Legal

Privacy Policy — Tietmo

Effective date: 26 October 2026

This privacy policy applies to the Tietmo app (the “Application”) for mobile devices, provided by Tietmo (the “Service Provider”) as a free service.

Data controller: Tietmo — tietmoapp@gmail.com

This policy explains what personal data we collect, why, who we share it with, how long we keep it, and the rights you have under the EU General Data Protection Regulation (GDPR) and Danish data-protection law.

1. Who this applies to and consent

When you create an account we ask you to give two separate consents, each as an active tick in an empty box:

• Our Terms of Service, and
• this Privacy Policy — your consent to us processing your personal data as described here.

Both are required to create an account. We record each consent against your account: which version of the document you agreed to, the exact wording shown to you, the date and time, and the IP address the consent came from. You can ask us for a copy of that record at any time.

Marketing is separate and always optional. We ask for it in its own unticked box, you can create an account and use every feature without it, and you can turn it on or off whenever you like — see §5.

Withdrawing consent. You can withdraw your consent to marketing, to location sharing, to calendar import, or to storing an Afterglow “crush” at any time, without cost and without losing access to the app. Withdrawing your consent to the processing described in this policy is different: that processing is what makes the Application work, so withdrawing it means deleting your account (see §9). Withdrawal never affects processing that already happened.

Some processing does not run on your consent and is not affected by withdrawing it — safety and moderation, fraud prevention, enforcing our Terms, and anything we must do by law. Those are marked in the table in §3.

2. What information we collect

a. Information you provide

• Account: email address and password, and your date of birth (required at sign-up; used to enforce our minimum age of 16 and any event age limits, and to tell your friends on your birthday). The date itself is never shown on your profile — other users can at most see your age in years, and only if you switch that on (see Profile). On the morning of your birthday your friends get a notification that it is your birthday — with your age only if you show your age on your profile. On by default; turn off Tell friends on my birthday in Profile → Settings.
• Profile: username, full name, profile picture and banner image, biography, interests, an Instagram handle if you add one (shown as a tap-through link), and self-entered facts about you — what you study, your job, your hometown, the area you live in, and your age. Each of those five facts is hidden by default: it appears to nobody until you switch it on in Profile Settings, after which anyone who can open your profile sees it. Your biography stays visible to your friends only. You can also add any payment-method handles (e.g. MobilePay) you want, so others can settle shared expenses with you.
• Your profile board: up to ten pieces you pin to your profile — short notes you write yourself (an answer in your own words to a question like “my party trick”, up to 140 characters) and events you have been to. The board is visible to your friends. Note that pinning an event shows your friends its cover photo, title and date even if they were never invited to it; they cannot open it, and they never see its location, description or guest list.
• Content you create: events and hangouts (including titles, descriptions, and the locations/addresses you enter), group and page information, chat messages, posts and comments on an event's feed (including any photo you attach and the guests you tag with “@”), photos you upload to event/group albums, polls and votes, shared-expense records (amounts, who paid, who owes), reactions, and similar user-generated content.
• Private messages: you can chat one-to-one with a friend — text, photos, and your location if you choose to share it. Only the two of you can read it. Asking to join an event late also starts a private chat: if you ask after an event's signup has closed, your request — which event, and the host's answer — is posted as a message in a chat between you and each of the event's hosts, even if you are not friends, so you can talk about it. Without a friendship, that chat stops taking new messages once the event is over. Private messages and their photos are automatically deleted after 7 days, whether or not anyone asks, and the whole conversation is deleted immediately if either of you unfriends or blocks the other. If you wrote a note with a friend request, it becomes the first message in that chat.
• Who has read a feed post: when you look at an event's feed, we record which posts have been on your screen. The person who wrote a post — and that event's hosts — can see who has read it. We show names only, never when you read it, and no other guest can see what you have been reading. It is also what tells you which posts are new.
• Joining a group: a group can ask up to three questions that you answer in your own words (up to 200 characters each) when you request to join. Only that group's managers see your answers, and they are deleted the moment your request is approved or declined. If the group uses member roles, the label a manager gives you is visible to the other members.
• Pages (organisations): you can create a page to host events under a name other than your own, and you can follow pages. A page's member roster is visible only to its members, and its follower list is not public — a visitor sees only the follower count and which of their own friends follow it.
• Beerfridge (optional group feature): if a group turns on the Beerfridge, we record every round you take from it — which drinks, how many, when, and what they cost — and put it on the group's shared-expense ledger. This is an itemised, per-person record of what you have taken, which will typically include alcoholic drinks, and it is visible to every member of that group — that is the point of a shared tab. You can undo your own rounds, and the member who keeps the fridge can undo anyone's. The feature is not available in public groups that anyone can join.
• Shared pots (“boxes”): a group can keep named pots of money in Expenses — a kitchen kitty, a trip fund — alongside the beerfridge's cash box. A box is not a person, but it can carry a MobilePay number or a bank account so people can pay into it, and the ledger records when a member takes a box's balance onto themselves. This is visible to that group's members and, like the rest of Expenses, never exists in public groups that anyone can join.
• Social connections: friend requests and friendships (including whether a connection is marked a “close friend”), group memberships, blocks, and invitations.
• Optional sensitive features: if you use them — appreciation/“crush” reactions after an event, group “love-box” messages, availability times you publish, and reports you file about other users or events (including any free-text notes). Some of these reveal sensitive information (e.g. who you are interested in), so we restrict who can see them inside the app.
• Calendar import (optional): if you grant calendar access, appointments you choose to import are stored as private entries visible only to you, shown alongside your Tietmo events. Nothing from your device calendar is shared unless you explicitly publish it as an event.
• Adding events to your calendar (optional): if you turn this on, we write the name and time of events you are going to or hosting — and your own turns in a group's cooking or cleaning rotation, never anybody else's — into a calendar called "Tietmo" on your device. This goes one way only — we do not read or change your own appointments through it — and the entries stay on your device; nothing extra is sent to us.
• Reports and communications: anything you send us, including support requests.

