Timelines

Privacy Policy

What Timelines keeps about you, where it lives, who else sees it, and how to erase it. Last updated 2 November 2026.

What we keep

Your login. Your email address and a password (stored scrambled, never readable by us), when you signed up and last signed in, and whether you confirmed your email. A sign-up that is never confirmed is deleted about a week after the last confirmation email.
What you type into the app. Your name and the answers on the You screen (age, gender, city, relationship, kids, work and how you feel about it, the “about you” note, your Never include list, your standing notes, and how you want names said), your timelines and their answers, the people in your life (their name, who they are to you, their sex and any notes), your tasks, and the Positive Event Tracker. If you used earlier versions of the app, also entries from parts since removed (the journal, check-ins and “felt real / not me” reactions).
Your stories. The text of every story written for you, its title, length, life area, picture, the voice it is read in, which timeline it belongs to, and whether you favourited it.
Written for you. The day’s affirmations, For-you ideas and story suggestions, and the last few suggestion titles so they don’t repeat.
What you listened to. Each story you listen to (the day, the time and its length) for your streak and calendar, and where you stopped in the last one (its title and the place).
Narration. When a story is read aloud, the recording is saved so a replay is instant and free. Each recording is filed under a code made from its words, voice and pace rather than under your account, and the same words in the same voice and pace are recorded only once, for whoever asks for them. Your recordings are your story spoken aloud, so they can include your name, the names of the people you listed and places. Names you try with Hear it are recorded the same way. For each story we also note, under your account, which voice, pace and model it is read in, and we log each new recording under your account (its length, voice, model and time, and which story it belongs to and where the recording is kept) for our costs, your daily narration limit, and so your recordings can be erased when you delete your account.
Your plan. Whether you subscribe, which plan, when it renews or ends, how many stories you have written (in total and today), any Story refresh you bought and how many of its stories you haven’t used yet, and the payment references for them: Stripe’s on the website and, in the iPhone and Android apps, the store, the product and the store’s purchase references. Records of payments already used, chargebacks and refunds are described under Deleting your account.
Notifications. If you turn on reminders: where to reach this device (your browser’s notification address on the website, or the phone’s notification token in the iPhone and Android apps), your time zone, and the times you chose.
Requests the writer refused. If our AI writer refuses something, whether you asked for a story or the app asked for suggestions on its own, we keep a note so we can look into misuse: your account’s internal number and email, what was sent to the writer for that request (your request and what you added, the timeline and its answers, your About you, standing notes or Never include list, your age, and up to six people you listed with their notes), and the writer’s answer. The team at Timelines can read these notes. They are kept for up to 90 days, also after the account is deleted, then removed, unless we've reported them to the authorities; then we keep them for one year, as US law requires. An automatic check, which includes an AI model, decides whether an answer was a refusal.
Paused and closed accounts. When the writer refuses three of an account’s story requests within 24 hours, the account is paused straight away, automatically, without a person deciding. Refusals on accounts that share one email inbox count together (for example name+1@gmail.com and name+2@gmail.com), so a third refusal on any of them pauses that account. While it is paused, stories in your library still play, but nothing new can be made (stories, narration, pictures or suggestions), no Story refresh can be bought, and no new plan on the website, until we look at it (within seven days) and either lift the pause or close the account. We can’t stop a purchase made in the App Store or Google Play, so please wait for us there too. A pause doesn’t cancel a plan you already have; it keeps renewing unless you cancel it. If you think a pause is a mistake, write to hello@newtimelines.com and a person will look at it. If it was our mistake, we refund you for the time your account was paused. Apple handles refunds for plans bought in the App Store, so for those we’ll help you ask Apple. We may also close an account that keeps asking for things our Terms don’t allow, or that the writer refuses. Closing stops sign-in and cancels any website plan, and we cancel a Google Play plan by hand. Only you can cancel an App Store plan, and we email you to say so. We keep a closed account’s data while we look into it, and delete it within 12 months of closing. Until then, you can ask us for a copy, or to delete it, by writing from the account’s email address.
Stories you report. If you use Report this story: the reason you chose, any note you add, the story’s title and its first few lines, so the report can still be read if the story is deleted later (also by Start over). We read every report ourselves. A report is removed 12 months after we’ve dealt with it, and all of yours go when you delete your account.
Account status. When you tapped Agree on the AI screen, and whether your account is paused or closed, and why.
Abuse limits. To stop abuse of the free features and of payments, our server keeps short-lived counters tied to your account, to a coded form of your email, and to your internet address (on the payment pages the address itself, elsewhere a coded form of it). Most are removed within a few days; a marker that a store refund was handled can last about 13 months. The ones tied to your account go when you delete it.

