Summer Privacy Policy
Summer keeps what you send your partner on its server so it can reach their phone and widget. There are no ads and no tracking across apps, and your data is never sold. Ending a connection deletes what the two of you shared; deleting your account deletes your account as well.
Who is responsible
Summer is made by Won Jo (trilliwon), who decides how this data is used and is responsible for it. For questions or requests, email trilliwon@gmail.com.
What our server keeps
- Your account. A random account ID, the name you enter, your device’s language and time zone (used for the language and dates of your notifications), your settings (read receipts and streaks), and your birthday and birth year if you add them. Summer asks for no email, phone number or password: the app signs in with a random key kept in your phone’s keychain, and the server stores only a hash of that key.
- Your connection. Who you’re connected with, the date you started, whether that date counts as Day 1, and when you connected. An invite you create holds that date until it’s used or expires after 24 hours.
- What you send. Reactions, notes, messages, photos and links, with when each was sent, delivered and seen. Photos are kept at up to 1600 pixels, with a smaller copy for widgets; the app removes location and other metadata from a photo before uploading it. “Seen” is recorded only while you have read receipts on.
- Link cards. When you share a link, the server reads the page to make a card (title, site, author and a picture) and keeps a copy of the picture. If it finds no picture, the sender’s phone may upload one it found.
- Profile photos that you or your partner set.
- Dates. The anniversaries the two of you add (title, date, repeat, how it’s shown, and who added or changed it and when), and your own reminder settings for them.
- Notification tokens. The push tokens Apple issues to your phone and widget.
- Abuse limits. A record of recent profile photo changes, deleted after a day.
What stays on your phone
So the app and its widgets work without waiting for the network, your phone keeps copies of recent moments, photos and link pictures, and your list of dates. Date reminders are scheduled on your phone; our server sends none. The dates you added stay on your phone after a connection ends. Deleting your account removes these copies from the phone too.
How we use it
Only to run Summer: to deliver what you send to your partner, show it in the app and widgets, send notifications, keep your shared dates in sync, limit abuse, and find and fix problems. We don’t use what you send for advertising or profiling, and we don’t use it to train AI models.
Analytics
The app uses Amplitude to see how Summer is used. It records when you start and stop using the app (sessions), and when three screens are opened: Settings, Anniversaries, and the one for choosing the date shown on Home. With these events Amplitude receives an identifier for your device (Apple’s identifier for vendor), the device model, the iOS and app versions, language, mobile carrier, and your IP address, from which it estimates your country and city. It doesn’t receive your name, your account ID, who you’re connected with, or anything you send.
Who else handles data
- Cloudflare hosts Summer’s server. The database and photos are stored with Cloudflare (D1 and R2) in its Asia-Pacific region, and Cloudflare handles every request to summer.trilliwon.com. Request logs (the time, the address requested, the result, and your IP address with the approximate location and network derived from it) are kept for 7 days.
- Apple delivers notifications through the Apple Push Notification service. It receives your push tokens and the text of each notification, such as the sender’s name, a reaction and its note, the beginning of a message, a link’s title and comment, or a new date’s title.
- Amplitude receives the analytics described above.
- Our link resolver (link.trilliwon.com), which we also run on Cloudflare, receives the address of an Instagram post shared in Summer and nothing else. Its request logs are kept for 7 days.
We don’t sell, rent or give your data to anyone else. We would disclose it only where the law requires us to.
When you share a link
A link card means contacting the site the link points to:
- The server reads the page, or the embed service of TikTok, YouTube, Vimeo or X, from Cloudflare’s network. The site sees Cloudflare, not you.
- When you share an Instagram post from the share sheet, your phone asks Instagram for the post’s public page and data, without signing in, and asks our resolver if that fails. Instagram sees your phone’s IP address.
- If a card still has no picture, the sender’s phone, and the partner’s phone when the card is on screen, may open the page to find one, the way Messages does. That site sees the IP address of the phone that opens it.
What Summer doesn’t do
No ads and no advertising SDKs, and Amplitude is the only analytics service. Summer has no in-app purchases, so it handles no payment information. No tracking across other companies’ apps or websites, and no advertising identifier. Your data is never sold. Summer doesn’t read your contacts or your location. It uses the camera only when you take a photo, sees only the photos you pick, and saves a photo to your library only when you ask it to.
How long we keep it
- What the two of you share stays on the server while you’re connected. A single message or photo can’t be deleted yet.
- A date either of you deletes is kept as a deletion marker, with its title and date, until the connection ends, so both phones remove it.
- Ending the connection (Settings › End connection) immediately deletes, for both of you, every moment, photo, link card and link picture, the shared dates, both people’s reminder settings, and the profile photos each of you set for the other. Your account, name, birthday and the profile photo you set yourself stay.
- Deleting your account (Settings › Delete account and data) ends the connection as above and immediately deletes your account and everything tied to it: what you sent, the photos you uploaded, your push tokens, your invite, your reminder settings, your profile photo and any you set for your partner. Deleting the app alone doesn’t delete your account.
- Expired invites are deleted by the next daily cleanup, and photos uploaded but never sent within two days.
- Accounts aren’t deleted for inactivity. Delete yours in the app when you no longer need it.
- Cloudflare keeps a 30-day restore history of the database, so deleted data remains there for up to 30 days, used only to recover from a failure. Before a database upgrade we may also keep an export of the database on the developer’s computer, for no more than 30 days.
- Amplitude keeps its events while Summer’s Amplitude project exists. They aren’t linked to your account, so deleting it doesn’t remove them; email us and we’ll delete the events for your device.
Your choices and rights
- Turn read receipts off in Settings, and the server stops recording when you’ve seen your partner’s moments.
- Turn notifications off in the iOS Settings app.
- Change or remove your name, birthday and profile photo in the app at any time.
- End the connection or delete your account in Settings.
- Email trilliwon@gmail.com to get a copy of your data, to have it corrected or deleted, or to object to how it’s used. Depending on where you live, for example in Korea or the EU, you can also complain to a data protection authority.
Your partner sees what you send: photos they saved and notifications they already received stay on their phone after the connection ends.
Security
All traffic to Summer’s server is encrypted (HTTPS). The server stores only a hash of your sign-in key. Photos, profile photos and link pictures are served only to the two people in a connection; anyone else, an ex-partner included, is refused. Access to the database and storage is limited to the developer’s Cloudflare account.
Where data is processed
Summer’s data is stored with Cloudflare in its Asia-Pacific region. Cloudflare, Inc., Apple Inc. and Amplitude, Inc. are US companies and may process the data described above in the United States and in other countries where they operate, whenever you use the app.
Children
Summer isn’t meant for children under 14, and we don’t knowingly collect their data. If you think a child has used Summer, email us and we’ll delete the account.
This website
The pages on summer.trilliwon.com set no cookies and contain no trackers.
Changes
If this policy changes, we’ll update this page and its effective date.
Contact
Won Jo (trilliwon), privacy contact: trilliwon@gmail.com