Privacy Policy

Last updated October 1, 2026

TYPO is a messaging app where every message is a short video of you, recorded while you type. This policy explains what TYPO (“we”) collects, how it’s used and shared, and the choices you have. Questions: privacy@typo.fm.

What we collect

• Your phone number, to create your account and sign you in with a text message code.
• Your username, which other people use to find and message you.
• Your profile picture, if you choose to add one: a photo you pick from your library, cropped and resized on your device before it’s uploaded.
• Messages you send. Each message is a video recorded with your camera (with sound, unless you turn the microphone off), the text you typed, the timing of each keystroke so the message replays as it was typed, a still image from the video, and its length and dimensions. Recording starts when you open the composer; nothing is uploaded unless you tap Send.
• Reactions. When you open a message from someone else that you haven’t seen before, TYPO records a short, silent video of your face with the front camera while you watch it, and shares it with the people in that conversation. Very short takes are discarded. If you don’t want reactions recorded, turn off camera access for TYPO in iOS Settings (you won’t be able to record messages either).
• Conversation activity: who you talk to, when messages were sent and read, when you’ve seen reactions, whether you’re typing, which conversations you’ve muted, and who you’ve blocked.
• Reports you make about other people, including the reason you give.
• A push notification token for your device, if you allow notifications.
• Technical data such as your IP address and device type, which our hosting provider processes to deliver the service and protect it from abuse. We use request logs only to keep TYPO running and fix problems.

Your contacts

Contacts access is optional. If you allow it, TYPO reads the phone numbers in your address book on your device, turns each one into a one-way SHA-256 hash, and sends the hashes to us to find which of your contacts use TYPO. We don’t store those hashes, and your contacts’ names and other details never leave your device.

If you message someone by phone number who isn’t on TYPO yet, we store that number so the conversation is waiting for them if they sign up.

How we use it

Only to run TYPO: signing you in, delivering messages, reactions and notifications, showing typing and read status, matching contacts, enforcing blocks, and reviewing reports to keep people safe. We don’t sell your data, show ads, or use third-party analytics or tracking.

Who can see what

• The people in a conversation see its messages, reactions, read and typing status.
• Your profile picture is shown only to people you share a conversation with, and never to anyone you’ve blocked or who has blocked you. It isn’t shown on typo.fm/@username or to people who only find you by username or in their contacts.
• Anyone can look up whether a username exists, including at typo.fm/@username.
• Once someone blocks you, or you block them, no new messages, reactions, typing or read status pass between you, and neither of you shows up in the other’s contact matches. Messages sent before the block are kept.

Service providers

We share data with these providers only so they can run parts of TYPO for us:

• Cloudflare hosts our servers, database, message videos and profile pictures.
• Twilio sends and checks sign-in codes, and receives your phone number to do so.
• Expo, Apple and Google deliver push notifications. A notification contains the sender’s username and the message text.

We may also disclose information if the law requires it, or to protect the safety of our users or others.

How long we keep it

Messages and reactions are kept until the conversation or your account is deleted. Your profile picture is kept until you change or remove it, or delete your account. Media is served only through links that expire. Reports about an account are kept after that account is deleted, for safety reviews.

Deleting your account

You can delete your account in the app under Settings → Delete account. This permanently deletes your phone number, username, profile picture, push token, the messages and reactions you sent (including their videos), your blocks and the reports you made. One-to-one conversations you were in are deleted entirely, including the other person’s messages in them. You can also ask us to delete your account by emailing privacy@typo.fm from any address; we’ll ask you to confirm the phone number on the account.

Your choices and rights

You can change your username, change or remove your profile picture in Settings (a replaced or removed picture is deleted from our servers), turn off the microphone for new messages, mute conversations, turn notifications, camera and contacts access on or off in iOS Settings, block and report people, and delete your account. Depending on where you live, you may have the right to access, correct, export or delete your personal data, or to object to how it’s used. Email privacy@typo.fm and we’ll respond within 30 days.

Security

All traffic between the app and our servers is encrypted in transit, and message videos are only reachable through signed links that expire. No system is perfectly secure, but we work to protect your data.

Children

TYPO isn’t for children under 13, and we don’t knowingly collect data from them. If you believe a child under 13 has an account, email us and we’ll delete it.

Changes

If we change this policy, we’ll update the date above, and tell you in the app for significant changes.