Privacy Policy

Who we are

Told You So is operated by Toldyousoapp, the controller of your personal data. Contact: hello@toldyousoapp.com. Business address: 65 Calmsden, GL7 5ET. We follow the UK GDPR and the Data Protection Act 2018.

What we collect

We process your login details, first name, intentions, wins, daily and weekly check-ins, personal affirmations, favourites, reminder preferences and timezone. We keep subscription identifiers, status and billing dates; Stripe processes card details, which we do not store. Our hosting and service providers may process technical logs, device information and IP addresses to operate and secure the service.

Your diary is private to your account. Avoid including sensitive information about yourself or other people that is not needed. We do not require health, religious or other special-category information.

Why we use your data

We use account and diary data to fulfil our contract with you, provide the tracker, and manage your subscription. We rely on legitimate interests for proportionate security, fraud prevention and troubleshooting, and legal obligations for required financial records. Daily reminder emails are part of the service and are switched on by default; you can switch them off any time in Profile or through the unsubscribe link in every reminder email, without affecting your account. Tips and updates emails are only sent if you opt in. They are managed through Kit, our email provider, which receives your email address, first name and whether you've signed up, are on a trial, are paying or have lapsed. You can switch them off any time in Profile or by unsubscribing from any of those emails.

AI suggestions

If you request an AI intention plan, your description and selected period are sent through Lovable AI to generate suggestions. Do not include confidential or sensitive information. Plans are not professional advice and are saved in your notes only if you choose to keep them.

Service providers and transfers

We use Lovable for hosting, account services, storage, AI and app-email delivery, Kit for marketing emails, and Stripe for payments. Sign-in providers process information when you choose their sign-in option. We share only the information needed for these services and do not sell your diary data. Where data leaves the UK, we must ensure an appropriate safeguard, such as an adequacy decision or approved contractual terms.

Retention and deletion

We keep your account data while your account remains open, including when you cancel your subscription. You can delete individual entries without a subscription. “Delete my account” cancels subscriptions and permanently removes your app data and login. Payment providers may retain transaction records for as long as tax and company law requires; limited security logs and backups may persist until their normal expiry.

Your rights

You can request access, correction, erasure, restriction or portability of your personal data, and object where processing relies on legitimate interests. Profile offers “Download my data” and account deletion. Contact hello@toldyousoapp.com for other requests; we normally respond within one month. You can complain to the UK Information Commissioner’s Office at ico.org.uk.

Cookies and local storage

We use essential browser storage to keep you signed in and operate the app. We do not set advertising or cross-site tracking cookies, and we do not run third-party analytics.

Changes

We will update this policy when needed and notify you of significant changes affecting how we handle your data.