Privacy policy
A clear boundary between your personal notebook and what you choose to share.
Last updated: 28 October 2026
What this notice covers
This notice describes the current PetaUita development app and this website, operated by Mert TUZER / MiniLabs. Contact: hello@minilabs.app. The app is not yet publicly released. We will update this notice when data handling changes.
Personal records on your device
Your personal goals, estimated savings entries, notes and settings are stored in the app’s local storage. The app and its widgets use a shared on-device App Group container. These personal records are not uploaded to the Together service. Your operating system’s backup and device-transfer settings may still apply; removing the app can remove local data.
Optional Apple sign-in and Together
Together uses Sign in with Apple. The service processes your Apple user identifier and an optional name supplied during sign-in, account and session identifiers, and the shared space you create or join. Shared data includes goal name, target amount, currency, time zone, record amounts and notes, timestamps, membership and synchronization state. Other members of your shared space can see shared goal and record data. Personal history is not imported automatically.
Storage, security and service providers
The Together API runs on Cloudflare Workers and stores shared data in Cloudflare D1. Cloudflare operates a global infrastructure, so service processing may occur outside your country. Session credentials are held in iOS Keychain, with hashed session tokens on the server. Apple refresh tokens stored by the service are encrypted. These measures reduce risk but do not guarantee absolute security.
Widgets and synchronization
Personal widgets write to local storage. Widgets set to Together can send new shared entries to the service without opening the main app. Offline work is queued locally until a later synchronization attempt. The partner receives records through synchronization; network access and iOS scheduling affect timing.
This website and support
This website does not include advertising, third-party analytics scripts or a newsletter form. The hosting service may process technical request and security information, including IP addresses, to deliver and protect the site. If you email support, we process your email address and the information you choose to send in order to respond. Do not send passwords or Apple verification codes.
Apple authorization changes
When Apple access is revoked, app sessions are invalidated and Together cache and unsent choices are removed from the device when the change is detected. This does not delete your PetaUita account or personal notebook. You can authorize Apple sign-in again. An Apple Account deletion notification also deletes the associated PetaUita account data.
Retention, leaving and deletion
End sharing closes access without deleting the account. Delete account in Together removes your profile, sessions, Apple credential from the active account, your shared records and shared synchronization history. It also closes sharing for both members. Your partner retains only their own records; your personal notebook is independent and stays on your device. Apple token revocation is retried if Apple is unavailable; only the encrypted token and a hashed identifier are kept until revocation succeeds. Hashed deletion receipts and replay guards normally expire after 30 days; a guard remains while revocation is pending. Cloudflare recovery copies may remain for up to 30 days. Partner devices clear your shared data when they next sync; an offline device cannot be remotely erased immediately. For access, correction or deletion help, contact hello@minilabs.app.
Your choices
You can use the personal notebook without joining a shared space. Choose explicitly whether a widget writes to Personal or Together. You may stop sharing, sign out, or contact us about your data. Privacy rights available to you may depend on where you live.