Privacy

What we store

All of it, in full:

Your email address.

So you can sign in. We send a six digit code to it and nothing else.

The name you chose.

Shown to the one person you're linked to, on their button. Nowhere else, to nobody else.

A notification token for each device.

A string your phone's operating system gives us so a notification can reach it. It identifies the device, not you.

Your timezone.

Used for exactly one thing: if your button has been down a long time, the reminder we send you shouldn't arrive at four in the morning.

When buttons were pressed and lifted.

Timestamps, and who pressed them. That's the app working. It's how the other person can see where they stand.

The dates you keep together.

A title and a date, visible to both of you, editable by both of you. Nothing counts how many years it has been.

Whether you are subscribed.

Snit costs money after a trial, and RevenueCat handles that for us. They tell us whether your subscription is active and nothing else: not your card, not your name on it, not what you spent. Apple takes the payment and we never see it. The date your trial started is kept here, so it cannot restart itself every time you reinstall.

When you would rather not be buzzed.

The overnight hours you picked, and how long your own button may sit down before we remind you it is still there. Both are settings, not observations: they change what the app does and nothing reads them back to anybody.

What helps when you are mad, if you write it.

One optional sentence, in your words, readable by the person you are linked to and by nobody else. It is not attached to any argument and it never appears on the button. It sits in the shared area, where somebody has gone looking for it. Leave it empty and there is nothing to keep.

The feelings you share, if you share them.

One of six words, the question your partner chose to ask about it, your answer, and whether you asked to talk or for some space. Visible only to the two of you. The app shows only the last day of this and keeps no timeline and no counts; the rows themselves stay until you unpair or delete your account, either of which deletes them with everything else.

The messages you write ahead of time.

Your words, held until their moment. Before delivery only you can see one; after delivery only your partner can. Dismissed means deleted, and anything not dismissed is deleted a week after it arrived. There are no read receipts and no archive.

What we don't

No location. No contacts. Snit never asks for your address book, and the only way to link to someone is a code you handed them yourself. No advertising identifiers, no analytics, no tracking. No third-party trackers on this page.

There is exactly one outside service: RevenueCat, which handles subscriptions. It is told your account identifier, so a subscription can follow you to a new phone, and it tells us whether yours is active. Apple takes the payment, so neither RevenueCat nor we ever see your card.

And nothing is ever sent for you. The button itself is still wordless. Snit will offer an opening sentence when you are writing ahead, and you can change every word of it or ignore it; it is a list that ships inside the app rather than anything written about you, and none of it leaves your phone until you send it. Nobody else can ever be the author, and there is no feed or history for them to pile up in.

We have never sold data to anyone and have no plans to. There would be nothing to sell.

Who can see what

The person you're linked to sees your name, whether your button is down, and how long it has been down. They also see the dates you both keep, any feeling you share with them and how you answered their question about it, and any message of yours once it is delivered to them, never before. That's the whole app.

Nobody else sees anything. Not other users, not people who know your email. This is enforced by the database itself rather than by the app being careful: every table has row level security, and the receiver cannot lift the sender's button.

Deleting it

In the app: Settings → Delete account. It removes your account, your name, who you were linked to, every button press you ever made, and every device token. It is immediate and it is not recoverable. There is no soft-delete and no grace period, and we cannot undo it for you afterwards.

Unpairing is separate and also one-sided: either of you can end a link at any moment, without the other's agreement, and it deletes everything between you.

Where it lives

Data is stored with Supabase, and notifications are handed straight to Apple, or to Google on Android. Nothing sits in between. When a scheduled message is delivered, its text rides that same path, because the notification is the delivery. This page is served by Cloudflare. If you joined the waiting list, that's your email address and the date, and it is deleted once we've written to you.

Children

Snit isn't for under-13s and we don't knowingly keep accounts for them.

Changes, and asking us things

If this changes we'll update the date at the top. For anything at all, whether that is a question, a copy of your data, or a deletion you can't do yourself, use the support page or write to hello@usesnit.com.

Renovatio, LLC
hello@usesnit.com

Written plainly and in good faith. It isn't legal advice, and it isn't a lawyer's document.