Privacy Policy

This Privacy Policy explains how Tenzle ("Tenzle", "we", "us", or "our") collects, uses, stores, and protects your personal data when you use the Tenzle application and website at tenzle.com (together, the "Service").

Tenzle is currently operated by an individual, not a registered company. Under the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and the Data Protection Act 2018, the operator of Tenzle is the "controller" of your personal data and is responsible for it. If Tenzle later becomes a registered business, we will update this policy with the legal entity's name and address.

If you have any questions about this policy or how we handle your data, contact us at admin@tenzle.com.

1. Who We Are

Tenzle is a goal follow-through app. It is available as an installable progressive web app (PWA) accessible through your browser at tenzle.com, and as native iOS and Android apps (built with Capacitor) distributed through the Apple App Store and Google Play. The Service helps you set goals, turns each goal into a plan of milestones and habits, and gives you a short focused list to act on each day, with periodic AI-generated review to keep the plan on track. Tenzle is operated by an individual.

Tenzle is currently offered on an invite-only (alpha/beta) basis to a closed group of users.

2. What This Policy Covers

This policy covers all personal data we process through:

• the Tenzle web application (including the installable PWA) and the native iOS and Android apps;
• the tenzle.com website and landing pages (including the waitlist sign-up form);
• our background processes (such as scheduled morning briefs, evening reminders, and notifications); and
• any push notifications, or email we send you (such as an invitation when a waitlist place opens, or a reply to your support request).

It does not cover third-party services that you may reach through links from Tenzle, which have their own privacy policies.

3. The Data We Collect

As explained above, the substance of what Tenzle holds about you is the information you choose to provide. We do not collect personal data from third-party sources or build a picture of you from outside Tenzle. In addition to what you provide, we collect a limited amount of technical data automatically in order to run and secure the Service. The full picture is set out below.

3.1 Information you provide directly

Account and identity data. When you create an account, we collect your name and email address from your Google or Apple sign-in. We never see or store a password — authentication is handled entirely by Google or Apple together with our authentication provider (Supabase Auth). If you use Sign in with Apple and choose to hide your email, Apple gives us a private, Apple-generated relay address instead of your real one; email we send to it is forwarded to you by Apple.

Goals. The goals you set, including their title, description, your reason for pursuing them ("why"), target dates, and status, together with the plan generated for each goal (its milestones and habits) and any edits you make to that plan.

Tasks, habits, commitments, and inbox captures. Your task and habit items and their completion status; your daily commitments (the items you commit to for the day); and quick "brain dump" items you add to your inbox for later triage.

Check-ins. When you confirm your tasks for the day, we record which tasks you completed and any optional free-text note you choose to add. Check-ins do not ask for or record a mood or energy rating.

Reminders. Any reminders you set, including the reminder text and the date and time you want it fired.

Settings and preferences. Your timezone, your morning brief and evening check-in times, your chosen coach voice, and your theme. This includes any free-text standing instructions you give the assistant (for example, "keep nudges gentle").

Feedback. Any bug reports, feature requests, or other messages you send us.

Purchase information. If you subscribe, we receive your subscription status, tier, and renewal information from the App Store or Google Play by way of our subscription provider, RevenueCat. We never see or store your payment card or bank details — those are handled entirely by Apple or Google. See Sections 6 and 7.

3.2 Information we collect automatically

Technical and usage data. Your IP address (logged on requests that change data, and used for security and rate-limiting), and timestamps recording when records are created or updated and when you take actions such as checking in or completing tasks.

Activity events. As you use your plan, we record an event log of what happened — for example, that a task was surfaced, committed to, completed, or reversed. A small number of these are key structural actions (such as completing a milestone or advancing to the next phase of a goal); we keep those as a permanent part of your account history. The higher-volume day-to-day events are not automatically deleted, and are only ever aged out if we configure a retention window (we do not currently do so). We use this log to run the plan and to power the weekly review (see Section 6). We do not turn it into a stored personality profile or psychological assessment of you.

Last-active timestamp. We record when you were last active. This lets us pause non-essential AI generation and reminder notifications for accounts that have been inactive for several days, so we do not keep processing data or sending notifications to people who have stopped using Tenzle. Any return visit lifts the pause.

Push notification data. If you enable notifications, we store what we need to deliver them: on the web, the subscription details your browser provides (an endpoint URL and cryptographic keys); in the native apps, a Firebase Cloud Messaging (FCM) device token. See Section 5.

Analytics data. Limited product-analytics and website-analytics data, described in Section 7 and in our Cookie Policy.

