Privacy Policy
Effective October 6, 2026
The short version
- You sign in with Apple, Google or an email link. We keep your email address, your birthday, your name if you give one, your profile photo if you add one, the people you pick and your records on our servers, so your account works on any device.
- Your profile photo is shown only to you. It is deleted with your account.
- No ads, no data sales, no advertising trackers. We count a few in-app actions as anonymous tallies with no account attached.
- Purchases go through Apple. We never see your card. A service called RevenueCat tells us whether your purchase is active.
- You can download your data and delete your account in Settings. Questions: [email protected].
1. Who we are
At My Age is operated by Ailen (애일런), a business based in Seoul, Republic of Korea. This policy covers the At My Age app and the website at atmyage.app, which introduces the app, shows these pages and passes sign-in and invite links on to the app. When we say “we”, we mean Ailen. When we say “the app”, we mean the app and the website together.
2. Signing in
The app needs an account. There are no passwords. You can sign in three ways:
- Apple. Apple gives the app a signed token. Our server checks it and reads one thing from it: your email address. If you choose Apple’s “Hide My Email”, that is the private relay address Apple creates for you. Apple’s sign-in sheet may also offer to share your name; we do not read or store it.
- Google, where the app offers it. Google gives the app a signed token, which our server sends to Google to verify. We read your email address from it and nothing else.
- Email link. You type your email address and we send a link that works once and expires after 15 minutes. Tapping it opens atmyage.app, which hands the link to the app.
Each email address has one account, whichever way you sign in. After sign-in the app holds a session key on your device. With “Keep me signed in” on, it stays until you sign out or until it has gone unused for 90 days.
3. What we keep on our servers
This is saved to your account so that it is there when you sign in on any device:
| What | Why |
|---|---|
| Your email address, and which sign-in methods you have used (Apple, Google, email) | To recognise your account and to send sign-in links |
| Your birthday | To line your age up with theirs |
| Your name, if you add one | Shown in the app and on your cards |
| Your profile photo, if you add one: a small copy (256 pixels across) that the app makes on your phone. The original picture is not uploaded | Shown to you in the app on every device, and drawn onto your cards |
| The people you picked, including people set aside after Unlimited ended | Your timeline |
| Your records and plans: the date, the text you wrote, whether it is a plan, and when it was created and last changed | Your timeline, on every device |
| Your plan: Free or Unlimited, which product, its status, when it started and when it ends | To switch Unlimited on and off |
| Your invite code, whether you used a friend’s code and whose it was, how many reward months you have earned, and any gifted Unlimited time | To give invite rewards |
| When a shared card last opened an extra person for you | The seven-day unlock |
| When your account was created and last changed | Invite codes work only in an account’s first 14 days; keeping devices in step |
| Reports and requests you send us (section 9) | To fix the data and add people |
Each account also has a random internal ID. We do not use what you save for advertising or profiling, and we do not sell or share it.
4. What stays on your device
- The picture you choose for your profile photo. The app shrinks it on your phone and uploads only the small copy (section 3); the original never leaves your photo library.
- A copy of your account data (birthday, name, profile photo, people, records), so the app opens quickly and can be read offline. Offline you can read; changes need a connection and are kept only after our server confirms them.
- A copy of a record you just deleted, for up to 30 days, so that “Undo” can bring it back.
- Your session key, your display choices (which columns are hidden, timeline view), and an invite code from a link you opened before signing in.
Signing out or deleting your account clears your birthday, name, people, records and photo from the device.
5. Usage counts and logs
Anonymous tallies. The app counts a few actions so we can see what is used: app opened, person added, birthday set, record saved, card saved or shared, invite link copied or shared, and purchase started. Each count is sent to our own server and stored in Cloudflare’s Analytics Engine. A count can carry the public figure’s ID (for “person added”), an age range such as 25–34 (never your age or birthday), the plan you tapped, and whether you arrived through an invite link. It carries no account ID, no email, no device ID and no cookie, our code does not read or store your IP address for it, and it never includes what you wrote. We cannot tie a count to you.
Invite link openings. When the app opens an invite link before you have signed in, we add one to that code’s counter. To count each opening once, we keep a one-way scramble (hash) of your IP address combined with the code for 24 hours, then it is erased. We do not keep the IP address itself.
