Privacy Policy

Two kinds of people in this policy

Tindly holds information about two different kinds of people, and they are not treated the same way:

• The store owner: the person who signs up, pays, and uses Tindly. That is you, if you are reading this to decide whether to register.
• The customer, or debtor: a person the store owner adds to Tindly to track utang. This person never creates an account and never agrees to these policies directly, but their name and mobile number end up in our systems anyway, because that is what a store owner needs to record credit given to them. The only page on tindlyph.com they may ever visit is their own balance, and only if the store owner sends them a link to it. Under the Data Privacy Act, the store owner is this person's personal information controller, and Tindly is the processor acting on the store owner's instructions. This section of the policy exists mainly for that person.

Information about the store owner

We collect, directly from you:

• Your full name, email address, and mobile number (verified by SMS code).
• Your account password, stored in hashed (not readable) form.
• Payment confirmation from PayMongo (we do not receive or store your card or e-wallet number).
• Basic usage information, such as sign-in times and device list, so you can manage your own devices.
• If the app runs into an error on your phone, a short crash report: what went wrong, which screen it happened on, the app version and the browser. Customer names and numbers are removed on the phone before the report is sent, and reports are deleted after 30 days.
• If you turn on notifications on a phone: the delivery address that phone's browser gives us for them, and the browser's name. A phone that is signed out stops receiving them, and turning notifications off on it removes its address.
• Your stock list, if you keep one: the item names, categories, units and prices you type, and whether you have flagged each item as low or out of stock. This is about your shop, not about any person.
• If you ask for a refund: the reason you give, if any, and how the request went (when it was asked, approved or declined, and our reason if declined).
• If you take part in referrals: your referral code, who referred you, and the store owners you referred, with when each signed up and paid and whether each referral was rewarded or cancelled; and the texts and earnings you received for them.
• If you ask for a referral payout: where to send it (GCash, Maya or a bank), the account holder's name, the account or mobile number, and the bank's name. They are saved so you do not have to type them again, and you can change them the next time you ask.
• A random id for each browser you sign up or sign in with (see the cookies section below), so we can spot someone referring themselves.

We use this to create and secure your account, process your license payment and any refund, run the referral program and send payouts, send you account-related messages (like OTP codes, receipts, and emails about a refund or a payout), and provide customer support. To do those things, the Tindly team can see your account details, payments, refund requests, referrals and payout details. We do not see your customers' names, numbers or balances in doing so.

Referrals: what the other store owner sees

If you sign up through another store owner's referral link, they can see, in their own app: your first name, and where the referral stands (signed up, paid, waiting for the refund window, rewarded, or cancelled, including when a refund request is open or a refund was made). They cannot see your email address, your mobile number, your store, your customers, or anything else in your account.

If you refer others, the same applies the other way: you see only their first name and how each referral stands. Referral records, payout details and payout history are kept for as long as your account is, and deleted with it, except where we are required to keep transaction records for longer to comply with tax or accounting law.

Information about your customers (debtors)

For each customer you add, Tindly stores what you choose to enter, typically:

• Their name.
• Their mobile number, if you enter one (needed to send them SMS reminders).
• The utang and payment entries you record for them, including the items, quantities and prices you list on an utang, and the running balance calculated from those entries.
• If you send them a balance link: the link itself, the 4-digit PIN that goes with it (stored hashed, like a password), and a log of each time the link was opened or a wrong PIN was entered: the date, the time, and the outcome. That log is shown to you, the store owner, so you can see whether the link is being used and by how many tries.

Why we hold it: solely so the store owner can keep an accurate record of credit given and received, can send that customer payment reminders, and, if the store owner chooses to, can let that customer see their own record. Tindly does not use a debtor's information for its own marketing, does not sell it, and does not share it with anyone other than the store owner who entered it, the customer themselves through a balance link, and the service providers described below.

The balance link, specifically: a store owner can send a customer a private link by text message. Opening it and entering the PIN shows that one customer their own name, their balance, and their recent entries, and nothing about anyone else. The page is kept out of search engines, is not cached, stores nothing on the customer's phone, and has nothing on it that leads to any other page. Five wrong PINs lock the link for a while, and the store owner can replace a link at any time, after which the old one stops working. Whoever holds the link and knows its PIN can see that record, which is why the store owner is asked to send it only to that customer's own number.

