Last updated: March 19, 2026

Privacy Policy

Applies to: whenyouopen.com, associated subdomains, applications, APIs, and related services operated under the WhenYouOpen brand.

1. Introduction

WhenYouOpen is a digital memory and legacy capsule platform designed to help users create, store, schedule, and deliver personal capsules, messages, media, and related memories to intended recipients. This Privacy Policy explains how we collect, use, disclose, store, secure, and manage personal data when individuals access or use our website, applications, or services.

Because WhenYouOpen is built around emotionally meaningful and time-sensitive personal content, privacy is a core part of the service. We aim to collect only what is necessary to operate the platform, protect user accounts, process subscriptions and add-ons, deliver scheduled capsules, and maintain platform security and compliance.

By using WhenYouOpen, you acknowledge that you have read and understood this Privacy Policy.

2. Who We Are

WhenYouOpen provides a platform through which users can:

• create personal or emotional capsules for themselves or others,
• upload text, images, audio, and video where supported by their plan,
• schedule capsule delivery for a future date or event,
• manage recipients and delivery preferences,
• purchase annual subscriptions and one-time add-on capsules,
• receive reminders, notifications, confirmations, and transactional communications,
• preserve meaningful digital memories over time.

In this policy, the terms "WhenYouOpen," "we," "our," and "us" refer to the operator of the WhenYouOpen service. The terms "user," "you," and "your" refer to the person who accesses or uses the service.

3. Scope of This Policy

This Privacy Policy applies to personal information collected through:

• the public website,
• account registration and login,
• subscription and billing workflows,
• capsule creation, editing, scheduling, and delivery,
• recipient and contact management,
• customer support interactions,
• email, SMS, and WhatsApp notifications where enabled,
• security, fraud prevention, and operational monitoring.

It does not apply to third-party websites, payment platforms, communication networks, or services that may be linked to or integrated with WhenYouOpen but are governed by their own privacy notices.

4. Information We Collect

4.1 Information You Provide Directly

We may collect personal information you submit directly, including:

• full name,
• email address,
• phone number,
• account credentials and login-related information,
• profile details you choose to add,
• recipient names and recipient contact information,
• capsule metadata such as title, occasion, delivery date, relationship context, and notes,
• capsule message text,
• uploaded media content such as photos, audio recordings, and videos where permitted by your plan,
• support requests, messages, or feedback,
• preferences regarding reminders, notifications, and communications,
• information submitted for security verification, OTP confirmation, or account recovery.

4.2 Sensitive or Highly Personal Content

Because of the nature of the service, users may choose to store content that is deeply personal, emotional, family-related, or memorial in nature. This may include private letters, emotional messages, recordings, life updates, end-of-life messages, or memories intended for future delivery.

We treat such content as user-provided content stored for the purpose of delivering the service. Users are responsible for deciding what content they upload and whom they designate as recipients.

4.3 Payment and Subscription Information

When you purchase a subscription or one-time add-on capsules, we may collect or receive information such as:

• selected plan,
• billing country or region,
• pricing tier,
• subscription status,
• payment transaction references,
• invoice and billing records,
• renewal and expiration metadata,
• add-on capsule purchases,
• payment success or failure status.

We do not intend to store full raw payment card details on our own systems where a third-party payment processor is used. Payment information may instead be processed by a secure external payment provider subject to that provider's own terms and privacy practices.

4.4 Automatically Collected Information

We may automatically collect certain technical and usage information, including:

• IP address,
• approximate location inferred from IP,
• device type,
• browser type and version,
• operating system,
• referral URLs,
• app and site interaction logs,
• timestamps of registration, login, uploads, edits, and deliveries,
• session identifiers,
• authentication events,
• cookie and similar technology data,
• diagnostic and error logs.

4.5 Information Related to Recipients

Users may provide information about recipients or intended recipients, such as:

• recipient name,
• recipient email address,
• recipient phone number,
• relationship label,
• delivery-specific notes.

