TimeSharesUs

TIMEVYN – PRIVACY POLICY


Last Updated: March 24, 2026

This Privacy Policy explains what personal data TimeVyn collects, how it is processed and stored, and what rights users have when interacting with the platform.

TimeVyn is built on a minimum data collection philosophy. User identity is established primarily through wallet addresses, while embedded login options may also involve limited off-chain identifiers processed for account access and wallet-linked features.

Data Controller

TimeVyn is the data controller for the processing described in this policy. For privacy and data protection requests, write to legal@timevyn.com.

Sub-processors

We work with the providers below to run the service. Each processes only the data its own function requires:

  • Supabase for database hosting, storage, and operational application records.
  • Pinata / IPFS gateways for decentralized media storage and retrieval.
  • Sui blockchain infrastructure for immutable on-chain transaction records.
  • Wallet, authentication, and embedded wallet infrastructure providers such as Privy for embedded login, linked accounts, and wallet-session tooling.
  • Privy may process email or social-login identifiers, wallet-linking data, session metadata, and embedded wallet lifecycle information when you use embedded login or wallet features.
  • When you gift a memory by email, Resend processes the recipient's email address, the gift link, the decline code and your message, if any, for delivery purposes. TimeVyn does not write that address to its own database; Resend, however, retains delivery records for its own retention period.
  • Firebase / Google Cloud services may process mobile push tokens, notification routing metadata, crash diagnostics, and technical app stability data for native mobile operation.
  • RPC and node providers, routing providers, and related technical infrastructure needed to serve blockchain and swap features.

How to delete your TimeVyn account

Deleting your account requires you to be signed in so we can verify you control the wallet linked to your profile. Use the TimeVyn website or mobile app and follow these steps:

  1. Sign in at https://timevyn.com using your wallet or embedded login (same account you want to remove).
  2. Open Security Settings: go to https://timevyn.com/settings/security while you are logged in.
  3. Scroll to the Delete Account section. Read the warning, then sign the confirmation message with your wallet when the app prompts you.
  4. Complete the flow. Your TimeVyn profile, social features, messages, notifications, and other off-chain data we control are deleted or anonymized subject to backup and legal retention limits described in this policy.

Public blockchain transactions and protocol events cannot be erased; see Sections 4 and 5 above. If you cannot sign in, self-service deletion is not available—contact legal@timevyn.com.

Deleting a post without deleting your account

You can remove an individual post from TimeVyn while keeping your profile and account. When you are the owner, use the in-app delete flow on that post’s detail page (no separate support request is required).

  1. Sign in with the wallet that owns the post.
  2. Open the post’s detail page for the item you want to remove.
  3. Use the delete control for that post and confirm. The platform updates or withdraws the associated off-chain record and interface visibility as described in our technical implementation.

What is removed: your post is withdrawn from normal TimeVyn discovery and your active profile surface as applicable. What may remain: immutable on-chain transaction records and public blockchain history cannot be deleted by TimeVyn or users; see Sections 4 and 5. Retention of security and legal logs follows the table in Section 5.

Contact

For questions about this policy, or access and deletion requests, write to legal@timevyn.com. For requests about gift emails you can also use gift@timevyn.com.

1. Types of Data We Collect

CORE

1.1 Wallet Address (Essential)

  • Required for login and blockchain interaction.
  • Forms the core of your pseudonymized identity.
  • Cannot be recovered by TimeVyn if you lose access.

1.2 Embedded Login and Profile Data

  • Username, photo, bio, and similar optional profile fields.
  • If you choose embedded login, we and our providers may process your email address, social-login identifier (such as Google or Apple account data), linked wallet addresses, Privy user ID, and authentication/session metadata.
  • This data is used to authenticate you, create or recover an embedded wallet session, secure linked accounts, and support account management features.
  • If you enable mobile notifications, we may process a device push token, platform, language, app version, and notification routing metadata to deliver alerts you requested.
  • On native mobile builds, limited crash diagnostics and technical error reports may be processed to detect startup failures, native crashes, and app stability issues. These reports are used for reliability and security, not advertising.

1.3 People Who Receive a Gift by Email

A memory can be gifted by email to someone who is not a TimeVyn user. We do not collect the recipient's email address; the sending user types it. The address is used solely to deliver a single email and is not written to the TimeVyn database.

The email contains the gift link, a single-use code for turning the gift down, and an optional short message written by the sender. Links inside that message are removed before delivery. Only one email is sent per gift; no second message is sent for promotional or newsletter purposes and the address is not added to any list. This processing is carried out on the basis of legitimate interest, to act on the sending user's request and to inform the recipient.

If you do not want the gift, you can close the link using the code in the email; no account is required. To object to how your address was used, or to request deletion of the delivery record, write to gift@timevyn.com.

