Privacy Policy

On ghosted.day, we use Google Analytics. It loads automatically and uses cookies to measure page visits, traffic sources, scroll depth, which FAQ answers you open, and clicks on the download button. Google processes website usage and device information to provide these reports. Advertising storage and personalization are disabled.

Website analytics does not include your app check-ins, trusted-contact details, or sign-in email.

Read more about how Google processes information from sites that use its services.

The email invitation and preferences page at /contact-email/ does not run website analytics. It uses the token in your email link to load the invitation and save your explicit choice. The page removes that token from the visible URL after loading and does not save it in browser storage or send it to analytics.

When you choose a language or dismiss a language suggestion, we save that choice in your browser’s local storage on this device. Your browser’s language preferences are used only to suggest a translation. We do not use your country or request your location to choose a language. You can reset this preference by clearing this site’s data in your browser.

Your email address. You sign in with a one-time code sent to your email. We store your email to maintain your account and send sign-in codes. We do not use or store passwords.

Your check-in settings and times. Your daily deadline and chosen time zone, check-in interval for older schedules, grace period, reminder timing, language preference, whether Travel Mode is on, whether you have an active subscription, the time you last checked in, and the time an alert was last sent. These settings let us manage check-ins and send messages in your chosen language.

Your trusted contacts. We store the contact names you enter and the email addresses and/or Telegram usernames you choose. For Telegram, we also store a chat identifier after confirmation. For email, we record invitations, consent, opt-outs, delivery attempts and provider delivery/failure identifiers and timestamps. To retry an alert consistently, we may retain its recipient address and exact message content, including the unsubscribe link. These records are linked to your Ghosted account and are used to deliver alerts, honor recipient choices, and prevent abuse.

We do not collect location data. There is no location field anywhere in our database and the app does not request location permission. GHOSTED is about whether you checked in, never where you were.

Only add someone who has agreed to be your trusted contact. Email alerts begin only after the recipient explicitly accepts an invitation sent to their mailbox; opening the link alone does not accept it. Telegram alerts require separate confirmation through the bot. Email recipients do not need a Ghosted account or app.

An email recipient can stop alerts using the link in an invitation, confirmation email, or alert and explicitly confirming that choice. They can stop Telegram alerts by stopping or blocking the bot in Telegram. Removing one channel does not stop another separately confirmed channel. You can remove a channel or contact in the app. Removing and recreating a contact does not override an opt-out.

A recipient who changes their mind can reopen a valid original email link and explicitly turn alerts back on. If the contact was removed or its email address changed, they can allow a new invitation and must confirm it before alerts resume. This choice does not automatically clear delivery restrictions caused by bounces, complaints, or the email provider. We retain limited records after contact removal to honor these choices, handle delivery failures, prevent duplicate alerts, and prevent abuse, as described below.

We do not sell your data and we do not share it for advertising. We use a small number of providers to run the service:

• Supabase hosts our database and handles sign-in. Your email, settings and trusted-contact details are stored there.
• Resend delivers email invitations, confirmation/test messages, and missed-check-in alerts. It processes recipient email addresses, sender information, message content, and delivery information for this purpose. We use its delivery, failure, bounce, and complaint events to report delivery problems and stop unsuitable deliveries. These messages are for the service, not advertising.
• Telegram delivers the confirmation request and the alert to your trusted contact. Their handle and the message are processed by Telegram.
• Apple processes subscription payments. We receive verified subscription records, including purchase identifiers, an account identifier, subscription status and expiry. We do not receive your payment card details.

We may also disclose information if we are legally required to, or to protect someone's safety.

We retain active account data while your account exists. Removing a contact deletes its active contact and channel records, active verification tokens, and full alert records, including saved message content, from our live database. We keep limited records associated with your account until you delete it: recipient opt-outs, invitation attempts, proof used to verify a recipient's request to resume alerts, the email address associated with each invitation or confirmation, and past delivery details such as the destination, check-in period, outcome, and provider identifier. These records help us respect recipient choices and avoid duplicate alerts if a contact is recreated. Account deletion removes your account-linked records from our live database. It cannot recall messages already delivered to recipients, and our providers may retain operational records or backups under their own retention practices. We do not promise that provider-held copies are erased immediately.

In the app, go to Settings → Danger Zone → Delete Account. This removes your account-linked records from our live database, as described above. It cannot be undone. You do not need to contact support to delete your account.

Depending on where you live, you may have the right to access, correct, export or delete your data, and to object to certain types of processing. You can delete your account in the app. For other requests, email hello@ghosted.day.

GHOSTED is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has given us information, contact us and we will delete it.

Data is encrypted in transit and at rest by our hosting provider, and access to your records is restricted to your own account. No service can guarantee absolute security.

GHOSTED is not an emergency service. It does not contact emergency responders or provide medical or health monitoring services. It notifies your chosen contacts, who decide how to respond.

When we change this policy, we will update the effective date above. We will notify you of significant changes in the app or by email.

Questions about this policy or your data: hello@ghosted.day. This policy is governed by the laws of the United States.