We never read your phone’s location, contacts or photos, and we use no advertising identifiers. The city you type and the people you add are kept as described above.

Where it lives

Everything is stored in a database run for us by Supabase. Your app opens only your own data, with your own sign-in, and other Timelines users can never see it. Our server reads it to do what you ask: write, read aloud and save your stories, send your reminders, and prepare your download or delete your account. The app itself is hosted by Vercel, which keeps server logs for a short period: your IP address, the address asked for (when we look an account up, that includes its email address), the time, and our own short error notes, which can include your account’s internal number and payment references. Vercel also tells our server which country your internet address is in. We use it only to turn away visits from the few countries where Timelines isn’t offered, and to mark the website’s prices as US dollars (US$) outside the United States. We keep that country only in a cookie in your browser, for a day, and never with your account.

So stories can play with no signal, the app also keeps a copy of your email address, everything you typed into the app, your stories and story pictures you’ve seen on each phone or computer you use it on, and the narration of the newest 40 favorites you heart or save there. Signing out on that device removes it and stops that device’s reminders, and someone else signing in there removes it too. Signing out on another device does not: the copy stays, and with no signal it can still be opened on that device, without signing in, for up to 60 days after Timelines last opened there with a connection. A story you delete on one device, or the narration of one you un-heart, is removed from your other devices the next time Timelines opens there with a connection. If you delete your account, the copy on the device you delete from goes at once, and the copy on any other device goes the next time Timelines opens there with a connection. To remove a copy straight away, clear Timelines’ site data in that browser, or delete the app.

The app also keeps a few small things in that browser’s storage: the list of narration voices, your phone’s notification token if you turn reminders on, and the reference of a payment we couldn’t confirm yet, so it’s added the next time you open the app. A payment reference only works for your own account.