How long we keep it: for as long as the store owner's account is active and the customer record has not been erased. A store owner can erase a customer from inside Tindly: that removes the name, the mobile number and the note, stops any balance link working, and clears the text of reminders sent to them. The amounts and dates of the credit itself stay, because they are the shop's own record of money lent and repaid, and they are no longer attached to a name. If the store owner closes their Tindly account instead, there is first a 7-day grace period, in which signing in again cancels the closing; after it, everything including those amounts is deleted within 90 days, except where we are required to keep transaction records for longer to comply with tax or accounting law.

If you are a debtor and want to see, correct, or erase your data: Because the store owner controls what is entered about you, the fastest path is always to ask them directly. They can look up your record, correct it, or erase your details from their own Tindly account, and they can send you a balance link so you can see it yourself. If you are not able to reach the store owner, or you believe your information is being misused, you can contact us at privacy@tindlyph.com and we will help route your request to the right store owner or, where the Data Privacy Act requires it of us as processor, act on it directly.

Who else sees this data

• Supabase (our database and authentication provider) hosts all account and customer data on our behalf, under a data processing agreement.
• Semaphore receives a mobile number only at the moment a text is sent, solely to deliver it: a customer's number for a reminder or a balance link, and a store owner's number for their verification code.
• Resend receives a store owner's email address only to deliver account emails, such as the confirmation link, password resets, and emails about a refund or a referral payout.
• Vercel hosts the website and the app. Like any web host, it handles the requests your browser makes to load them.
• Your phone's notification service (Google for Android and Chrome, Apple for iPhone, or your browser's maker) delivers notifications if you turn them on. Each one is encrypted so that only your phone can read it, and none of them names a customer or an amount.
• PayMongo processes the store owner's license payment and any refund of it. When we send a referral payout through PayMongo, the account holder's name and the account or mobile number go to PayMongo, and through it to the receiving e-wallet or bank, to deliver the money. We do not pass any customer (debtor) data to PayMongo.

We do not sell personal data to anyone, for any reason.

Security

Data is encrypted in transit and at rest, and access to the database is restricted to what the Tindly service itself needs to run. No method of storing or transmitting data is 100% secure, but we treat both store owner and customer data with the same level of protection.

Cookies and what is stored on your device

We do not use cookies for advertising or analytics, and there are no third-party tracking scripts on this website. Nothing here reports your visit to anyone else. What we store is only what is needed to make Tindly work:

• A sign-in cookie: set when you log in, so you stay logged in as you move between pages. Clearing it signs you out.
• Your email address, briefly: set when you register, so the “Resend email” button on the confirmation screen knows where to send it. It expires after two hours and cannot be read by scripts on the page.
• A referral code, if you opened a referral link: the 7-character code from the link, kept for 7 days so the account you create is matched to the store owner who invited you. Signing up clears it.
• A browser id: a random string, kept for a year, set when you open a referral link, sign up or sign in on this website. It says nothing about you; we record it with your account so that a referral made from the referrer's own browser can be checked before a reward is given. It cannot be read by scripts on the page.
• Your light or dark theme choice: kept in your browser on your own device. It is never sent to us.
• Your PIN-protected sign-in, in the app: stored encrypted on the phone itself so the app opens with four digits instead of your password. The PIN never leaves your device and we cannot read it or look it up.
• Small reminders for the app itself: which version's “What's new” you have already seen, whether you closed the install prompt, and which account turned on notifications on that phone. They stay on your device.
• Nothing at all, on a customer's balance page: it sets no cookie, keeps nothing in the browser, and asks the browser not to keep a copy of the page. What a shared phone keeps after it is closed is only the address in the browser's history, which is why the page's title names nobody.

Every one of these exists to deliver something you asked for, or to keep the service working fairly: staying signed in, resending your own confirmation email, remembering how you like the screen to look, giving you the discount from a referral link, and stopping referral rewards from being claimed by referring oneself. That is why there is no cookie banner to click through. If we ever add analytics, advertising, or anything that follows you across other websites, we will say so here first.

Your rights under the Data Privacy Act

Both store owners and the customers they track have the right to be informed about how their data is processed, to access it, to ask for correction of inaccurate data, to object to certain processing, and to ask for erasure or blocking of data that was unlawfully obtained or is no longer needed. Contact privacy@tindlyph.com to exercise any of these rights.

Changes to this policy

We may update this policy as Tindly grows or as the law changes. Material changes will be posted here with an updated date, and store owners will be notified by email where practical.

Contact

For anything not covered above, reach us through our Support page or at privacy@tindlyph.com.