Server logs. Our servers run on Cloudflare. Like any host, Cloudflare processes your IP address and basic request details in order to deliver the app and the website and to keep them secure. Our own operational logs record errors and purchase status changes, which can include an account’s internal ID. Cloudflare keeps these logs for no more than seven days.
The website. The pages at atmyage.app contain no analytics or advertising scripts, and no visitor analytics is switched on at our host.
We use no advertising tools and no third-party analytics kits in the app. If that ever changes, we will name the tool here before it goes live.
6. Purchases
Unlimited is bought through Apple’s App Store with your Apple Account. Apple handles the payment under its own terms and privacy policy. We never receive your card details, your billing address or your Apple Account name.
To know whether a purchase is active we use RevenueCat, a service that talks to the App Store for us. The app tells RevenueCat your account’s random internal ID (not your email, name or birthday), and RevenueCat receives the purchase information from Apple: which product, when it was bought, when it renews or ends, and whether it was cancelled or refunded. Our server asks RevenueCat for that status and saves the result to your account (section 3). RevenueCat’s software inside the app also receives some technical details on its own, such as your IP address, country, device model and operating system version, under RevenueCat’s privacy policy.
Subscriptions are managed and cancelled in your Apple settings, and refunds are requested from Apple. See the Terms of Service.
7. Other companies involved
| Who | Why | What they receive |
|---|---|---|
| Cloudflare | Runs our servers, database and the website; stores the anonymous tallies | Everything in sections 3 and 5, on our behalf; your IP address and request details as the host |
| Resend | Sends the sign-in email, and forwards your reports and requests to our support inbox | Your email address and the content of that email |
| Apple | Sign in with Apple; App Store purchases | Apple already knows who you are; we send Apple nothing about what you do in the app |
| Sign in with Google, where offered | The sign-in token Google itself issued, sent back to Google to be verified | |
| RevenueCat | Confirms App Store purchases (section 6) | Your account’s random internal ID and your purchase information |
| Wikimedia Commons | The portraits shown for some people load from Wikimedia’s servers | Your IP address. We send no referrer, so Wikimedia does not learn what you were viewing |
| Source links | Every entry links to its source (for example Wikipedia) | Only if you tap the link; the site you open has its own policy |
| Google Fonts | Loads the typeface on the website pages at atmyage.app. The app itself carries its font inside and does not contact Google for it | Your IP address and browser details, under Google’s privacy policy |
These companies act for us or at your request. We do not sell your personal information or share it for advertising. Our database is hosted by Cloudflare in its Asia-Pacific region, and Cloudflare’s network handles requests from locations around the world.
8. Cards and invite links
Cards are images made on your device. Sharing or saving one is your choice. A card shows the ages and years, the other person’s name and entry, your name if you have added one (otherwise “You”), your record, your photo if you have added one, and the At My Age name (on the free plan, also the address atmyage.app). When you share through your phone’s share sheet, the app adds your invite link to the message, and the app you choose (Messages, Instagram and so on) handles it under its own policy.
Your invite link contains only your invite code, six random letters and numbers. It does not contain your name, email or birthday. When a friend uses your code, each of you gets the reward; neither of you is shown the other’s email address or name; the app shows you only how many reward months you have earned.
9. Reports, requests and email
When you send “Report incorrect info” or “Request a person”, we save what you wrote together with your account ID, and a copy is emailed to our support inbox with your account’s email address so that we can reply. Please do not put sensitive information in these messages.
The only email the app sends you is the sign-in link you ask for. We do not send marketing email. The app sends no notifications today; if we add them, we will ask first and update this policy.
10. How long we keep it
- Your account and everything in section 3: until you delete your account. We do not delete inactive accounts automatically.
- Records you delete: they disappear from the app at once. On our servers the record is first only marked as deleted, so that an older copy on another of your devices cannot bring it back. 30 days after you delete it, the record is removed from our servers for good, text included (a clean-up runs once a day, so it can take up to a day longer), or sooner if you delete your account. After that we keep only the time up to which your deleted records were cleared, not the records.
- Sign-in links: usable once, for 15 minutes; records of expired links are cleaned out periodically. We store only a one-way hash of the link, never the link itself.
