Privacy policy

Psst Back (“Psst”) · Effective 25 September 2026

Psst keeps only what it needs to pass a Psst between two people who have both agreed to connect. There are no ads, no tracking, no analytics tools and no third-party code in the app. We don't sell or share your data.

What Psst stores on our server

• An account ID, created anonymously when you start. We don't ask for an email address, phone number or password.
• Your display name, shown only to people you're connected with.
• Your connections: who you're connected with, when you connected, and when you first pssted each other both ways.
• Invites you create: the code, when it expires, and whether it was used or cancelled.
• Pssts: who sent one to whom, when, when it was seen, whether the notification was handed to Apple, and whether it was a “same moment”. There is no message content, because Psst has no messages.
• People you block, and reports you make (who you reported and when).
• Your notification settings as far as Psst needs them: whether notifications are on, and which whisper sound you chose.
• Your device's notification token, so we can send you notifications.

What stays on your phone

The order of your people, the colours you choose for them, your app icon, and similar choices are kept on your iPhone only.

What Psst never collects

Your contacts, location, photos, microphone, browsing, or advertising identifiers. Psst doesn't use analytics or advertising services.

How we use it

• To deliver Pssts and notifications, show who has seen a Psst, and keep connections, blocks and invites working.
• To keep Psst safe: pacing limits and reviewing reports.
• To understand whether Psst works, we keep daily totals: for example, how many invites were accepted or how many pairs pssted each other that day. These totals contain no names, IDs or content.

Who processes it

• Supabase hosts our database and server functions.
• Apple delivers notifications (Apple Push Notification service) and handles Psst+ purchases. We never receive your payment details; the app checks with Apple on your phone whether Psst+ is unlocked.

How long we keep it

• Pssts are deleted after 30 days.
• Invites are deleted 30 days after they're used, cancelled or expire.
• Notification tokens are deleted when Apple reports them invalid, or when you delete your account.
• Everything else is kept until you delete your account.

Your choices

• Remove, block or report anyone: hold their band, or go to Settings → People. Nobody is told.
• Turn notifications off in iPhone Settings. Pssts still appear when you open the app.
• Delete your account in Psst → Settings → Delete account. This deletes your account, name, connections, invites, Pssts, blocks, reports and notification tokens from our server straight away. The daily totals, which contain nothing about you, remain.

Children

Psst isn't directed at children under 13, and we don't knowingly collect data from them.

Changes and contact

If this policy changes, we'll update this page and its date. Questions or requests: support@psstapp.fun.