Privacy policy

Psst – Tap a Friend (“Psst”) · Effective 18 October 2026

Psst keeps only what it needs to pass a Psst between two people who have both agreed to connect. There are no ads, no tracking, no analytics tools and no third-party code in the app. We don't sell your data. Service providers are listed below.

What Psst stores on our server

• An account ID, created anonymously when you start. We don't ask for an email address, phone number or password.
• Your display name, shown only to people you're connected with.
• Your connections: who you're connected with, when you connected, and when you first pssted each other both ways.
• Invites you create: the code, when it expires, how many people it lets join, who joined with it, and whether it was cancelled. Invites now include Psst links (psstapp.fun/p/…): one person, seven days, and the Psst waiting for them. A Psst link can hold a doodle instead: its lines are kept with the link, never shown on the web page or its preview, and move to their first Psst when they join. If the link is cancelled or expires unused, the drawing is deleted within a day.
• Pssts: who sent one to whom, when, when it was seen, whether the notification was handed to Apple, whether it was a “same moment”, and whether it was a Super Psst. There is no message content, because Psst has no messages.
• Doodles: when you draw a doodle for someone, the lines you drew are stored with that Psst so it can appear on their widget and screen. Like every Psst, it is deleted after 30 days, unless it's reported: then a copy is kept with the report for 90 days. Hold anyone's band to report them.
• People you block, and reports you make: who you reported, their name at the time, when, and a copy of the doodle you reported.
• Your notification settings as far as Psst needs them: whether notifications are on, which whisper sound you chose, and whether Super Psst sounds and effects are enabled.
• Super Psst daily usage, to enforce the free daily allowance, and a Psst+ purchase verification record linking the original Apple transaction ID to your account. We never receive payment details.
• Your device's notification token, so we can send you notifications.
• Your app version and build, so we can tell you when an update is available or required.
• Your phone's time zone (for example Europe/Istanbul), so a streak day and the Sunday recap follow your own calendar. It is not your location.
• Streaks: for each connection, how many days in a row you've both pssted, and the last such day.
• Your word, if you have Psst+ and choose one (for example “boop”), so the people you psst see it instead of “psst”.
• Whether the weekly recap is on (it starts on; you can turn it off in Settings).

What stays on your phone

The order of your people, the colours you choose for them, your app icon, and similar choices are kept on your iPhone only.

What Psst never collects

Your contacts, location, photos, microphone, browsing, or advertising identifiers. Psst doesn't use analytics or advertising services.

How we use it

• To deliver Pssts and notifications, show who has seen a Psst, and keep connections, blocks and invites working.
• To keep Psst safe: pacing limits and reviewing reports, and to verify paid access and enforce the free Super Psst allowance.
• To show your private leaderboard. Only you can view it.
• Unless you turn the weekly recap off, to send you a Sunday notification with your own week's totals.
• To understand whether Psst works, we keep daily totals: for example, how many invites were accepted or how many pairs pssted each other that day. These totals contain no names, IDs or content.

Who processes it

• Supabase hosts our database and server functions.
• Apple delivers notifications (Apple Push Notification service) and handles Psst+ purchases. We never receive your payment details; the app checks signed purchases on your phone, and our server checks signed transaction details with Apple to verify unlimited Super Psst access.

How long we keep it

• Pssts and Super Psst daily usage records are deleted after 30 days. For your all-time leaderboard we keep just two numbers per connection (how many Pssts each of you sent), with no times or content; they're deleted when you remove that person, block them or delete your account.
• Invites are deleted 30 days after they expire or are cancelled.
• Notification tokens are deleted when Apple reports them invalid, or when you delete your account.
• Reports, including any doodle kept with them, are deleted after 90 days.
• Everything else is kept until you delete your account.

Your choices

• Remove, block or report anyone: hold their band, or go to Settings → People. Nobody is told.
• Turn notifications off in iPhone Settings. Pssts still appear when you open the app.
• Delete your account in Psst → Settings → Delete account. This deletes your account, name, connections, invites, Pssts, blocks and notification tokens from our server straight away. Reports made by or about you are kept for safety review, no longer linked to your account, until 90 days after they were made. The daily totals, which contain nothing about you, remain.

Children

Psst isn't directed at children under 13, and we don't knowingly collect data from them.

Changes and contact

This website

psstapp.fun uses Vercel Web Analytics to count page visits: which page, the referring site, and the country and device type. It uses no cookies and doesn't identify you. Invite pages aren't counted, so invite codes are never recorded. The home page also has a BuildHop feedback button; anything you send through it goes to BuildHop and to us. The app itself has no analytics.

A Psst link or invite page shows the sender's first name to whoever opens it, only while the link can still be used.

If this policy changes, we'll update this page and its date. Questions or requests: support@psstapp.fun.