Short version
- Your Gallery photos stay on your device. Only what you post is uploaded.
- Your location is shared only with people you allowed, and kept for 30 days.
- We do not sell your data and we do not show ads.
What we collect
| Type | What | Why |
|---|---|---|
| Account | Name, username, email, birthdate, password (stored only as a secure hash), language | To sign you in, verify your email, apply the age rules |
| Profile | Profile photo, cover photo, bio, private-account setting | To show your profile |
| Posts and statuses | Photos and videos you post (compressed copies), captions, schedule, who can see it | To show them to the people you chose |
| Activity | Follows, follow requests, reactions, comments, bookmarks, reposts, post views | To run the social features and count views |
| Safety | Family/Friends circle, location points (when sharing is on or during SOS), SOS alerts | Locate and SOS |
| Notifications | A push address for your browser or phone | To deliver SOS and invite alerts |
| Wellbeing | Minutes of use per day, sleep and break settings, parent/guardian links | Sleep time, break reminders, daily limits |
| Safety and security logs | IP address and device type for sign-ins and limits, reports, moderation actions | To stop abuse and keep accounts safe |
Stored only on your device: your Gallery and albums, posts waiting to upload, theme and language. If you clear your browser data, these are deleted.
Who can see what
- Posts: Public, Followers or Only me, as you choose. Private and teen accounts are visible only to approved followers.
- Location: only people you allowed in your circle. Others in your circle can see your route for the last 24 hours; you can see your own for 30 days.
- SOS: everyone in your Family and Friends circle.
- Parents/guardians of teens: can see the teen's location and set sleep, break and daily limits. The teen always sees who supervises them.
- Admins: can see reported content to review it.
Services we use
Your data is stored and processed by Supabase (database, file storage and server functions). The website is hosted on GitHub Pages. Verification and reset codes are sent by email through Brevo. Notifications are delivered, encrypted, through your browser's push service (for example Google, Apple or Mozilla). The map uses OpenStreetMap tiles, and weather uses Open-Meteo, BigDataCloud and IP location services. These services only receive what they need to work. See Third-party software.
How long we keep it
- Location history: 30 days, then deleted automatically. You can clear it any time.
- Finished SOS alerts: 30 days.
- Statuses: 24 hours.
- Unverified accounts: deleted after 24 hours.
- Posts, comments and profile: until you delete them or your account.
Your choices and rights
- Edit or delete your posts, comments, statuses and profile.
- Pause location sharing, clear your location history, or leave a circle. (A supervised teen cannot pause sharing with their parent until 18.)
- Turn notifications off in your browser or phone settings.
- Ask for a copy of your data, a correction, or deletion of your account using the Report button in the app (choose “Something else”).
Children
TigoMeNote is not for children under 13, and we do not knowingly allow them. If you believe a child under 13 has an account, tell us and we will remove it.
Security
Connections are encrypted (HTTPS). Passwords are stored as salted hashes, sessions expire, and the database only accepts requests from our server functions. No system is perfectly secure, so please use a strong password.
Changes
We will update this page when our practices change, and tell you in the app about important changes.
Contact
Use the Report button in the app (choose “Something else”).