Privacy Policy

Last updated: October 7, 2026

This Privacy Policy explains what information ticly ("ticly", "we", "us") collects when you use the ticly app and website at ticly.app (the "Service"), how we use it, who we share it with, how long we keep it, and the choices you have. ticly is a photo-sharing app where each moment you share lives for 24 hours, other people can give it tics to add time, and expired moments stay in your private memories.

1. Information we collect

1.1 Account information

• Email address.
• Username and, if you add one, a profile photo.
• Year of birth, to confirm you are at least 13 years old.
• Password, if you sign up with email. Passwords are stored only as a secure hash by our authentication provider; we never see or store them in plain text.
• If someone invited you, which account invited you.

1.2 Information from Google Sign-In

If you choose "Sign in with Google", we request only the basic scopes openid, email and profile. From Google we receive:

• Your Google account ID.
• Your email address and whether Google has verified it.
• Your name and profile picture URL, as provided in your Google profile.

We do not request access to your Gmail, contacts, calendar, Drive files or any other Google data, and we do not receive your Google password.

1.3 Content you share

• Photos you upload and optional captions.
• Tics you give, people you follow, and notifications about your activity.
• Information about your content such as when it was posted and when it expires.
• The daily theme a moment was shared for, if any.
• Reports you send (a moment or a person, with a reason) and the people you block. Reports are private: the person reported is not told who reported them, and a blocked person is not notified.

The app accesses your camera or photo library only when you choose to take or pick a photo.

1.4 Contacts (optional, phone app only)

• Only if you allow it, the app reads names, phone numbers and email addresses from your phone's contacts to show people you can find or invite.
• Your address book is not uploaded or stored by ticly.
• When you tap a contact, that one email address is sent to our server once to check whether the person has a ticly account. It is not stored.
• Invitations are sent from your own device through your text message or email app.

1.5 Information collected automatically

• Your time zone and app language, so notifications arrive at the right local time and in your language.
• Push notification tokens and browser push subscriptions, if you turn on notifications.
• Basic product events (for example, that a moment was shared or a share card was shown), used to improve the Service.
• Technical information such as device type, browser, operating system and IP address, as processed by our hosting providers to deliver the Service and keep it secure.
• Data stored on your device, such as your signed-in session and preferences.

We do not collect your precise location.

2. How we use your information

• To create and secure your account and sign you in.
• To show your moments to other people and let them give tics.
• To keep your expired moments in your private memories.
• To send notifications you have allowed, such as tics on your moment, a moment about to end, or the daily theme.
• To check uploaded photos and captions for harmful content before they are published.
• To prevent abuse, enforce our Terms of Service, and comply with the law.
• To understand how the Service is used and improve it.

We do not sell your personal information, and we do not use it for advertising.

3. How we use information received from Google

4. Who can see your information

• Other ticly users can see your username, profile photo, the moments you share while they are live, how much time is left on them, and who gave them tics. When you give a tic, your username and photo can appear on that moment, including on the picture of it that its owner shares outside ticly.
• Only you can see your expired moments (memories).
• Anyone with a link you choose to share can see that one moment while it is live.

5. Service providers

We share information only with providers that run the Service for us, under their own privacy and security commitments:

• Supabase: authentication, database and photo storage.
• Vercel and Expo (EAS Hosting): hosting the website and app servers.
• Expo push service, and Apple, Google and browser push services: delivering notifications you have allowed.
• OpenAI: checking uploaded photos and captions for harmful content, and writing the optional farewell message for an expired moment.
• Resend: sending account emails, such as a reminder to finish signing up.
• Google: Sign in with Google, if you use it.

We may also disclose information when required by law, to protect the rights and safety of our users or others, or as part of a merger or sale of the Service, in which case this policy continues to apply.

6. How long we keep information

• A moment is shown to other people for 24 hours, plus any time added by tics. After that it is no longer visible to others.
• Expired moments stay in your private memories until you delete your account.
• Your account information is kept while your account exists.
• When you delete your account, we delete your account, your photos, your moments and memories, your tics, follows and notifications. Copies in routine backups are removed as those backups expire.

7. Your choices and rights

• Delete your account at any time in Settings, or without the app at ticly.app/delete-account. This permanently deletes your data as described above.
• Access or correct your information: you can edit your username and profile photo in the app, or contact us for a copy of your data.
• Notifications: turn any type off in Settings > Notifications, or in your device or browser settings.
• Google: you can remove ticly's access to your Google account at any time at myaccount.google.com/permissions.
• Depending on where you live, you may have additional rights. Contact us and we will respond within 30 days.

8. Security

Data is sent over encrypted HTTPS connections, passwords are stored only as secure hashes, database access is restricted by row-level security rules, and access to personal data is limited to what is needed to run the Service. No method of transmission or storage is completely secure, but we work to protect your information.

9. Children

ticly is for people aged 13 and older. We do not knowingly collect information from children under 13. If we learn that we have, we will delete it promptly.

10. International transfers

Your information may be processed in countries other than your own, including the United States, by us and the providers listed above, with safeguards appropriate to this policy.

11. Changes to this policy

We may update this policy from time to time. We will show the new date at the top and, for significant changes, tell you in the app or by email.

12. Contact

For any question or request about your privacy or your data, email dannyhilariosuarez@gmail.com.