Privacy Policy

1. Who we are

BackBack (the iOS app and the website getbackback.com) is provided by Uluwatu OÜ, a private limited company registered in Estonia (registry code 17522607), Männimäe/1, Pudisoo küla, Kuusalu vald, 74626 Harju maakond, Estonia. We are the controller of the personal data described in this policy.

Questions or requests about your privacy: info@uluwatu.ai.

2. How BackBack protects your writing

BackBack is built so that your words never reach us:

1. When you let a writing session go, the app encrypts it on your iPhone with a new random key (AES-256-GCM).
2. That key is split into two halves. Either half alone is useless. One half is protected by a key that only lives in your iCloud Keychain and is stored, together with the encrypted text, in your private iCloud database. The other half is sent to our server, which keeps it encrypted.
3. On the unlock date you chose (6 months or 1 year), our server releases its half. Your iPhone joins both halves and decrypts your writing. Decryption only ever happens on your device.

We never receive the text you write, a draft of it, or the full key. We cannot read your capsules, and we cannot open them for anyone, including law enforcement, because we do not have what is needed to do so.

3. What we never collect

• The content of anything you write, whether sealed, opened or in progress.
• Your name or email address. We don’t ask Apple for them.
• Contacts, photos, location, health or fitness data, or your device’s advertising identifier.
• Biometric data. Face ID for App Lock is handled entirely by iOS; we only learn whether it succeeded.
• Behavioural analytics, crash-report content, or any data for advertising or for training AI models.

4. What we process, why, and on what legal basis

Your account

When you sign in with Apple, Apple gives us an identifier that is unique to BackBack and doesn’t reveal who you are. We store it with an internal account ID and the date the account was created, so that your capsules belong to you and only you. Legal basis: performance of our contract with you.

We also store a Sign in with Apple token, encrypted, so that we can revoke BackBack’s access to your Apple sign-in when you delete your account. Legal basis: performance of our contract and our legitimate interest in honouring your deletion request completely.

To keep you signed in, the app holds a session token. We store only a one-way hash of it, and it expires after 30 days. During sign-in we briefly store a one-way hash of a single-use value to stop the same sign-in from being replayed; it is deleted when it expires.

Your capsules

For each capsule we store its random ID, when it was sealed, the unlock period you chose and the resulting unlock date, whether it has been opened and when, and our half of its key, encrypted. This is what lets our server refuse to release the key before the date and release it after. None of it reveals what you wrote. Legal basis: performance of our contract with you.

Technical logs

Like every web service, our servers log requests: IP address, date and time, the requested address, the response status and the browser or app version. The app’s server additionally records the type and result of each request and, when an account is deleted, the internal account ID. Request contents, tokens and keys are never logged. We use these logs only to keep the service running and to detect abuse. Legal basis: our legitimate interest in operating a secure service.

Subscriptions

Subscriptions are sold and billed by Apple through the App Store. We never receive your payment details. To know whether your subscription is active, we receive from Apple only the information needed for that, such as the product, a transaction identifier and the renewal or expiry date. Legal basis: performance of our contract with you.

5. What stays on your devices and in your iCloud

Some data is kept by the app on your devices or in your own iCloud account. We have no access to it:

• Encrypted capsules in your private iCloud database (CloudKit). Apple stores them under your Apple Account and the Apple Privacy Policy.
• Your capsule key in your iCloud Keychain, which Apple end-to-end encrypts.
• Your settings (writing goal, unlock period, appearance, sounds and haptics) on your iPhone.
• Morning reminders, which are scheduled on your iPhone as local notifications. We don’t send push notifications.

6. This website

getbackback.com sets no cookies and uses no analytics, advertising or third-party embeds. Its fonts and images are served from our own server. The only personal data involved is the technical logs described above.

7. Who we share data with

We don’t sell or rent personal data, and we don’t share it for advertising. We use:

• Hetzner Online GmbH (Germany), which hosts our servers and databases in data centres in Germany, as our data processor.
• Apple, for Sign in with Apple, iCloud and the App Store, acting under its own terms and privacy policy.

If we start using another service provider that processes personal data, for example a managed key service to protect the server’s key halves, we will list it here. We may disclose data if we are legally required to, but the data we hold cannot reveal what you wrote.

8. Where your data is processed

Our servers are in the European Union (Germany). Data handled by Apple, such as your iCloud data, may be processed by Apple in other countries under the safeguards described in Apple’s privacy policy.

9. How long we keep it

• Account and capsule records: until you delete the capsule or your account. Opened capsules are kept until you delete them, so you can read them again.
• Session tokens: up to 30 days, or until you sign out.
• Sign-in replay protection values: until they expire, normally within minutes.
• Web server logs: deleted automatically after 14 days.
• Application logs: size-limited and overwritten automatically as new entries arrive.

Backups of our database, if any, are overwritten on a rolling basis and are never used to restore deleted data.

10. Security, and what we can and can’t promise

All traffic to our servers is encrypted (HTTPS). Our half of each key is stored encrypted, and access to our systems is restricted.

We want to be clear about what this design means. The unlock date is enforced by our server: someone with privileged access to our systems could technically release a key half early. Even then, they could not read your writing without also having your iCloud data and your iCloud Keychain. And because no one else holds a copy of your key, if you lose access to your iCloud Keychain (for example by setting up a new iPhone without iCloud Keychain), your capsules cannot be recovered, by you or by us.

11. Deleting your data

• Delete a capsule: in the app, press and hold a capsule in My Capsules and choose Delete permanently. We destroy our half of its key and the encrypted record is removed from your iCloud. It can never be opened again, even after its date.
• Delete your account: in the app, go to Menu → Settings → Delete account. We revoke BackBack’s access to your Sign in with Apple and permanently delete your account and every capsule record we hold.
• Deleting the app from your iPhone doesn’t delete your capsules. You can also stop using Sign in with Apple for BackBack in your iPhone’s Settings, under your name → Sign-In & Security → Sign in with Apple.

12. Your rights

Depending on where you live, including under the EU and UK GDPR, you have the right to access the personal data we hold about you, to correct it, to have it deleted, to restrict or object to its processing, and to receive it in a portable format. Because we cannot decrypt your writing, a copy of your data from us can only contain the records described in section 4.

To exercise a right, use the in-app options above or email us at info@uluwatu.ai. We will answer within one month. You can also complain to a data protection authority, such as the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) or the authority where you live.

13. Children

BackBack is not intended for children under 13. If you are under the age at which you can consent to data processing in your country, please use BackBack only with a parent’s or guardian’s permission. If you believe a child has given us personal data, contact us and we will delete it.

14. Changes to this policy

If we change this policy, we will update the date at the top. If a change materially affects how your data is handled, we will tell you in the app before it takes effect.

15. Contact