Legal
Privacy Policy
Effective April 14, 2026
This service is operated by TinyTend Labs Inc.
Our commitment
OpenOn is designed to help you send meaningful messages that are delivered at the right moment. We are committed to protecting your privacy.
Who we are
OpenOn (“we,” “our,” or “us”) offers our mobile app and related services. This Privacy Policy explains what personal information we collect, how we use and share it, and the choices you have.
Message content and access
Messages are encrypted in transit and securely stored. We do not access or read message content except as required to operate the service. Only intended recipients can access messages at the scheduled time.
Data we collect
Depending on how you use OpenOn, we may collect:
- Account info — email address, and phone number if you sign up or verify with a phone number.
- Message content — letters and other messages you create or send in the app.
- Metadata — such as timestamps, recipients, delivery or open status, and related details needed to schedule and deliver messages.
- Usage data — basic app usage and diagnostics (for example, app version, device type, and how you use features) to run and improve the app.
How we use data
We use this information to:
- Deliver time-locked messages.
- Enable available app features as described in the app.
- Send notifications (including push notifications, where you allow them).
- Improve the app experience, operate and secure the service, respond to support requests, and comply with applicable law.
SMS authentication and consent
If you choose to sign in or verify using your phone number, OpenOn may send SMS messages only for authentication and account verification purposes.
Before requesting a verification code, users are shown a disclosure in the app stating:
“By tapping ‘Send code’, you agree to receive SMS messages from OpenOn for authentication purposes. Message frequency varies. Message and data rates may apply. Reply STOP to opt out at any time or HELP for assistance.”
SMS messages are transactional only and are not used for marketing or promotional communications.
For a detailed walkthrough of the consent flow, see our SMS consent documentation.
Data sharing
We do not sell your personal data.
We only use trusted third-party services such as Supabase and AWS to operate the app.
We share data with those providers only as needed. We may also disclose information if required by law or to protect users and the service.
Anonymous messaging
Anonymous messages are temporary. The sender’s identity may be revealed after a defined period (up to 3 days). Users can report or block others to prevent misuse.
Some messages may be sent with temporary anonymity:
- The recipient may not see the sender’s identity at first.
- After a defined period — up to a maximum of three (3) days from sending, as shown in the app — the sender’s identity may be revealed to the recipient in line with that feature’s rules.
- Anonymity does not mean the service has no record of activity needed for safety and operations; we may still process related data as described in this policy.
- You can use in-app tools to report or block users when available; you may also contact support@getopenon.com for help.
Notifications
We use push notifications to notify you about message activity, such as when a letter is ready to open. You can adjust notification settings on your device or in the app where offered.
Data retention
We keep your information for as long as your account is active and as needed to provide the service, comply with law, resolve disputes, and enforce our agreements. When you delete your account, we delete or anonymize your personal information as described below, subject to limited exceptions (for example, where retention is required by law).
Data deletion
You can delete your account and associated data from within the app or by contacting support@getopenon.com.
You can:
- Delete your account from within the OpenOn app (see Settings or Account options).
- Or email support@getopenon.com from the address associated with your account to request account deletion.
After deletion, we will remove or anonymize personal data associated with your account, except where we must retain certain information as required by law or for legitimate business purposes (such as security logs) in accordance with this policy.
Security
We take reasonable measures to protect your data.
Children
OpenOn is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us at support@getopenon.com and we will take appropriate steps.
International users
If you use OpenOn from outside the United States, your information may be processed in the United States or other countries where we or our service providers operate, which may have different data protection rules than your country.
Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated policy in the app and/or on our website and update the effective date. Continued use of OpenOn after changes means you accept the updated policy, except where applicable law requires additional consent.