Last updated: September 24, 2026
What Purto is
Purto lets you send short reminders ("PINGs") to people you know. This policy explains what data the app stores and why.
Data we store
- Account: your display name, username, and a securely hashed password. An email address is optional — it's used only for account security (verifying your address and confirming password changes), never for marketing and never shown to other users. A phone number is optional too, used only — with your opt-in — so friends who already have your number can find you.
- Content: the PINGs you send and receive (title, note, optional due time or place, optional voice note), your contacts list, and an optional profile cover photo.
- Preferences: notification settings and app language, so pushes arrive in your language.
- Push tokens: a device token used only to deliver notifications.
- Crash reports & product analytics: if the app crashes, a technical report (error message, stack trace, platform, and app version — never your PINGs or other content) is linked to your account so we can investigate. We also record which channel brought you to Purto and a few one-time product milestones (like completing signup or sending your first PING), so we can tell whether Purto is growing in a healthy way.
- Waitlist: if you join, we store your email, optional first name, optional broad reminder category and optional free-text answer. The Purto team can review and export confirmed entries to manage the launch. We do not publish individual waitlist membership.
Waitlist emails and consent
The waitlist form requires an affirmative checkbox. We send a confirmation message first; the address is not eligible for the launch announcement unless you confirm through the link, which expires after 24 hours. We send one launch announcement to confirmed addresses and no other waitlist marketing emails. Compatible email apps can unsubscribe with one click; otherwise, use the link to confirm deletion on the Purto page. Deletion removes the waitlist record and its answers.
What we don't do
- We don't sell your data or share it with advertisers.
- We don't record your location or keep any location history. If you allow it, location reminders use your phone's built-in geofencing (the "Always" location permission): your device — never our servers — watches only the specific places you chose and notifies you when you arrive or leave, even while the app is closed. Your coordinates never leave your phone; place names you attach to a PING are visible only to you and the recipient.
- We don't build a behavioral profile from your crash reports or product analytics — they're limited to the technical/product facts described above, and any figures we ourselves review are always combined across at least five accounts, never singled out to one person.
Subscriptions
Purto Pro purchases are processed by Apple/Google and managed through RevenueCat. We never see your payment details.
Data retention & deletion
You can delete your account at any time from Settings → Delete Account. Deletion is immediate and permanent: your profile, contacts, PINGs, voice notes, push tokens, and account-linked product analytics are removed straight away. The one exception is crash reports: the link to your account is removed immediately, and the now-anonymous technical log is cleared within 60 days as part of routine maintenance. You can also export a copy of your data from Settings first.
Waitlist confirmation links expire after 24 hours; unconfirmed entries are removed in routine cleanup within four hours after expiry while the service is running. Confirmed waitlist contact details are kept for up to 12 months while Purto is awaiting launch. When the launch email is accepted by our mail provider, we promptly remove the email address, first name and free-text answer, consent and confirmation timestamps, and retry details. We retain the signup date, broad reminder category and a delivery marker for aggregate reporting. Unsubscribe deletes the whole waitlist entry immediately.
Security
Passwords are stored using bcrypt hashing. All traffic is encrypted in transit (HTTPS). Account recovery uses a one-time recovery code that only you hold — we cannot read it. Password changes on accounts with a verified email are confirmed with a one-time code sent to that address.
Contact
Questions? Email Purtohq@gmail.com.