Together is a private space for two people. We built it to be quiet, careful, and trustworthy — and that extends to how we handle your data. We collect only what we need, we don't sell it, and we don't track you beyond what's necessary for the app to work.
Tiny Owl Ltd ("we", "us", "our") is the data controller for this website and app. We are a company incorporated in England and Wales. Our registered office is at 48, RG30 2AN. Our contact email is info@tinyowlgames.com.
This policy applies to www.todaytogether.co.uk and any sub-domains. It does not apply to third-party sites we may link to.
We collect only what is necessary for the app to function:
We do not collect gender, phone numbers, payment information, or any sensitive personal data. We do not use tracking pixels or third-party advertising cookies.
Directly from you — when you sign up, set up your profile, invite a partner, create tasks, write notes, or react to a note.
Automatically — when you use the app, our servers log standard technical information (IP address, page visits, timestamps). This helps us keep the service secure and stable.
Under UK GDPR, we must have a lawful basis for processing your personal data. Here is how we use your data and why we're allowed to:
We do not use your data for advertising, profiling, or any purpose beyond what is listed here.
Your data is stored securely via Supabase, which uses industry-standard encryption at rest and in transit. Access to your account is controlled by your email and a magic link, or — if you choose to set one — a password. Passwords are stored as a salted bcrypt hash by Supabase Auth; we never see or store your password in plaintext.
Shared spaces are private by design. Neither we nor your partner can access the other's account without their credentials. Either person can leave a space at any time without notifying the other; when both members leave, the space and all its data are deleted.
If we ever detect or suspect unauthorised access to your data, we will notify you and the relevant authority (the ICO) within 72 hours, as required by UK GDPR.
We keep your data for as long as your account is active. When you delete your account, we permanently delete your profile, tasks, routines, sections, notes, reactions, and sign-in details from our live systems. You may request deletion at any time — see your account settings or email us.
Residual copies in encrypted backups are purged on a rolling schedule (typically within 30 days). Some data may be retained longer where required by law.
We do not transfer your personal data outside the United Kingdom or the European Economic Area. Our infrastructure is hosted within the UK/EEA.
Under UK GDPR you have the following rights. You can exercise most of them directly inside the app — or contact us at info@tinyowlgames.com.
Request a copy of the data we hold about you. Use the "Download my data" option in your account settings for an instant export.
Ask us to correct inaccurate data. You can update most profile details directly in the app.
Ask us to delete your data. Use "Delete account" in settings to remove everything immediately and permanently.
Ask us to limit how we use your data while a complaint is being resolved.
Receive your data in a machine-readable format. Use "Download my data" in settings for a full JSON export.
Object to processing based on our legitimate interests. Contact us and we will assess your request.
If you are unhappy with how we handle your data or a rights request, you may complain to the Information Commissioner's Office (ICO) at ico.org.uk, or call 0303 123 1113.
We may update this policy from time to time. If we make material changes, we will let you know via the app or email before they take effect. The effective date at the top of this page will always reflect the most recent version.
This policy was created using a template from Rocket Lawyer.
Questions about your privacy? We're a small team and we read every email.
Contact us