Users must ensure they have the right to provide recipient information and request delivery to that recipient.

5. How We Use Information

We use personal information for the following purposes:

5.1 To Provide the Service

• create and manage user accounts,
• authenticate users,
• enable capsule creation and scheduling,
• store capsule messages and media,
• manage recipient details,
• deliver capsules on the selected schedule,
• manage subscription entitlements and media allowances,
• support one-time add-on capsule purchases,
• permit access to previously created capsules according to plan rules.

5.2 To Process Billing and Subscriptions

• activate plans,
• manage renewals,
• track subscription state,
• process payment status,
• generate invoices or payment confirmations,
• apply plan-based features and restrictions,
• manage downgrade, expiration, grace-period, and reminder workflows.

5.3 To Send Service Communications

We may send service-related communications including:

• signup confirmations,
• login alerts,
• OTPs and account verification codes,
• password reset notices,
• renewal reminders,
• subscription expiry notices,
• account deletion confirmations,
• scheduled capsule delivery notifications,
• transactional emails, SMS, or WhatsApp messages where applicable.

5.4 To Protect Security and Prevent Abuse

• detect suspicious access,
• prevent fraud, spam, and misuse,
• investigate violations,
• monitor platform integrity,
• validate identity in higher-risk actions,
• protect stored user content and delivery workflows.

5.5 To Improve the Platform

• analyze usage patterns,
• diagnose failures,
• improve reliability and performance,
• plan storage, delivery, and support operations,
• improve product functionality and usability.

5.6 To Comply with Legal Obligations

• maintain records where legally required,
• respond to lawful requests,
• enforce rights and agreements,
• support audits, taxation, dispute handling, and compliance.

6. Legal Bases for Processing

Where applicable under law, we process personal information on one or more of the following grounds:

• performance of a contract with you,
• your consent,
• legitimate interests in operating, securing, and improving the service,
• compliance with legal obligations,
• protection of rights, safety, and fraud prevention.

7. How Capsules and User Content Are Handled

WhenYouOpen is designed to store user-generated capsule content for future access and/or scheduled delivery. This content may include text, images, audio, and video depending on the user's plan.

We process and store this content to:

• preserve capsule data,
• associate it with the correct account,
• enforce plan entitlements,
• enable edits where allowed,
• deliver it to selected recipients at the scheduled time,
• manage expiration, downgrade, deletion, or purge workflows according to plan and account state.

We do not claim ownership over user-created capsule content. Users remain responsible for the content they upload, including ensuring it does not violate applicable law or the rights of others.

8. Plan-Based Data Handling

WhenYouOpen operates with annual subscriptions and one-time add-on capsules.

Based on current product rules:

• the free plan supports text and images only,
• paid plans may support text, images, audio, and video,
• individual add-on capsules are one-time purchases,
• add-on capsules bought separately are intended to remain available even if a subscription later lapses,
• if a paid subscription is not renewed, the account may be downgraded to free after reminders and grace handling,
• media and plan-dependent memory data associated with lapsed paid entitlements may be subject to export windows and subsequent erasure according to the applicable product rules.

We use account, entitlement, and storage information to enforce these plan rules.

9. Account Deletion and Scheduled Capsule Delivery

If a user requests account deletion while scheduled capsules are pending, WhenYouOpen may present options regarding how those scheduled deliveries should be handled before deletion is finalized. Depending on the product flow in effect, the user may be able to:

• keep all scheduled deliveries active,
• cancel selected deliveries,
• cancel all pending deliveries.

To reduce the risk of unauthorized destructive actions, this decision may require OTP verification through the registered email address and registered phone number before completion.

If the user chooses deletion and cancellation of related data or deliveries, associated information may be permanently deleted or queued for deletion, subject to system integrity, legal retention, and operational backup cycles.

10. Sharing of Information

We do not sell personal information.

