Privacy Policy

Last updated: September 2026

My People ("we", "the app") is a mobile check-in app that lets people confirm they're okay each day and notifies a small trusted circle if they don't. This page explains what data we collect, why, and what rights you have over it.

Who is responsible for your data

My People is developed and operated by an independent developer based in Spain. For any privacy question or request, contact:

What we collect

• Account info: your email address (used to sign you in via a passwordless "magic link" — we never store a password).
• Profile info: the display name you choose, and optionally a phone number and a profile photo.
• Check-in data: the daily time you choose to check in, your device's timezone, and the timestamp of each time you tap "I'm OK".
• Circle connections: who you're connected to and who's connected to you (a mutual, opt-in relationship — nobody is added to your circle without their explicit confirmation).
• Push notification token: a technical identifier that lets us deliver notifications to your specific device — not usable by anyone else to identify or contact you.
• "Hug" events: a timestamp when you send a hug to someone in your circle, so we can apply a short cooldown and prevent spam.

We do not collect your location, browsing history, or any data unrelated to the app's core purpose. We do not use advertising trackers or sell data to third parties, ever.

Why we process this data

• To provide the service itself — the app's entire purpose is checking in and notifying your circle, which requires storing this data.
• Legitimate interest — keeping the app secure and functioning (e.g. preventing abuse of the "add by phone number" feature).
• Your consent — for optional data like your phone number and profile photo, which you choose whether to provide.

Who we share data with

We use a small number of service providers ("processors") strictly to operate the app — none of them are permitted to use your data for their own purposes:

• Supabase — hosts our database, authentication, and file storage.
• Resend — delivers our transactional emails (sign-in links).
• Expo / Google Firebase Cloud Messaging — delivers push notifications to your device.

We never share your data with advertisers, data brokers, or anyone outside of what's needed to run the app.

How long we keep your data

We keep your data for as long as your account exists. If you delete your account (see below), your data is permanently removed from our active systems, aside from anything we're legally required to retain for a limited period (e.g. billing records, where applicable).

Your rights

Under GDPR and similar laws, you have the right to:

• Access the data we hold about you
• Correct inaccurate data
• Delete your account and data
• Export your data in a portable format
• Object to certain processing
• Lodge a complaint with your local data protection authority

How to delete your account and data

To delete your My People account and all associated data:

1. Open the My People app and sign in.
2. Go to Settings → Delete account and all data.
3. Confirm the deletion when prompted.

Deletion happens immediately and permanently. This removes your profile, display name, phone number, profile photo, check-in history, circle connections, and push notification token from our active systems. Nothing is retained beyond this point, except anything we are legally required to keep for a limited period (such as billing records, where applicable).

If you no longer have access to the app, email hello@my-ppl.app from the address associated with your account and we will delete it manually within a few business days.

Security

We use industry-standard protections: all data in transit is encrypted (HTTPS), your profile photo is stored in a private location accessible only to you and people you've mutually connected with, and database-level access rules ensure no one can read or modify data outside of what your account is meant to see.

Children

My People is not directed at children. While the app is often used to help care for elderly relatives, the account holder is expected to be an adult (or, for a supervised elderly user, an adult who has set up the account on their behalf with their knowledge).

International data transfers

Some of our service providers may process data outside the European Economic Area. Where this happens, we rely on appropriate safeguards such as Standard Contractual Clauses to ensure your data remains protected to the same standard.

Changes to this policy

If we make material changes to this policy, we'll update the date at the top of this page and, where appropriate, notify you in the app.

Contact