b. Information collected automatically

• Device location: (i) coordinates for event locations you set — when you create or edit a public event, the address you type is sent to your phone's map service (Apple on iOS, Google on Android) to turn it into a map pin, and the resulting coordinates are stored with the event (private events store no coordinates); (ii) your GPS position only when you explicitly choose to share it in a hangout chat; and (iii) if you enable location for the Discover page, your position is used on your device to show your local area and nearby public events — it is converted to an area name by your phone’s operating system and is not stored on or sent to our servers. Viewing a map in the app sends the visible map area to the OS map provider (Apple Maps on iOS, Google Maps on Android), like any maps app. We do not track your location in the background.
• Push notification token: a device token (via Apple/Google push services) so we can send you notifications, plus your platform (iOS/Android).
• Your notification history: the notifications we send you (invites, requests, reminders) are also kept as a list in the app so you can look back through them.
• App language: the language your app is set to, so that notifications composed on our servers reach you in that language.
• Crash and error diagnostics: if the app crashes or hits an error, we collect a diagnostic report through our crash-reporting provider — the error and technical details such as your device model, operating-system version and app version. These reports do not include your identity (no user ID or email). See §4.
• Usage statistics: like most apps, we look at how Tietmo is used so we know what to make better — things like which screens get opened, how long the app is used, and how often people create events, say they're going, accept invites, join groups or add photos. In groups we also count which features get used — adding or settling up an expense, buying from the Beerfridge, signing off a dinner, or asking to swap a chore — only that it happened, never the amount or what was bought. Each of these comes with your user ID and basic technical details (phone model, operating-system version, app version), so we can see things like whether people come back. That's it: no messages, no photos, nothing you type, and no IP address is stored. We use it only to improve the app — never for ads, and we never sell it. It's on by default, and if you'd rather not share it, just turn off Share usage data in Profile → Settings → Legal (on each phone you use Tietmo on). Before you have an account — on the intro and the sign-up screens — we only count how those screens are used, anonymously: nothing is stored on your phone, nothing is linked to an account or a person, and no IP address is kept. See §3 and §4.

