Privacy Policy
In short: TikTym stores your account details and the practices and minutes you log, so it can show your progress on any device. Your data is stored in India (Mumbai). We don't sell it or show ads. Your account comes with emails about your practice (a welcome, tips and reminders, a weekly recap and occasional news) and usage statistics through Google Analytics; each is on from the start, and you can turn each off at any time in Setup or from any email. Daily phone reminders start only if you allow notifications. You can export or delete everything at any time.
1. Who is responsible for your data
TikTym is run by Pramal IT Services Private Limited (CIN U72900AP2022PTC121639), registered in Andhra Pradesh, India. We are the Data Fiduciary for your personal data under India's Digital Personal Data Protection Act, 2023 ("DPDP Act"). Contact: praveen.cherukuru@gmail.com.
2. What we collect
| What | Details | Why |
|---|---|---|
| Account | Your email address and, if you use Google, your Google name. Your password is handled by Firebase Authentication and never seen or stored by us. Firebase also keeps sign-in records such as when you created your account and last signed in. | To sign you in, keep your data in your account, and greet you by name. |
| Your practices | Names, colours, daily minute targets, which weekdays they apply, start dates, and whether they're archived. | To work out what's due each day and your carried-over backlog. |
| Your entries | For each entry: the practice, date, minutes, an optional note you write, and when it was saved. | To show progress, streaks, history and insights such as "your usual time". |
| Settings | Your backlog limit, your choices in Setup › Notifications and privacy, and your reminder time and time zone. | To apply your choices on every device. |
| Emails about your practice | Your email address and first name, used to send: a welcome when you start, a few tips during your first week, a nudge if you haven't logged your first minutes or haven't logged for a few days, a weekly recap and a monthly progress summary of your own totals, and occasional news about TikTym (at most once a month). At most one email a day. We don't track whether you open emails or click their links. | To help you build the habit you signed up for, and to tell you about changes to TikTym. |
| Phone reminders and the app icon count | If you allow notifications for TikTym, a notification address for each device that allowed them (created by your browser's push service: Google for Chrome and Android, Apple for iPhone and Mac, Mozilla for Firefox), plus the reminder time and time zone you choose. Each reminder names the practices still due that day, and can set the number on TikTym's icon; that number is worked out from your own entries. | To remind you at the time you choose, only on days when something is still due. |
| Security signals | Google reCAPTCHA (used through Firebase App Check) collects technical information such as your browser, device and how the page is used. | To confirm requests really come from the TikTym app, and block bots and abuse. |
| Usage statistics (on unless you turn them off) | Through Google Analytics: which screens you open; when you log minutes (and how: a quick tap, the timer and so on), finish a timer, add a practice or sign in; the app version; your device and browser type; and your approximate location (city or region, worked out by Google from your connection). Google Analytics sets cookies with a random identifier (_ga). It never receives your name, email address, practice names, notes or minutes history. Advertising features are switched off. | To see which features help people and what to improve. |
| Technical data | Our service providers (Google) receive your IP address and browser details when the app, its fonts or its data load. | To deliver the app and keep it secure. |
We don't collect your precise location, contacts, photos or payment details, and we don't advertise. Cookies: reCAPTCHA's security cookie, used to tell people from bots, and, unless you turn usage statistics off, Google Analytics' cookies.
2a. Anonymous daily totals
To see how TikTym is used overall, the app adds to a few running totals for each day, for everyone combined: how many devices were active, how many accounts were created, how many entries were logged (and whether by a quick tap, the timer and so on), how many minutes, how many timers were started and finished, how many practices were added and how many progress cards were shared. Only these numbers are sent. Nothing that identifies you or your device is included, and the totals can't be linked back to anyone, so they aren't personal data. To count each device once a day, the app keeps only the date it last counted itself, on your device.
3. What stays on your device
To work quickly and offline, the app keeps some data in your browser's storage on your device: the app's files, a copy of your synced data, your sign-in session, your theme choice, a running focus timer, and small preferences such as tips you've dismissed. Clearing the site's data in your browser removes it from that device; your account data stays safe in the cloud.
