Ptosi is an app about the worst moment of somebody's day, so this page is written to be checked against what it actually does rather than to cover anybody legally.
Last updated 7 August 2026
The short version: there is no account, nothing about you is sold or used for advertising, and nothing leaves your phone unless you go down or you press send yourself.
You never make one. There is no sign-in, no password, no email address required to use the app, and no profile anywhere with your name on it. The app does not know who you are, and neither do we.
Your log is yours. Every event Ptosi records, every posture it learns, your contacts and their details, and the raw sensor readings all live in the app's own storage on the device. None of it is uploaded, backed up to us, or readable by anybody but you.
If you delete the app, that goes with it. There is no copy on a server to restore, which is the tradeoff for there being no copy on a server at all.
Two things leave your phone, both because you asked for them:
That is the complete list. There is no analytics, no crash reporting, no telemetry, and no background sync of your log.
Ptosi asks for location for two reasons and uses the coarsest setting iOS offers, accurate to about a kilometer rather than a street address.
The first reason is technical and worth being straight about: iOS has no background mode for motion sensors, and the location background mode is the supported way to keep the barometer and accelerometer running while your screen is off. Without it the app cannot work at all. This is also why it uses more battery than an app that sits idle, which the app says on its own screen.
The second is the point of the feature. Somebody who has just been told to go and check on you needs a rough idea of where you are. That coarse position is attached to an event when one happens. It is not tracked, not stored as a history, and not sent at any other time.
The people on your list are not an account on our server. Their details are sent along with each alert, used to reach them, and deleted within a day. There is no standing database of anybody's family here.
An invitation works the same way. Their name and email exist on the server only between you sending the invitation and your phone collecting their answer, and the row is deleted at that moment. Invitations nobody answers are deleted after two weeks. In normal operation that table is empty.
Somebody you invite can say no, on their own, in one tap, and you cannot answer for them. If they say no they are not added and they are not emailed again by that invitation.
An alert message contains a link to a page showing what happened and a button to say they are coming. That page is not indexed by search engines, sends no referrer, and is reachable only by the random token in the link. It stops working once the event is resolved.
Three companies handle an alert on its way to a person, and only in the moments it is being delivered:
Nothing about you is sold, shared for advertising, or given to a data broker. There is nothing to sell: no account, no profile, no history.
The form on the front page is the one place we do keep something. Your name, email and whatever you wrote are stored so the invitation can actually be sent and so we know who asked. Reply to any email from us and ask to be removed, and it will be.
Ptosi is not designed for or directed at children under 13, and nothing in it is built to collect their information.
The date at the top changes with it. If a change ever means more leaves your phone than does today, that will be said plainly in the app before it happens rather than buried here.
Write to keegan@sullivancreative.co and a person will answer.
Ptosi is a Handled product. © 2026 Ptosi. Back to the front page