Short version: Tintee stores a first name, a mood and a group, in Europe, for the people you chose — and nothing else. No ads, no tracking, no selling. Here is the long version.
Effective September 5, 2026 · version 0.1 (pre-beta). This policy will be reviewed by counsel and updated before the public launch; the date above changes when it does.
Tintee is an independent project run by its founder, based in France, who is the data controller. Legal entity details will be published here when the company is registered. Contact: hello@tintee.app.
| What | Details and purpose | How long |
|---|---|---|
| Account | A random identifier created by Firebase Authentication (anonymous sign-in). No email, phone number or password. | Until you delete your account — or automatically after 90 days without opening the app (see section 7) |
| Profile | The first name or nickname you type. Which group you are in. The day you last opened the app (the date only, never the time, never how long). | Until you delete your account |
| Recovery code | A 12-character code shown in Settings that lets you get your account back after reinstalling or changing phones. We store only a one-way hash of it, never the code itself. Your phone keeps a copy in its secure storage, which your platform may sync to your own iCloud Keychain (Apple) or Google backup (Android) so that it follows you to a new phone. | Until it is used or replaced, or until you delete your account |
| Mood | Your current mood (one of ten), an optional note of up to three words, and when you set it. Your group sees the current mood and your last four moods. | Current mood until you change it; short history kept in the group board; feed events expire after 24 hours |
| Signs | Who sent a ✌️ sign to whom in your group, and when. | 24 hours in the app; then deleted |
| Group | The group name, its type (friends / family / close ones), its members (up to 20) and its invite link. | While the group exists |
| Device | A push notification token and the platform (iOS / Android), used only to refresh your widget silently when a member changes mood. | Until you sign out or delete the account |
| Parent approval | When a parent approves an account: the approval code, the approving account’s identifier, and timestamps. Never the age typed at sign-up, never a date of birth. | While the child’s account exists |
| Report | When a member reports another member of the group from their card: who reported whom, the group, the reason (from a short fixed list), and a copy of the reported note. Never any free text. | 90 days, then deleted automatically |
We never collect: your email, phone number, real name, date of birth, location, photos, contacts, or anything from other apps. The app has no analytics and no crash-reporting SDK today. If we add measurement later, it will be aggregated and without personal data, and this policy will say so first.
Providing the service you asked for (contract) for the account, profile, mood, signs, group and device data; your consent — or your parent’s — for the account of a minor below the age of digital consent; our legitimate interest in keeping the service secure.
On Google Firebase (Google LLC and Google Ireland Ltd, as our processor), in the europe-west1 region (Belgium). Google may process some data outside the EU under the European Commission’s standard contractual clauses. Push notifications go through Apple (iOS) and Google (Android) notification services; they carry no mood and no name — only a signal to refresh the widget. Your recovery code lives in your phone’s secure storage; if you use iCloud Keychain (Apple) or Google backup (Android), your platform syncs it under your own account so that it follows you to a new phone — we never see that copy.
Tintee is for people 13 and older. In the United States we do not knowingly accept users under 13. In the European Union, users below their country’s age of digital consent (15 in France) can only use Tintee after a parent or legal guardian approves the account with a one-time code; the parent can withdraw that approval at any time, which deletes the account. The age typed at sign-up is never stored.
You can ask to access, correct, export or delete your data, or object to a processing, by writing to hello@tintee.app. We answer within 30 days. Deleting your account removes your profile, moods, signs, device tokens, recovery code and, if you are a minor, the parent approval. You can also complain to your data protection authority (in France, the CNIL).
Uninstalling the app does not delete your account. Your first name and last mood would otherwise stay visible to your group. So: an account that shows no sign of life for 90 days — not opened, no mood published, no sign-in refresh, and no device still registered for notifications — is deleted automatically, with everything attached to it. To keep your account when you reinstall or change phones, use the recovery code from Settings. A parent account that still covers a child’s account is never deleted automatically.
Reports. A report made from a friend’s card is kept for 90 days so that a human can act on it, then deleted automatically. Each report also sends us an alert e-mail that contains only the report’s identifier and reason — never the note, never who is involved. A report is not deleted when the reporter or the reported person deletes their account: it is the trace of a moderation, not part of a personal profile.
Data is encrypted in transit and at rest. Access rules are enforced on the server for every read and write: a member can only read their own group, and only the account owner can change their profile. Rules are tested automatically before every release.
We will post changes here and, for material ones, in the app before they take effect.