Privacy Policy

Last updated 2 October 2026

Yesterday is an iPhone app made by Offshore Apps Limited ("we", "us"). It lets a host create an event with a shared disposable camera and voice or video messages, and lets guests join it. This policy explains what we collect, why, who we share it with and the choices you have.

What we collect

Your account. When you first open the app we create an account with a random ID so you can start straight away. If you choose Sign in with Apple, we receive the identifier Apple gives us and, the first time only, the name and email address you choose to share (this can be one of Apple's private relay addresses).
Your display name, which other people at your events see next to your photos and messages.
What you add to events: photos you take with the in-app camera, voice and video messages you record, an optional photo of you shown with your message, and event details a host enters (name, cover photo, dates, prompts and settings).
Location of photos. If you allow location access while using the app, each photo you take saves its latitude, longitude and the place name, which can be shown on the photo. You can turn this off at any time in iPhone Settings. Location is never collected in the background.
Purchases. When you buy guests for an event, Apple handles the payment. We receive a record of the purchase (the product, the transaction ID and the event it was for), and so does our purchase provider, RevenueCat. We never see your card details.
Technical information needed to run the service, such as the app version, device type and error details when something goes wrong.

How we use it

To run your events: storing photos and recordings, keeping them hidden until the reveal time the host chose, and showing them to the right people afterwards.
To let guests join with an event code, and to enforce the guest and shot limits.
To apply purchases you make and to prevent the same purchase being used twice.
To remind you about your events. Reminders are scheduled on your own iPhone, using its notification settings.
To provide support and keep the service secure.

We don't sell your personal information, show ads, or use your photos and recordings for any purpose other than running your events.

Who can see what

Before the reveal, nobody can see the event's photos, including the host. The host can see who has left a voice or video message, but messages only play once recording closes.
After the reveal, the event's photos are visible to its members, or only to the host if the host chose that. People you share an event code with can join the event.
Anyone who can see a photo or message can save or share it outside the app.

Who we share it with

We use a small number of service providers who process data for us under their own security and privacy commitments:

Supabase, for accounts, the database and file storage.
RevenueCat, to process and verify App Store purchases. It receives your app account ID and purchase details.
Apple, for Sign in with Apple, App Store payments and notifications.

We may also disclose information if the law requires it, or to protect the safety of our users or the public.

How long we keep it

We keep your account and the content of events until they're deleted. A host can delete an event, which deletes its photos and recordings. You can delete any photo you took. Deleting your account (Settings → Delete Account) deletes your account, every event you host with all its files, and your own photos and messages.

Your choices and rights

Change your display name, turn location or notifications on or off, and delete photos, events or your whole account in the app.
You can ask us for a copy of your information, to correct it or to delete it by emailing support@reliveyesterday.app. We'll respond within 30 days.
If you're unhappy with how we've handled your information, you can contact your local privacy regulator. In New Zealand that's the Office of the Privacy Commissioner.

Children

Yesterday isn't directed at children under 13, and we don't knowingly collect their information. If you think a child has given us their information, contact us and we'll delete it.

Security

Data is sent over encrypted connections and protected by access rules that limit each event's content to its members. No system is perfectly secure, but we work to protect your information.

Changes

If we change this policy we'll update the date above, and tell you in the app if the change is significant.

Contact

Offshore Apps Limited · support@reliveyesterday.app