Thump ♡ Privacy Policy
1. About this policy
Thump connects two phones: tap a heart and your partner's phone buzzes, send doodles to their home screen, and play little games together. This policy explains what information the app uses, why, and the choices you have. It applies to the Thump app for Android and iOS.
2. Information we collect
- An anonymous account. The app signs you in with an anonymous Firebase ID. There is no email, phone number or password.
- Your name, as you type it, so your partner sees who sent what.
- Pairing. Which account you're paired with, and the invite code used to pair (codes expire after 24 hours).
- What you send each other: heartbeats (when, and how many taps), doodles (the drawing), photos you choose to draw on and send, stamps on doodles, and your moves, answers and scores in games.
- Device details for notifications: a push token, a Firebase installation ID, the platform, and the phone's make, model and system version. These deliver buzzes and help fix delivery problems.
This is stored with Google Firebase (Cloud Firestore, in the United States) and handled by our server. We don't use analytics or crash-reporting tools.
3. Information kept only on your device
- Your album. Photos you add to the Album stay on your phone and are never uploaded. If you draw on one and send it, a square copy is sent to your partner like any photo doodle.
- Your memory book. The app keeps its own copy of your doodles and heartbeats on your phone, so you don't lose them if you unpair.
- Widget and app settings, such as your widget style.
4. Advertising
Thump is free and shows ads from Google AdMob. To show and measure ads, Google may collect your device's advertising ID, IP address, and information about your device and how you interact with ads. See how Google uses information from apps that use its services.
5. Consent and personalised ads
In the EEA, the UK and Switzerland, the app asks for your consent before ads are personalised, using Google's consent tool. You can change your choice at any time in Thump under Settings → Privacy choices. Everywhere, you can reset or delete your advertising ID in your phone's settings.
6. Data collection and sharing summary
| Data | Why | Shared with |
|---|---|---|
| Name | Shown to your partner | Your partner |
| Doodles, photos you send, heartbeats, stamps, game moves | Delivered to your partner | Your partner |
| Push token, installation ID, device model | Notifications | Google Firebase (service provider) |
| Advertising ID, IP address, ad interactions | Ads | Google AdMob |
| Album photos, memory book | Your own keepsakes | Nobody: they stay on your phone |
We don't sell personal data, and we don't share it for any other purpose unless the law requires it.
7. Permissions
- Notifications: to tell you about heartbeats, doodles and game turns.
- Camera: only when you take a photo to draw on, or scan your partner's pairing code.
- Photos: chosen through your phone's photo picker; the app only receives the photos you pick.
- Vibration: for the heartbeat buzz.
- Internet: to send and receive.
- Advertising ID: for ads, as described above.
Thump does not use your location, contacts or microphone.
8. Data retention and deletion
- Unpairing deletes your heartbeats, doodles, photos and games from our servers for both of you.
- Your memory book can be deleted in the app, in Scrapbook.
- Everything else (your name and device records): email us and we'll erase it within 30 days.
- Uninstalling the app removes everything kept on your phone, including your album.
9. Security
Data travels between the app and our servers over encrypted connections (HTTPS), and Google stores it encrypted at rest. Access rules let only the two people in a couple read what they send each other, and game answers stay hidden on the server until both of you have played. No system is perfectly secure, but we work to protect your information.
10. Children's privacy
Thump is not directed at children under 13, and we don't knowingly collect their personal data. If you think a child has used Thump, contact us and we'll delete their data.
11. Your rights and choices
- Change your name at any time in Settings.
- Change your ad consent in Settings → Privacy choices (EEA, UK and Switzerland).
- Ask us for a copy of your data, or for it to be deleted, by email.
- Unpair, delete your memory book, or uninstall at any time.
12. Changes to this policy
If this policy changes, we'll update the date at the top, and for significant changes we'll tell you in the app.
13. Contact us
Questions or requests: innovationapollo@gmail.com