Privacy notice

1. Plain-English summary

Tomorly helps you catch renewals, trials and deadlines early. To do that, we need to process some information about you and the items you add. This notice explains what we collect, why, who helps us handle it, how long it is kept and what control you have.

2. Who controls the information

Tomorly Ltd, a company registered in England and Wales (company number 17450820), is the data controller for the information described in this notice. Our registered office is SIU Offices, 4–6 Greatorex Street, London, E1 5NF, United Kingdom.

You can contact us about your information at hello@tomorly.com.

3. Information collected

Depending on how you use Tomorly during the beta, we may hold:

• your name and email address;
• authentication records derived from your password — never your readable password;
• email verification and session data;
• reminders and item details you add or confirm;
• dates, providers, amounts, notes and recurrence information for those items;
• corrections and confirmation decisions you make when reviewing what Tomorly found;
• structured details extracted from something you capture;
• the words of an email you forward to Tomorly, held temporarily while Tomorly processes the forwarded message, including the forwarded message’s sender name and subject line;
• a small square picture, if you choose one for a reminder;
• if you use households, the household’s name, its members, the email addresses you invite, and which reminders are shared;
• reports you make using “This is wrong” about something Tomorly proposed;
• evidence coordinates (where on an image a detail was found);
• your notification preferences;
• which first-use lessons you have been shown and your answer to the notification question, and a record of changes to your lassO protection;
• your chosen plan and counts used to apply plan allowances (see Plans and allowances);
• Beta details you choose to copy and send us: the app and server version, and any “This is wrong” reports you made;
• operational server records that contain no names, emails or reminder content;
• any support messages you send us;
• your email address if you join the waitlist;
• operational records relating to account deletion and security events.

Most information comes directly from you: when you register, capture or enter an item, review what Tomorly found, or contact us. Tomorly does not add its own analytics or crash-reporting service. The account-level usage records Tomorly keeps are listed above.

4. Photos, documents, voice and forwarded email

You can type reminder information yourself, or ask Tomorly to read information from a photo, screenshot, voice note or forwarded email. You choose what you submit, so please avoid sending information that is not needed for the reminder. Nothing becomes a reminder until you have reviewed it in the app.

Photos, screenshots and PDFs

Where the app needs your permission to use the camera or your photo library, it asks first. Your iPhone reads the words on the picture itself, using Apple’s text recognition (Vision). The picture is not sent to Tomorly. What is sent is the text that was recognised and where on the page each line was found.

Tomorly’s servers turn those words into proposed reminders. The words themselves are not kept after reading. Tomorly keeps the reminder details it proposed, how sure it was, and where on the picture it found them, plus a short copy of a date it could not use so that you can correct it.

The original picture stays on your phone, in a protected area of the app that is excluded from backups and iCloud. It is deleted when you delete the reminder, sign out or delete your account. During the closed beta, Tomorly’s servers are not set up to receive the photos, screenshots or PDFs you capture.

A picture for a reminder

You can choose a small picture to show beside a reminder. It is separate from capture. Your phone crops and shrinks it first, and Tomorly’s server checks it again, accepts only a small JPEG or PNG square, and removes the information hidden inside image files, such as where it was taken. It is stored with the reminder, shown only to people who can see that reminder, and is never read for reminder details. It is deleted when you delete the reminder or your account.

Voice notes

The app records a short voice note to a temporary file on your phone, turns it into text, shows you the text so that you can correct it, and then deletes the recording. Your iPhone is asked to recognise the speech on the phone itself where it supports that for your language. Where it does not, the app uses Apple’s own speech recognition service, and your recording goes to Apple under Apple’s terms. The review screen tells you which was used. Tomorly does not receive the recording; only the text you approve is sent.

Forwarded email

Each account can have a private forwarding address in the app. You can see it again, copy it, replace it with a new one (the old one stops working straight away) or switch it off. Tomorly stores a one-way hash of the address, to recognise mail sent to it, and an encrypted copy, so that you can see it again.

Messages sent to it are delivered to Tomorly by our email provider, Postmark. Postmark receives the message so that it can deliver it to Tomorly. Tomorly reads the text of the forwarded message only. That text includes the forwarded message’s sender name and subject line, held temporarily while Tomorly processes the forwarded message. It leaves out your own note above it, anything quoted below it, the other header lines (To, Cc and dates) and every email address, and it does not keep the sender’s email address, the recipients, the HTML or the other headers. Nothing in the email is fetched, so no images or links are opened. A limited delivery record may remain to show whether the message was accepted, rejected, duplicated or processed.

