Privacy.

The app

The app has no accounts and no server. Everything you enter stays on your phone: your first name, the scenarios you pick, your practice history, the things you’ve said, the line you’re putting off, and anything you write under “What happened?”. None of it is ever sent to us or anyone else.

Reminders are notifications scheduled on your phone. There is no push server.

Deleting the app deletes all of it. We can’t recover it, because we never had it.

Subscriptions are bought through the App Store or Google Play. Apple and Google handle the payment; we don’t receive your card details.

The website

The contact form sends your name, email address and message to us by email, through our email provider, Resend. We use them only to reply, and keep a record of the message with your name and email.

If you ask to hear when the cards are ready, we keep your email address and the editions you picked on a list with Resend, and use them only to tell you. Ask us and we’ll take you off it.

When you buy cards, checkout happens on Stripe’s secure page. Stripe collects your payment details and shipping address; the card number never reaches this website. We receive your name, email, shipping address and what you ordered, to send the box and your tracking. We share your name and address with the company that packs and ships it, and with the carrier.

The site stores two small things in your browser for the current visit only (session storage): whether you’ve already seen the opening animation, and which card editions you picked. They’re cleared when you close the tab and never sent to us.

The site is hosted by Vercel, which keeps standard server logs, such as IP addresses, to run and protect the site.

Analytics and crash reports

We use PostHog to count how people use the website and app, such as which pages are visited and which steps of onboarding are finished. The line you’re putting off and anything you write about what happened are never sent. On the website it runs without cookies and stores nothing in your browser. It never records what you type.

If the app crashes, it sends a crash report to Sentry so we can fix it: the error, the screen it happened on, and the phone model and system version. Crash reports never include your name, what you’ve written or said, or screenshots.

Who else sees it

Only the companies that help us run Just Say It, for that purpose: Vercel (hosting), Resend (email), our customer records system (Twenty), Stripe (payments), the company that ships the cards, PostHog (analytics), Sentry (crash reports), and Apple and Google for the app. We may also share information if the law requires it.

We don’t sell your information, and we don’t share it with advertisers.

Keeping it safe

We use trusted providers and share only what each one needs. No system is perfectly secure, so we can’t promise that information sent online will never be exposed.

Your choices

To see, correct or delete anything we hold about you (a contact message or an order), send us a message. Order records we’re required to keep for tax purposes are kept as long as the law requires.

These rights apply to everyone, wherever you live.

Just Say It isn’t for children under 17. We don’t knowingly collect information from children under 13; if you think we have, tell us and we’ll delete it.

Contact

If this policy changes, we’ll update the date below. Big changes will be noted on the website.

Use the contact form on this page.