Privacy Policy
In short: TikTym stores your account details and the practices and minutes you log, so it can show your progress on any device. Your data is stored in India (Mumbai). We don't sell it or show ads. Only if you say yes, Google Analytics tells us anonymously which screens and features get used; you can say no, or turn it off at any time. You can export or delete everything at any time.
1. Who is responsible for your data
TikTym is run by Pramal IT Services Private Limited (CIN U72900AP2022PTC121639), registered in Andhra Pradesh, India. We are the Data Fiduciary for your personal data under India's Digital Personal Data Protection Act, 2023 ("DPDP Act"). Contact: praveen.cherukuru@gmail.com.
2. What we collect
| What | Details | Why |
|---|---|---|
| Account | Your email address and, if you use Google, your Google name. Your password is handled by Firebase Authentication and never seen or stored by us. Firebase also keeps sign-in records such as when you created your account and last signed in. | To sign you in, keep your data in your account, and greet you by name. |
| Your practices | Names, colours, daily minute targets, which weekdays they apply, start dates, and whether they're archived. | To work out what's due each day and your carried-over backlog. |
| Your entries | For each entry: the practice, date, minutes, an optional note you write, and when it was saved. | To show progress, streaks, history and insights such as "your usual time". |
| Settings | Your backlog limit. | To apply your choice on every device. |
| Security signals | Google reCAPTCHA (used through Firebase App Check) collects technical information such as your browser, device and how the page is used. | To confirm requests really come from the TikTym app, and block bots and abuse. |
| Usage statistics (only if you allow them) | Through Google Analytics: which screens you open; when you log minutes (and how: a quick tap, the timer and so on), finish a timer, add a practice or sign in; the app version; your device and browser type; and your approximate location (city or region, worked out by Google from your connection). Google Analytics sets cookies with a random identifier (_ga). It never receives your name, email address, practice names, notes or minutes history. Advertising features are switched off. | To see which features help people and what to improve. |
| Technical data | Our service providers (Google) receive your IP address and browser details when the app, its fonts or its data load. | To deliver the app and keep it secure. |
We don't collect your precise location, contacts, photos or payment details, and we don't advertise. Cookies: reCAPTCHA's security cookie, used to tell people from bots, and, only if you allow usage statistics, Google Analytics' cookies.
3. What stays on your device
To work quickly and offline, the app keeps some data in your browser's storage on your device: the app's files, a copy of your synced data, your sign-in session, your theme choice, a running focus timer, and small preferences such as tips you've dismissed. Clearing the site's data in your browser removes it from that device; your account data stays safe in the cloud.
4. Our legal basis
We process your personal data on the basis of the consent you give when you create an account and use TikTym, for the purposes above. Usage statistics need a separate consent: the app asks with an unticked checkbox when you create an account, and you can switch them on or off at any time in Setup › Privacy; our website asks with a bar before collecting any. Nothing is sent until you say yes. You can withdraw either consent at any time (see section 7). Withdrawing doesn't affect processing that happened before.
5. Where your data is stored, and who processes it
- Your account data and practice data are stored in Google Cloud Firestore in Mumbai, India, using Firebase by Google.
- Our processor is Google, which provides Firebase Authentication, Cloud Firestore, Firebase Hosting, Firebase App Check with reCAPTCHA, Google Fonts and, if you allow usage statistics, Google Analytics. Some of these services, such as sign-in, reCAPTCHA, fonts and Analytics, may process data on Google's servers outside India, as the DPDP Act permits.
- We don't sell, rent or share your personal data with anyone else, except where the law requires it.
This site is protected by reCAPTCHA, and the Google Privacy Policy and Terms of Service apply.
6. How long we keep it
Usage statistics are kept in Google Analytics for up to 14 months. We keep your other data while you have an account. If you delete an entry or a practice, it's removed from our database straight away. If you delete your account, all your practices, entries, settings and your sign-in account are deleted. Our providers may hold copies in their own secured logs or backups for a limited time under their policies.
7. Your rights
Under the DPDP Act you can:
- Access a summary of your data and how it's processed. You can see all of it in the app, and download it with Setup › Data › Export as JSON.
- Correct or update it: edit or delete practices and entries in the app, or ask us.
- Erase it: delete entries and practices in the app, or everything with Setup › Danger zone › Delete account.
- Withdraw consent: for usage statistics, turn off Setup › Privacy › Share anonymous usage stats in the app (which also removes the Analytics cookies), or choose No thanks on our website; for everything else, delete your account.
- Nominate someone to exercise these rights for you in case of death or incapacity, by writing to us.
- Raise a grievance with us (section 11). If you're not satisfied with our response, you can complain to the Data Protection Board of India.
8. Security
Data travels over encrypted connections (HTTPS). Database rules let each signed-in person read and write only their own data, and App Check helps make sure only the real TikTym app can reach it. No system is perfectly secure; if a personal data breach affects you, we'll inform you and the Data Protection Board of India as the law requires.
9. Children
TikTym is for people aged 18 and over. We don't knowingly process children's data. If you believe a child has created an account, contact us and we'll delete it.
10. Changes to this policy
We'll update this page if our practices change; the date at the top shows the latest version. For significant changes we'll tell you in the app before they take effect.
11. Contact and grievances
For questions, requests or grievances about your personal data, write to our Grievance Officer at praveen.cherukuru@gmail.com. We'll acknowledge your message and respond as quickly as we can, and always within the time the law requires.