Privacy Policy

At TellSpot, privacy isn't an option — it's the product. This Privacy Policy explains what we collect, why we collect it, and the choices you have. It applies to the TellSpot mobile and web apps, websites and services (together, the “Service”).

1. The short version

• We collect as little as possible to make the Service work.
• We never sell your data. We never serve third-party ads.
• Anonymous messages are anonymous to us too — we don't link them to your real identity unless legally compelled to investigate serious abuse.
• We use Google Analytics to understand aggregate usage of our website (which pages are visited, on which device). You can opt out at any time — see section 5.
• You can request access, export or deletion of your data at any time.

2. Information we collect

2.1 Information you give us

• Account details (optional) — display name, avatar, and an email or phone number used only for account recovery and critical security notifications.
• Content— the messages, photos, audios, videos, quiz answers and poll votes you create. Recipient-bound content (TellYous, TellMes) is shown only to the intended recipient; poll results (VoteSpot) are shown according to the visibility rules set by the poll's author.
• Reports & feedback — anything you choose to send our support or moderation team.

2.2 Information collected automatically

• Anonymous device identifier — a random ID we generate the first time you visit and store on your browser. We use it solely to count anonymous submissions per device, detect spam patterns, and ban devices that violate our Terms. It is never visible to the recipientof your messages, and it is not linked to your real-name identity. Clearing your browser data resets it.
• Technical data — app version, operating system, browser, language, timezone, screen size, number of CPU cores, touch support, crash logs and basic performance metrics. Collected to keep the Service compatible and to investigate abuse.
• Approximate regionderived from your IP address, used for routing, fraud prevention and localised content. We don't store the precise IP after the request is processed beyond the short retention windows required for security.

When you submit an anonymous message (TellMe reply, TellYou, vote, quiz answer), the technical data above is recorded in a separate, access-restricted audit log. That log is never exposed to the recipient. We use it only to:

• prevent and investigate harassment, spam, threats, CSAM and other abuse;
• respond to legally binding disclosure requests from courts or law-enforcement authorities;
• enforce our Terms of Use, including banning offending devices.

Audit-log entries are retained for 90 days by default — longer where required by applicable law or where an active investigation is open. Access is restricted to a designated abuse / Data Protection team, and every lookup is itself logged.

3. What we don't collect

• We don't require your real name.
• We don't access your contact list.
• We don't collect your precise location.
• We don't embed advertising SDKs or social-media trackers, and we never serve targeted ads.
• We don't sell, rent or share your personal data with advertisers or data brokers.

4. How we use information

We use the information we collect to:

• operate and improve the Service;
• deliver your messages to the people you intend to reach;
• prevent spam, harassment, fraud, abuse and other behaviour that violates our Terms of Use;
• respond to support requests and legal requests;
• send transactional or security notifications related to your account.

We neveruse your content to train third-party AI models, and we don't sell or rent personal data to advertisers.

5. Analytics and cookies

We use Google Analytics 4 on our website to understand aggregate usage patterns — which pages are visited, how people arrive, what devices and browsers they use. This helps us improve the Service. We do not use it for advertising and we have not enabled the optional advertising features. IP anonymisation is on.

Google Analytics is loaded only after you click “Accept”on the cookie banner that appears on your first visit. If you click “Reject”, or close the banner, no analytics script is ever loaded on your browser and no analytics cookie is set.

Google Analytics sets first-party cookies (typically named _ga and _ga_*) and sends anonymised usage data to Google. Depending on your location, your IP address may be processed by Google before being truncated. Google may retain this data according to its own privacy policy.

You can change your choice or opt out at any time through any of these methods:

• Click the “Cookie preferences” link in the footer of any page — this reopens the consent banner so you can switch from Accept to Reject (or vice versa).
• Install the Google Analytics opt-out browser add-on.
• Use private / incognito browsing, or block third-party cookies in your browser settings.

Apart from Google Analytics, the TellSpot website itself does not set any tracking cookie. Our mobile apps don't use Google Analytics at all.

6. Anonymity & encryption

TellMes, TellYous and VoteSpot ballots are designed so that the sender or voter's identity isn't exposed to the recipient unless they choose to reveal it. Media uploads (photos, videos, audios) are stored on encrypted object storage and served over HTTPS. Password-protected TellYous can only be unlocked from the mobile app, where the secret never leaves your device.

7. Data retention

• Auto-expiring messages are permanently deleted from our systems shortly after their expiry timestamp.
• Account data is kept while your account is active. When you delete your account, we delete the linked personal data within 30 days, except for limited records we must keep for legal, tax or anti-abuse reasons.
• Moderation records related to confirmed violations may be retained for up to 24 months to protect the community from repeat offenders.

8. Sharing of information

We share information only with:

• Service providers who help us run TellSpot (cloud storage, push notifications, error monitoring). They are bound by contractual confidentiality and data-protection obligations.
• Google (Analytics) for aggregate website usage metrics — see section 5 for what is shared and how to opt out.
• App stores (Apple App Store, Google Play) for the purposes of distributing the app.
• Authorities, when we receive a valid, legally binding request, or when we believe disclosure is necessary to prevent imminent harm.

9. Your rights

Depending on where you live (e.g. EU/EEA, UK, California, Quebec), you may have the right to:

• access the personal data we hold about you;
• correct inaccurate or outdated data;
• delete your data (the “right to be forgotten”);
• port your data to another service;
• object to or restrict certain types of processing;
• withdraw consent at any time, where processing is based on consent.

You can exercise these rights from the in-app settings or by writing to privacy@tellspot.ca. We'll respond within the timelines set by applicable law.

10. Children's privacy

TellSpot is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, please contact us at privacy@tellspot.ca and we'll delete it.

11. International data transfers

TellSpot is operated from servers in multiple regions. When we transfer data internationally, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses or equivalent mechanisms.

12. Security

We protect your data with encryption in transit (TLS) and at rest, least-privilege access controls, regular security reviews and an active vulnerability-management program. No system is perfectly secure, and we cannot guarantee absolute security of any data you transmit through the Service. You use the Service at your own risk and should never share sensitive information (real names, addresses, financial credentials, etc.) through anonymous messages.

TellSpot is a hosting intermediary for user-generated content; we do not author, verify, endorse or take editorial responsibility for any User Content. Please refer to the Terms of Use (sections 3, 5, 6, 11, 12 and 13) for the full scope of our responsibility and the limits of our liability regarding content shared by users.

13. Changes to this Policy

We may update this Policy from time to time. When we do, we'll update the “Last updated” date at the top of this page. Material changes will be announced in the app or by other reasonable means.

14. Contact

For any privacy-related question or to exercise your rights, contact our Data Protection team at privacy@tellspot.ca.