Privacy Notice

ActuallyTho is the controller of personal information processed through this website and support correspondence.

For privacy questions or requests, email support@actuallytho.com.

This notice covers the native ActuallyTho iOS app, its share and widget extensions, the actuallytho.com website and waitlist, and messages sent to our support address.

The current iOS MVP is local-first. It has no ActuallyTho user accounts, hosted sync, public feed, or social features. Website and support information is handled separately from private app content.

Saved URLs, titles, notes, editable source names, commitments, reminder times, completion or skip state, reviews, reflections, beta feedback entered in the app, preferences, and recent diagnostic state are stored locally on your device. The app and its extensions share private local storage through the iOS App Group group.com.actuallytho.app. ActuallyTho does not currently upload this content to an ActuallyTho account or hosted sync service.

Apple or iCloud may back up device data according to your device and Apple settings. We do not control or make promises about operating-system backups.

ActuallyTho stores saved links locally on your device. Automatic link previews are off: the app does not contact saved websites to retrieve titles, descriptions, or other link details.

Saving a link does not send a request to the destination website or TikTok through ActuallyTho. A destination may still receive information when you open it directly in your browser or another app, under that destination's own privacy notice.

Commitment reminders are scheduled locally through iOS. By default, notifications hide your commitment text and show a generic message. ActuallyTho shows commitment text in notifications only after you explicitly turn on Show commitment in notifications in ActuallyTho Settings. Notification routing information may contain a local record identifier and reminder time.

Notification content may be visible on your lock screen depending on your iOS notification-preview settings. iOS Settings controls notification permission. ActuallyTho removes obsolete local notifications when relevant items are completed, skipped, rescheduled, reset, or deleted.

The share extension queues shared links locally in the App Group. Up to 20 pending URLs may remain there until you open or delete them. Opening the main app automatically is best effort. If notification permission is already granted, the extension can schedule a generic local Continue in ActuallyTho notification. No ActuallyTho account is required.

The widget receives only a generic commitment-waiting state, a weekly completion count, and the snapshot update time. It does not receive or display saved URLs, titles, notes, commitment text, editable source names, commitment identifiers, or due dates.

You can optionally lock ActuallyTho using the device passcode, Face ID, or other authentication offered by iOS. Authentication is handled by the operating system; ActuallyTho does not receive or store biometric data.

When you join the waitlist, we collect your email address so we can manage the waitlist and email you about ActuallyTho access and closely related waitlist updates. We rely on your consent, given when you submit the clearly labelled waitlist form. You can withdraw consent at any time by emailing support@actuallytho.com. Withdrawing consent does not affect processing that happened before withdrawal.

The waitlist request also stores the fixed source label, the version of the waitlist notice you agreed to and consent time, the referring page if your browser sends it, your browser user-agent string, the country code supplied by Cloudflare, and the original submission time. We use these details to document your request, understand the signup source, operate the form, and investigate misuse. Our legitimate interest is keeping the website and waitlist reliable and secure.

The site and waitlist endpoint are hosted by Cloudflare, and waitlist records are stored in a Cloudflare D1 database. The website code does not send a confirmation email, place cookies, use browser local storage, run Turnstile, or include an analytics or advertising service. Cloudflare may process request and security information as the hosting provider. Cloudflare account-level logging, analytics, bot controls, WAF, Turnstile, and data-localisation settings are managed separately from this website code; we will update this notice before enabling a setting that materially changes how visitor personal information is processed.

If you email support@actuallytho.com or feedback@actuallytho.com, we receive your email address and the information you choose to include so we can answer your request or consider your feedback. Our lawful basis is our legitimate interest in providing support, responding to privacy enquiries, and improving ActuallyTho, or taking steps at your request before providing a service.

Email sent to support@actuallytho.com or feedback@actuallytho.com is stored by Hostinger, our mailbox provider. Hostinger may process information in the UK, EEA, and other locations needed to provide the service. Where a restricted UK transfer applies, we rely on the applicable safeguards in Hostinger's data processing addendum, including the UK International Data Transfer Addendum where applicable. Do not send passwords or other information that is not needed for your request.

We do not sell personal information. The recipients are Cloudflare, as website host and D1 database provider; Hostinger, as the actuallytho.com mailbox provider; and ActuallyTho, which operates this website and support service. Saved links are not disclosed to their destinations through automatic previews.

Cloudflare or Hostinger may process information outside the UK. Where a restricted UK transfer applies, we rely on the relevant provider's data processing addendum and applicable safeguards, which may include the UK Addendum to the EU Standard Contractual Clauses, the UK International Data Transfer Agreement, or an adequacy regulation. We may also disclose information where required by law.

Private app content remains on your device until you change or delete it, remove the app, or use the in-app local-data deletion action, subject to any operating-system backup behavior outside our control.

Waitlist records are deleted 12 months after the latest consent, or within 30 days of closing the waitlist if that happens sooner. A minimal suppression record is kept while waitlist email remains possible and for 24 months after the waitlist closes, so we can honour an unsubscribe request.

Support and feedback messages are deleted 24 months after the last substantive contact during a monthly review, unless we need to keep them for a legal claim or another documented legal obligation. Cloudflare operational-log, analytics, and security-processing retention depends on the Cloudflare account settings described above.

The in-app local-data deletion action clears saved items, commitments, reviews, locally entered beta feedback, preferences, recent diagnostic state, queued share links and App Group state, widget snapshots, screenshot artefacts created by the app, and pending and delivered ActuallyTho notifications. It does not create or delete an ActuallyTho account because no account exists.

Local deletion does not delete unrelated browser data, destination-site logs, previously sent waitlist or support emails, hosting logs, or operating-system backups. To stop waitlist emails, email support@actuallytho.com from the address you want removed. We will remove the waitlist record and add a minimal suppression record promptly, and no later than two working days. Every waitlist email will also include a clear unsubscribe method.

Depending on the circumstances, UK GDPR gives you rights to access, correct, erase, or restrict the personal information we hold about you; object to some processing; receive information you provided in a portable form; and withdraw consent at any time. You also have rights relating to automated decisions, although we do not use waitlist or support information for automated decision-making.

These rights apply to information we control, such as waitlist and support records. We cannot access or provide a copy of private app data that exists only on your device. We may need to verify your identity before completing a request, and legal exceptions can apply.

Please contact us first if you have a privacy concern. You also have the right to complain to the UK Information Commissioner's Office (ICO), the UK data-protection regulator, at ico.org.uk/make-a-complaint or by calling 0303 123 1113.

We will update this notice when the product or our processing changes and show the new date on this page. Material changes will be explained through an appropriate channel.

For privacy questions, requests, or withdrawal from the waitlist, email:

support@actuallytho.com