Who else sees it

Anthropic (its Claude models) writes the stories, the scene cards you pick a story from, the daily affirmation, the For-you ideas, and Today’s suggestions and their short labels. Some of these are written automatically when you open the app. Each request carries only what that piece needs, drawn from: your name and profile answers (age, gender, relationship, kids, work and how you feel about it, and your Never include list; for stories also your city, your About you note and your standing notes), your timelines and their answers, the people you listed (their names, who they are to you, their sex and your notes about them), what you typed or tapped for this story, the titles of recent stories and suggestions (so new ones don’t repeat), and the time of day where you are. If the start of a story looks like the writer declining, those opening lines are sent once more to check. Your tasks, journal and Positive Event Tracker are never sent. Each request also carries your account’s internal number: a random code with no name or email in it, which we can match to your account, so Anthropic can act on misuse by a single account. Under Anthropic’s commercial terms this data is not used to train its models, and Anthropic keeps it for a limited time set by its own policy.
ElevenLabs and Cartesia read the stories aloud (one or the other, by the voice you chose). Our server sends the one reading the text being read, with the voice you chose. That text is your story, so it can include your name, the names of the people in your life and places, spelled the way you set under Name pronunciations. It also receives a spelling when you tap Hear it. The request comes from our server, so it never carries your email, your account number or your IP address. Either may keep what it is sent for a time under its own terms, and deleting your account doesn’t reach that copy.
Your device’s own voice. If the premium voice can’t be used (not set up, busy, over a limit, or your plan or account doesn’t allow new narration), your phone or browser reads the story with its built-in voice. Timelines picks a voice that runs on your device when there is one. Some browsers’ voices work online instead, such as Google’s in Chrome and Microsoft’s in Edge; if one of those is used (you chose it under You → Voice, or your browser has no other), the story’s words go to that company to be spoken, under its own privacy terms.
Replicate makes the cover pictures from a one-line scene description chosen from a fixed list. It never receives anything about you.
The team at Timelines. Nobody reads your stories as a matter of course. The team at Dare Industries LLC has tools that can open an account when there is a reason to: to answer you when you write to us, to look into a story you reported or a request the writer refused, to stop misuse, to sort out a plan or a payment, or to fix something that broke. Those tools can show an account’s email, sign-up and sign-in dates, plan and payment references, your answers on the You screen, your timelines, the people you listed and their notes, name pronunciations, your stories and their text, stories you report, and requests the writer refused. Those tools are protected, and we never show your data to other users or sell it.
Stripe handles payments for plans and Story refreshes bought on the website. Your card details go straight to Stripe and never touch our servers. We give Stripe your email address and your account’s internal number so each payment is matched to you, and when you delete your account (or we close it) we ask Stripe, by that email, whether a plan is still running so it can be cancelled. Stripe keeps its own record of you as a customer and of your payments under its own privacy policy, also after you delete your Timelines account. We leave that record there, because a bank chargeback can arrive months later and has to be matched to its payment, and the law makes us keep payment records for several years, for our taxes.
Apple and Google take the payment when you buy a plan or a Story refresh in the iPhone or Android app, under their own privacy policies. We never see your card or your Apple or Google account details.
RevenueCat keeps track of app purchases for us. It receives our internal number for your account (never your name or email), what you bought and when, your store country, and the basic phone and app details its software sends. When you delete your account we have RevenueCat remove its record, unless an App Store or Google Play plan is still running for the account. Then RevenueCat keeps it, so the plan stays matched to its purchase; write to us once the plan has ended and we’ll have it removed. If the iPhone or Android app is still signed in to the account on another phone, RevenueCat can start a new record, with no purchases in it, the next time the app opens there; write to us and we’ll have that removed too.
Sentry receives a report when the app or our server hits an error, and our own alerts about refunds and chargebacks. A report holds the error message, the screen or step it happened on, the browser and phone type and, when we need it to find the problem or the payment, your account’s internal number and a payment or purchase reference (Stripe, Apple or Google). It holds no story text. Sentry keeps reports for a limited time, also after an account is deleted.
Cloudflare (Turnstile) checks that a person, not a bot, is signing up, signing in, resetting a password or asking for the email again, on the website and in the phone app. Its check loads when the sign-in page opens, even if you see nothing. It sees your IP address and some information about your browser and device, under Cloudflare’s own privacy policy. It never receives your email, your password or anything you write in the app; our login provider only learns whether the check passed.
Account emails (confirming your address, sign-in links and password resets) are sent by Supabase through our email provider. It receives your email address and the email itself, nothing else about you. When you buy or change a plan on the website, the receipt comes from Stripe’s Link service, the seller of record, with the renewal terms and how to cancel on it. Our own emails (a reminder before a yearly App Store or Google Play plan renews, a yearly note about a monthly plan, and alerts to the team about refused requests, story reports and payment problems) go through Resend, which receives the address they go to and the email’s text.
Notification services deliver reminders. On the website that is your browser’s push service (Apple, Google, Mozilla or Microsoft), and each message is encrypted so the service can’t read it. In the iPhone and Android apps it is Apple Push Notification service or Google Firebase Cloud Messaging, which can read the message. Every reminder is the same fixed sentence and says nothing about you; the service sees your device’s address or token and when each reminder is sent. On Android, Firebase also gives the app an installation id so messages reach the right phone.

We never sell your data, share it with advertisers or use it to train AI. Each of these companies handles what it receives under its agreement with us and its own privacy policy. Vercel Analytics counts page views and visitors without cookies and without identifying you; it is sent only the name of each page, never the rest of its address, and works out the country, browser and device type from the visit. There are no tracking pixels. The only cookies are the ones that keep you signed in, one that holds a sign-in link for a few minutes until you tap Continue, and one that remembers for a day which country your internet address is in, so the website can mark its prices as US dollars (US$) outside the United States.

We give information to the police or other authorities only when the law requires it, or to report a child being sexually exploited (in the US, to the National Center for Missing & Exploited Children).

Health and other sensitive details

Some of what you might tell Timelines is sensitive: your health, your relationships or sex life, your beliefs. Sharing it is your choice, and the app works without it. If you do, we use it to write, read aloud and keep your stories, and to stop misuse: it goes to the AI company with your other details, it can appear in the story text that a voice company reads aloud, and it can be in the note we keep and read when the writer refuses a request (see What we keep). Before anything you type is sent, the app asks you to agree, on the website and in the phone app. To take that back, use You → Account. It is never sold and never used for advertising. It is stored, seen and erased the same way as the rest of your account (see Where it lives and Your controls), including the note kept for up to 90 days when the writer refuses a request, unless we've reported it to the authorities; then we keep it for one year, as US law requires. Our Consumer Health Data Privacy Policy says more.

