Back to Then & Now

Privacy Policy

Last updated: February 2026

Our Privacy Commitment

Then & Now is built with privacy at its core. Your photos, data, and personal information stay on your device. We don't collect, store, or have access to any of your content. When you choose to enable iCloud sync, your data is synced securely through Apple's CloudKit infrastructure, and we never see it.

Data Collection

What We Don't Collect

  • No analytics or usage tracking
  • No advertising identifiers
  • No third-party tracking SDKs
  • No personal information sent to our servers
  • No data selling or sharing with third parties

What the App Stores Locally

The following data is stored only on your device (and optionally in your personal iCloud account):

  • Albums and album settings
  • Photos you capture or import (including original EXIF metadata such as date, location, and device info)
  • Metrics and measurements you track
  • Reminder preferences
  • Profile information you provide (name, photo, and interests)

Device Permissions

Then & Now requests the following permissions only when needed:

Camera

Used to capture progress photos directly within the app.

Microphone

Used for voice-guided timer functionality during photo sessions.

Speech Recognition

Used for hands-free voice commands during photo capture. Speech recognition is processed entirely on-device and is never sent to external servers.

Photo Library

Used to import existing photos into your albums and show a preview of your recent photos. When you export photos or videos, they may be saved to your photo library.

Notifications

Used to send you reminders to take progress photos on your schedule.

Data Storage

All app data is stored locally on your device using SwiftData. Your photos and information never leave your device unless you enable iCloud sync.

When iCloud sync is enabled, your data is synced through Apple's CloudKit infrastructure to your personal iCloud account. This sync is end-to-end between your devices. Mahalo Mochi has no access to your iCloud data.

Third-Party Services

Then & Now does not integrate with any third-party analytics, advertising, or tracking services. The only external service used is Apple's CloudKit for optional iCloud sync, which is governed by Apple's own privacy policy.

We maintain a Discord community for support and feedback. Joining the community is entirely optional and subject to Discord's own privacy policy.

Biometric Authentication

Then & Now supports Face ID, Touch ID, and device passcode for locking private albums. Biometric data is handled entirely by your device's secure enclave. The app never accesses, stores, or transmits your biometric information. This feature simply uses Apple's LocalAuthentication framework to verify your identity on-device.

Children's Privacy

Then & Now does not knowingly collect any data from children under the age of 13. Since the app does not collect personal information from any users, no special provisions are required. If you believe a child is using the app inappropriately, please contact us.

Your Rights

Because your data stays on your device, you have full control:

  • Access: All your data is visible directly within the app at any time.
  • Delete: You can delete individual photos, albums, or metrics within the app.
  • Complete Removal: Deleting the app removes all locally stored data. To remove iCloud data, disable iCloud sync before deleting or manage it through your iCloud settings.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

Contact Us

If you have any questions about this Privacy Policy, please reach out:

Developer: Mahalo Mochi LLC