Privacy Policy

1. About this policy

Onwards is a private mobile service for couples, operated from India. This policy explains what information Onwards collects, why it is used, how it is shared with service providers, and the choices available to you. Contact us at devanshujain95@gmail.com.

2. Information we collect

Account and authentication information

• Email address and encrypted authentication credentials when you use email and password.
• Email verification, password-recovery, and account-security events.
• When you choose Google Sign-In: your stable Google account identifier, name, email address, and optional profile image.
• Session identifiers and security metadata needed to keep you signed in and protect your account.

Information you create

This includes your profile and onboarding choices, Personal or Shared Spaces, Dreams, Saves, Little Joys, notes, steps, milestones, Cheers, references, images, and private documents you choose to add.

Technical information

Our infrastructure providers may process routine technical information such as IP address, request time, device/browser information, security events, delivery status, and server access logs. The Onwards app does not include advertising analytics.

3. How we use information

• Create, authenticate, secure, and support your account.
• Provide Personal and Shared Spaces and synchronize the content you request.
• Send verification codes, recovery codes, and important account-security notices.
• Prevent abuse, investigate errors, and protect users and the service.
• Respond to support, privacy, and deletion requests.

Onwards does not sell personal information, show targeted advertising, or use Google user data for advertising. We do not request access to your Gmail, Google Drive, Calendar, contacts, or other Google services.

4. Google user data

Google data is used only to create, secure, and identify your Onwards account and to show your account identity inside the service. Onwards' use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.

Authentication is completed through Google and Supabase. Onwards keeps the Supabase session required for app access; Google provider access tokens are not retained in the app's persistent storage.

5. When information is shared

We share information only as needed with:

• Supabase, for authentication, Postgres database, private storage, realtime delivery, and related infrastructure.
• Resend, for transactional authentication and security email.
• Google, when you choose Google Sign-In.
• Vercel, for this public website and ordinary hosting access logs.
• Authorities or advisers when required by law or reasonably necessary to protect rights, safety, and security.

Content in a Shared Space is visible to that Space's active members. Personal Space content is not shared with other users. We do not publish your private content or make it visible across unrelated Spaces.

6. Storage, security, and international processing

Onwards uses access controls, encrypted network connections, private storage, and row-level authorization intended to limit information to the correct account and Space members. No system can guarantee absolute security, so please use a strong, unique password and protect your device.

Service providers may process information in countries outside yours. Where required, we rely on provider safeguards and applicable legal mechanisms for those transfers. The production app is online-only and does not maintain a persistent offline cache of server-authored content.

7. Retention and deletion

We keep account information and user-created content while your account is active and as reasonably needed to provide the service, resolve disputes, protect security, and meet legal obligations. Backup copies and security logs may remain for a limited period before deletion or de-identification.

To request account and data deletion, email devanshujain95@gmail.com from the address associated with your account. We may need to verify your identity before completing the request. Deletion may affect content shared with other Space members where retention is necessary to preserve their legitimate shared records or meet legal obligations.

8. Your choices and rights

Depending on where you live, you may have rights to access, correct, export, restrict, object to, or delete personal information, or withdraw consent where consent is the basis for processing. Contact us to make a request. You may also revoke Onwards' Google access from your Google Account.

9. Age requirement

Onwards is intended only for people aged 18 or older. We do not knowingly collect personal information from children. If you believe a child has provided information, contact us so we can investigate and delete it.

10. Changes and contact

We may update this policy as Onwards changes. We will revise the date above and provide additional notice when required. Questions or privacy requests can be sent to devanshujain95@gmail.com.