Privacy Policy

Effective July 16, 2026

This policy explains how TallyHQ, Inc. ("Flutter," "we," "us") handles information when you use the Flutter iOS app, joinflutter.app, or a Flutter message link.

Important: Flutter does not promise that a sender is untraceable. We hide sender identity from the recipient, but retain limited security records so we can prevent abuse, respond to reports, and comply with law.

Information we collect

• Account information: your username, age eligibility information (birth month/year and the minimum age applied), region, settings, prompts, and account identifiers.
• Messages and reports: message content, its recipient and prompt, report details, moderation decisions, read state, and block actions.
• Technical and anti-abuse data: IP-derived coarse location, device/browser family, timestamps, push tokens, and pseudonymous keyed hashes used for rate limiting and blocking. We do not store a sender's raw IP address in application message tables.
• Subscription data: product, entitlement, transaction, expiration, and environment information needed to provide paid features. Apple processes payment details.

How we use information

We use information to provide accounts and message links, deliver messages and notifications, show truthful coarse hints, enforce age and safety controls, prevent spam and abuse, support users, maintain security, and comply with legal obligations. We do not sell personal information or use anonymous message content to create targeted advertising profiles.

What recipients can see

Recipients see message content and may receive coarse, non-identifying hints such as a country/region, device family, or time. Flutter does not reveal the sender's name, account, social username, exact location, IP address, or contact information through hint features.

Sharing

We share information with service providers that host and protect Flutter, including Supabase, Vercel, Apple, and notification or moderation providers we enable. We may disclose information when reasonably necessary to address safety, fraud, legal process, or rights protection. We do not publish sender security identifiers.

Retention and deletion

We retain information only as long as reasonably necessary for the purposes above. Deleting your account removes your profile and associated private app records from active systems, subject to limited backups, fraud-prevention records, reports, legal obligations, and safety preservation. A sender can ask us to review personal information contained in a message by contacting us with enough detail to locate it.

Children and age eligibility

Flutter is not intended for children under 13. A higher minimum may apply where local law requires it. We use a conservative jurisdiction rule and do not knowingly allow an ineligible person to create an account. Contact us if you believe a child has provided information.

Your choices

Account holders can pause their link, disable optional notifications, add hidden words, block senders, report messages, and delete their account. Depending on your location, you may have rights to access, correct, delete, restrict, or obtain a copy of personal information.

Security and international processing

We use access controls, row-level security, encryption in transit, and pseudonymous keyed identifiers. No system is perfectly secure. Flutter and its providers may process information in the United States and other countries, subject to applicable safeguards.

Changes and contact

We may update this policy and will change the effective date when we do. Material changes may also be announced in the app. For privacy requests, contact [email protected]. For urgent safety issues, contact [email protected].