Privacy Policy
Overview
Told To Last is built on a foundation of privacy. Your memories, the questions you ask, and the video answers you receive are yours: private by default, shared only when you explicitly choose to share them with specific individuals.
What We Collect
We collect your phone number or email address for authentication and to enable you to send questions to others. We store the video answers sent to you and the questions you create. We collect basic usage data to improve the product. We do not sell your personal data to third parties.
How We Use Your Information
Your phone number or email address is used to verify your identity via one-time password (OTP) and to route questions to the right person. Video answers are stored securely and accessible only to you and the people you explicitly share them with. We do not use your videos to train AI models.
Data Storage & Security
Videos travel over encrypted connections, and our storage providers encrypt data at rest. We use Supabase for database storage and Mux for video delivery, both of which maintain strong security practices. Access to your data is authenticated via secure JWT tokens with limited lifetimes.
Third-Party Processors
We rely on a small set of service providers to operate the platform: Supabase (database, authentication, and file storage), Mux (video processing and delivery), Twilio (SMS verification and messaging), Firebase (push notifications), Resend (email delivery), and Branch.io (app links). Each processes data only as needed to provide its service, under its own security and privacy commitments. We do not sell your personal data to any of them or to anyone else.
Your Rights & Account Deletion
You can delete your account at any time from the app settings or by contacting us. Deletion takes effect after a 30-day grace period: during that window you can log back in to restore your account, and people you recorded memories for (answers to their questions, or memories you shared with them) keep access so they can download those memories before they are gone. Once the grace period ends, your videos, questions, and personal information are permanently removed from our systems within 30 days. You can also export all of your data — every video you recorded and received — from the app settings at any time.
Legacy Contact
You may designate a legacy contact in the app: a trusted person who can request access to your memories through our support team if your account ever becomes permanently inaccessible. We store only the name and the phone number or email you provide, at your instruction. Designating someone does not give them automatic access to your account; every request is reviewed manually. The designation is deleted when you remove it or when your account is deleted.
Data Retention After Cancellation
If you cancel your subscription, your vault is preserved in read-only mode and is not deleted right away. After 90 days it moves to archive storage, and if no action is taken for 12 months it is permanently deleted. We notify you at each stage (including 60, 30, and 7 days before deletion) and you can download all of your content at any time before that window closes. Once a vault is permanently deleted, the data cannot be recovered. Full details are in our Terms of Service.
Contact
For privacy-related questions or requests, contact us at support@toldtolast.com.
Last updated: June 2026