We do not use advertising trackers, and we do not use artificial-intelligence profiling or automated decision-making with legal effects.

c. Records of the consents you give

Each time you give or withdraw a consent — at sign-up, in Settings, or when you allow a specific feature — we store a record of it: which consent it was, which version of the document or wording you saw, whether you said yes or no, the date and time, where in the app it happened, your app version and platform, and the IP address the request came from. We are required to be able to prove that you consented, and this is how we do it. See §7 for how long we keep these records.

If you delete your account, we add your email address to that record at the moment the account is removed — and only then. While your account exists we do not copy it there, because we already have it. We add it on deletion for one reason: without it the record is a number that identifies nobody, and a record we cannot match to a person cannot show that person consented, which is the only thing it is kept for. It holds nothing from your profile, and it is deleted with the rest of the record — see §7.

d. Special-category data — the Afterglow “crush”

After an event you can send anonymous appreciation to other guests, and you can mark one person as a “crush”. Because who you are romantically interested in can reveal something about your private life, the GDPR treats this as a special category of personal data (Art. 9) and holds it to a higher standard than the rest of this policy. So, precisely:

• What we store: that you picked that person, and when. Nothing else — there is no free text and no ranking.
• Who can see it: nobody, including the person you picked and including us in normal operation. It is readable only through a database function that returns a name to you in one case: when the two of you have picked each other. A one-sided crush is never revealed to anyone, ever.
• How long: 48 hours, then it is deleted automatically — whether or not anyone asks, and whether or not it was ever a match. It also goes sooner if you permanently leave the event, if you delete your account, or if the event is deleted.
• It is entirely optional. Afterglow works without it — the appreciation reactions do not touch this category at all — and nothing else in Tietmo changes if you never use it.
• Taking it back: leaving the event removes it, as does deleting your account, and it disappears on its own within 48 hours either way. You can also email us at tietmoapp@gmail.com and we will remove it.

The same care applies to the other optional features that can reveal something personal — group “love-box” messages and the reports you file about other people. We restrict who can see those inside the app, and they are listed in the table in §3.

3. How we use your information and legal bases

We may contact you with important service notices.

4. Third parties we share data with (sub-processors)

We do not sell your personal data. We share it with the following providers who process it on our behalf, under data-processing agreements, only to run the service:

Public sharing you initiate: when you share an event or profile link, a public preview page shows limited, non-sensitive details (e.g. an event’s title, date and location, or a profile name) so the link displays a preview in messaging apps.

Moderation: when someone reports a post, a message or a photo, our moderators can read that specific item — including a photo attached to it — so they can act on the report. A report does not open up anything else: the rest of a private conversation, and other photos in it, stay unreadable to them.

We may also disclose information where required by law, to protect the rights or safety of users or the public, or to investigate fraud or abuse.

5. Marketing

You will never get marketing from us unless you have ticked the marketing box. It is optional, it is unticked by default, and saying no costs you nothing — every part of the Application works exactly the same either way.

What we send if you say yes. News and new features in Tietmo, personal recommendations, and offers about events, parties and social gatherings, plus events and offers from Tietmo's partners in restaurants, cafés, culture, concerts, travel and leisure activities. We send it by push notification, in-app message and email. We do not send marketing by SMS, and we do not have your phone number.

What we never send. We do not advertise alcohol or tobacco to anyone, and we do not send nightlife-related marketing to anyone under 18. We do not sell or pass your contact details to partners — if a partner's event or offer reaches you, it is us sending it, not them.

What is not marketing. Messages about your own use of the Application — invitations, replies, chat messages, friend requests, expense and settlement notices, reminders and changes for events you are part of, and moderation notices — are service messages. They are not marketing, they do not depend on the marketing consent, and you keep receiving them.

Turning it off. At any time, free of charge, in the app under Settings → Legal → Marketing, or through the unsubscribe link in any marketing message we send you. It takes effect immediately.

