
- Information you add: lists and tasks; plans, dates and reminders; surprise plans and responses; expenses, bills, budgets and settlement records; appreciations, check-ins, replies, relationship-prompt preferences and history; and photos you choose for a shared profile or memories.
- App and notification information: notification preferences, an app/device push token and device platform when remote notifications are enabled, and technical timestamps and identifiers needed to sync records and operate the service.
- Support messages: the details and any attachments you choose to send us.
- Subscription information: a shared-space-scoped customer identifier and subscription, product and entitlement information used to provide Together Premium. Apple handles App Store payment details; we do not receive your full payment-card number through Together.
Some information about you may be added by your partner to your shared space. Your partner can see shared-space content, and some features let either partner add or update it. Only invite someone you intend to share with and only add information you are entitled to share.
Why we use it and our legal bases.
We use this information to create and secure accounts; provide, synchronise and support the shared-space features you request; display shared history; tailor in-app prompts from the preferences and Together activity you choose to record; deliver requested reminders and notifications; process subscriptions; respond to support requests; and meet legal obligations.
Where UK data-protection law applies, we generally rely on:
- Contract: to create your account and provide the features, syncing and support you request.
- Consent: for optional remote push notifications that require your permission. You can withdraw permission in Together or your device settings; this does not affect processing that already took place.
- Legitimate interests: to protect and maintain the service, prevent misuse, and handle service-related enquiries, where those interests are not overridden by your rights.
- Legal obligation: where we must keep or disclose information to comply with law.
If you do not provide account information needed to register, we cannot create an account for you. Optional photos and notifications are not required to use the core app.
How information is stored and shared.
Together uses Supabase for account authentication, its cloud database and private file storage. Some information is also cached on your device, and some reminders are scheduled locally by your device. Shared-space data is made available to the members of that space. A notification may display details such as a bill name and amount or, when a surprise is ready, its title; consider your device’s lock-screen privacy settings.
When remote notifications are enabled, Together stores your push token and uses Expo’s push service to route notifications through Apple or Google to your device. Expo and the device platform receive the token and the notification payload needed for delivery. Together Premium is managed with RevenueCat and the relevant app store. RevenueCat receives the shared-space-scoped customer identifier and subscription information needed to synchronise access; Apple processes App Store billing and payment under its own terms and privacy policy.
These providers process information to deliver their services and may use their own subprocessors. Their privacy information is available from Supabase, RevenueCat, Expo, Apple and Google.
Some providers may process information in countries other than the country where you live. Where data-protection law restricts an international transfer, we will use a transfer mechanism and safeguards required by that law. Contact us for information about the safeguards applicable to a particular transfer.
We do not sell personal information, use it for third-party targeted advertising, or send your relationship entries to a generative-AI service. Together’s relationship prompts are selected using app preferences and recorded activity; they are not a diagnosis or a decision about you. We do not make decisions based solely on automated processing that produce legal or similarly significant effects.
Notifications and photos
Photo-library access is requested when you choose a photo for your shared profile or a memory. The selected photo is uploaded to the private shared space; Together does not need access to your whole library.
Some reminders are created and kept on your device. Remote surprise and bill notifications use a push token stored with your account so we can deliver them. You can turn off optional notifications in Together or your device settings. Disabling remote notifications does not remove reminders already scheduled locally; review notification settings in Together if you want to change those too.
How long we keep information.
We keep account and shared-space information while the relevant account or shared space is active, unless a shorter period is appropriate or the law requires a different period. You can delete your account from Settings. If another partner remains, their shared lists, plans, bills, expenses and other shared operational records can remain available to them; account-linked relationship content and settlement records associated with the deleting person are removed, and authorship is disconnected from shared records where possible. If the shared-space owner deletes the shared space, its shared data and photos are deleted for both partners.
Information may remain temporarily in service-provider backups or operational records until those systems’ normal deletion cycles complete. Copies, notifications or screenshots already saved to a device or shared outside Together may not be removed by deleting an account.
Your choices and rights.
You can export a JSON copy of many account and shared-space records from Settings, correct information in the app, manage notification permissions, and delete your account or—if you own the shared space—delete the whole shared space. The export does not embed the original photo files. You can also contact us for help or to exercise applicable privacy rights.
Depending on the law that applies and the reason we process your information, you may have rights to access, correct, erase, restrict or receive a copy of your information, to withdraw consent, and to object to processing based on legitimate interests. To exercise a right, email support@crstudios.app. We may need to verify your identity before responding.
If you are in the UK, you can complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we use your information. You can also contact the ICO for guidance.
Changes and contact.
We will update this policy if our data practices materially change and change the date above. For privacy questions, email support@crstudios.app.