Your information
Small promises.
Clear boundaries.
Updated October 16, 2026. This notice covers the Tattle app and recipient website. Public enrollment and paid subscriptions are not open yet. The account and purchase sections below apply when those features are available to you.
What Tattle stores
For the person using the app, Tattle stores an account identifier, promises, check-ins, chosen names, deadlines and time zone. If you join as their supporter, we store your mobile number, your connection to that person, consent dates, and delivery status. Invitation secrets are stored as hashes. We do not upload the phone’s address book.
Why your number is needed
Twilio verifies your number and sends the updates you agree to receive. A verification code alone does not enroll you. You must enter the code and check the consent box. Your person sees your name, the last four digits of your number, your connection status and delivery status. They do not receive your full number through Tattle.
Apple accounts and purchases
Sign in with Apple connects your promises and plan to a recoverable account. Supabase verifies the Apple sign-in and may store an email or private relay address if Apple supplies one. Tattle stores a hash of your Apple identifier, a random purchase-account identifier, your time zone, and the number of free text and verification allowances used. An encrypted Apple authorization credential lets us check whether access is still valid and revoke permission when you delete the account. App connection credentials stay in the iPhone Keychain.
Apple handles payment and renewal. Tattle stores verified product and transaction identifiers, purchase and expiry dates, and subscription status so it can provide the right allowance. We do not receive your card or bank details. Sandbox purchases are test transactions and do not grant paid production SMS access.
What is in a text
Updates include the promise owner’s name and whether they reported “done,” “not today,” or did not check in. Texts do not include the goal itself. A missing check-in is not proof that the goal was missed. The phone carrier can access the SMS content; SMS is not end-to-end encrypted.
Where information goes
Supabase stores cloud data and provides authentication and server functions. Apple provides sign-in and purchases. Twilio processes phone verification and SMS delivery. Vercel serves this website. These providers and carriers process the connection and operational information needed to run their services, including security and delivery logs. Processing and backups may occur outside Canada. We do not sell personal information or share mobile numbers or SMS consent for third-party marketing. The app and website contain no advertising trackers or analytics SDKs. The website has no third-party scripts.
Country suggestion
We use the approximate country supplied by our hosting provider from your internet connection to suggest a calling code. You can change it. We do not request GPS access or store this country suggestion in your Tattle account. If the suggestion is unavailable, we use your browser region or default to Canada. This suggestion does not determine SMS eligibility; the sending service checks the mobile number separately.
Your choices
Joining is optional. Permission lasts 30 days in this pilot. Use the private stop link in any update to stop future texts without a login or verification code. You can also reply STOP where SMS replies are supported, or use the withdrawal button while your invitation is valid. A text already passed to the carrier may still arrive. START alone does not renew your Tattle permission. A new verified invitation is required.
Keeping and deleting records
Promises and check-ins remain until you delete your Tattle account in About. Deletion removes your Tattle promises, check-ins, invitations, connected recipient, queued deliveries and account cache. A message already passed to a carrier cannot be recalled. Deletion protects unrelated data if an identity is also used by another app in the shared backend. Earlier local previews are separate from your cloud account.
We keep a limited deletion receipt so the app can confirm deletion after a lost connection. We retain the Apple identifier hash, random purchase-account identifier, fixed time zone and used free allowances while Tattle offers this allowance, to prevent repeated free accounts and preserve purchase ownership. Spending records retain the minimum identifiers and amounts needed to enforce sending limits. They do not contain goal text or a recipient’s phone number. Subscription records are eligible for cleanup two years after expiry. If Apple revocation is temporarily unavailable, the encrypted credential is queued for retry for up to seven days, then removed by maintenance. The app also explains how to remove Tattle in your Apple account settings.
Stopping texts alone does not delete consent or delivery history. Those records remain with the Tattle account until deletion; providers and backups follow their own retention policies. Recipients can email help@heytattle.com to request access, correction or deletion. We may ask for the minimum information needed to confirm the request. Do not send passwords, verification codes or private invitation links.
Deleting Tattle or your account does not cancel an Apple subscription. Cancel separately in your Apple subscription settings.