Exterfy – Privacy Policy

About This Policy

Exterfy ("we", "us", or "our") is a reminder-sharing app that lets you send reminders and connect with people you know. This policy explains what personal data we collect, why we collect it, and how you can control it.

By using Exterfy you agree to the practices described here. If you do not agree, please stop using the app.

Information We Collect

When you create an account and use Exterfy we collect:

Account info — your email address and display name
Reminders — the reminders you create, including title, message, scheduled time, and recipient list
Form responses — answers you submit to form-based reminders sent to you
Connections — the list of people you connect with inside the app
Push notification token — a device token used to deliver push notifications to your device
Usage data — your monthly reminder count and subscription tier for quota enforcement
Safety data — the list of users you have blocked, and reports you submit or that are made about you, including a copy of the reported content

How We Use Your Information

To deliver reminders and notifications to you and your recipients
To display your connections and let you send reminders to them
To enforce your subscription plan's monthly reminder limits
To authenticate you and secure your account
To keep the service safe: text you enter (reminder titles and messages, form questions and answers, display names) is automatically checked against a filter for abusive content, and we review reports of abuse

We do not sell your data, use it for advertising, or share it with third parties other than those listed below.

Legal Basis for Processing

We process your data on the following legal bases under UK GDPR / GDPR:

Performance of a contract — the majority of processing (account info, reminders, responses, connections) is necessary to provide the service you signed up for.
Legitimate interest — storing your push notification token and sending you notifications is necessary for the reliable operation of the service, balanced against your right to turn off notifications at any time.
Legitimate interest — automated content checks, blocking and abuse reports are necessary to keep users safe and to protect the service from abuse.
Legal obligation — retaining subscription transaction records as required by applicable financial regulations.

Third-Party Services

Exterfy uses the following services which may process your data:

Firebase (Google) — Authentication, database storage, and push notification delivery. Google Privacy Policy
RevenueCat — Subscription and in-app purchase management. RevenueCat Privacy Policy
Expo — Push notification infrastructure for mobile devices. Expo Privacy Policy

International Data Transfers

Firebase (Google), RevenueCat, and Expo are based in the United States. When you use Exterfy, your data may be transferred to and processed in the US. These providers rely on Standard Contractual Clauses (SCCs) approved by the European Commission as the legal safeguard for transfers of personal data from the UK and EU to the US.

Data Retention

We retain your data for as long as your account is active. When you delete your account, all of your data — including reminders you sent, responses, connections, and templates — is permanently deleted within a few minutes.

Individual reminders and their responses are automatically deleted 3 months after their scheduled date, whether or not your account remains active. Recurring reminder series that are still active are not affected — only past occurrences and cancelled series older than 3 months are removed. This automatic deletion is separate from the full data deletion that occurs when you delete your account.

Your block list is deleted with your account. Reports are retained for as long as needed to investigate and prevent abuse, including after account deletion, because they may concern other users' safety.

Subscription transaction records held by RevenueCat may be retained as required by their terms and applicable law.

Your Rights

Under UK GDPR / GDPR you have the following rights over your personal data. To exercise any of them, contact us at support@exterfy.com.

Access — request a copy of the personal data we hold about you
Rectification — correct inaccurate data (you can update your display name and password directly in the app)
Erasure ("right to be forgotten") — request deletion of your data; you can also do this instantly via Profile → Privacy → Delete Account
Restriction — ask us to pause processing of your data in certain circumstances
Portability — receive a copy of data you provided to us in a structured, machine-readable format
Objection — object to processing carried out on the basis of legitimate interest
Withdraw consent — where processing relies on consent (e.g. marketing), you may withdraw it at any time without affecting prior processing

If you are in the UK, you have the right to lodge a complaint with the Information Commissioner's Office (ICO). If you are in the EU, you may contact your local data protection authority.

Children's Privacy

Exterfy is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes through the app or by email. If changes are material, we will ask for your renewed agreement before they take effect.

Contact Us

Exterfy is operated by an individual developer based in the United Kingdom. UK GDPR is the applicable data protection law.

For questions or requests regarding your privacy, contact us at support@exterfy.com. We will respond to data subject requests within 30 days.