Story

Is So Tell Us GDPR Compliant? Privacy and Data Security Explained for 2026

Table of Contents


Why privacy matters when you choose a family communication tool {#why-privacy-matters}

When you invite your parents, siblings, or close friends into a shared space online, you are asking them to trust you with something personal. Their words. Their photos. A voice note recorded on a quiet Sunday morning somewhere.

That trust is easy to overlook when you are just looking for something that works. But the tool you choose determines who else might see those words, where they are stored, whether they are used to train an AI model, and whether a push notification will interrupt someone at 11pm.

For anyone living in the EU — or sharing a group with family members who do — GDPR compliance is not a technical footnote. It is a meaningful signal about how a product treats the people inside it.


What GDPR compliance actually means in practice {#what-gdpr-compliance-means}

The General Data Protection Regulation sets rules for how personal data about EU residents is collected, stored, processed, and shared. In plain terms:

  • Data should be stored in the EU or in countries with equivalent protections
  • People should know what data is collected and why
  • Data should not be used for purposes beyond what was agreed
  • Third-party processors handling that data must meet the same standards

For a family communication tool, the relevant questions are: Where do your messages live? Who can read them? Are they used to improve a product, train a model, or serve ads? And what happens when you want to leave?

These are not abstract concerns. Many popular apps route data through servers outside the EU, use message content to improve recommendation algorithms, or share data with advertising networks. GDPR compliance means a product has committed — legally and operationally — not to do those things without your knowledge and consent.


How So Tell Us handles your data {#how-so-tell-us-handles-data}

Where your data is stored {#where-data-is-stored}

So Tell Us runs on servers in Germany. Every subprocessor involved in the product is EU-based. Your letters, photos, voice notes, and replies do not leave the European Union.

This is not a marketing claim. It is a structural decision made at the infrastructure level — which means it does not change with a policy update or a business acquisition.

Who can access your letters {#who-can-access-letters}

Letters are private by default. There are no public profiles, no shared feeds, and no way for anyone outside your group to see what has been written. The people you invite are the only audience.

There is no social layer. Nothing is indexed, recommended, or surfaced to anyone beyond the five people in your group.

Voice notes and AI transcription {#voice-notes-and-ai}

So Tell Us automatically transcribes voice notes so they read naturally inside the compiled letter. That transcription is the only point where any AI is involved.

Your letters are never used to train AI models. That is a firm commitment, not a default setting that could quietly change in a future terms update.

Tracking and advertising {#tracking-and-advertising}

There is no ad tracking inside the authenticated app. The only money in the system comes from the €5 monthly group fee. No advertisers, no sponsored questions, no data sold to third parties.

Google Analytics is used on the public landing page to understand which content gets read. Once you sign in, that tracking stops entirely. The privacy policy at so-tell-us.com covers this distinction clearly.


How So Tell Us compares to other family communication tools on privacy {#comparison}

Most tools in this space were not built with privacy as a starting point. They were built for scale, engagement, and retention — privacy came later, where required.

So Tell Us Letterloop Marco Polo
Servers in EU Yes Not specified No
No app required Yes No (iOS/Android required) No (app required)
No push notifications Yes No No
Letters train AI Never Not disclosed Not applicable
Ad tracking in app No Not disclosed Not disclosed
Transparent pricing Yes (€5/month) Freemium, in-app purchases Freemium
Voice note replies Yes No Video only

Letterloop is the closest direct competitor. It compiles group answers into a shared digest, but requires a mobile app — which brings app-store friction, push notifications, and a feed experience with it. Its pricing is freemium with in-app purchases that are not transparently listed.

Marco Polo is video-first and app-dependent. It has no structured question prompts, no compiled letter format, and runs as a notification-driven feed. It was not designed for the kind of quiet, recurring exchange that So Tell Us is built around.

Neither competitor makes explicit commitments about EU data residency or AI training in the way So Tell Us does.


Common privacy questions answered {#common-questions}

Do recipients need to create an account?

No. Recipients only need an email address. There is no account creation required for anyone who receives and replies to a letter.

Can I cancel and have my data removed?

You can cancel in two clicks, at any time. No credit card is required to start the 14-day free trial, so there is nothing to forget to cancel.

What happens to my voice notes after transcription?

Voice notes are transcribed so they read naturally inside the letter. They are not retained for model training or any secondary purpose.

Is the product certified under GDPR?

GDPR compliance is an ongoing operational commitment, not a one-time certification. The relevant signals are EU-only data storage, EU-only subprocessors, no ad tracking in the app, and letters never used to train AI. These are structural decisions, not policy language.

Is the German-language version held to the same standards?

Yes. The German-language version at erzaehl-doch-mal.com runs on the same infrastructure with the same data handling commitments.


FAQs {#faqs}

Is So Tell Us GDPR compliant?

So Tell Us stores all data on servers in Germany, uses only EU-based subprocessors, carries no ad tracking inside the authenticated app, and never uses letter content to train AI. These are the structural conditions that define GDPR-aligned data handling for EU residents.

Where is my family's data stored?

On servers in Germany. All subprocessors are also EU-based. Your letters, photos, and voice notes do not leave the European Union.

Does So Tell Us use my messages to train AI?

No. Voice notes are transcribed automatically so they read naturally in the compiled letter — that is the only AI involvement. Your letters are never used to train any model.

Do I need to download an app to use So Tell Us?

No. So Tell Us works entirely through email. Recipients do not need to download anything or create an account. The product is browser-based for the person who sets up the group.

Is there any advertising or data sharing with third parties?

No ads, no data sold. The only revenue is the €5 monthly group fee paid by the person who starts the group.

How is So Tell Us different from WhatsApp or other group chats on privacy?

WhatsApp is owned by Meta and routes data through US-based infrastructure. So Tell Us is built and hosted in Germany, uses EU-only subprocessors, and has no advertising layer. It also has no notifications, no feed, and no social graph.

What if I want to stop using So Tell Us?

You can cancel at any time in two clicks. No credit card is required to start, so there is nothing to manage during the trial period.


A quiet choice with clear commitments

Privacy is not a feature you add. It is a set of decisions made early — about where data lives, who can see it, and what it is used for.

So Tell Us was built in Munich, hosted in Germany, and designed to handle family letters the way you would want a trusted friend to handle them. Quietly, without sharing, and without a secondary agenda.

If that matters to you, So Tell Us is worth a look. The first 14 days are free, and no credit card is needed to start.