Privacy Policy

Last updated: 2 October 2026

The short version

• Tellsy reads your exported chat on your phone. The chat file is never uploaded to our servers.
• Your chats, stats and results are stored on your phone, encrypted, with the key kept in the iOS Keychain.
• AI features are optional and need your separate consent. When you use one, a short excerpt of the chat is sent through our server to our AI provider, with names replaced by "Me" and "Them" and phone numbers, emails and links masked.
• Excerpts are processed and then deleted. We do not store message content on our servers.
• On our servers we keep only what we need to run your account: your email or Apple ID relay address, your subscription status and your credit balance.
• We never sell your data and there are no ads in Tellsy.
• Tellsy is for people aged 18 and over.
• You can export or delete your data, and delete your account, inside the app.

Who we are

Tellsy is provided by MOZ GROUP TEKNOLOJİ BİLİŞİM SANAYİ VE DIŞ TİCARET LİMİTED ŞİRKETİ, Halkalı Merkez Mah. 1. Posta Sk. Cadde24 Rezidans No: 12 İç Kapı No: 77, Küçükçekmece / İstanbul, Türkiye (MERSİS 0623228324400001) ("we", "us"). We are the controller of the personal data described in this policy.

You can reach us about privacy at privacy@tellsy.neuros.com.tr.

If you are in Türkiye, our KVKK Notice (Aydınlatma Metni) explains the same processing under Law No. 6698 and is available in the app under Settings > Legal.

What Tellsy does on your phone

When you share a WhatsApp chat export with Tellsy, the app:

• reads (parses) the file on your phone;
• calculates statistics such as message counts, reply times, active hours, streaks and texting types on your phone;
• stores the parsed chat, the statistics, any AI results and a log of AI requests on your phone, encrypted at rest. The encryption key is kept in the iOS Keychain.

We do not receive the chat file, the parsed messages or the statistics. Free features (stats, the Wrapped story, the Chat Aura and texting types) work without sending any message content anywhere.

If you turn on App lock, Tellsy asks for Face ID or your device passcode before opening. Face ID is handled by iOS; we never receive biometric data.

AI features

AI features (for example the full AI report, Ask Tellsy, Decode and Reply coach) are optional. They only work after you give separate, explicit consent in the app. You can withdraw that consent at any time in Privacy center; this stops new AI requests and does not affect results you already have.

When you use an AI feature:

1. Tellsy selects a short excerpt of the chat on your phone (for example recent messages and a few sampled moments), not the whole chat.
2. Before anything leaves your phone, Tellsy replaces your name and the other person's name with "Me" and "Them", and masks phone numbers, email addresses, links and long number sequences such as IBAN, card or national ID numbers.
3. The masked excerpt, together with statistics calculated on your phone (numbers only, such as counts and reply times), is sent over an encrypted connection to our server, which forwards it to our AI provider.
4. The AI provider generates the result and returns it. Our server passes it back to your phone, where it is stored.
5. Our server does not store the excerpt or the result. Our server logs contain only technical information such as the time of the request, the feature used, the number of tokens, the duration and error codes.

Masking has limits. Names of other people mentioned inside messages (for example a friend's name) may not be detected and may be sent as written. Messages may also contain other personal details we cannot reliably detect. You can see the exact text that was sent for every request in Privacy center > "See what was sent to AI". That log is stored only on your phone.

Our AI provider is a third-party large language model service whose servers are in the People's Republic of China. Under its own terms, the provider may keep request data and use it to improve its services. That is why excerpts are masked on your phone before they are sent, why AI features need your explicit consent, and why you can see every request in the Privacy center. We do not use your chats to train AI models.

More detail is in our AI Processing Notice.

Sensitive information

Chats can contain sensitive information about you or others, such as health, sex life, sexual orientation, religious or political views. Tellsy does not look for this information and does not create profiles about it. Such content stays on your phone unless it happens to be part of an excerpt you choose to send for an AI feature. Your explicit consent for AI features covers this possibility. Please think about this before using AI features on a chat that contains very sensitive topics.

What we collect on our servers

• Account data: your email address, or the relay email and user identifier provided by Sign in with Apple or Google, and the sign-in method you used. Purpose: to create and secure your account and let you restore purchases.
• Subscription and purchase data: which plan you have, whether it is active, renewal and expiry dates, and purchase identifiers, received from Apple through our subscription provider RevenueCat. We never see your card details; Apple handles payment.
• Credit balance: how many Ask Tellsy questions or other credits you have left, so we can apply them to AI requests.
• Security and abuse prevention: a check that requests come from a genuine copy of the app (Apple App Attest) and per-account usage counters for AI features.
• Technical logs: request time, feature, token count, duration and error codes for AI requests. No message content.
• Usage events: content-free in-app events, such as which screens and features are opened and whether a purchase screen was shown, linked to an install identifier and, when you are signed in, to your account. Purpose: to improve the app and to measure our own ads. No message content. You can turn them off in the Privacy center.
• Support messages: if you email us, we keep the conversation to help you.

Analytics and ad measurement

Tellsy shows no ads and uses no crash-reporting service. We do not track you across other apps or websites: the app never reads your device's advertising identifier (IDFA or Android advertising ID) and never asks for tracking permission.

To improve the app, Tellsy records content-free usage events on our own servers: for example which screens and features are opened, or whether a purchase screen was shown. These events are linked to a random identifier created when you install the app and, when you are signed in, to your account. They never contain message content, names or anything you type. We use them only to improve Tellsy, keep them for 180 days, and delete them when you delete your account.