We may share information only in limited circumstances such as:

10.1 Service Providers

We may share information with vendors or processors that help us operate the service, such as providers of:

• cloud hosting,
• storage,
• authentication,
• transactional email,
• SMS or messaging delivery,
• payment processing,
• analytics,
• customer support,
• security monitoring.

These providers are expected to process information only as needed to perform services for us, subject to appropriate confidentiality and security obligations.

10.2 Recipients Chosen by the User

Capsule content may be disclosed to recipients designated by the user when a capsule is delivered according to the user's instructions and service rules.

10.3 Legal and Protection Purposes

We may disclose information where necessary to:

• comply with law or lawful requests,
• enforce our Terms,
• prevent fraud or abuse,
• protect users, recipients, the public, or the service,
• respond to disputes or claims.

10.4 Business Transfers

If the business is involved in a merger, acquisition, restructuring, asset sale, or similar transaction, information may be transferred as part of that process, subject to applicable legal safeguards.

11. Cookies and Similar Technologies

We use cookies and similar technologies for authentication, session continuity, security, user preferences, performance analysis, and site functionality. Please review the Cookie Policy for more detail.

12. Data Retention

We retain information for as long as reasonably necessary to:

• provide the service,
• maintain active accounts,
• preserve scheduled deliveries,
• manage subscriptions and add-ons,
• support dispute resolution,
• comply with legal obligations,
• enforce our agreements,
• maintain security and audit records.

Retention periods may vary depending on the type of information, plan state, account status, legal requirements, and whether the user requests deletion.

Examples include:

• account records retained while the account remains active,
• billing and invoice records retained for legal, tax, and audit needs,
• logs retained for security and troubleshooting,
• capsule content retained according to user actions, plan status, and deletion workflows,
• deleted or purged content potentially remaining in backups for a limited operational period before full expiration.

13. Data Security

We use reasonable administrative, technical, and organizational measures to protect personal information. These may include access controls, authentication safeguards, encrypted transmission, cloud storage protections, role-based restrictions, logging, and verification measures for high-risk actions.

However, no method of transmission, storage, or internet-based processing is completely secure. Users should protect their credentials, choose strong passwords, secure their email and phone access, and avoid sharing account access with others.

14. International Data Transfers

Depending on infrastructure and service providers, personal information may be processed or stored in jurisdictions other than the user's own. Where applicable, we aim to use appropriate safeguards for such transfers under relevant law.

15. Your Rights and Choices

Depending on your jurisdiction, you may have rights such as:

• access to personal data,
• correction of inaccurate data,
• deletion of certain data,
• objection to or restriction of certain processing,
• withdrawal of consent where processing is based on consent,
• portability where applicable,
• complaint to a supervisory authority.

We may need to verify identity before processing certain requests. Some requests may be limited where legal retention, security, fraud prevention, or contractual obligations apply.

16. Communications Preferences

Users may receive essential transactional communications required to operate the service, including delivery notices, security alerts, OTPs, password resets, billing alerts, and subscription reminders.

Marketing or non-essential communications, if any, may offer opt-out choices where required by law. Transactional messages cannot generally be opted out of while using the service where they are necessary for account operation or delivery workflows.

17. Children's Privacy

WhenYouOpen is not intended for unsupervised use by children. Users should not submit personal information of children except where necessary and lawful for intended recipient or family-related use. We reserve the right to remove data or restrict accounts where inappropriate collection is identified.

18. Third-Party Services

The platform may integrate with or rely on third-party tools such as payment gateways, email providers, SMS providers, analytics tools, or cloud infrastructure providers. Use of those services may involve separate privacy terms, which users should review independently where relevant.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, technical, operational, or product changes. Updated versions will be posted on the website with a revised effective date. Continued use of the service after an update may constitute acceptance of the revised policy where permitted by law.

20. Contact

For privacy-related questions, requests, or concerns, users may contact WhenYouOpen through the contact details or support channels provided on the website.