- Sessions: ended when you sign out, or after 90 days without use.
- Short-lived counters that stop abuse (how many sign-in links an email address asked for, how many reports an account sent): one hour.
- Anonymous tallies: they are not personal data and are kept for about three months.
- Purchase records: the customer record RevenueCat holds for your account is kept until you delete your account, when we ask RevenueCat to delete it (section 11). Purchase and transaction records held by Apple are kept under Apple’s own policy; we cannot delete them. Apple is the seller, so we never receive your payment details or individual transaction records. The financial reports Apple sends us are totals that do not identify you, and we keep them for as long as accounting and tax law requires (in Korea, five years).
11. Downloading and deleting your data
Download. Settings → Download my data saves a file with your email address, birthday, name, the people on your timeline, all your records and your profile photo if you have one. The file is made on your device; you choose where it goes.
Delete. Settings → Delete account removes, immediately and permanently, from our servers: your account (email, birthday, name, profile photo, people, plan and invite information), all your records including ones you had deleted earlier, your reports and requests, your sessions and any unused sign-in links. The copy on your device is cleared too. At the same time we ask RevenueCat to delete the customer record it holds under your account’s internal ID. If RevenueCat cannot be reached at that moment, your account is still deleted and we complete the RevenueCat deletion by hand. We cannot undo any of this.
What deleting your account does not do:
- It does not cancel a subscription. Cancel in your Apple settings first.
- It does not erase the purchase and transaction records Apple holds for your Apple Account; those are Apple’s, and we cannot delete them. Records we are required by law to keep are retained for the legally required period (section 10).
- It does not recall report or request emails that already reached our support inbox. Email us and we will delete them.
- The anonymous tallies stay, because they were never linked to you.
- Friends who joined with your code keep their reward. Their accounts keep your old internal ID as “invited by”, which no longer points to anyone.
If you cannot get into the app, email us from the address on your account and we will delete it for you.
12. Children
At My Age is for people aged 13 and over. It is not directed at children under 13 and we do not knowingly collect personal information from them. If you believe a child under 13 has created an account, email us and we will delete it. For a purchase made by a child, request a refund from Apple; we will help with whatever Apple asks of us.
13. Your rights and choices
In the app
You can see and change your birthday and name, replace or remove your profile photo, add and remove people, edit and delete records, download everything (section 11) and delete your account, all without asking us. Your email address cannot be changed in the app; email us if you need that.
California residents
Under the CCPA/CPRA you have the right to know what personal information we collect, to have it deleted or corrected, to opt out of its sale or sharing, and not to be discriminated against for exercising these rights. We do not sell or share personal information and we do not use it for targeted advertising, so there is nothing to opt out of. To make a request, use the app’s own controls or email us from the address on your account, which is how we verify it.
Residents of the EEA, the United Kingdom and Switzerland
Our legal bases are: performing our contract with you (your account, saving and syncing your data, purchases, invite rewards), and our legitimate interests in keeping the service secure, preventing abuse and understanding in aggregate how the app is used (logs, counters and anonymous tallies). You have the rights of access, rectification, erasure, restriction, portability and objection, and the right to complain to your data protection authority. Ailen is in Korea and our providers operate in the United States and other countries, so your data is processed outside the country where you live. The app is currently offered outside the European Union and the United Kingdom; before we offer it there, we will put the required transfer safeguards and representative in place and update this section.
Residents of Korea
You have the rights provided by the Personal Information Protection Act, including access, correction, deletion and suspension of processing. Use the contact below.
For any request we answer within 30 days.
14. Security
The app talks to our servers over HTTPS only. There are no passwords to leak. Session keys and sign-in links are stored on our servers only as one-way hashes, and sign-in links work once and expire in 15 minutes. Tokens from Apple and Google are verified on our server before an account is opened. Payments happen inside Apple’s systems. Our database is on access-controlled infrastructure. No system is perfectly secure.
15. Changes to this policy
When we change this policy we will post the new version here with a new effective date. If a change matters to you, for example a new kind of data, notifications or a new provider, we will also say so inside the app before it takes effect.
16. Contact
Ailen (애일런)
12 Teheran-ro 70-gil, #402-M355, Gangnam-gu, Seoul 06193, Republic of Korea
[email protected]