3.3 Waitlist

While Tenzle is invite-only, we keep an early-access waitlist. We add your email address to it in two situations:

• when you enter it into the waitlist sign-up form on our landing page; and
• when you try to sign in but your account is not yet allowed in during early access — we take the email address from that sign-in attempt and add it to the waitlist so we can notify you when access opens.

We use waitlist emails only to manage early access and to let you know when you can join. You can ask us to remove your email from the waitlist at any time by contacting admin@tenzle.com. See Section 10 for how long we keep it.

4. Sensitive ("Special Category") Data

Because Tenzle is a tool for personal goals, the data you enter may reveal information that UK/EU law treats as special category data under Article 9 of the GDPR. In particular:

• Health and mental wellbeing. Because Tenzle is about personal goals, the free text you enter — such as a goal's "why", your inbox brain-dumps, your check-in notes, or feedback — may reveal information about your health, fitness, emotional state, or other aspects of your wellbeing.
• Other sensitive information. Those same free-text fields may contain whatever you choose to write, which could include information about your beliefs, relationships, or other sensitive topics.

We process this data only to provide the Service to you. Where the data you provide falls within Article 9, our lawful basis is your explicit consent, which you give by choosing to enter this information into Tenzle. You can withdraw that consent at any time by deleting the relevant data or your account (see Section 12).

We ask that you only enter sensitive information about yourself that you are comfortable having processed as described in this policy, and that you take particular care before entering sensitive information about other people (see Section 11).

5. How We Use Your Data

We use your personal data to:

• Provide the core Service — generate the plan for each goal, compute your daily focus list, present your swipe deck, run your evening check-in, track your goals, milestones, habits, and completion streaks, and periodically review your plan (see Section 6);
• Send notifications — deliver your morning brief, evening reminders, and the reminders you set, by push notification;
• Manage early access — operate the waitlist and let you know when you can join (see Section 3.3);
• Maintain and secure the Service — authenticate you, prevent abuse, apply rate limits, and keep the Service working;
• Handle subscriptions — determine whether you have an active subscription so we can unlock premium features (see Section 6);
• Understand and improve the product — through limited, privacy-protective analytics (see Section 7); and
• Communicate with you — respond to your feedback and support requests.

6. AI Processing

Tenzle uses artificial intelligence for a small number of specific tasks. We want to be clear about how this works, and about what it does not do.

AI provider. We use Google's Gemini models. We use them only for: generating the plan for your goals when you first set them up (and an optional one-off reshape if you answer a confidence question); a periodic (roughly weekly) review of your plan against your activity; capped, user-triggered reorganises when you ask for one; and "untangling" free text into goals and tasks when you use the inbox untangle feature. Your day-to-day use of Tenzle involves no AI at all — your daily focus list is computed by ordinary software, not a language model.

What is sent to the AI. For a given task, we assemble only the data that task needs — for example, the goals, plan, and activity relevant to the review — and send it to Google's Gemini API for processing. Google acts as our processor for this purpose. We do not use your data to train Google's or any other third party's AI models, and our use of the Gemini API is subject to Google's applicable terms.

No standing profile, no automated decisions about you. Tenzle does not build or store an evolving profile of your personality, mood, or psychology, and it does not score or rank you as a person. The weekly review looks at your plan and your activity to keep the plan useful; it does not produce a lasting judgement about you. Tenzle does not make any automated decisions that produce legal effects or similarly significant effects on you within the meaning of Article 22 of the GDPR.

If you would like more information about how the AI features work, contact us at admin@tenzle.com.

7. Third-Party Service Providers (Sub-Processors)

We rely on the following third parties to operate the Service. Each processes personal data only as needed to provide its function.

We may update this list as our providers change, and we will keep this section current.

8. Signing in with Google or Apple

Google. If you choose to sign in with Google, Google shares a standard set of profile information with us through the OpenID Connect standard: your email address, your name, and your Google profile picture. We store your email and name in our database and display your profile picture in the app. We do not receive your Google password. Your use of Google sign-in is also governed by Google's own privacy policy.

Apple. If you choose to Sign in with Apple, Apple shares your name and email address with us. You can choose to hide your email, in which case Apple gives us a unique, Apple-generated private-relay address instead of your real one, and forwards to you anything we send to it. We do not receive your Apple password. Your use of Apple sign-in is also governed by Apple's own privacy policy.

9. Legal Bases for Processing

Under the UK/EU GDPR, we must have a lawful basis for processing your personal data. We rely on the following:

• Performance of a contract — to provide the Service you have signed up for, including generating briefs, running check-ins, sending Service notifications, and maintaining your account.
• Your consent — for processing special category data you enter (Section 4), for non-essential analytics that rely on consent (Section 7 and the Cookie Policy), and for sending push notifications where required.
• Our legitimate interests — to secure the Service, prevent abuse, debug problems, and improve the product, balanced against your rights and freedoms.

Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

10. Data Retention

We keep your data only for as long as necessary.

• Goals and plan content. Your goals, their generated plans, milestones, habits, tasks, inbox captures, and reminders are retained until you delete the relevant goal or item, or close your account.
• Structural events. The key structural actions in your event log (such as milestone completions and phase advances) are kept as a permanent part of your account history, until you close your account.
• Day-to-day activity events. The higher-volume events in your log are retained and are not automatically deleted. They are only ever aged out if we configure a retention window, which we do not currently do. They are removed when you close your account.
• Subscription records. Records of your subscription status are retained while your account is active and are deleted when you close your account.
• Waitlist emails. If your email is on our early-access waitlist, we keep it until you use an invitation to join (after which it forms part of your account) or you ask us to remove it.
• Server access logs. Logs that may contain your IP address are retained for approximately 30 days for security and debugging.
• Push subscriptions. Retained until you unsubscribe, your subscription becomes invalid, or you close your account.

When you delete your account, we delete your data as described in Section 12.

11. Data About Other People

The free text you enter — for example in a goal's "why", your inbox captures, or your check-in notes — may mention other people, such as friends, family, or colleagues. This is personal data about individuals who are not Tenzle users and who have not themselves agreed to this policy.

You are responsible for ensuring you have a proper basis for recording information about others, and for limiting it to what is reasonable for your own personal organisation. We process this data only to provide the Service to you, and we do not use it to contact those people. If someone believes you hold information about them in Tenzle and wishes to exercise their rights, they can contact us at admin@tenzle.com and we will work with you to respond appropriately.

Please be especially cautious about entering sensitive information about other people.

12. Your Rights

Under the UK/EU GDPR you have the following rights:

• Access — request a copy of the personal data we hold about you.
• Rectification — correct inaccurate or incomplete data (most of which you can edit directly in the app).
• Erasure — delete your data. You can delete your account at any time from Settings → Delete account in the app, which removes your data from our database (including your goals, plans, tasks and completions, check-ins, event history, push subscriptions, subscription records, and feedback) and deletes your authentication record. If you cannot use the app, you can request deletion from our Delete your account page.
  Note: deleting your Tenzle account does not cancel any active App Store or Google Play subscription. Store subscriptions are managed by Apple and Google, so you must cancel yours separately in your device's subscription settings — otherwise it will keep renewing even after your account is gone.
• Restriction — ask us to limit how we process your data.
• Portability — request your data in a structured format. You can export your own data at any time from Settings → Download my data in the app, which produces a document containing everything in your account. If you would prefer we send it to you, contact us at admin@tenzle.com.
• Objection — object to processing based on our legitimate interests, including profiling.
• Withdraw consent — where we rely on consent (including for sensitive data and non-essential analytics).
• Rights relating to automated processing — see Section 6.

To exercise any of these rights, contact us at admin@tenzle.com. We will respond within the timeframes required by law (normally one month). You also have the right to complain to a supervisory authority (see Section 16).

13. International Data Transfers

Our database and authentication (Supabase) and our product analytics (PostHog) are hosted in the EU. However, some of our providers are based in the United States — in particular Google (for Gemini AI processing, Google sign-in, Firebase Cloud Messaging, and Google Fonts), Apple (for Sign in with Apple and App Store subscriptions), and RevenueCat (for subscription management).

Where your data is transferred outside the UK/EEA, we rely on appropriate safeguards recognised under UK/EU law, such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, together with the providers' own certifications where applicable. You can ask us for more detail about these safeguards.

14. Data Security

We take reasonable technical and organisational measures to protect your data, including:

• application-level access controls, so each user can only access their own data;
• session tokens stored in secure, HTTP-only cookies on the web, and in the device's protected app storage in the native apps;
• cross-site request forgery (CSRF) protection and rate limiting;
• encryption of data in transit (HTTPS); and
• access controls on our infrastructure and API keys.

No system is completely secure, and we cannot guarantee absolute security, but we work to protect your data and to address any vulnerabilities promptly.

15. Children

Tenzle is not directed at children. You must be at least 16 years old to use the Service. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact us at admin@tenzle.com and we will delete it.

16. Changes to This Policy and How to Contact Us

We may update this policy from time to time. If we make material changes, we will notify you through the Service or by email. The "Last updated" date at the top shows when this policy was last revised.

For any privacy question or request, contact us at admin@tenzle.com.

If you are in the UK and you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk. If you are in the EU, you may complain to your local data protection supervisory authority.