Privacy Policy

This Privacy Policy explains how Tenzle ("Tenzle", "we", "us", or "our") collects, uses, stores, and protects your personal data when you use the Tenzle application and website at tenzle.com (together, the "Service").

Tenzle is currently operated by an individual, not a registered company. Under the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and the Data Protection Act 2018, the operator of Tenzle is the "controller" of your personal data and is responsible for it. If Tenzle later becomes a registered business, we will update this policy with the legal entity's name and address.

If you have any questions about this policy or how we handle your data, contact us at admin@tenzle.com.

1. Who We Are

Tenzle is a goal follow-through app. It is currently available as a native iOS app (built with Capacitor) distributed through the Apple App Store. The Service helps you set goals, turns each goal into a plan of milestones and habits, and gives you a short focused list to act on each day, with periodic AI-generated review to keep the plan on track. Tenzle is operated by an individual.

The tenzle.com website is currently an information and waitlist page only — the app itself does not run in a web browser at this time. We are not distributing Tenzle through Google Play. If that changes, we will update this policy.

Tenzle is currently offered on an invite-only (alpha/beta) basis to a closed group of users.

2. What This Policy Covers

This policy covers all personal data we process through:

• the native Tenzle iOS app;
• the tenzle.com website and landing pages (including the waitlist sign-up form);
• our background processes (such as scheduled morning briefs, evening reminders, and notifications); and
• any push notifications, or email we send you (such as an invitation when a waitlist place opens, or a reply to your support request).

It does not cover third-party services that you may reach through links from Tenzle, which have their own privacy policies.

3. The Data We Collect

As explained above, the substance of what Tenzle holds about you is the information you choose to provide. We do not collect personal data from third-party sources or build a picture of you from outside Tenzle. In addition to what you provide, we collect a limited amount of technical data automatically in order to run and secure the Service. The full picture is set out below.

3.1 Information you provide directly

Account and identity data. When you create an account, we collect your name and email address from your Google or Apple sign-in. We never see or store a password — authentication is handled entirely by Google or Apple together with our authentication provider (Supabase Auth). If you use Sign in with Apple and choose to hide your email, Apple gives us a private, Apple-generated relay address instead of your real one; email we send to it is forwarded to you by Apple.

Goals. The goals you set, including their title, description, your reason for pursuing them ("why"), target dates, and status, together with the plan generated for each goal (its milestones and habits) and any edits you make to that plan.

Tasks, habits, and commitments. Your task and habit items and their completion status; and your daily commitments (the items you commit to for the day), including the optional free text you may add to a commitment — your reason for committing to it, and a note about what got in the way if you did not finish it.

Onboarding answers. Your answers to the short set-up questions we ask about each goal, some of which are free text.

Check-ins. When you confirm your tasks for the day, we record which tasks you completed and the fact that you checked in. Check-ins do not ask for or record a free-text note, a mood, or an energy rating.

Settings and preferences. Your timezone, your morning brief and evening check-in times, and your chosen coach personality. Some display preferences, such as your theme, are stored only on your own device and are never sent to us.

Feedback. Any bug reports, feature requests, or other messages you send us.

Purchase information. If you subscribe, we receive your subscription status, tier, and renewal information from the Apple App Store by way of our subscription provider, RevenueCat. We never see or store your payment card or bank details — those are handled entirely by Apple. See Sections 6 and 7.

3.2 Information we collect automatically

Technical and usage data. Your IP address and timestamps recording when records are created or updated and when you take actions such as checking in or completing tasks. Your IP address is used for security and rate-limiting, and it appears in our short-lived server logs — specifically on requests that change data, on any request that returns an error, and on unusually slow requests. We do not store your IP address in our database; it exists only in those server logs, which age out as described in Section 10.

Activity events. As you use your plan, we record an event log of what happened — for example, that a task was surfaced, committed to, completed, or reversed. A small number of these are key structural actions (such as completing a milestone or advancing to the next phase of a goal); we keep those as a permanent part of your account history. The higher-volume day-to-day events are not automatically deleted, and are only ever aged out if we configure a retention window (we do not currently do so). We use this log to run the plan and to power the weekly review (see Section 6). We do not turn it into a stored personality profile or psychological assessment of you.

