Privacy Policy
Last updated 22 October 2026
The short version. Your checks, your receipts and your Photo Proof photos are stored on your iPhone. We never receive them. The only personal information we hold is the email address, password and display name you use for your account, plus whether that account has a Tho+ subscription.
Who we are
Did It Tho is an iPhone app that records a timestamped confirmation when you complete an everyday action. This policy explains what the app collects, what it does not, and how to remove what it holds. Contact us any time at support@didittho.app.
What stays on your device
The following never leaves your iPhone. It is stored in the app's local database and file storage, and it is not uploaded to us or to anyone else:
- The checks you create, including their names and emoji
- Every confirmation and its timestamp — your receipt history
- Photo Proof images
- Your reminder times and app settings
Because this information is local, it is not backed up to our servers and it cannot be recovered by us if you delete the app or lose the device. An iPhone backup you make yourself may include it.
What we collect
Your account
Creating an account sends three things to our authentication provider:
- Email address — to identify your account, confirm it, and let you reset your password
- Password — stored only as a secure hash, never in readable form and never visible to us
- Display name — the name you want the app to greet you by
Your account is also given an account identifier, a random string that stands in for you inside our systems.
Your subscription
If you start a Tho+ free trial or subscription, our subscription provider receives your account identifier and the status of that subscription — whether it is in a trial, active, expired or cancelled, and when it renews. This is what lets Tho+ features follow your account to a new iPhone instead of being stranded on the old one.
Payment itself is handled entirely by Apple. We never see your card details, and we do not receive your Apple ID.
We use all of this only to operate your account and your subscription. We do not sell it, rent it, or share it for advertising.
What we do not do
- No analytics or usage tracking — the app ships with no analytics service connected
- No advertising and no ad identifiers
- No tracking of you across other companies' apps or websites
- No selling or sharing of personal information
- No location collection
- No access to your contacts, calendar, or health data
Permissions the app asks for
Camera
Only when you take a Photo Proof. The photo is saved in the app's own storage on your device. The app does not read your photo library.
Notifications
Only to deliver the reminders you set. Reminders are scheduled by iOS on the device itself, so no reminder content is sent through a server.
Service providers
We use a small number of companies to run the parts of the app we do not run ourselves. Each receives only what it needs:
- Supabase — accounts. Stores your email address, password hash and display name on our behalf.
- RevenueCat — subscriptions. Receives your account identifier and your Tho+ subscription status. It does not receive your email address, your display name, your checks, your receipts or your photos.
- Apple — payment and delivery of the app, under Apple's own privacy policy.
- Porkbun — hosting for this website.
Standard server logs at these providers may record technical information such as IP addresses for security and reliability.
Children
Did It Tho is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account, email us and we will delete it.
Your choices
- Delete your account. In the app, open Profile and choose to delete your account. This removes your account from our authentication provider and clears that account's data from the device.
- Delete local data. Deleting the app removes the checks, receipts and photos stored on your device.
- Manage your subscription. Open Settings on your iPhone, tap your name, then Subscriptions. Cancelling there stops future renewals.
- Access or correct your information. Email support@didittho.app and we will respond.
Depending on where you live, you may have additional rights over your personal information, including access, correction, deletion and portability. The account data we hold is limited to the items listed above.
Retention
Account information is kept until you delete your account, after which it is removed from our authentication provider. Subscription records are kept for as long as we need them to honour an active subscription and to meet tax and accounting obligations. Local data lives on your device for as long as you keep the app installed.
Changes
If this policy changes in a way that affects you, we will update this page and change the date at the top.