Privacy

Who runs tly

tly is a small app I run myself, for my family and friends. Questions or requests go to jacekim418@gmail.com.

Signing in with Google

When you continue with Google, tly receives your name, your email address and your Google account ID. I use them only to sign you in and to show your name to the people in your house. tly never sees your Google password and asks for nothing else from your Google account.

You can move your tly account to a different Google account in Settings, under Sign-in account. The switch happens after a 3-day wait that any of your devices can cancel. After that, the old Google account no longer opens it and your other devices are signed out.

What you put in

Your house, pets, must-dos, todos and yard are stored on tly's server so everyone in your house sees the same thing.

Your private space (journal, vault, almanac, money) is encrypted on your device before it's uploaded. I can't read it, and neither can anyone with the database. If you lose both your passphrase and your Secret Key, it can't be recovered.

To check it's you before a change to your private space (sharing, a new passphrase, erasing), your phone proves it knows your passphrase with a check value made from it. The passphrase itself never leaves your phone.

Voice notes are sent for transcription to a speech model (Google Gemini, through OpenRouter) under a no-retention setting, and the text comes back to you. The recording you keep is encrypted on your device first.

What else is kept

Which devices are signed in and when, so you can sign them out, and a scrambled form of your IP address to slow down abuse.

If you turn on reminders, the address your browser gives for notifications. tly sends at most two a day.

One cookie keeps you signed in. There are no ads, no analytics and no tracking, and nothing is ever sold.

Who helps run it

Vercel hosts the app, Supabase hosts the database, Google handles sign-in, OpenRouter and Google transcribe voice notes, and your browser's push service delivers reminders. Each sees only what it needs for that job.

Deleting

You can erase your private space in the app at any time. If you forgot your passphrase, erasing it first checks it's you with Google, then waits 3 days, so you can stop it from any of your devices if it wasn't you. To delete your whole account, email me and I'll delete it with everything you put in, except what other people in your house still need (a pet you share stays with them).

Children

tly isn't meant for children under 13.

Changes

If this changes, the new version goes here with its date.