Privacy notice

Last updated 2026-11-09. Tellater is run from Singapore. Contact us at privacy@tellater.com (this also reaches our Data Protection Officer).

What we collect and why

Data	Why	How it's kept
Your mobile number (from WhatsApp)	Sign-in, one account per number, matching capsules sent to you	Encrypted, plus a one-way keyed code. Only the last 4 digits are ever shown.
A recipient's number (typed by the sender)	So only that number can open the capsule	One-way keyed code only
Your name	Shown on what you send	Name changes are kept for safety
Date of birth	To check you're 18 or over	We keep only the date you turn (or turned) 18, not your birthday
Messages, predictions, guesses, reactions, votes	The service itself	On our servers until opened, plus 12 months
Reports and blocks	Safety	As long as needed for safety
A random device ID	Preventing abuse (bans, the under-18 lock)	One-way coded
Notification token (app only)	To tell you when something opens	Until you sign out, uninstall or delete your account
IP address	Rate limits	Coded counters that expire within hours
Plus subscription (only if you buy Plus)	To switch Plus on and let you manage it	We keep your Stripe customer ID, plan, status and renewal date. Card and billing details are held by Stripe, never by us.

Who processes it for us

Cloudflare (hosting and database, Asia-Pacific region), Meta's WhatsApp Business Platform (it passes us the number and the sign-in message you send; we never reply), Google Firebase (delivering app notifications, never the message itself), Google Fonts (sees your IP address when fonts load), and Stripe (only if you buy Plus: Stripe is the merchant of record for Plus and collects your payment details, email and country under its own privacy policy, for payments, tax and fraud prevention). If our optional safety check is switched on, message text is sent to OpenAI's free moderation service. Some of these are outside Singapore; they process data for us under their data protection terms.

We don't sell data, show ads or use tracking or analytics tools.

Your choices

Delete your account any time in the app (profile, then Delete account). Your profile, number, blocks and any unopened capsules you sent are deleted. If your account was reported, a minimal record without your number or name is kept for safety investigations.
Access or correct your data by emailing privacy@tellater.com. We reply within 30 days.

Age

Tellater is for people 18 and over. Under-18s can't sign up, and that phone number and device stay locked until their 18th birthday.

If something goes wrong

If a data breach is likely to harm you, we'll tell you and Singapore's Personal Data Protection Commission as required by law.