Alert Cards
Legal

Privacy policy

Effective 26 September 2026 · Applies to the Alert Cards app for iPhone and Apple Watch, and to this website.

The short version

  • Your card and everything on it is stored only on your iPhone and Apple Watch.
  • There’s no account, no advertising, no analytics and no tracking in the app.
  • Translation happens on your device using Apple’s on-device translation.
  • If you add your card to Apple Wallet, its text is sent once to our signing server to make the pass. Nothing is stored or logged.
  • The only other personal data we receive is what you choose to send us, for example an email to support.
  • Deleting the app deletes your card.

1. Who we are

Alert Cards is made by tymh.app (“we”, “us”). We are the data controller for the limited personal data described in this policy.

Privacy questions: alert.cards@tymh.app

2. What stays on your device

Everything you put into Alert Cards is stored locally on your iPhone and, if you have one, synced directly to your paired Apple Watch. This includes:

  • the text of your card and the “what helps” list
  • your saved translations
  • emergency contact names and phone numbers
  • assistance dog details and photo
  • your settings, such as theme

We have no server that stores this information, and we cannot see, recover or restore it. Text typed on the Reply screen is never saved. If your iPhone is backed up to iCloud or a computer, your card is included in that backup under Apple’s terms, as with any app data.

3. What we receive, and why

The app sends us nothing unless you add your card to Apple Wallet (see section 4). We receive personal data only in these cases:

WhatWhy and legal basisHow long
Messages you send us: your email address, name if given, and messageTo answer you. Legitimate interest (Art. 6(1)(f) GDPR), or steps you ask for (Art. 6(1)(b)).As long as needed to answer you, then deleted.
Crash reports, only if you’ve turned on “Share with App Developers” in iOS settingsTo fix bugs. Apple provides them without your identity. Your consent, given in iOS.According to App Store Connect’s retention.
Tips and downloads: aggregated sales reports from AppleAccounting and tax. Legal obligation (Art. 6(1)(c)). We never see who tipped.According to applicable accounting law.

We don’t sell, rent or share personal data with anyone for advertising or any other purpose.

4. Apple services and the Wallet pass

Translation. Cards are translated on your iPhone with Apple’s Translation framework. Your card text isn’t sent to us or to Apple for translation. Language packs are downloaded from Apple the first time you use a language.

Read aloud. Speech uses the voices built into iOS, on the device.

Tips. Tips are In-App Purchases processed entirely by Apple. We never receive your name or payment details.

Apple Wallet. Apple requires every Wallet pass to be signed with a certificate that can’t be kept on your phone. When you tap “Add to Apple Wallet”, the app sends the text shown on the pass to our signing server, which runs on Cloudflare Workers. It signs the pass, sends it straight back, and forgets it: nothing is stored and card text is never logged. If you don’t add a pass, this never happens.

Apple’s handling of data is covered by Apple’s privacy policy.

5. Health information

A card may describe a condition or disability. That is sensitive information, and it’s why the app is built so that it stays on your devices. We don’t collect or keep it. Please don’t include health details in messages to us unless you’re comfortable doing so.

Alert Cards is a communication aid. It isn’t a medical device and doesn’t give medical advice.

6. This website

This website uses no cookies or advertising trackers. It counts visits with PostHog in cookieless mode: no cookies or identifiers are stored in your browser, and page views are counted anonymously on PostHog’s EU servers. It is hosted on Amazon Web Services and delivered through Cloudflare, which process technical data such as IP addresses in server logs to deliver the site securely, and keep them according to their own retention policies. If you use the contact form, it opens your own email app, and your message reaches us as an ordinary email handled as described in section 3.

7. Children

Alert Cards can be used by people of any age, often with help from a parent or carer. Because the app collects nothing, it collects nothing from children either. If a child has contacted us and a parent wants that message deleted, write to us and we’ll delete it.

8. Your rights

Under the GDPR you can ask to access, correct, delete, restrict or move the personal data we hold about you, and object to how we use it. For most people, we hold nothing. If you’ve emailed us, write to alert.cards@tymh.app and we’ll reply within one month.

You can also complain to the data protection authority where you live.

9. Changes and contact

If this policy changes, we’ll update the date at the top and, for meaningful changes, mention it in the app’s release notes. Questions are welcome at alert.cards@tymh.app or through the contact page.