This policy explains how Timeworn handles consumer health data, as Washington's My Health My Data Act defines it. That law counts some images of a person's face as biometric data, so we treat photos that show faces as consumer health data. Timeworn is made by Wavista Apps, operated by William Tsao.
What we collect, and why
- Photos that show faces: the album pages you scan and the photos you choose to restore, only after you allow AI restoration. Purpose: to find the photos on an album page, to restore a photo, to blend face detail back from your original, and, for subscribers, to suggest details such as the decade a photo was taken. Our server holds the photos you send in memory while it works and does not store them. It keeps each restored photo for about 2 days so your iPhone can download it.
- Where the faces are in a restored photo, and how closely each matches the original. Our server works these out with a small face-finding model and sends them back to your iPhone, which keeps them with the photo. Purpose: to show you the result. They never say who anyone is.
We do not recognize, identify or match anyone, and we do not create faceprints or face templates. We do not use these photos for any other purpose, and we do not use them, or any other personal data, to train large language models or other AI models.
Where it comes from
From you: the photos you scan or choose in the app.
Who we share it with
We do not sell consumer health data, and we do not share it with anyone except these service providers, which process it only for us, under contract:
- OpenAI: the photos you restore, to restore them and suggest details;
- Fly.io: our server, which finds the photos on album pages and blends face detail;
- Cloudflare R2: private storage for each restored photo, for about 2 days.
We have no affiliates. No third party collects your data across other apps or websites through Timeworn.
Your rights
You can ask us to confirm whether we collect, share or sell your consumer health data, to get a copy of it with the list of everyone we shared it with and how to contact them, and to delete it. You can withdraw your consent at any time. You can see and delete your photos in the app at any time.
- To stop photos being sent, turn off Settings, Use AI restoration.
- To delete everything on your iPhone, use Settings, Delete my data. It also asks our server to delete your stored restored photos.
- For any other request, email support@wavistaapp.com from Contact support in the app, so the email includes the anonymous ID we need to find your data.
We reply within 30 days. If a request is complex and we need more time, we tell you within those 30 days and reply within 45 more days. Requests are free up to twice a year.
Appeals
If we turn down your request, you can appeal by replying with "Appeal" in the subject line. We answer in writing within 45 days. If we deny your appeal, you can contact the Washington Attorney General, and our answer will tell you how.
Changes to this policy
We post the new version on this page with a new date. Before we collect a new category of consumer health data, or use it for a new purpose, we ask for your consent in the app.