Privacy Policy

What we store

To make shared decisions work, ThisOrThat's server keeps:

• Your random identity: the name, emoji and color the app made up for you, and a SHA-256 hash of its sign-in token. The token itself stays in your iCloud Keychain.
• What you create: decision titles and notes, option names and colors, criteria, their weights, and your votes, plus which decisions you're a member of.
• Invites: stored only as hashes of the invite code, along with who created and who used each one. Used and expired invites are deleted 7 days later.
• Your push token, if you turn notifications on, so we can deliver them.
• Notification bookkeeping: short-lived records of recent changes, used to write notification summaries and deleted after about an hour, and when you were last notified about each decision.
• A daily write counter, used to rate-limit changes.

To stop abuse, creating a new identity is also rate-limited by IP address for about a minute. IP addresses are not stored in our database.

What we don't collect

No name, email address, phone number, contacts or location. No analytics, advertising or tracking, and no third-party SDKs in the app.

We never sell your data or share it with anyone, except the service providers that run the app: Cloudflare, which hosts the server and database, and Apple, which delivers notifications.

Who can see what

• People in a decision see each other's animal identity, everything added to the decision, and each other's votes.
• Someone holding an invite link sees a preview: the decision's title, its two options, the members' avatars and the current score, but no individual votes.
• Nobody else can see your decisions.

Deleting your data

In the app, tap your avatar, then Delete my data. That immediately removes:

• your identity
• every decision you created, with all its criteria, votes and invites
• your votes and memberships in other people's decisions
• your push tokens

Criteria you added to other people's decisions stay in those decisions, credited to a former member, because the rest of the group may still be using them.

Children

ThisOrThat is not directed at children under 13.

Changes

If this policy changes, we'll update this page and the date at the top.