People you tell us about

If you add people in your life, we keep the name you give them, who they are to you, the sex you picked for them (“Prefer not to say” is fine) and any notes you write. They go to the AI company with your other details whenever a story, a story suggestion or a set of scenes is written for you, and a story may say their name aloud. If the writer refuses a request, the note we keep (see What we keep) can include up to six of these people, with who they are to you and your notes. Only add people who’d be happy to be included, and only what they’d be comfortable with. If you are one of these people and want your details removed, write to hello@newtimelines.com and we will take them off that account’s list.

Tracking

Timelines doesn’t track you across other websites or apps, and we don’t let advertising or analytics companies collect what you do across sites through Timelines. Because there is no cross-site tracking to switch off, the app works the same whether or not your browser sends a Do Not Track or Global Privacy Control signal. The services listed above receive your IP address and browser details when they do their part; what they do with them is set by their own privacy policies.

Keeping it safe

Everything travels encrypted (HTTPS). Database rules let each sign-in open only its own data, and the keys that can read more stay on our server. Passwords are stored by Supabase only as a one-way scramble. Apart from the services above, only the team at Dare Industries LLC can open an account’s details and stories (see Who else sees it), and those tools are protected.

Your controls

Edit anything on the You screen at any time, and remove a story, a person, a task or a Positive Event Tracker entry where you added it.
Download my data (You → Account) gives you a file with your account details (email, account number, when you joined and last signed in), everything you typed into the app and your settings, your plan (on the web or in the App Store or Google Play), how many stories you have written, any Story refresh you bought and any refresh stories saved for later, your reminder times, how much narration you used each month, your story reports, any refused requests we still keep, and the title and text of every story. Internal references (payment, store and notification ids, the notes of which voice each story is read in, and the recordings themselves) are left out, because they are no use outside the app. For anything else we hold about you, write to hello@newtimelines.com.
Start over (You → Account) erases every story and everything you’ve typed (your profile, the people in your life, name pronunciations, timelines and their answers, tasks and the Positive Event Tracker), resets your settings, turns reminders off on all your devices and clears this device’s copy, but keeps your login and plan. It needs a connection: without one, nothing is erased. Stories you reported (with their first lines), notes of refused requests (until they are 90 days old, or a year if we’ve reported them to the authorities), the counts of stories and narration used, the notes of which voice each story was read in, and saved narration recordings stay, as described above (the recordings go when you delete your account, see below).
Delete my account (You → Account, in the app or after signing in at newtimelines.com in any browser) erases your login and what is filed under it. What goes, what stays and for how long is just below.
Anything else: to see, correct or delete something we hold about you, write to hello@newtimelines.com. We may ask you to confirm it’s your account, and we answer within 30 days.
If we say no: reply to our answer to appeal. We decide within 45 days and tell you why in writing. If we still say no, you can complain to your state's Attorney General (in Connecticut: portal.ct.gov/ag).

Deleting your account

Deleting your account works straight away and can't be undone: once an account is deleted, we can't bring it back. You're welcome to sign up again later with the same email, but the new account starts empty.

Cancel an App Store or Google Play plan first. Deleting your account doesn't stop a plan bought in the iPhone or Android app. It keeps charging until you cancel it in your phone's subscription settings. A plan bought on the website is cancelled for you when you delete, and the rest of that period isn't refunded. If we close an account, we cancel any website plan on it straight away and cancel a Google Play plan for you within two days. Only you can cancel an App Store plan: cancel it in your iPhone's subscription settings, or it keeps renewing. We email you when we close an account, and say why.

