Privacy Policy
Effective 29 September 2026
Titip keeps the things you save and helps you actually use them. This page explains what we collect, why, and what we never do with it — in plain language.
Titip ("we", "us") runs the app at titip.app. Questions? Email [email protected].
The short version
no ads nothing sold no cross-app tracking yours to export anytime
What we collect
- Your account. When you sign in with Google, we receive your email address and basic profile (your name and profile picture). That's it — we request only the
openid,email, andprofilescopes. - Your saved things. The links, notes, and checklists you save ("cards"), and the folders you sort them into ("clips"). If you're signed in, these sync so your door looks the same on every device.
- Anonymous, aggregate counts. We keep simple tallies (e.g. how many people viewed a screen) with no personal information attached — they can't be traced back to you.
What we do NOT collect or access
- We never read your Gmail, Google Drive, contacts, calendar, or anything beyond the basic sign-in details above.
- We don't build an advertising profile, and we don't track what you do in other apps or across the web.
How we use it
- Your email and name identify your account and show you who's signed in.
- Your saved things are stored so we can sync them back to your devices.
- We use your contact details only to reply if you write to us.
Titip-ing to someone
If you send a titip (a note, list, or link) to another person by email, that person receives the content you chose to send, along with your name and email as the sender. An email address you type in is used only to deliver that titip to them.
Anonymous messages
- If you turn on your anonymous inbox, anyone with your link (titip.app/@you/ask) can send you a message without an account. You see the message, never who sent it. Messages you answer stay private unless you choose to post the answer on your page or share it as a story card.
- If you send someone an anonymous message, we store the message and two scrambled codes: one from a random ID kept in your browser, one from your network address. They can't be turned back into who you are, and we never store your IP address or show the receiver anything about you. The codes exist only so a receiver can block you and so we can stop spam and abuse.
- Messages our filter holds back are kept for 30 days unless the receiver looks at them. When a receiver deletes a message, it's gone. A reported message is kept until we've reviewed the report.
- Nobody — not the receiver, and not us — can pay to find out who sent a message. You must be 13 or older to have an inbox.
Notifications and your profile photo
- Notifications are off until you turn them on. When you do, we keep the push address your browser gives us (from Google, Apple, Mozilla or Microsoft's push service) so we can wake your phone. The push itself carries no content — your phone then asks Titip what's new — and a notification never shows the text of an anonymous message. Turning notifications off or signing out removes that address.
- A profile photo you add is stored with your other cloud photos and shown on your public profile, your ask page and your story cards. You can remove it at any time.
Paying for Titip Pro
If you buy Titip Pro, the payment happens on our payment provider Duitku's page. We send Duitku your email address, name and the amount; Duitku handles the payment itself. We get back and keep only the order number, the amount, the kind of payment method and whether it went through — never your card, bank account or e-wallet details. We keep payment records as long as the law requires, and use them only to run your plan and answer questions about a payment.
Where it's stored
Most of your data lives on your own device. When you sign in, a copy syncs to our infrastructure on Cloudflare (including its D1 database) so it can reach your other devices. Sign-in is handled by Google. These providers process data on our behalf.
Keeping or removing your data
- You can export everything (JSON, CSV, or a web page) from the app at any time, and sign out to stop syncing.
- Inactive free accounts: if a free account isn't used for 12 months, we remove the cloud copies of its photos and videos. We email you twice first (about a month and a week before), and opening Titip at any time keeps everything. Your saves, links, notes and folders stay, and the photos and videos on your phone are never touched. Pro accounts, photos in shared folders, and accounts with a public board are not affected.
- To delete your account and the data we've synced, email [email protected] and we'll remove it.
Google user data
Titip's use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
Children
Titip isn't directed at children under 13, and we don't knowingly collect their data.
Changes
If we update this policy, we'll change the date at the top. Significant changes will be made clear in the app.