If we go quiet. If we have not sent you any marketing for 12 months, we treat your consent as lapsed and stop relying on it. If we want to start again after that, we will ask you again inside the app.

6. International data transfers

Your data is stored and processed in the EU: Supabase (database, auth, storage), our crash-reporting provider Sentry (EU region) and our analytics provider PostHog (EU region). We do not transfer your personal data outside the EU/EEA, other than the routine, OS-level map and address lookups described in §2b/§4 (handled by Apple/Google like any maps app).

One exception, outside the app: the tournament sign-up form on our website goes to a Google Sheet and is therefore handled by Google, which may store it outside the EU/EEA. See §12.

7. Data retention

We keep your personal data for as long as your account is active and for a reasonable period afterwards as needed for the purposes above. Some things go sooner, on their own:

When you delete your account (see §9), we delete or anonymise your data as described there.

8. Your rights

Under the GDPR you have the right to: access your data; correct it; erase it; restrict or object to processing; data portability; and to withdraw consent at any time (without affecting prior processing). §1 explains what withdrawing each consent means in practice, and you can ask us for a copy of your consent records (§2c) at any time. To stop sharing usage statistics, turn off “Share usage data” in Profile → Settings → Legal. You can exercise most of these in the app, or by contacting tietmoapp@gmail.com. We will respond within the legal time limit (generally one month).

You also have the right to lodge a complaint with the Danish Data Protection Authority (Datatilsynet, datatilsynet.dk) or your local supervisory authority.

9. Account deletion and what it removes

You can delete your account at any time in the app (Profile → Settings → Delete account), or request deletion without the app — see tietmo.com/delete-account or email tietmoapp@gmail.com.

When you delete your account we permanently delete your profile and the personal data linked to it — including your account, date of birth, the facts and notes on your profile and its board, your private messages and their photos, event and group messages, your profile picture and banner images, expenses and your side of any group's expense boxes, votes, friendships, group memberships, your Beerfridge history, your notification history and push tokens, the optional sensitive data in §2a, and your usage statistics (§2b).

One thing we keep: the record that you consented (§2c). We are required to be able to prove it, so deleting your account strips that record but does not remove it — see the retention table in §7 for exactly what stays and for how long.

Some information is anonymised rather than deleted where it forms part of records that must remain coherent — for example, content you contributed to a shared group or event (such as group/event album photos) may remain as part of that shared space, and certain activity or moderation records are kept with your identity removed.

10. Children

The Application is not directed to children. You must be at least 16 years old to use the Application, and we enforce this at sign-up: creating an account requires a date of birth showing an age of 16 or over. We do not knowingly collect personal data from children below this age. If you believe a child has provided us personal data, contact tietmoapp@gmail.com and we will take appropriate action.

11. Security

We take reasonable technical and organisational measures to protect your information, including encryption of data in transit, access controls (row-level security) on our database, and storing data with a reputable infrastructure provider. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

12. Changes to this policy

We may update this policy from time to time. We will notify you of changes by updating this page with a new effective date, and where appropriate through the app.

If a change materially affects how we process your personal data, we will ask you to consent to the new version in the app before you can carry on using it — we do not treat carrying on using the Application as agreement to a material change. Every version we publish keeps its own permanent address, so the version you consented to stays available to you.

13. The tietmo.com website

This policy covers our website as well as the app. The website has no accounts and no advertising or tracking cookies. It is hosted on Cloudflare, which processes the ordinary request data needed to serve and protect the pages, including your IP address.

The one place the website collects personal data is the Tietgen Dye Tournament sign-up form (tietmo.com/dyeup): the two players' names, a team name, one contact email address, and a tick confirming the entry fee was sent. We use it only to run that tournament. We do not see or store any payment details — the tick is your own word for it.

Sign-ups are written to a Google Sheet through Google Apps Script, so they are handled by Google and may be stored outside the EU/EEA — unlike the app's data (§6). They are deleted once the tournament is over. To have your team's entry removed sooner, email tietmoapp@gmail.com.

14. Contact

For any questions about this policy or your data, contact the Service Provider at tietmoapp@gmail.com.