Privacy Policy
Effective 28 August 2026
Tách Tách is a travel journal app. You take photos along the way, and the app turns them into a journal organised by date and place. To do that, it has to keep your photos and your locations. This page explains what we keep, where we keep it, and how you get it back or delete it.
The app is operated by Tekmium Solutions.
1. What we collect
When you create an account
- Your email address, or the details from Sign in with Apple.
- A display name, a @username and a profile picture — all chosen by you, changeable at any time.
We do not keep your password. When you set it, it is turned into a scrambled string of characters before anything is stored, and there is no way to work back from that string to the original — not even for us. So if you forget it, we can help you set a new one, but we cannot look the old one up.
If you sign in with Apple and choose Hide My Email, we only ever receive the relay address Apple generates. We never learn your real email address.
When you use the app
- The photos you take or import, at full size and as thumbnails.
- Precise GPS coordinates of the places you visit — taken from your device location when you shoot, or read from the details your camera writes into photos you import from your library.
- The time each photo was taken, also from the details already in the file.
- Place names, trip names, photo captions and notes you write.
- For share links: view counts and heart counts. Anyone who opens a share page — signed in or not — is given a random code generated on their own device, so that one person is not counted as several visits. That code is not tied to a name, an email or any identity.
What we do NOT collect
- No behavioural analytics, no automatic crash reporting.
- No advertising, no advertising identifier.
- No access to your contacts, no browsing history.
Server records. Like any website, ours records the visits it receives — the device IP address, the time, and the page opened. Supabase also stores the IP address and time of your most recent sign-in. We open these records when tracing a fault or shutting out someone abusing the service, not to build a profile of you.
We do not track you across other apps or websites, and we do not sell your data to anyone.
2. Why we need each thing
| Data | Used for |
|---|---|
| Recognising you at sign-in; sending verification and password-reset codes | |
| Password | Checking that the password you typed is right. We store only the scrambled version, never the password itself |
| Photos | They are the content of your journal |
| GPS coordinates | Pinning memories on the map, grouping photos taken at one place into a single stop, and giving directions back to places you have been |
| Capture time | Ordering the journal by day |
| Views, hearts | Letting you see whether anyone has opened your share link |
We do not use your data for anything other than running the app.
3. Where your data lives
| Location | Holds |
|---|---|
| On your device | Photos not yet uploaded (when you are offline) and a display cache. Deleting the app removes them — we have excluded this area from iCloud Backup |
| Supabase, located in Australia (AWS Sydney) | Your account, profile, trips, stops, coordinates and captions |
| Our own storage server, located in Vietnam | All original and thumbnail image files |
In other words: your photos are held in Vietnam, while the text that goes with them — place names, coordinates, captions — is held in Australia.
Your photos are not stored on iCloud, Google Photos or any third-party photo service. They sit on a server we run ourselves, and cannot be reached through a guessable address: each time you look at one, the server issues a temporary link of its own that expires after an hour.
4. Who else sees your data
We rely on three outside services. None of them is permitted to use your data for their own purposes.
Supabase — stores your account and journal data, and sends verification emails.
Mapbox — draws the maps, turns coordinates into place names, and calculates routes. Whenever the app needs one of those, the coordinates of your stop are sent to Mapbox. Mapbox does not receive your name, your email or your photos — only coordinates.
Apple — the Sign in with Apple service, and the address lookup built into iOS (the app asks this one first, and Mapbox only afterwards).
Beyond these three, we disclose data only where the law requires it.
4b. When you let friends see
You choose who can see each photo: everyone (all of your friends), a few people you name, or only you. Photos posted before this feature existed default to not showing to friends. A new friend can only see photos you posted from 14 days before you became friends onwards.
- Removing a friend or blocking them ends their access immediately, and their app deletes the photos it already downloaded.
- Changing who can see a photo you already posted stops anyone outside the new list from downloading it again. But a photo someone has already seen may still sit in their device's cache — the same as any image that has ever appeared on a screen, anywhere. Treat showing someone a photo as something you cannot fully take back.
