Your memories are personal.

Secondframe Inc., based in Vancouver, Canada, operates The Sky Then mobile apps and theskythen.com. This policy explains the local journal and the limited information processed when you visit our website or contact us. It also covers people whose details you choose to record. Questions and privacy requests can be sent to hello@secondframe.co.

Your optional name, birth date, optional time and place, moment dates, titles, notes and places, calculated sky records, deletion markers, and preferences are stored in the app or browser on your device. They are used there to calculate skies, display your journal, find patterns, and create the prints and backups you request. We do not receive or synchronise this journal. There is no cloud account, advertising, tracking, or in-app analytics. We do not sell personal information or share it for targeted advertising. There is no automated decision-making that produces legal or similarly significant effects.

City matching runs on your device using a GeoNames catalogue. The mobile app bundles it; the website downloads a static catalogue from its host. Search text, journal dates, and notes are not sent to a city search service. Like other websites, our host receives ordinary connection information when serving pages and assets, such as IP address, requested URL, browser information, and request time. Hosting providers may process security and delivery logs for operating, protecting, and troubleshooting the website. Do not put private journal details in website URLs or support links. The app uses local storage for its journal and preferences, not advertising cookies.

Journal backups contain your recorded profile, moments, notes, places, and sky records. Prints can show names, dates, places, and inscriptions you choose to include. Exports are not password-protected or encrypted by The Sky Then. Preview them before sharing, especially if they describe someone else or a child. Saving, printing, sharing, or restoring a file uses your browser or operating system and the destination you select; their privacy practices apply. We do not receive a copy. A selected restore file is processed locally. Temporary files used for native exports are cleaned up by the app; copies saved to another destination remain there until you remove them.

The journal has no app-specific password, biometric lock, or additional encryption layer. It relies on your device, browser, and operating system protections. Anyone with access to the same unlocked app or browser can open it. Protect your device and exported files. No storage or transmission system is completely secure. The Sky Then provides no automatic cloud sync or guaranteed recovery. Browser or operating system backups and file destinations depend on their own settings. Keep a separate private backup of records you want to preserve.

Local journal records remain until you delete them, clear the local journal, clear website data, or remove the app and its data. A deleted moment leaves a local deletion marker to prevent an older backup from restoring it. Clear local journal removes the local profile, moments, and these markers. Preferences may be stored separately; clearing the website or app data removes those too. Exported copies and system backups must be removed separately. We retain support correspondence and operational records only as long as reasonably necessary to respond, protect the service, resolve disputes, or meet legal obligations, then delete or de-identify them according to the applicable provider and record-retention process.

If you contact us, we process your email address, message, and any attachments to answer and resolve your request. Avoid sending private journal details unless needed. Hosting and email providers process limited information on our behalf to deliver those services. We may disclose information we actually hold when legally required, to protect rights or safety, or as part of a lawful business transfer with appropriate safeguards. We cannot disclose a journal that remains only on your device. We do not ask for location permission or collect a live GPS location.

You can use the app without a name, exact time, or place, edit your profile, delete moments, export a backup, and use Your Journal on This Device → Clear local journal. There is no server account to delete. Depending on your location, you may have rights to access, correct, erase, restrict, object to, or receive a copy of information we hold, and to withdraw consent without affecting earlier lawful processing. Email hello@secondframe.co to exercise those rights or raise a concern. We may request proportionate identity verification and will respond within the applicable legal period. We cannot remotely retrieve or erase your local journal. You may also complain to your local privacy regulator, including the Office of the Privacy Commissioner of Canada or your provincial authority, or your EEA/UK supervisory authority. We do not discriminate against people for exercising privacy rights.

The service is intended for people aged 13 and older, or any higher minimum age required where they live. If you are below the age of majority, involve a parent or guardian and obtain their permission to use the service where required. We do not knowingly collect personal information from children under 13 through our website or support channels. If you believe a child has sent us personal information, contact us so we can investigate and remove it where appropriate. A parent or guardian may keep family memories locally, but should have the right to record and share the details. Do not include sensitive details about another person without appropriate permission.

Local journal processing takes place on your device. Website and support providers may process information in Canada or other countries, whose privacy laws can differ from yours. Where applicable, we use legally required safeguards for international transfers. For information we actually process, the applicable legal grounds may include providing a service you request, legitimate interests in operating and securing the website and responding to enquiries, compliance with law, or consent where required. You may ask us about the providers and transfer safeguards relevant to your request. Local storage necessary for the journal is used to provide the feature you request.

The date above identifies the current policy. We will update it when our practices change and provide additional notice and obtain consent where required before introducing materially different collection or use. New cloud, advertising, or account features would require their own review and disclosures; they are not part of this MVP.