Ourfirsts has no account of its own. What leaves your phone is a rounded time and a rough place — never a photo, unless you choose to share one. This page explains exactly what that means.
Last updated 25 September 2026
Time and rough place. Never pixels, unless you share.
Ourfirsts reads when and roughly where your photos were taken to find moments you shared with your partner. It never looks at the photos themselves — the actual image data — unless you tap to share one with your partner.
Ourfirsts reads two fields from your Photos library: when a photo was taken and roughly where. It does not read pixel data, and it does not upload your photo library. There is no account system of ours — nothing to sign up for, no password, no profile on a server we run.
Ourfirsts links two partners through your own iCloud account, using
Apple's CloudKit shared-zone sharing (CKShare) — not a
server of ours. For each photo that could be a shared moment, the following
leaves your device into that shared iCloud zone, where only your linked
partner can read it:
The photo itself — the image data — is uploaded only when you explicitly tap to share it with your partner from inside a chapter. Nothing else about your photo library ever leaves your device.
Both partners must opt in to link. Either partner can leave the link at any time, which deletes the shared iCloud zone and everything in it.
Ourfirsts+ is planned as an auto-renewable subscription, sold through Apple's In-App Purchase system and managed with RevenueCat, a subscription platform. Apple processes your payment — we never see your card details, your Apple Account, or your name. RevenueCat receives a device-generated identifier plus your purchase and entitlement status only, so the app can tell what you're entitled to; it never receives payment details. Apple's handling of the transaction is covered by Apple's Privacy Policy, and RevenueCat's by its own privacy policy.
Ourfirsts contains no advertising SDKs and no analytics SDKs. It does not use the Advertising Identifier (IDFA) and does not ask for tracking permission. The only third-party service involved is RevenueCat, described above, and only once purchases are live.
If you grant limited Photos access instead of full access, Ourfirsts still works with the photos you've chosen to share with it — it just finds fewer moments. You can add more at any time from Settings → Ourfirsts → Photos.
Ourfirsts is not directed at children and does not knowingly collect data from anyone, of any age, beyond the on-device processing and partner-shared metadata described above.
Regulations such as the GDPR and CCPA give you rights to access, correct, export, and delete personal data held about you. We hold no account and no server-side record of your photos or your photo metadata — the only copy outside your device is the rounded time and coarse place in your own shared iCloud zone, which you control. Unlinking your partner deletes that zone. Deleting the app removes everything Ourfirsts stored on your device.
If this policy changes, the updated version will be posted here with a new date. If a future version of Ourfirsts starts collecting anything beyond what is described here, we will say so here before it ships.
Questions about privacy, or anything else: gokhan.tosun1995@gmail.com