Privacy Policy

Effective: July 27, 2026

Ideally ("Ideally," "we," "us," or "our") is a visual organization service for saving, organizing, finding, and optionally sharing the things that inspire you. This policy explains what information we process, where it comes from, how we use and disclose it, how long we keep it, and the controls available to you.

Scope

This policy applies to the Ideally iOS app, share extension, website, backend service, social-messaging import features, and public share pages that link to this policy. It does not govern a third-party website or service that you open from Ideally.

Information we collect

• Account and profile data: A provider-specific identifier from Sign in with Apple or Google, the name and email address you authorize the provider to share, your Ideally username, profile image or avatar selection, account plan, and account settings. We do not receive your Apple or Google password.
• Age eligibility: You enter a date of birth on your device during setup. The app sends an age category (under 13, 13–17, or 18+) and, for a member under 18, the date AI features can become available. Ideally does not send or store your full date of birth on its server.
• Your library: Notes, shelves, boards, titles, body text, captions, links, source information, images, videos, extracted text, thumbnails, tags, actions, reminders, drawings, board placements, themes, and edits you choose to create or import.
• AI interactions: Enhance selections, chat messages and history, AI-assisted edits, search queries used for semantic search, generated responses, stored numerical embeddings, and usage records used to apply eligibility and usage limits.
• Friends and sharing: Friend requests and relationships, usernames and profile images shown to other users, invitations, access roles, shared notes, shelves and boards, collaborative edits, and share links you create or claim.
• Reports and safety: If you report an account, we store the reason, optional details, account identifiers, and a limited text snapshot of a note you optionally select from content shared between you. This preserves enough context to review the report even if access later ends or an account is deleted.
• Social-message imports: If you connect Instagram or Facebook, we receive and store the platform sender identifier, messages, captions, links, and attachments that you send directly to Ideally, plus delivery and processing status needed to create a note and prevent duplicate processing. We do not read conversations you do not send to Ideally.
• Notifications and reminders: Device push tokens, notification preferences, reminder times, and delivery-related status.
• Technical and security data: Request identifiers, timestamps, response status, performance measurements, rate-limit events, hashed account identifiers, and limited diagnostic information needed to secure and operate the service. Our production logging is designed not to include note bodies, captions, source URLs, media, access tokens, passwords, or email addresses.

How information reaches Ideally

We receive information when you provide it in the app, use the iOS share extension, upload from your device, sign in through Apple or Google, send content to the connected Ideally Instagram or Facebook account, interact with friends or share links, or communicate with support. We also create limited technical records when the service processes a request.

How we use information

• Provide, synchronize, search, organize, display, import, export, and restore your library.
• Create and secure your account, maintain sessions, prevent unauthorized access, and provide support.
• Deliver the AI features you request or activate, including Enhance, chat, semantic search, AI-assisted organization, and AI-assisted editing.
• Operate friends, invitations, shared libraries, shared boards, editable collaboration, and share-by-link features.
• Import content you send through Instagram or Facebook and reply with processing status when supported.
• Send reminders, account notices, invitation notices, and note-processing notifications according to your settings.
• Measure usage against plan and safety limits; diagnose failures; protect users, Ideally, and our providers; and comply with law.

AI processing

AI is not required to save ordinary, non-Enhanced content. When an AI feature is used, Ideally may send Google Gemini the information reasonably needed for that feature. Depending on the feature, that can include a note's text, caption, title, body, source metadata, link, image, video, extracted text, tags, shelf names, related library context, your chat message, or your search query. Semantic search may store numerical embeddings derived from eligible library text on Ideally's server. AI output can be wrong, and you should review it before relying on it.

Ideally displays an AI-processing disclosure during onboarding and after a person subscribes to Enhanced. Production uses a paid Gemini API service. Under Google's current paid-service terms, Google states that it does not use prompts, uploaded files, or responses to improve its products. Google may retain that information for a limited period for abuse detection, safety, security, and legal compliance; features that use Google Search or Maps grounding may have separate retention periods. Google's terms may change, and its processing remains governed by its applicable service terms and data-processing terms.

