Privacy
Effective 15 August 2026. Controller: Guillermo Zubicaray, tax ID 54-108-126M, Plaza de la Asamblea número 1. Privacy and rights contact: [email protected].
Data and sources
We process data you provide or the service generates: account and Apple identity, membership; an optional property name, address and coordinates; templates, turnovers, comments, messages and attachments; read, presence and typing state; reports and blocks; photos; user, installation and device identifiers for notifications; security activity and subscription status. Turnframe does not access the iPhone's current location and does not need contacts, audio, advertising or tracking profiles.
Purposes and legal bases
We process the data needed to create and provide accounts, sync, collaboration, storage, purchases, exports and deletion to perform the contract (GDPR Art. 6(1)(b)); to comply with applicable legal obligations (Art. 6(1)(c)); and proportionately for our legitimate interest in protecting accounts, preventing fraud and maintaining security (Art. 6(1)(f)). We do not use content for advertising, data sales or AI training.
Providers and transfers
Apple processes identity and purchases; Vercel runs the API in Frankfurt; Neon stores database data in AWS Frankfurt; Cloudflare R2 keeps private photos under EU jurisdiction; and Resend delivers transactional email from a verified domain. Published DPAs and transfer mechanisms have been reviewed; the controller retains the contractual record and reviews subprocessors before each material expansion.
Retention
Active data and conversations remain while the account or workspace exists. Account deletion redacts authored messages and removes their attachments; ending a professional relationship removes its direct chat. Presence expires after 24 hours, completed push jobs after 30 days, reports after 180 days, and a block when it is undone or either membership ends. Upload reservations expire after 24 hours, idempotency receipts after 7 days, and other tombstones and completed jobs after 30 days. An inactive Free workspace receives notice after 12 months and another check 30 days later. Neon currently provides 24 hours of recovery history; Vercel documents 3 days for runtime logs; and Resend documents 30 days for email data and deletion of customer data within 90 days after account termination. Turnframe has no separate R2 backup or versioned copy, so a confirmed photo deletion is not promised recoverable.
Your controls
The app lets you export a versioned JSON containing operational account data, messages authored by the account and a safe attachment manifest, and start deletion. It never exports passwords, sessions, tokens, object keys or signed URLs. Access is revoked immediately while retryable jobs complete remote deletion; data required by law will be isolated only for the applicable period. Deleting the account does not itself cancel an Apple-managed subscription.
Your rights
You may request access, correction, deletion, restriction, portability or objection by writing to [email protected]. You may also complain to the Spanish Data Protection Agency. Do not email passwords or private photos.
Cookies and storage
The public website has no analytics, advertising or optional cookies. After sign-in, it may use cookies or storage strictly necessary to authenticate, secure and provide the service; no consent banner is shown while this remains the only purpose.
Messages and safety
Messages may pass through a limited filter for threats, exploitation, invisible controls and other manifest abuse. You can press and hold a message to report and block its author in that workspace, and undo the block from Messages. A report keeps the reason, optional details and identifiers needed for review; it is not used for advertising or automated decisions about you.
Photos and third parties
The workspace creator decides which property address, coordinates, photos, messages and notes to add and must have an appropriate permission or legal basis. Avoid people, documents, access codes and other unnecessary data. Turnframe supports minimisation and deletion but does not certify the legality of each capture.