Privacy

Timule privacy notice

A plain-language outline of how the current Timule implementation handles information.

Under review

This notice is being finalised before Timule’s public release.

This translation is provided for convenience while the notice is under review. The English version remains the source draft until final legal review.

Review status: 28 August 2026. No effective date has been approved.

At a glance

  • Timule uses account, profile, Memory, media, location, social and device information to provide its features.
  • You choose who can see a Memory through the available privacy settings.
  • Location supports maps, nearby Memories, Revisits and AR.
  • You can request account deletion in Timule or through the website if you cannot sign in.
  • Important legal and retention details are still under review.

1. Who we are

Legacy Lab Ltd provides Timule and is registered in England and Wales under company number 17082307. Its registered office is 71–75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ. Contact: admin@legacylabgroup.com.

2. Information Timule handles

The current implementation handles account and sign-in details; profile information; Memories, captions and media; places and location information; Memory Journeys, connections, messages, comments and reports; notification and device information; and limited operational records needed to run and protect the service.

What is collected depends on the features you use and the permissions you grant.

3. How information is used

Information is used to create and secure accounts, provide Memories and Journeys, show maps and nearby content, enable Revisits and AR, deliver messages and notifications, apply privacy and blocking choices, respond to reports and requests, and maintain the service.

4. Sharing and visibility

Memory and profile visibility follows the audience you choose, Journey membership, relationships, blocks and current access checks. Public content should be treated as visible to people using the service. A shared URL must never bypass these rules.

5. Services used to operate Timule

The inspected implementation uses Google and Firebase services, Apple sign-in and device services, map providers, device AR technology, IPify in account/login flows, Netlify for this website and its forms, and Google Fonts. Provider entities, regions, safeguards and the complete subprocessor list still require approval.

6. Retention and deletion

Timule offers immediate permanent deletion and scheduled deletion with a 30-day recovery period. Scheduled accounts are deactivated and hidden during that period. After the deadline, recovery ends and permanent deletion begins. Some shared contributions, such as comments, may be anonymised. A complete retention schedule remains under review.

7. Your choices and rights

You can manage Memory audiences and notification choices in Timule. Account deletion is available under Settings > Account > Delete account. If you cannot sign in, use the deletion request page. Applicable privacy rights and response procedures require final legal review.

8. Children and contact

Age eligibility and children’s-data treatment are not yet approved. Privacy questions can be sent to admin@legacylabgroup.com or through the contact form.

9. Changes

The final notice will include an effective date and an approved process for communicating material changes.