How Then & There uses personal data

Who is responsible

Then & There is the product at www.thenandthere.dev. Until the operator publishes a legal entity name and registered address here, use Contact Us for privacy requests. We will not invent a company number or office address on this page.

UK GDPR rights still apply to personal data we process. You can also complain to the ICO (ico.org.uk).

What we collect

Website: pages you visit, theme preference on this device, and Contact Us fields (name, email, message) when that inbox is open.

Account (when live sign-in is connected): email, display name, workspace membership, role, and join date.

Captures you sync: the photo or video file, time, GPS if the device allows it, notes, photo code, and which workspace member uploaded it.

Business billing: workspace name, seat count, storage add-ons, and payment details handled by Stripe. We do not store full card numbers.

Support notes you send in the app: the message, optional reply email, and language.

Why we use it

To run the website and app, keep a workspace roster, store job media you choose to sync, bill Business workspaces, and answer support or contact messages.

Legal bases we rely on: contract (providing the product you asked for), legitimate interests (keeping the service secure and understanding whether the site works), and consent (optional analytics, and location when the device asks).

Who helps us

Cloudflare hosts the website and stores synced media files.

Our application database stores accounts, memberships, capture metadata, and billing state.

Stripe processes Business payments and the customer billing portal.

Email delivery, when Contact Us is open, sends your message to the support inbox we configure. That path is not open until the inbox is set.

We do not sell personal data.

How long we keep it

Workspace accounts and synced media stay while the workspace is active, then for a short period after closure so we can restore a mistaken delete or handle a dispute.

Billing records stay as long as tax and accounting rules require.

Contact and support messages stay while we handle them, then for a limited follow-up period.

Exact day counts will be published when the operator confirms retention. We will not invent a number here.

Your rights

You can ask for a copy of your data, a correction, deletion, a restriction, or to object to some processing. You can also ask for data portability where the law gives that right.

Use Contact Us. If we cannot yet show a postal address, the contact form is the request path.

Children

Then & There is built for field teams at work. It is not directed at children under 16.

Changes

If this notice changes in a material way, we will update this page and the date above.