Privacy Policy

Effective [[EFFECTIVE DATE]]. This explains what [[LEGAL ENTITY]] does with personal data when you use PHATTT. We are the controller of that data. Write to [[CONTACT EMAIL]] about anything here.

The short version

We do not read your cards. Our internal tools report counts and nothing else. There is no screen in our administration system that lists card titles, and no way for a member of our staff to open a card from it. The only exception is described under "When we do look" below, it requires someone to send us a link, and every use of it is recorded.

What we hold, and why

• Your account. Your email address, a display name, and the date you joined. We need these to give you an account and to let you sign in. Basis: performance of our contract with you.
• Your date of birth, if you give it. Optional, and used for one purpose: to show you a greeting on your birthday. Basis: your consent, which you may withdraw by clearing the field.
• Your cards, and the media in them. Stored so they can be delivered to the people you send them to. Basis: performance of our contract with you.
• Recipients you name. Where you restrict a card to named people, the email addresses you supply, used only to check who may open that card. You are responsible for having a proper basis for giving them to us. Basis: performance of our contract with you.
• How often a card was opened. A count per card, so the sender knows it arrived. We do not build a profile of who opened it.
• Your plan and payments. Which plan you hold and when it runs to. We never see or store your card number — payment details go directly to an independent payment provider. Basis: contract, and our legal obligation to keep accounting records.
• An AI key, if you store one. Held in a form that requires a passphrase only you know. We cannot read it without that passphrase and we do not have it. Basis: your consent.
• Security and operational records. The ordinary logs any online service keeps in order to run and to defend itself, kept for a limited period. Basis: our legitimate interest in a service that works and is not abused.

What we do not do

We do not sell personal data. We do not share it with advertisers. We do not use the contents of your cards to train machine-learning models, or for any purpose other than delivering them. We do not track you across other websites.

When we do look

We will access a specific card only when someone sends us its link together with a report that it is unlawful or breaks our terms, or when a competent authority requires us to. There is no other route into it: our tools cannot search or list cards, so without a link from outside there is nothing for us to act on. Each such access is recorded internally with who did it and why, and that record outlives the card.

Who else handles it

We use a small number of specialist providers to run the Service: cloud infrastructure and storage, a payment provider, and providers of the ordinary operational tooling any online service needs. They act on our instructions under written terms and may not use the data for their own purposes. Some are outside your country, and where that involves a transfer we rely on the safeguards the law provides for it.

We do not publish which providers we use, because our architecture is not something we discuss publicly. If you need the list — for a due-diligence review, a data protection assessment, or any other proper reason — ask at [[CONTACT EMAIL]] and we will give it to you.

Two things are between you and a third party directly, not through us: your payment, which you make on the payment provider's own pages under their privacy policy, and the AI provider you choose, which your browser contacts using your own key, under their terms.

How long we keep it

• Cards: until they expire, and then they are deleted. Every card has a lifetime you choose when you make it. Once it passes, the card is permanently deleted on our routine schedule, together with the media stored only for it. This is not archiving and not soft deletion. Keep your own copy of anything you would be sorry to lose.
• Your account: for as long as you keep it.
• Payment and accounting records: for as long as tax and accounting law requires, which is longer than the rest.
• Records of content we removed: kept after the card is gone, because a record of moderation that can be deleted is not a record.

Your rights

Depending on where you live you may have the right to see the data we hold about you, to correct it, to have it deleted, to restrict or object to how we use it, to receive it in a portable form, and to withdraw a consent you gave. You also have the right to complain to your data protection authority.

Write to [[CONTACT EMAIL]]. We answer within one month. We do not charge for this, and we will not treat you differently for asking.

Closing your account

Ask at [[CONTACT EMAIL]] and we will delete your account and your cards, keeping only what the law requires us to keep, such as accounting records. Deletion is permanent and we cannot undo it, so download anything you want to keep first.

Security

We protect personal data with measures appropriate to the risk, including encryption in transit, access controls that limit what our own staff can reach, and a deliberate design in which the ordinary administrative tools cannot open a user's card at all. No service can promise perfect security, and we do not. If a breach occurs that is likely to put you at risk, we will tell you and the relevant authority as the law requires.

Children

The Service is not for children under 16, or under the minimum age of consent where you live if that is higher. We do not knowingly collect their data. If you believe a child has given us data, write to [[CONTACT EMAIL]] and we will delete it.

Cookies

We use only what is necessary to sign you in and to remember the choices you make while composing a card. We do not use advertising or cross-site tracking cookies, so there is no consent banner to click away.

Changes

If we change this policy we will change the effective date above, and where a change matters to you we will tell you before it takes effect.