- We do not tell your friends whether you have viewed their posts.
4c. When someone reports content
The app has a Report button on other people's posts and on the Friends screen. Reporting is how you ask us to review something; blocking is how you cut contact yourself, without us. The two buttons sit side by side and do different jobs.
- What you report disappears from your feed immediately, without waiting for anyone. Reporting a person also hides all of their posts, and the two of you stop finding each other.
- We review it within 24 hours.
- The reported person never learns who reported them. We do not pass on your name, your email, or any trace of you.
- You can only read your own reports. No account can read anyone else's.
A moderator can view the reported photo — and only that photo. Nobody can act on a report without seeing what it is about, so this is the one exception to "only you and the people you allow can see your photos". The exception is fenced in three ways: only photos currently attached to an unresolved report, only administrator accounts, and every single view writes an audit record of who looked, at which photo, and when. We do not look at your photos for any other reason.
If your account is suspended for breaking the rules: you can still sign in and still read your own journal in full. What you cannot do is post, and while the suspension lasts your posts do not appear to anyone else. Nothing is deleted, and lifting the suspension puts everything back.
5. When you share a trip
Creating a share link means creating a public web page. Anyone holding the link can open it — no app install, no sign-in.
- Only send the link to people you want to see it. The link is not password-protected.
- You can exclude individual stops or individual photos before sharing.
- Turning on "Blur location" in your Account settings leaves only the ward and province for everyone outside — both people opening a share link and your friends inside the app — and rounds the coordinates to roughly a 1 km area. They can tell the neighbourhood, but not the street address or the venue name. You still see the full detail in your own journal.
- Deleting the share link in the app takes the page down immediately.
Hearts can be left without signing in. Each heart is tied to a viewer key — the account if the person is signed in, otherwise the random device code — so that they can take the heart back, and so that one person does not count as several hearts.
6. How long we keep things
- Photos you delete go to Trash for 30 days and can be restored during that window. After 30 days the system permanently deletes them, including the image files on the server.
- A viewer's random code on a share link is deleted after 180 days of inactivity.
- Everything else is kept for as long as your account exists.
- Deleting your account removes everything immediately — see below.
Backups. The database is backed up against failure. Data you have deleted may remain in those backups for a short period before they are overwritten on their rotation. We do not open a backup to restore something you deleted, even if you ask.
7. Your rights
View and edit. Open Account → Edit profile to change your name, @username and picture. Every photo and note can be edited or deleted directly in the app.
Delete your account. Open Account → Delete account. This permanently deletes:
- your sign-in account;
- your profile, all trips, stops and notes;
- every image file on our servers;
- every share link you created — they stop working immediately.
There is no waiting period and no recovery. Technical backups hold the data for a short period as described in section 6, but we do not use them to rebuild a deleted account. If you signed in with Apple, we also tell Apple to revoke the app access to your Apple account.
Get your data out. Photos can be saved to your device library from inside the app. For a full copy, write to contact@tekmium.com.
8. Children
Tách Tách is not intended for anyone under 16, and we do not knowingly collect data from anyone under 16. If you believe your child has created an account, write to contact@tekmium.com and we will delete it.
9. Security
Everything travelling between the app and our servers is encrypted in transit. Passwords are scrambled before storage and never exist in readable form. In the database each account can touch only its own data — enforced by the server itself, not left to the app. Images are reached through a temporary link issued for each viewing, which expires after an hour.
No system is perfectly secure. If an incident affects your data, we will notify you at your registered email address.
10. Changes to this policy
When something material changes, we update the effective date at the top of this page and notify you in the app before the change takes effect.
11. Contact
Questions, complaints, or data requests: contact@tekmium.com
Tekmium Solutions — Lot 01 B3-36 FPT Urban Area, Ngu Hanh Son Ward, Da Nang City, Vietnam — +84 828 828 497