Us Privacy policy

Last updated: 29 October 2026

Us helps you and your partner organise dates, save wishes, record memories, exchange messages, and build a shared watchlist.

This policy explains what personal information Us processes, why it is processed, who receives it, and how you can exercise your privacy rights. It covers the Us app and its supporting services. Your use of the website hosting this policy may be covered by a separate website privacy notice.

1. Who is responsible for your information?

Lucas Steedman is the operator of Us and the controller responsible for the personal information described in this policy.

Contact: contact@steedman.lu
Address: 31 avenue Francisco Ferrer, 93310 Pré-Saint-Gervais, France

2. Information we process

Depending on the features you use, we process the following information.

Account and profile information

This includes your email address, account identifier, display name, profile photograph, optional birthday information, sign-in provider, and account preferences. Authentication is handled through Firebase Authentication, including when you choose Sign in with Apple or Google.

Content you provide

This includes wishes, dates, titles, descriptions, messages, memories, photographs, links, saved places and coordinates, watchlist entries, and responses to shared plans.

We also record information needed to organise this content, such as who created an item and when it was created or updated. Your partner may provide information about you through shared content or relationship settings.

Calendar information

If you enable calendar features, Us accesses the calendars you authorise to add app dates to your calendar and calculate availability.

When you enable availability sharing, Us uploads rounded, 30-minute busy time slots and information needed to interpret them. The availability-sharing feature does not upload your external calendar event titles, descriptions, attendees, or calendar names.

Dates you create directly in Us are stored as app content and may contain the details you enter.

Location information

Us processes places, addresses, and coordinates you save. With your permission, the app can use your device location to improve place searches. Location-related requests may be processed by the mapping providers described below.

Technical, usage, and diagnostic information

This includes account and app-instance identifiers, device and operating-system information, app version, language and region, screen views, feature interactions, errors, and performance information. Service providers may also process network information, such as IP addresses, when your device connects to their services.

Analytics may be associated with your account. PostHog receives your account identifier and, when available, your name and email address.

Support communications

If you contact us, we process your email address, message, and any information or attachments you choose to provide.

3. How we use information

We use information to:

Create and authenticate accounts.
Store your content and synchronise it across devices.
Connect you with your partner and provide shared features.
Deliver reminders, notifications, and account-related emails.
Provide calendar, mapping, search, and content-import features.
Understand feature usage and diagnose technical problems.
Protect accounts, prevent misuse, and maintain service security.
Respond to support and privacy requests.
Process account deletion and meet applicable legal obligations.

Account information is necessary to provide account-based features. Other information depends on the content you choose to add and the optional features you enable. Declining an optional permission may limit the corresponding feature.

4. AI-assisted scanning and importing

When you use an AI-assisted scan or import feature, the image, text, or link you submit is sent through our backend to Anthropic’s Claude API to extract information for a wish or date.

The request may also include your preferred language and context derived from recent saved places to help interpret an ambiguous location.

Inputs and generated results may also be recorded in PostHog for troubleshooting and monitoring the AI feature. These records can include the submitted image or text and the extracted information.

Use these features only with content you are comfortable submitting to these providers, and avoid including unrelated sensitive information. You can enter information manually instead.

5. Sharing with your partner

When you connect with a partner, content intended for your shared space becomes available to them according to the feature’s sharing settings. Some features allow information to remain hidden until a later step or reveal.

Your partner may retain screenshots, downloads, calendar copies, or other copies of information they have already received. Removing content or deleting your account cannot remove copies held outside our control.

6. Service providers

Us uses third-party services to operate its features:

Google Firebase and Google Cloud: account authentication, cloud data storage, backend processing, push messaging, analytics, and operational logging.
PostHog: product analytics, account-associated usage information, error reporting, diagnostic logs, and AI feature monitoring.
Anthropic: processing content submitted through AI-assisted scan and import features.
Resend: delivery of transactional account emails.
Apple: Sign in with Apple, Apple Push Notification service, and Apple mapping and calendar capabilities where used.
Google Sign-In: authentication when you select this option.
Mapbox: map display and related mapping services. Its SDK may process device, network, usage, and location telemetry depending on permissions and configuration.
The Movie Database (TMDB): movie and television searches, images, and regional availability information.

Providers receive information needed for the services they supply. Some also process information for their own purposes under their privacy policies.

If you open an external link, the destination service’s privacy policy applies to your interaction with it.

We may also disclose information when required by law, to respond to a valid legal request, or where necessary to protect people, investigate misuse, or establish or defend legal claims.

7. Legal bases

Where European data-protection law applies, we rely on:

Performance of our agreement with you to provide accounts, store and synchronise content, and operate the features you request.
Legitimate interests in securing the service, preventing misuse, and responding to support requests, subject to your rights and interests.
Consent, where required, for optional processing.
Legal obligations, where we must retain or disclose information under applicable law.

[Before publication, confirm the legal basis for Firebase Analytics, PostHog analytics, AI monitoring, and Mapbox telemetry, and describe the actual consent or objection controls available.]

8. International processing

Our providers may process information outside your country, including outside the European Economic Area.

[Insert the verified hosting regions and international transfer arrangements, including the applicable adequacy decisions or contractual safeguards. Explain how users can request information about those safeguards.]

9. How long information is retained

Account information and saved content are generally retained while your account remains active, unless you delete the information or request account deletion.

Other retention periods are:

Analytics and AI monitoring records: [Insert verified retention periods.]
Technical and security logs: [Insert verified retention periods.]
Support correspondence: [Insert retention period or specific retention criteria.]
Backups, if maintained: [Insert backup expiry period.]
Account-deletion records: [Insert retention period or criteria for completion receipts and records used to prevent deleted data from being restored.]

Information may be retained longer where necessary to meet a legal obligation or establish, exercise, or defend legal claims. Retention by external providers also depends on the service and its applicable settings and terms.

10. Deleting your account

You can start account deletion in Profile → Account → Delete account, or Profile → Privacy & data → Delete account.

You may be asked to confirm your identity before deletion proceeds.

Account deletion is designed to remove your account, profile, and content you authored, including content shared with your partner. Your partner keeps their own account and independently authored content, and the couple connection ends.

A deletion request may remain pending while processing is completed. A pending request does not mean deletion has finished.

Limited records may remain as explained in the retention section. Copies already held by another person, or exported to an external calendar or service, are outside our control.

You can also contact contact@steedman.lu for help with deletion or other privacy requests.

11. Your choices and rights

You can manage supported profile and content settings in the app. You can also change camera, location, calendar, and notification permissions through iOS Settings, and manage calendar availability sharing within Us.

Depending on the law that applies to you, you may have rights to access, correct, delete, restrict, or obtain a portable copy of your personal information, and to object to certain processing.

Where processing relies on consent, you may withdraw that consent. Withdrawal does not affect the lawfulness of processing carried out beforehand.

To exercise your rights, email contact@steedman.lu. We may need to verify your identity before responding.

You may also complain to the data-protection authority in your country of residence or work, or where you believe an infringement occurred.

12. Security

We use access controls, authentication, and other technical measures intended to protect personal information. No storage or transmission system can guarantee absolute security.

Keep your device and sign-in credentials secure, and contact us if you suspect unauthorised access.

13. Changes to this policy

We may update this policy when the app or its data practices change. The latest version will be published on this page with an updated revision date. Where required, we will provide additional notice or request consent.

14. Contact

For questions about this policy or your personal information:

Lucas Steedman
contact@steedman.lu