Forwarded-email attachments are not accepted during the closed beta. Please forward only messages you are entitled to share, and avoid forwarding unrelated conversation history or sensitive information Tomorly does not need. Never forward passwords, card details or identity documents.

Deleting the message text from Tomorly does not delete the copy Postmark keeps for its own retention period. See Retention.

5. Email Tomorly sends

Tomorly uses email for account verification, password reset, household invitations where available, and service messages.

The Solo and Together plans include a weekly roundup email. It lists your own upcoming items, follows your saved preference and can be turned off under Account → Notifications. Free accounts do not receive it. Turning it off stops future roundups without deleting reminders already stored in your account, and it is not an advertising email.

Tomorly does not send an email for each individual reminder. Reminders arrive as notifications on your phone, which are scheduled on the phone itself. Choosing “Hide all notification details” in Tomorly’s settings makes every reminder say only that you have one.

Postmark receives the recipient’s email address and the content needed to deliver each message.

6. Households and sharing

What you add is private to you. If you create or join a household, Tomorly stores its name, who is in it, and the email address of anyone you invite, and sends them an invitation. A reminder is visible to other household members only if you have marked it as shared. If someone leaves or is removed, their access ends. A household on the Together plan can have two adults.

7. Plans and allowances

Tomorly has Free, Solo and Together plans. To apply each plan’s allowance, Tomorly counts the reminder notifications set up on your phone and the automated captures you have used. It does not store what the reminders say in those counts. During the closed beta you choose a plan inside the app without paying; see Subscriptions and Apple purchases.

8. Why it is used

We use this information to:

• create and secure your account;
• find and structure the important details in something you capture or forward;
• show you what Tomorly found so you can review, correct and confirm it;
• remind you ahead of a deadline;
• apply the allowances of the plan you have chosen;
• respond to support and privacy requests;
• keep Tomorly working reliably and securely;
• send waitlist signups a welcome message, occasional progress updates and launch news, if you’ve opted in.

9. On-device processing

Reading text from photos, screenshots and PDFs happens on your iPhone. Voice notes are turned into text on the phone where the iPhone supports that, and otherwise by Apple’s speech recognition service, as described above. Face ID, if you use App Lock, is checked by your iPhone: Tomorly never receives your face data and only learns whether Face ID matched.

This does not mean nothing about an item reaches our systems. The text and structured details you review and confirm do, and are covered by the rest of this notice.

10. Service providers

We use a small number of service providers to run Tomorly.

• Render runs the Tomorly application, its background worker, its PostgreSQL database and its rate-limiting store. This involves your account details, saved reminders and operational records.
• Postmark delivers Tomorly’s outbound email and passes forwarded email to Tomorly. This involves email addresses, outbound message content, and the content of forwarded messages.
• Apple distributes the app through TestFlight and the App Store, provides the text recognition and speech recognition built into iOS, and will process App Store purchases when they become available. Apple controls payment details; see Subscriptions and Apple purchases.
• EmailOctopus holds the email address, source and consent time of people who join the waitlist on this website.

11. International transfers

Tomorly’s current beta database is hosted by Render in Frankfurt, Germany. That is outside the UK, so information about UK users is transferred to the EEA. The UK Government has decided that the EEA provides an adequate level of protection for personal data, and that decision is the basis for the transfer.

Postmark and EmailOctopus may process information outside the UK and EEA. Where Apple provides speech recognition for a voice note, it processes the recording under Apple’s own terms and in its own locations. Where any service provider stores or processes information outside the UK, we require an appropriate safeguard to be in place.

12. Retention

Saved reminder data. We keep your account information and the reminders you confirm for as long as your account exists, or until you remove them.

Pictures and recordings. Tomorly does not receive the photos, screenshots or PDFs you capture, or voice recordings. The captured picture stays on your phone as described above, and a voice recording is deleted from your phone once it has been turned into text. A small picture you choose for a reminder is kept with the reminder until you delete the reminder or your account.

Recognised words and forwarded email text. Tomorly does not keep the recognised words from a photo, screenshot or voice note after reading. The lines of a forwarded email are held only until they have been read and are cleared once read. If reading fails, they can be kept for at most a day while you decide whether to retry.

Operational records. We keep limited records that contain no content or name, such as deduplication, delivery and security records. A record that something was deleted is kept for 30 days after the deletion completes.

Postmark. Postmark keeps email it handles, in both directions, for its own retention period. Deleting message text from Tomorly does not remove Postmark’s copy before that period ends.