When information is disclosed

• People you choose: Friends, collaborators, and recipients of an enabled share link can receive the profile and content information needed for the access you grant. Editors may change shared content. A person with a share link may pass it to someone else, so disable the link when it should no longer work.
• Railway: Application hosting, PostgreSQL database hosting, networking, and object storage for saved media.
• Google: Google account authentication and paid Gemini API processing for eligible AI features.
• Apple: Apple account authentication and Apple Push Notification service delivery.
• Meta: Instagram and Facebook messaging, webhooks, and replies when you connect and use DM importing.
• Legal and safety disclosures: We may preserve or disclose information when reasonably necessary to comply with law, protect a person from harm, investigate abuse or security incidents, or protect the rights and integrity of Ideally and its users.
• Business transfer: If Ideally is involved in a merger, financing, acquisition, reorganization, or sale of assets, information may transfer as part of that transaction subject to this policy or notice of materially different practices.

We do not sell personal information, rent your library, or use your saved content for third-party advertising. We use service providers under agreements that limit processing to the contracted services and require appropriate protection consistent with their contractual and legal obligations.

Google user data

Ideally uses the Google identity token and basic profile information you authorize (such as name and email address) only to sign you in, create or locate your Ideally account, prevent unauthorized access, and display your account identity. Ideally does not request access to Google Drive, Gmail, contacts, calendars, or other Google product data. We do not use Google account data for advertising or sell it to third parties.

Retention and deletion

• Active account and library data is kept while your account exists or as needed to provide the service.
• Deleted notes and shelves remain in Recently Deleted for up to 30 days, then are removed from active storage with their unreferenced media.
• Pending friend and sharing invitations expire after seven days.
• Account and note reports, including an optional selected note text snapshot, may be retained for up to 24 months for abuse review, repeat-abuse detection, safety, and legal compliance.
• AI usage records used for limits are ordinarily kept for the current period and approximately two prior calendar months.
• Expired or revoked session records may be kept for up to 30 additional days for security and cleanup.
• Security and operational records are retained only as long as reasonably needed for security, debugging, abuse prevention, and legal compliance.

You can permanently delete your account in the app. Account deletion removes your account, active sessions, owned library, chats, boards, media ownership records, push tokens, social connections, friendships, and collaboration access from active production systems. Limited records may remain temporarily in restricted provider backups, security records, or records we must retain by law; they are not restored for ordinary product use and are deleted or de-identified according to the applicable retention cycle. Content that another person independently created, copied, or lawfully retained is not part of your account deletion.

Your choices and rights

• Export a copy of core account and library data from Settings.
• Edit or delete notes, shelves, reminders, chats, and board content.
• Disable share links, revoke a person's access, leave shared content, or remove a friendship.
• Disconnect Instagram or Facebook importing and change DM Enhance preferences in Settings.
• Disable push notifications in Ideally or iOS Settings.
• Delete your account from Settings without contacting support.

You may also contact us to ask about access, correction, deletion, restriction, or portability rights available where you live. We may need to verify your account before fulfilling a request.

Security

We use safeguards designed to protect personal information, including authenticated account access, role-based sharing controls, expiring invitations, signed media access, rate limits, encrypted network transport, secret scanning, and privacy-restricted operational logging. No internet service can guarantee absolute security.

Children's privacy

Ideally is a general-audience service intended for people age 13 and older. Users who identify themselves as under 13 may not create an account. We do not knowingly collect personal information from children under 13 without legally valid parental consent. AI availability is subject to a higher age threshold and provider requirements as communicated in the app. If you believe a child under 13 provided personal information, contact us so we can investigate and delete it.

International processing

Ideally and its providers may process information in the United States and other countries where they operate. Those countries may have different data-protection laws than your home country. Where required, providers use recognized contractual or legal safeguards for international transfers.

Changes to this policy

We may update this policy as Ideally evolves. We will change the effective date and provide additional in-app or account notice when a change materially affects your rights or how we use personal information.

Contact

Privacy questions or requests: ideallydev@gmail.com