Your moments, with you.A clear view of privacy.

Who runs Soon & Then

Soon & Then is independently developed in Spain. The publisher is Robert William Arthur Clarke, acting personally.

For privacy questions, email support@soonandthen.com.

What stays on your phone

Your events, settings and imported photographs are stored locally on your Android device. The app works offline and does not provide an account or cloud-sync service. When you choose a photograph, the app imports a copy; it does not require access to your whole photo library.

Reminders, widgets and sharing

Reminders use Android notifications, subject to your permissions and phone settings. Widgets can display event names, photos and counts on your home screen, where other people may see them.

Sharing is optional. When you save or share an image, Android sends it to the destination you choose. Messaging apps, cloud drives and document providers may store or transmit it under their own privacy practices.

Your backups and copies

ZIP backups contain event data and photographs. They are not password-protected or encrypted by the app. Choose a safe storage location and protect copies you keep. Restoring a ZIP replaces the app’s current events.

You can delete events in the app. Clearing app storage or uninstalling removes its local data. Exported backups and shared images remain in their chosen destinations until you remove them separately.

Visiting this website

Vercel hosts the site and processes normal request information, including IP addresses, requested pages, browser or device information and timing, to deliver and protect it. We do not add advertising or a separate visitor log. Fonts and images are served from this site.

Protected previews use Vercel authentication, which may use account information and necessary cookies. Vercel explains its hosting and international data handling in its privacy notice and data processing terms.

Contacting support

When you contact support@soonandthen.com, we use your email address, message and any attachments to respond to your enquiry. Messages are forwarded to a private support mailbox. Our policy is to keep support correspondence for no longer than 12 months after the last exchange about the enquiry, unless an unresolved matter, legal obligation or the establishment, exercise or defence of legal claims requires longer retention. We will manually review and delete eligible correspondence, including copies under our control in forwarded and sent mail; no automatic deletion is currently configured.

Android beta interest

If you choose to register beta interest, we collect your email address, optional first name and the version of your consent and the time you requested signup through our Vercel endpoint and Brevo. We are the controller of the beta list; Brevo processes it for us. The legal basis is your consent, which you confirm using Brevo’s verification email. We use the list only for Android beta opportunities and the confirmation and welcome messages needed for that signup.

Email is required and first name optional. Consent is required and unchecked by default. Joining does not guarantee access or a testing place, and beta consent does not subscribe you to other projects or a general newsletter.

Our website endpoint will validate consent and check Cloudflare Turnstile before asking Brevo to send a double opt-in email. Brevo will hold the contact attributes and confirmation details that have been verified in our account, deliver beta emails and manage unsubscribes. Vercel’s rate limiting will help limit repeated requests using technical request data and a keyed digest of the email address. Those services may process technical request information; we do not promise that the whole website is cookie-free. Brevo’s privacy policy and terms and data processing agreement, and Cloudflare’s privacy policy explain their roles.

How long beta-interest data is kept

If you do not confirm the verification email, we will check for and remove any pending contact data accessible to us within 30 days of your request. This requires manual review, not an automatic deletion timer. Provider delivery and security logs may have separate retention periods.

For confirmed Android beta-interest contacts, we will retain the email address, optional first name and consent evidence until no later than 12 months after the final beta invitation campaign ends, unless you withdraw consent or ask for deletion sooner. We will record when the final campaign ends and carry out manual deletion reviews; this is not an automated Brevo expiry. A minimal suppression record may need to be retained where necessary to respect an opt-out or meet a legal obligation.

Brevo states its primary contact databases are hosted in the EU (France, Germany and Belgium). Website submissions also pass through Vercel, and Cloudflare processes a Turnstile verification token to reduce abuse. These US-based providers and their subprocessors may process technical information outside the European Economic Area; the applicable contractual safeguards and provider logs are under ongoing review.

To access, correct or request deletion of your beta-interest record, or to ask about processing, contact support@soonandthen.com. You may withdraw beta email consent at any time using the unsubscribe link in our emails or by writing to us. We will handle applicable rights requests, normally within one month, subject to lawful verification and any permitted extension. An unsubscribe may require a minimal suppression record to prevent another unwanted email, and legally necessary records may be retained where applicable. We will review and action contact-data requests manually in Brevo, including any relevant consent attributes, while documenting confirmation status and any deletion limitations.

Website analytics

Vercel Web Analytics is prepared but is not currently active on this website. We do not use Cloudflare Web Analytics or Google Analytics. No analytics beacon runs here.

Purposes, legal grounds and retention

We process basic technical request data as necessary to deliver and protect the website, generally relying on our legitimate interests in secure, reliable operation (GDPR Article 6(1)(f)). When you email support, we process your address, message and correspondence to answer and manage your request, generally on that same basis; particular legal obligations or claims may require other grounds. Optional Android beta-interest emails will only be sent after your explicit consent and confirmation (Article 6(1)(a)). You can withdraw beta consent at any time without affecting prior lawful processing. The standalone Android app does not require an online account or send us its saved moments.

Vercel hosts the website and handles request and security information. On the current Hobby plan, runtime logs are accessible in the Vercel dashboard for approximately one hour, as described in Vercel's published documentation; build logs and other infrastructure/security records are separate and may be retained for different periods. We have not implemented a separate analytics visitor log or a database of visits. We cannot promise that all provider-held request data is erased after one hour. See https://vercel.com/docs/logs/runtime for the documented runtime-log access period.

Some website, security and email-routing service providers are based in the United States or may process technical data outside the European Economic Area. Brevo states that its principal contact databases are hosted in the EU, but that does not by itself establish that every processor and subprocessor operation stays there. Transfers and any required contractual protections are being reviewed for the actual provider plans in use, especially Vercel Hobby. Public data-collection features will remain disabled until the applicable processing and international-transfer arrangements have been checked. Details: https://vercel.com/legal/privacy-notice, https://www.cloudflare.com/cloudflare-customer-dpa/ and https://help.brevo.com/hc/en-us/articles/360001005510-Data-storage-location.

Your choices and rights

You control local app data, notifications, photographs and sharing. For personal information handled through the website or a future support conversation, applicable data protection law may give you rights to access, correction, deletion, restriction, objection or portability.

You can raise a concern with a data protection authority. In Spain, the Agencia Española de Protección de Datos explains your rights. We will update this notice if the way the app or website handles information changes.