Privacy Policy

Last Updated: January 30, 2026

Introduction

Welcome to Tethered ("we," "our," or "us"). We are committed to protecting your privacy and being transparent about how we collect, use, and protect your personal information. This Privacy Policy explains our practices regarding data we collect through the Tethered mobile application.

By using Tethered, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Information You Provide

Account Information:

• Email address (for authentication and account recovery)
• Password (encrypted and securely stored)
• Full name
• Profile photo
• User role (Student or Parent)

User-Generated Content:

• Daily check-in photos
• Mood selections (Happy, Sad, Neutral, Excited, Stressed)
• Daily journal entries and reflections
• Responses to daily prompts

Family Connections:

• Family invite codes
• Family member relationships

Information Collected Automatically

Usage Data:

• Check-in frequency and streak data
• App interaction patterns
• Date and time of check-ins
• Device type and operating system version

Technical Data:

• IP address
• Device identifiers
• App crash reports and performance data

How We Use Your Information

We use the collected information for the following purposes:

To Provide Our Service:

• Create and manage your account
• Enable daily check-ins and photo uploads
• Maintain streak tracking and visualization
• Facilitate family connections
• Display timeline/journal of your activities
• Send daily reminders and notifications

To Improve Our Service:

• Analyze usage patterns to improve features
• Fix bugs and technical issues
• Develop new features based on user needs

To Communicate With You:

• Send push notifications for daily reminders
• Respond to your inquiries and support requests
• Send important updates about the service

Data Storage and Security

Storage Location:

• All data is securely stored on Supabase (PostgreSQL database)
• Photos are stored in encrypted cloud storage (Supabase Storage)
• Data is hosted on secure servers with industry-standard encryption

Security Measures:

• End-to-end encryption for data transmission (HTTPS/TLS)
• Encrypted password storage (bcrypt hashing)
• Row-level security policies on database
• Regular security audits and updates
• Restricted access to production data

Data Retention:

• We retain your data for as long as your account is active
• You can delete your account at any time (see Your Rights below)
• Upon account deletion, all data is permanently removed immediately

Data Sharing and Disclosure

We Never Sell Your Data:
We do not sell, rent, or trade your personal information to third parties for marketing purposes.

Family Sharing:

• Your check-in photos and content are shared ONLY with family members you explicitly connect with via invite codes
• Family members can view your streak data and timeline posts
• No data is shared publicly or with other users

Service Providers:

• Supabase (database and file storage)
• Expo (app platform and push notifications)
• RevenueCat (subscription management)
• These providers have limited access to data only as necessary to perform services on our behalf

Legal Requirements:
We may disclose your information if required by law or in response to valid requests by public authorities (e.g., court order, subpoena).

Your Rights and Choices

You have the following rights regarding your personal information:

Access and Export:

• View all your data within the app
• Request a copy of your data by contacting us

Account Deletion:

• You can permanently delete your account at any time from the Settings screen
• This action will immediately and permanently delete:
  • Your profile and account information
  • All check-in photos and journal entries
  • Streak data
  • Family connections
  • All associated data
• This action cannot be undone

Modify Information:

• Update your profile information anytime
• Change your profile photo
• Edit your name

Notifications:

• Control push notification preferences in device settings
• Opt out of reminder notifications

Family Connections:

• Remove family connections at any time
• Your data becomes immediately unavailable to removed family members

Children's Privacy

Tethered is designed for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us immediately, and we will delete such information.

Third-Party Services

Our app uses the following third-party services:

Supabase:

• Database and authentication
• Privacy Policy: https://supabase.com/privacy

Expo:

• App platform and push notifications
• Privacy Policy: https://expo.dev/privacy

RevenueCat:

• Subscription and in-app purchase management
• Privacy Policy: https://www.revenuecat.com/privacy

We are not responsible for the privacy practices of these third-party services. We encourage you to review their privacy policies.

International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using Tethered, you consent to such transfers.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy in the app
• Updating the "Last Updated" date
• Sending a push notification for significant changes

You are advised to review this Privacy Policy periodically for any changes. Changes are effective when posted.

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights:

• Right to know what personal information is collected
• Right to delete your personal information
• Right to opt-out of sale of personal information (we don't sell data)
• Right to non-discrimination for exercising your rights

To exercise these rights, contact us using the information below.

European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have rights under GDPR:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

To exercise these rights, contact us using the information below.

Contact Us

Consent

By using Tethered, you consent to our Privacy Policy and agree to its terms.