Recovery copies. Tomorly’s database is backed up by Render for disaster recovery only. Deleted information is removed from the live database straight away, and a copy remains inside any backup taken before the deletion until that backup reaches the end of its retention period. Deletion is therefore not immediate in every system.

13. Beta data resets

Tomorly is early software in closed beta. The test environment may be cleared as part of preparing for general release, so please treat anything you put into the beta as temporary.

14. Security

We take reasonable technical and organisational steps to protect your information, including storing passwords only as one-way hashes, making sign-in, verification and reset links single-use and time-limited, rate-limiting repeated attempts, and limiting who can access account data to what’s needed to run and support the service. No service can guarantee security, so please do not store anything in the beta that would cause you real harm if it were lost or seen by someone else.

15. No advertising, sale or tracking

Tomorly does not sell your information, carry advertising or perform cross-app tracking. Tomorly does not connect to your bank accounts or move money.

16. Your rights and controls

Under UK data protection law, you can:

• ask for a copy of the information we hold about you;
• ask for inaccurate information to be corrected;
• ask for your information to be deleted;
• object to how it is used.

The law gives you some other rights as well. To use any of them, email hello@tomorly.com, which we monitor for privacy and data requests. You can also delete your account yourself from within the app.

Self-service data export is not yet available inside the app. If you’d like a copy of your information, email us and we’ll help directly.

17. Account deletion

You can delete your account yourself from inside the app, under Account. You are asked for your password and to confirm, because it happens straight away and cannot be undone.

Your name, email address and password are removed, along with your reminders, notes, reminder pictures, forwarding address and captured items that only you could see. You are signed out on every device, anything queued to be emailed to you is cancelled, and the copy of any picture held on your phone is deleted. If you chose a plan, the plan and Apple transaction records Tomorly holds for you are removed as well.

Your account is anonymised rather than erased row by row. What remains is an anonymous technical record that holds none of your details, that nobody can sign in to and that cannot be used to contact you. It exists because reminders shared with a household, and the record that each was dealt with, point at it. Those shared reminders stay with the household with your name removed, and appear as “Deleted account”. If you own a household with other people in it, the app asks you to hand it over first.

Copies in recovery backups expire as described in Retention, and Postmark’s copy of any email expires after its own retention period. Deleting your account does not cancel an Apple subscription; you manage that in your Apple ID settings.

18. Marketing preferences

If you join the waitlist, we’ll send a welcome message, occasional progress updates and launch news to the email address you provide. We won’t sell your details or share them with other companies for their own marketing. You can unsubscribe at any time.

19. Children

Tomorly is intended for adults aged 18 and over. It is not directed at children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided information to Tomorly, contact hello@tomorly.com and we will investigate and delete it where appropriate.

20. Automated extraction and your review

Where Tomorly suggests a provider, date, amount or action from something you’ve captured or forwarded, that suggestion is reviewed and confirmed by you before it’s treated as fact. Tomorly is designed to leave a detail blank and ask, rather than guess, when it’s not confident.

21. Cookies and similar technologies

This website does not use advertising or tracking cookies, and it does not load third-party analytics, advertising pixels or fingerprinting scripts. No cookie-consent banner is shown, because there is no non-essential tracking to consent to. The Tomorly app uses one session cookie to keep you signed in; it cannot be read by scripts, and Tomorly sets no advertising or analytics cookie.

22. Subscriptions and Apple purchases

During the closed beta you choose between the Free, Solo and Together plans inside the app without making a payment, and the app tells you that purchases are not available yet. The plan you choose is stored against your account.

When purchases become available, Apple will take the payment. Tomorly will keep the plan you chose, the product, Apple’s transaction identifiers for it, and when the term starts, renews or ends. Tomorly does not see or keep your card or other payment details. These records are removed when you delete your Tomorly account, but deleting your account does not cancel your Apple subscription, which you manage in your Apple ID settings. We will update this notice before purchases launch.

23. Complaints to the ICO

If you have concerns about how we handle your information, we’d like the chance to address them directly — please contact us first. You also have the right to lodge a complaint with the UK’s data protection regulator, the Information Commissioner’s Office (ICO).

You can find out how to complain on the ICO’s website: ico.org.uk.

24. Changes to this notice

We may update this notice as Tomorly develops, particularly as beta features are confirmed or replaced by their released versions. We’ll update the date at the top of this page when we do.

25. Company and contact information

Tomorly is a trading name of Tomorly Ltd, registered in England and Wales under company number 17450820. Registered office: SIU Offices, 4–6 Greatorex Street, London, E1 5NF, United Kingdom.

Privacy questions and data-rights requests: hello@tomorly.com