Privacy
Privacy policy
- Your goals are private until you choose who can see them.
- Your address book stays on your device. Only the email address or phone number you select for an invitation is sent.
- Product analytics are off unless you enable them.
- We do not sell your data, share it with advertisers or track you across other apps.
- You can permanently delete your account and the app data you own from inside FolloThrough.
Who we are
FolloThrough is provided by Misppelled Ltd, company number 17447906, whose registered office is 106 Hither Farm Rd, London, England, SE3 9QU. We are the controller of the personal data described in this policy.
Contact us at [email protected] about privacy or data protection.
What we collect
Account and app content
Account details. FolloThrough stores a unique account identifier, your display name and the email address supplied through Apple, Google or email-code sign-in. We do not receive your Apple or Google password.
Goals and sharing. This includes goal titles, optional descriptions, purposes, tags, deadlines, forfeits, quantity targets and progress, completion and forfeit timestamps, sharing choices, group membership, notes and cheers. Goal changes are recorded so the people with access can see what changed.
Invitations and contacts. If you choose someone from your address book, the address book is read locally. Only the selected email address or phone number, invitation channel and the goal or group involved are sent to us. Invitations expire after seven days and can be revoked.
Subscription details. RevenueCat and the billing provider tell us your plan, entitlement, renewal status and expiry date. We do not receive or store your card details.
Notifications. If you enable push notifications, we store an Expo push token and your notification-category choices so the updates you selected can be delivered.
Diagnostics and analytics
Crash reports through Sentry. When a Sentry DSN is configured, crash reporting is on and is separate from the product-analytics switch. FolloThrough does not send default personal information. Before a report leaves the app, it removes account information, request data, breadcrumbs and extra data, and replaces exception messages with the exception type. Tracing and automatic session tracking are disabled.
Product analytics through PostHog. These are off until you enable Anonymous product analytics in You → Your preferences. When enabled, FolloThrough sends only the event names for creating a goal, changing completion or creating a group. It does not send goal text, contacts or free text. Session replay and automatic lifecycle capture are disabled.
Free text and sensitive information
We do not ask for health, religious, political or other special-category information. Goals and notes are free text, so you may choose to include personal information. Only write information you are comfortable storing and, for shared goals, showing to the people you select.
Why we use this information
| Information | Why we use it | UK GDPR lawful basis |
|---|---|---|
| Account and profile | Sign you in and identify you to people you share with | Performance of our contract |
| Goals, groups, sharing and notes | Provide the app | Performance of our contract |
| Invitation address | Send the invitation you requested | Performance of our contract |
| Subscription status | Provide and manage FolloThrough More features | Performance of our contract |
| Push token and preferences | Send the notifications you enable | Consent |
| Product analytics | Understand which features are used | Consent |
| Scrubbed crash reports | Find and fix faults | Legitimate interests |
| Security and rate-limit records | Protect accounts and the service | Legitimate interests |
You can withdraw consent for analytics in You → Your preferences. You can change notification categories in the app and withdraw device permission in system settings.
Who processes information for us
We do not sell personal data and we have no advertising partners.
| Provider | What it processes | Where |
|---|---|---|
| Supabase | Authentication, database and private file storage | The configured project region and supporting infrastructure |
| RevenueCat | Subscription status and entitlements | United States and other locations covered by its transfer terms |
| Apple and Google | Sign-in and store purchases you choose to use | Under each provider’s own policy |
| Stripe | Web subscription payments | United States and European Union |
| Resend | Sign-in and invitation emails | United States and European Union |
| Twilio | Invitation text messages | United States |
| Expo | Push-notification delivery | United States |
| PostHog | Product analytics only after you opt in | European endpoint |
| Sentry | Scrubbed crash reports when configured | European endpoint |
Other FolloThrough users see only your display name and the goals, progress, updates or notes made available to them through a sharing, group or participation choice.
International transfers
Some providers process information outside the UK. Where they do, transfers rely on an applicable UK adequacy regulation, approved contractual clauses and the UK International Data Transfer Addendum, or another lawful safeguard. Email us for details of the safeguard applying to a particular provider.
How long we keep it
- Account, goals, groups, notes and preferences: until you delete individual content or your account.
- Invitation links: expire after seven days. The selected recipient address and delivery status currently remain with your account until you delete it.
- Notification delivery metadata: pruned after seven days.
- Billing webhook receipts: pruned after 30 days. Subscription and transaction records may remain with billing providers as needed for validation, fraud prevention, accounting and legal obligations.
- Crash and analytics events: retained under the active Sentry and PostHog project settings, then deleted or aggregated as those periods roll over. Turning analytics off stops new PostHog events but does not rewrite events already received.
- Provider backups: live records are deleted immediately, but encrypted disaster-recovery copies can remain until the provider’s backup cycle rotates. They are not available through the app or restored as an individual account by support.
You can ask for the current provider retention period applying to a particular record by emailing [email protected].
Deletion and your rights
In You, choose Delete account and confirm Permanently delete my account. The live account and its owned data are removed immediately. Read the account deletion guide for the exact scope and subscription warning.
Under UK GDPR you may ask us to access, correct, delete, restrict or object to our use of your personal data, provide a portable copy, or withdraw consent. Email us; we normally respond within one month. You can complain to the Information Commissioner’s Office at ico.org.uk.
Children
FolloThrough is not intended for anyone under 16, and you must be at least 16 to use it. If you believe a child under 16 has created an account, email us and we will investigate and delete it where appropriate.
Security
Data is encrypted in transit. Access to app records and private goal files is enforced by database and storage policies tied to the signed-in account. Payment details do not reach our servers. No system is perfectly secure; please report a suspected vulnerability privately to [email protected].
This website
This website has no account, support form or newsletter. Google Analytics and PostHog are opt-in here: they do not load and set no non-essential cookie until you accept the banner. If accepted, they record broad visit information such as page, referrer, approximate location derived from IP address and device type. This is separate from FolloThrough’s in-app analytics setting. Change your website choice at any time: .
The hosting provider also keeps standard server logs, including IP addresses, for the limited period needed to operate and secure the site.
Changes and contact
We will update the effective date when this policy changes and give notice in the app or by email before a significant change takes effect where required.
Misppelled Ltd106 Hither Farm Rd, London, England, SE3 9QU
[email protected]