Most privacy pages say they care. This one says where your diary is kept, every company that touches it, and how to tell us about a flaw.
Your diary and your account are stored by Supabase in London, United Kingdom (Amazon’s eu-west-2 region), encrypted at rest and in transit. The app and this website are served by Cloudflare. Photos you choose to sync are kept by Cloudflare, encrypted.
We are based in Cape Town, South Africa. The policy explains the contracts that cover your data travelling between the two.
The full list, kept in step with the policy.
| Company | What it does |
|---|---|
| Supabase | Stores your diary and your account, and handles sign-in. In London. |
| Cloudflare | Serves the app and this website, keeps the photos you choose to sync, encrypted, and counts site visits without cookies. |
| Anthropic | Runs Talk and the other AI features, only when you use them, and helps sort and translate the messages you send us. |
| Resend | Sends the emails you asked for. |
| Apple | Sign in with Apple and reminders on iPhone. Apple Health is read on your phone, and nothing from it is sent to Apple. |
| Sign in with Google, Google Calendar if you connect it, and reminders on Android. Health Connect is read on your phone, and nothing from it is sent to Google. | |
| Frankfurter · Photon · MET Norway · Transport for London | Currency rates, places, weather and commute times, asked for by our server rather than your phone, and told nothing about you. |
Report a security problem through timepeaceapp.com/report and choose Security. Please give us the chance to fix it before you tell anyone else.
Our security.txt points to the same place, so a researcher’s tools find it too.
Report a problem →Short, versioned and kept: every change gets a new version number, and every earlier version is archived and yours on request.