tiho
Back to the site

Privacy

What this site collects.

Your email address, if you choose to give it, and a count of the pages that were opened. Nothing that identifies you, and nothing stored in your browser. This page says exactly what happens to both.

Last updated 1 September 2026

This covers the tiho.dev website and its waitlist. The Tiho app, which runs on your own Mac and does an entirely different set of things, has its own policy — audio is transcribed locally and never uploaded, and that page says exactly what does leave the machine.

Who is responsible

Tiho is run by Yuri Varshavsky, an individual entrepreneur (ФОП) registered in Ukraine, acting as the data controller for everything on this page. For anything here — a question, a correction, or a deletion — write to privacy@tiho.dev.

What is collected

If you submit the waitlist form: your email address, the moment you submitted it, and the short code the link you arrived through carried — something like tg-relocate-pl, which tells us which post or community sent you and nothing whatsoever about you. If you came here directly, that field simply says direct. That is the entire record. No name, no company, no IP address stored alongside it, no enrichment from other sources, no account.

If you do not submit the form, the only record is an anonymous page view: which page, when, which language your browser asked for, and which link brought you here. It is counted by PostHog on servers in Frankfurt, and it exists for one reason — to learn which communities this reaches, so the next thing we write is posted where it is actually read.

Nothing is stored in your browser. No cookies, no local storage, no identifier that follows you between visits or between sites. There is no session recording, no heatmap, no capture of anything you click or type, and no advertising tag of any kind. Your IP address is not stored and is not used to work out where you are: it goes into a one-way hash together with a salt that changes every day and is then deleted, which is how two views on the same day are counted as one visitor and two days are not — so the count cannot be turned back into a person, not by us, and not by us asking PostHog.

While you are reading this site, PostHog is the only other company it contacts, and only for that count. Everything else — the fonts, the styles, the scripts — comes from tiho.dev, so no advertising network, no social platform and no CDN learns that you were here. Open your browser's network tab and check; that is still the point. (One more company is involved if — and only if — you connect Telegram from inside the Tiho app, which has nothing to do with browsing: it is described under “Who else touches it” below.)

Why, and on what basis

The address: to tell you when the first build is ready. The legal basis is your consent (GDPR Article 6(1)(a)), given when you submit the form, and you can withdraw it at any time without giving a reason and without losing anything.

The page count: to know which communities this reaches. The legal basis is legitimate interest (GDPR Article 6(1)(f)) — a project this small has to know whether anyone is reading it, and the count is deliberately built so that it cannot identify you, which is what keeps that interest from overriding anything of yours. Nothing is stored on or read from your device, so there is nothing here to ask consent for, and no banner in your way.

What gets sent to you

A short confirmation when you join, and a message when the build is ready. Occasionally a brief note about progress in between. Nothing else — your address is never sold, rented, swapped, or handed to anyone for advertising. Every message can be stopped by replying to it or writing to the address above.

Who else touches it

Five service providers, all acting only on instruction — and the last of them only if you ask for it:

  • Railway hosts this site and stores the waitlist file on a disk in its EU West region.
  • Resend delivers the email, and therefore handles your address to do so.
  • PostHog counts the page views described above, on its EU servers in Frankfurt. It is the only script on this site that is not ours.
  • Cloudflare answers DNS for tiho.dev and forwards anything sent to the address above into a personal mailbox. It is deliberately not placed in front of the site itself: page requests go straight to Railway, so no proxy in between sees who visited.
  • Telegram, only if you connect it from the Tiho app (Settings → Telegram → Connect). The text of an answer then passes through this server on its way to Telegram's API. It is not stored and not logged here, and the server keeps no list of who is connected: the app holds its own delivery token, and disconnecting is the app forgetting it. Blocking the bot in Telegram ends it from the other side.

Server logs record that a signup happened; they do not contain your address.

How long it is kept

Until the build ships and you have been told about it, or until you ask for removal — whichever comes first. If Tiho never ships, the list is deleted rather than kept. Ask for deletion and it is done; the record is not retained for some other purpose afterwards.

Your rights

You can ask for a copy of what is held about you, have it corrected, have it deleted, withdraw your consent, or object to its use. One email to the address above is enough — no form, no identity ritual — and it is answered within 30 days. If the answer does not satisfy you, you can complain to the data protection authority where you live.

Changes

If this policy changes, the date at the top changes with it. Anyone on the waitlist when a material change happens is told by email.

This policy is published in English only. The rest of the site is translated; a legal text is not, because a machine-translated version would create obligations nobody has read.

© 2026 tiho · tiho.dev
Home Site privacy The app