To see which of our own ads bring people to Tellsy, a few of these events are also sent to Google Analytics for Firebase, a Google service: the first time the app is opened, finishing onboarding, adding a chat, seeing the first result, seeing a purchase screen, starting a trial or buying, and signing in. They are linked to a random app-instance identifier only, never to your account, email address, name or messages. Ad personalization is turned off. Google keeps this data for at most 14 months.

To know which ad or link brought each install, the app also tells our servers once where it came from: on iPhone, an attribution token that Apple turns into the Apple Ads campaign and keyword (if an Apple ad led to the download); on Android, the Google Play install referrer (the campaign tags of the link). Neither contains your name, account, messages or an advertising identifier. The app may also ask you once where you heard about Tellsy; answering is optional.

You can turn usage statistics off at any time in Privacy center > Usage statistics. From then on, no usage events or install information are sent to our servers or to Google.

What we never do

• We never sell your personal data.
• We do not show ads in Tellsy.
• We do not store your messages on our servers.
• We do not use your chats to train AI models.
• We do not contact the people in your chats.

Legal bases (EEA, UK and similar laws)

• Contract: account, subscription, credits and delivering the features you ask for.
• Consent: AI features (sending a masked excerpt to our AI provider) and optional marketing notifications. You can withdraw consent at any time.
• Legitimate interests: keeping the service secure, preventing abuse, fixing crashes, understanding basic usage and measuring our own ads, in a way that does not override your rights. You can switch usage statistics off at any time.
• Legal obligation: keeping purchase records and responding to lawful requests.

For Türkiye, the legal bases under KVKK are set out in our KVKK Notice.

Who we share data with

We share personal data only with service providers that help us run Tellsy, under contracts that limit their use of it:

• Supabase — hosting our database and authentication. Region: European Union (Frankfurt, Germany).
• RevenueCat — managing subscriptions and purchases.
• Apple — payments and Sign in with Apple.
• Google — Sign in with Google, if you choose it.
• Our AI provider (People's Republic of China) — generating AI results from masked excerpts, only with your consent.
• Google (Google Analytics for Firebase) — measuring our own ads with content-free usage events, unless you switch usage statistics off.
• Resend (United States) — sending sign-in codes.

We may also disclose data if the law requires it, or to protect the rights and safety of users and others.

International transfers

Our service providers may process data outside your country, including outside Türkiye, the EEA and the UK. In particular, masked excerpts sent for AI features are processed by our AI provider in the People's Republic of China, a country without an adequacy decision under the GDPR or KVKK; this transfer is based on your explicit consent. Content-free usage events may be processed by Google in the United States. Where the law requires it, we use appropriate safeguards such as standard contractual clauses, and for Türkiye the transfer mechanisms under Article 9 of Law No. 6698.

How long we keep data

• On your phone: until you delete a chat, delete all data, delete your account or delete the app.
• Account, subscription and credit data: while your account exists. When you delete your account we delete this data within 30 days, except records we must keep by law (for example purchase records, for as long as tax and commercial law requires, up to 10 years).
• AI excerpts and results: not stored on our servers; deleted once the response is returned. At the provider: kept under its own terms, which allow it to retain request data.
• AI answers you report: if you tap Report on an AI answer, the answer text shown on your screen (which can include first names) and your optional note are sent to us. We keep them for 90 days to review the answer, then delete them. They are also deleted when you delete your account.
• Technical logs without content: 30 days.
• Support emails: 24 months after the conversation ends.

Security

• Chats and results are encrypted at rest on your phone, with the key in the iOS Keychain.
• Data in transit is protected with TLS.
• Access to our servers is limited to people who need it.
• App lock with Face ID or passcode is available in the app.

No system is perfectly secure. If we learn of a breach that affects you, we will notify you and the authorities as the law requires.

Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you and get a copy;
• correct it;
• delete it;
• restrict or object to certain processing;
• data portability;
• withdraw consent at any time;
• complain to a data protection authority.

Türkiye (KVKK Article 11): see our KVKK Notice for your rights and how to apply.

EEA and UK (GDPR): you can complain to your local supervisory authority.

California (CCPA/CPRA): you have the right to know, delete and correct personal information, and to opt out of the "sale" or "sharing" of personal information. We do not sell personal information and do not share it for cross-context behavioural advertising. We will not discriminate against you for using your rights.

How to use your rights in the app:

• Download my data: Privacy center > Download my data.
• Delete chats and results: delete a chat, or Privacy center > Delete all chats & results.
• Delete your account: Settings > Account > Delete account.
• Withdraw AI consent: Privacy center > AI features.

You can also email privacy@tellsy.neuros.com.tr. We will answer within the time the law requires.

The other people in your chats

A chat always includes someone else's messages. Tellsy processes them only to show you your own results, mostly on your phone. When you use AI features, their name is replaced with "Them" and contact details are masked. You are responsible for making sure you are allowed to use the chats you add, and for using results respectfully. See our Terms of Use and Acceptable Use policy.

Age limit

Tellsy is only for people aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor is using Tellsy, contact us and we will delete the account.

Changes to this policy

We may update this policy. If the changes are important, we will tell you in the app before they take effect. The date at the top shows the latest version.

Contact

MOZ GROUP TEKNOLOJİ BİLİŞİM SANAYİ VE DIŞ TİCARET LİMİTED ŞİRKETİ Halkalı Merkez Mah. 1. Posta Sk. Cadde24 Rezidans No: 12 İç Kapı No: 77, Küçükçekmece / İstanbul, Türkiye privacy@tellsy.neuros.com.tr