4. Our legal basis
We process your personal data on the basis of the consent you give when you create an account, after the sign-up screen tells you what an account includes, and for the purposes you provided it for (sections 6 and 7 of the DPDP Act). An account includes the emails about your practice and usage statistics described above: each is on from the start, and you can turn each off at any time in Setup › Notifications and privacy, or with the unsubscribe link in any email. Our website counts visits with Google Analytics from your first visit and shows a notice with an Opt out button. Phone reminders start only if you allow notifications in your browser. Turning something off stops it from then on; it doesn't affect processing that happened before (see section 7).
5. Where your data is stored, and who processes it
- Your account data and practice data are stored in Google Cloud Firestore in Mumbai, India, using Firebase by Google.
- Our processor is Google, which provides Firebase Authentication, Cloud Firestore, Firebase Hosting, Firebase App Check with reCAPTCHA, Cloud Functions, Google Fonts and Google Analytics. Some of these services, such as sign-in, reCAPTCHA, fonts and Analytics, may process data on Google's servers outside India, as the DPDP Act permits.
- Phone reminders are delivered by your own browser's push service (Google, Apple or Mozilla, depending on your device), which receives the reminder's text, encrypted so that only your device can read it, only to deliver it.
- Emails are sent by our processor Resend (Resend, Inc., USA), which receives your email address, first name and the content of each email (for a weekly recap, your own totals) only to deliver it.
- We don't sell, rent or share your personal data with anyone else, except where the law requires it.
This site is protected by reCAPTCHA, and the Google Privacy Policy and Terms of Service apply.
6. How long we keep it
Usage statistics are kept in Google Analytics for up to 14 months. Resend keeps records of emails it delivered for a limited time under its policy. We keep your other data while you have an account, and our database is backed up automatically: daily backups are kept for 7 days and weekly ones for 8 weeks, so anything deleted is gone from backups within 8 weeks. If you delete an entry or a practice, it's removed from our database straight away. If you delete your account, all your practices, entries, settings, notification addresses and your sign-in account are deleted. A device's notification address is also deleted as soon as its push service tells us it no longer accepts notifications. Our providers may hold copies in their own secured logs or backups for a limited time under their policies.
7. Your rights
Under the DPDP Act you can:
- Access a summary of your data and how it's processed. You can see all of it in the app, and download it with Setup › Data › Export as JSON.
- Correct or update it: edit or delete practices and entries in the app, or ask us.
- Erase it: delete entries and practices in the app, or everything with Setup › Danger zone › Delete account.
- Withdraw consent: for emails, use the unsubscribe link in any email or Setup › Notifications and privacy; for usage statistics, turn them off in Setup › Notifications and privacy (which also removes the Analytics cookies), or choose Opt out on our website; for phone reminders, turn them off in Setup or in your browser's settings; for everything else, delete your account.
- Nominate someone to exercise these rights for you in case of death or incapacity, by writing to us.
- Raise a grievance with us (section 11). If you're not satisfied with our response, you can complain to the Data Protection Board of India.
8. Security
Data travels over encrypted connections (HTTPS). Database rules let each signed-in person read and write only their own data, and App Check helps make sure only the real TikTym app can reach it. No system is perfectly secure; if a personal data breach affects you, we'll inform you and the Data Protection Board of India as the law requires.
9. Children
TikTym is for people aged 18 and over. We don't knowingly process children's data. If you believe a child has created an account, contact us and we'll delete it.
10. Changes to this policy
We'll update this page if our practices change; the date at the top shows the latest version. For significant changes we'll tell you before they take effect, in the app or by email or message.
11. Contact and grievances
For questions, requests or grievances about your personal data, write to our Grievance Officer at praveen.cherukuru@gmail.com. We'll acknowledge your message and respond as quickly as we can, and always within the time the law requires.