What is erased straight away

Your login: your email address and password.
Everything you typed into the app: your profile and the answers on the You screen, your timelines and their answers, the people you listed and your notes about them, name pronunciations, your tasks and the Positive Event Tracker.
Every story, with its title, text and picture, and the note of which voice it is read in.
Your plan record, your story reports, your reminder times, your devices' notification addresses and your narration log.
Story refresh stories you bought and haven't used yet. They go with the account and aren't refunded.
Your narration recordings: your stories read aloud and the names you tried with Hear it. A recording that another account has had made too (exactly the same words, in the same voice and pace) stays for that account, and so do the opening lines every story begins with, which everyone shares.
The copy kept for offline listening on the phone or computer you delete from. On your other devices it goes the next time Timelines opens there with a connection.
RevenueCat's record of your app purchases, unless an App Store or Google Play plan is still running for the account. If the iPhone or Android app is still signed in to the account on another phone, RevenueCat can start a new record, with no purchases in it, the next time the app opens there; write to us and we'll have it removed.

What we keep, and for how long

Notes of requests the writer refused, with the email they came from, so we can look into misuse. They are kept until they are 90 days old, unless we've reported them to the authorities; then we keep them for one year, as US law requires.
A record that each payment has been used: the payment's reference and the account's internal number, never your email or name. It stops the same payment being claimed twice. The account number is removed after 180 days; the payment's reference stays.
Chargeback and refund marks. If a payment was charged back by your bank, if a Story refresh bought in the app was refunded by Apple or Google after its stories were used, or if a payment was made with a card or Stripe Link account that was charged back before, we keep a scrambled fingerprint of the email (for card payments, also of the card; for Stripe Link, of the Link account's email), the Stripe customer reference and the account's internal number, so it can't be repeated from a new account. Kept for 3 years. A refunded plan isn't recorded this way.
Which App Store or Google Play subscription belonged to the account (the store, the date it was first bought and the account's internal number), so one subscription can't be passed from account to account. Kept until 13 months after it last changed.
A tally with no name, email or account number: the month, the kind of plan, how many stories were written and kept, and how much narration was recorded. It keeps our cost totals right.
Some narration recordings made before this change (October 2026). Recordings from before then are erased when we can still match them to a story you have kept, in the voice and pace on record, and to our log of what was recorded for you. Others may stay in our private store, such as recordings of stories you had already deleted or names you tried with Hear it before the change. They can say names and places.
Counters that limit misuse, filed under a scrambled email or an internet address. They run out within a few days. A marker that we already dealt with an App Store or Google Play refund, filed under the store's own reference, lasts about 13 months.

Kept by other companies

Stripe keeps its customer record (email, name, billing address, card details and payment history) under its own privacy policy. We don't ask Stripe to delete it, because a bank chargeback can arrive months later and has to be matched to its payment, and the law makes us keep payment records for several years, for our taxes.
Apple and Google keep their own purchase records, and RevenueCat keeps its record while a store plan is still running, each under its own policy and the law. Once that plan has ended, write to us and we'll have RevenueCat's record removed.
Copies that our other services already handled (requests that Anthropic, ElevenLabs and Cartesia processed, error reports at Sentry, server logs at Vercel) and our database provider's backups are removed on those services' own schedules.

If the law requires us to keep something longer, for example after a report to the authorities, we keep it for as long as the law requires.

There is also a page just about this, which works without the app: newtimelines.com/delete-account.

Children

Timelines is for adults 18 and over and isn’t meant for anyone younger. The app asks your age before anything else about you. If the age is under 18, it goes no further: you can change the age if it was a mistake, delete the account there and then, or sign out, and an age under 18 is never saved. Where the law asks for it, the iPhone and Android apps also check the age range Apple or Google shares with apps. If it says you're under 18, the app goes no further. That answer stays on your phone; we don't send it to us or keep it. If we learn that someone under 18 has an account, we close it and delete it as described above. If you think a child is using Timelines, write to hello@newtimelines.com.

Who is responsible for your data

Timelines is made and run by Dare Industries LLC, a Wyoming limited liability company. Dare Industries LLC decides what is kept and why, as this page describes. Timelines is offered in most countries. A few are left out for now, where our AI provider doesn't operate, where there is armed conflict, or where local rules need more than we've set up so far. Our privacy officer answers privacy questions at hello@newtimelines.com.

Changes and contact

If this page changes in a way that matters, the date at the top changes. Questions, a request to see or delete your data, or to appeal our answer: hello@newtimelines.com.

By post: Dare Industries LLC, 5388 N Forkner Ave, Fresno, CA 93711, United States.

Health Data Privacy · Terms of Use · Delete your account · Back to sign in · Open the app