Privacy policy

From your account:

• Email (required for authentication)
• First name, last name, date of birth, sex (optional — you provide them in onboarding)
• Privacy configuration and UI preferences

From your use:

• Content you upload: photos, videos, audio, documents, letters, journals, events, family tree
• Conversation history with the Eco agent
• Minimal technical metrics (IP, user agent, errors) to detect abuse and improve the service

We do not collect biometric information, specific health data, or continuous GPS location. If a memory has location, it's because you added it manually or used "place-locked" — in which case we ask for your location once, when unlocking.

To provide you the service: authenticate you, show your vault, run the Eco agent over your corpus, send you transactional emails (invitations, magic links, letter deliveries), and apply legacy configuration if applicable.

To improve the service: detect aggregate errors (without accessing content), understand which features are used most, prevent abuse.

We do not use your data for advertising. We do not sell or transfer data to third parties. We do not train AI models with your content.

Only with technical providers necessary to operate:

• AWS — AWS (United States): hosting, database, storage (S3), email (SES). Encryption in transit (TLS 1.2+) and at rest (KMS).
• Anthropic — Anthropic (United States): runs the Eco agent. Processes your vault corpus in real time and respects an ephemeral cache of ~5 minutes per session. Not persisted beyond that. Not used to train models per their enterprise terms.
• Neon — Neon (United States): Postgres database engine.

We may also share information if required by a valid court order or to comply with applicable law. In that case, unless legally prohibited, we notify you first.

TimeVault is a global service. Your data is stored primarily in the United States (AWS data centers region us-east-1 and us-east-2). By using the service, you accept that international transfer. The providers listed above have their own protection frameworks that meet international standards (SOC 2, ISO 27001).

We keep your data while your account is active. If you voluntarily close it, we delete everything within 30 days (except minimal records required by law). You can download a complete copy beforehand from Settings.

Accounts inactive for more than 24 months may be closed with prior notice (see Terms section 6).

You have the right to:

• Access: see all your information from the dashboard.
• Export: download a ZIP with all your content (Settings → Export my vault).
• Rectify: edit name, date of birth, sex and other data at any time.
• Delete: close your account from Settings; your content is deleted in 30 days.
• Object: if you don't want Eco to access certain types of content (journal, sealed letters, etc.), you configure the toggles from Settings → Eco.

To exercise any of these rights, write to us at dgarcia@n-tec.com.uy or use the in-app controls.

We use strictly functional cookies (session, UI preferences). We do not use third-party advertising tracking cookies or analytics. You don't need to accept a banner — using the service implies acceptance of essential cookies.

TimeVault is available for people from 16 years of age. If we discover that an account belongs to a minor under 16, we close it without penalty and delete the data.

If a breach occurs that may affect your information, we notify you by email within 72 hours of having confirmed it, along with details of the scope and steps to follow.

If we materially change this policy, we notify you by email at least 30 days before it takes effect. For any question about your data, write to us at dgarcia@n-tec.com.uy.