2. Data We Do NOT Collect

TimeVyn does NOT collect, store, or request:

✕ Phone numbers
✕ Government ID / Passport
✕ Exact GPS Location
✕ Biometric Data
✕ Credit Card Numbers
✕ Sensitive Data (Religion, Health)

3. Purposes of Data Processing and Third-Party Providers

Functional
  • Wallet-based and embedded-login access, wallet creation, and on-chain interactions
  • Account security, linked-wallet management, and TimeMate matching
  • Profile display, support, and service operations
  • Native push notifications, voice-message functionality, crash diagnostics, and app reliability monitoring
Security
  • Abuse and duplicate prevention
  • Bot and spam mitigation
  • Fraud prevention
  • Crash, startup, and technical error diagnostics for native mobile stability
Legal
  • Compliance with applicable laws
  • Sanctions, AML, fraud, and platform integrity controls where applicable

TimeVyn Safety Vision™ (Content Safety Verification)

TimeVyn Safety Vision™ is TimeVyn's internal system designed to support content safety, duplicate prevention within the protocol. It helps maintain a trustworthy and abuse-resistant ecosystem.

The system may utilize automated image analysis tools and third-party infrastructure strictly for safety, integrity, and discovery purposes. These processes are limited to platform operation and are not used for advertising or profiling.

No biometric identification, facial recognition, or personal profiling is performed. TimeVyn does not sell user content or use it to train external models.

"TimeVyn does not sell user data and does not use personal data for advertising profiles."

3.1 Third-Party Providers and Infrastructure

TimeVyn relies on third-party service providers for specific technical functions. Depending on the feature you use, relevant providers may process limited personal data or wallet-related technical data on our behalf or as independent service providers.

  • Privy: embedded authentication, embedded wallet creation or export tooling, linked-account handling, session and wallet security, and related user/account identifiers.
  • Supabase: database hosting, authentication support, storage, operational records, and off-chain application data.
  • Pinata / IPFS gateways: decentralized media storage, pinning, and retrieval of user-uploaded content and related technical metadata.
  • Blockchain RPC and node providers: routing signed requests to the Sui network and retrieving blockchain state.
  • Cetus aggregator and liquidity routing providers: swap quote discovery, route construction, and related execution data for in-app swap functionality.
  • Sui blockchain and public infrastructure: immutable on-chain transaction records and protocol events.
  • Firebase Cloud Messaging and Firebase Crashlytics: mobile notification delivery, device token routing, crash diagnostics, and app stability monitoring.
  • Resend (built on Amazon SES, Ireland region): delivery of gift notification emails. Only the recipient address typed by the sender, the gift link, the decline code and the sender's short message, if any, are transmitted.

4. Blockchain & Immutability Principles

The Blockchain Reality Check

On-chain transaction hashes, protocol events, and wallet interactions cannot be altered, deleted, or reversed — by users, by TimeVyn, or by any third party. This immutability is a fundamental property of decentralized blockchains.

As a result, the Right to Be Forgotten applies exclusively to off-chain data (such as profiles, messages, and cached interface data), but does not apply to on-chain ledger records. Users are encouraged to mint responsibly.

5. Data Retention Periods

Data TypeRetention Period
Wallet AddressLifetime of account or wallet-linked usage history
Profile DataUntil user deletes it or account is closed, subject to backup and legal retention limits
Messages (DM)Up to 12 months (safety, abuse review, and moderation buffer)
Embedded login identifiers and account-linking dataAs long as needed for account access, security, recovery, support, and applicable legal retention obligations
Mobile push notification tokens and routing metadataUntil notification access is revoked, the device token is replaced, or the account/device link is removed, subject to backup and security retention limits
Crash diagnostics and technical error reportsUsually up to 90 days in diagnostic systems, and longer where required for security incidents or release stability investigations
Gift email recipient address and sender messageNever written to the TimeVyn database; held in memory only for the duration of the send request. The delivery record remains with our email provider Resend for its own retention period.
Security Logs
Technical logs used solely for platform security, abuse prevention, and incident investigation. No personal content is stored.
30-180 days, and longer where required for security incidents, legal holds, or compliance needs
On-chain transaction records & protocol eventsPermanent (Blockchain)
Account deletion requests and recordsUntil the request is completed, subject to legal retention obligations and security records. On-chain transactions cannot be deleted (see section 4).

6. User Rights

AccessRequest access to personal off-chain data processed by TimeVyn, including profile information and interaction records.
ErasureRequest deletion of off-chain data such as profiles, messages, and comments. On-chain blockchain records are immutable and cannot be erased.
PortabilityRequest a machine-readable export of your personal off-chain data.

Rights relating to off-chain personal data may be subject to legal exceptions, identity verification, security requirements, and the separate policies of third-party providers used for embedded login, payments, or blockchain infrastructure.

TimeVyn

Legal contact: legal@timevyn.com

Report contact: report@timevyn.com

Organization no. 935 270 146

Ostre gate 9C, 4838 Arendal, Norway

© 2026 TimeVyn AS. All rights reserved.