Back to Theo

Privacy Policy

What Theo stores about you, why, and how to get rid of it.

Last updated 2026-10-03 · Hubertus Wasmer

1Who is responsible

The controller for your data under the GDPR is Hubertus Wasmer, Schoeppinger Str. 89, 48720 Rosendahl, Germany, phone +49 15679 650999, email support@theowhoami.com.

2What we store

This is the complete list, taken from the application itself rather than from a template.

WhatWhere it comes fromWhy
Email addressYou, when you sign up — or Apple’s private relay if you hide itYour account, signing in, confirmation and password emails
Name and profile pictureGoogle or Apple sign-in, or the profile screenGreeting you, and showing who is signed in
An account numberGenerated when you sign upTying your reading and purchases to you
SettingsThe settings screenTheme, fonts, reading and listening languages, playback speed
Reading and listening progressThe readerResuming where you stopped, and your journey
Which free readings you openedThe readerCounting the five free Dailies
Purchases and subscription stateApple or Google, through RevenueCatKnowing what you have access to
Listening-language requestsThe language pickerDeciding which languages to record next

3What we do not collect

Stated as plainly as the list above, because absence is as much a fact about an app as presence:

  • No location, contacts or microphone. The camera opens only when you take a Red Nose selfie. Photos: Theo sees only the one photo you pick in your phone’s photo picker, and it saves a poster to your photos only when you ask (see “Your Red Nose photo” below).
  • No advertising identifier, and no advertising of any kind.
  • No analytics and no crash-reporting service.
  • No tracking of you across other apps or websites.
  • Nothing is sold, and nothing is shared for anyone else’s marketing.

4On this website

The website sets no cookies and loads no analytics or tracking. It keeps four things in your browser’s own storage, so the page stays the way you left it:

  • Your light or dark setting.
  • The language you chose.
  • The website’s texts in that language, so they are not fetched again on every visit.
  • Whether you already answered the course question — only until you close the tab.

None of it leaves your device, and clearing the site data in your browser removes it. The page fetches its texts from our translation service and its images from our own storage, hosted by Vercel and Supabase; like any web request, they see your IP address and nothing else.

The website also counts, anonymously, how many visitors would take a course. A count holds only the answer and the time: no cookie, nothing stored on your device, no IP address, nothing that could identify you.

5Your Red Nose photo

If you send a Red Nose photo from the app, we keep the photo in a private Theo storage area (Supabase, in the EU), together with your account number, your account email (so we can tell you the result), when and to which version of the terms you agreed, and whether it has been reviewed. While it waits for review, only the Theo team sees it.

  • Approved: a copy appears in the public Red Nose gallery on theowhoami.com and in the Theo app, without your name or email. You get an email, and five extra Dailies.
  • Not approved: the photo and its entry are deleted. Only the reason and your email stay in our review log. You get an email.
  • To have your photo removed, write to support@theowhoami.com. Deleting your account removes your submission, the gallery entry and the photo files.

6Feedback

If you send feedback from the Feedback link on this website, we receive your message, the page and section you were on, the language of the page and the time, as an email to info@theowhoami.com, sent through Resend, and as an item in the feedback inbox of our team dashboard. If you type an email address into the optional field, we receive it too and use it only to answer you. Nothing is stored on the website itself, and you get no newsletter.

The message stays in our inbox and in the feedback inbox until we have dealt with it. To have your message and address deleted, write to support@theowhoami.com.

8Why we are allowed to store it

  • Your account, your reading and your purchases: to provide what you signed up for (Article 6(1)(b) — performance of a contract).
  • Counting your five free readings: our legitimate interest in offering a free allowance that is not trivially bypassed (Article 6(1)(f)).
  • Your Red Nose photo: your consent, which you can withdraw at any time (Article 6(1)(a)).
  • Feedback you send from the website: our interest in hearing from you and in answering you if you gave an address (Article 6(1)(f)).
  • Anything optional, such as a newsletter: only with your consent, which you can withdraw at any time (Article 6(1)(a)).

9Who else sees it

Only the companies that make the service work, and only what each one needs:

  • Supabase — the database and sign-in, hosted in the European Union.
  • RevenueCat — purchase state and your account number, in the United States, under the European Commission’s standard contractual clauses.
  • Apple and Google — payments and receipts, if you buy anything.
  • Resend — sending confirmation and password emails, and delivering website feedback to our inbox.
  • Google — Google Play, where you join the open Android test with your Google account, under Google’s own privacy policy. People we added by email to the earlier closed test stay on its tester list until we remove them.
  • Our own team dashboard, hosted by Vercel and Supabase — its feedback inbox receives the feedback you send from the website, and the address if you typed one.
  • Vercel — hosting the interface and the programming interface behind it.
  • Our own translation service, hosted by Vercel and Supabase — the app and this website fetch their texts from it when they start. It sees the language and your IP address, nothing else.

10How long we keep it

Your account and everything attached to it stays until you delete the account, and goes when you do.

An Android test invite request sent earlier through this website stays in our inbox and on the closed-test list while you take part, and is deleted when you leave the test or ask us to.

One exception, and we would rather name it than bury it: records of payments are kept afterwards, because tax law requires it. Your account number is removed from them, so what remains is a transaction with no person attached. Apple and Google keep their own copies of anything you bought, and we cannot delete those.

11Your rights

You may ask for a copy of your data, correct it, have it deleted, take it elsewhere, or object to how we use it.

Deletion needs no request at all: open Settings, choose Delete account, and it happens immediately. Your profile, progress, settings, notes and access are removed. Deleting the account does not cancel an Apple or Google subscription — only the store can do that, so cancel it there first.

For anything else, write to us at the address in section 1. You may also complain to a data protection authority; for us that is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW, ldi.nrw.de), or the authority where you live.

Email: support@theowhoami.com · Phone: +49 15679 650999

12Children, and changes to this policy

Theo is made for adults (18+); we do not knowingly collect data from children. If you are a parent and think your child has an account, tell us and we will remove it.

If this policy changes in a way that matters, we will say so in the app before the change takes effect. The date at the top is when this version was written.