Last-active timestamp. We record when you were last active. This lets us pause non-essential AI generation and reminder notifications for accounts that have been inactive for several days, so we do not keep processing data or sending notifications to people who have stopped using Tenzle. Any return visit lifts the pause.

Push notification data. If you enable notifications, we store what we need to deliver them: in the iOS app, a Firebase Cloud Messaging (FCM) device token; in a web browser, the subscription details your browser provides (an endpoint URL and cryptographic keys). Notifications are functional, not promotional — your morning brief, your evening check-in, and your weekly plan review. Their content can include the title of the goal or task they are about, which means it may be visible on your lock screen. See Section 5.

Analytics data. Limited product-analytics and website-analytics data, described in Section 7 and in our Cookie Policy.

3.3 Waitlist

While Tenzle is invite-only, we keep an early-access waitlist. We add your email address to it in two situations:

• when you enter it into the waitlist sign-up form on our landing page; and
• when you try to sign in but your account is not yet allowed in during early access — we take the email address from that sign-in attempt and add it to the waitlist so we can notify you when access opens.

We use waitlist emails only to manage early access and to let you know when you can join. You can ask us to remove your email from the waitlist at any time by contacting admin@tenzle.com. See Section 10 for how long we keep it.

4. Sensitive ("Special Category") Data

Because Tenzle is a tool for personal goals, the data you enter may reveal information that UK/EU law treats as special category data under Article 9 of the GDPR. In particular:

• Health and mental wellbeing. Because Tenzle is about personal goals, the free text you enter may reveal information about your health, fitness, emotional state, or other aspects of your wellbeing.
• Other sensitive information. Those same free-text fields may contain whatever you choose to write, which could include information about your beliefs, relationships, or other sensitive topics.

The free-text fields where this can arise are: your goal titles and descriptions; the titles of any tasks, milestones, or habits you add or edit yourself; your answers to the set-up questions we ask about each goal; the reason you give for committing to a task and any note you add about what got in the way; the free text you paste into the brain-dump box during set-up; and any feedback you send us.

We process this data only to provide the Service to you. Where the data you provide falls within Article 9, our lawful basis is your explicit consent, which you give by choosing to enter this information into Tenzle. You can withdraw that consent at any time by deleting the relevant data or your account (see Section 12).

We ask that you only enter sensitive information about yourself that you are comfortable having processed as described in this policy, and that you take particular care before entering sensitive information about other people (see Section 11).

5. How We Use Your Data

We use your personal data to:

• Provide the core Service — generate the plan for each goal, compute your daily focus list, present your swipe deck, run your evening check-in, track your goals, milestones, habits, and completion streaks, and periodically review your plan (see Section 6);
• Send notifications — deliver your morning brief, your evening check-in reminder, and your weekly plan review, by push notification;
• Manage early access — operate the waitlist and let you know when you can join (see Section 3.3);
• Maintain and secure the Service — authenticate you, prevent abuse, apply rate limits, and keep the Service working;
• Handle subscriptions — determine whether you have an active subscription so we can unlock premium features (see Section 6);
• Understand and improve the product — through limited, privacy-protective analytics (see Section 7); and
• Communicate with you — respond to your feedback and support requests.

6. AI Processing

Tenzle uses artificial intelligence for a small number of specific tasks. We want to be clear about how this works, and about what it does not do.

AI provider. We use Google's Gemini models. We use them only for:

• generating the plan for your goals when you first set them up, and an optional one-off reshape if you answer a confidence question;
• working out which of our plan templates best fits a goal, in the small number of cases where our ordinary keyword matching cannot tell;
• a periodic (roughly weekly) review of your plan against your activity;
• capped, user-triggered reorganises when you ask for one; and
• "untangling" a brain dump into goals, if you paste one during set-up rather than listing your goals yourself.

Your day-to-day use of Tenzle involves no AI at all — your daily focus list is computed by ordinary software, not a language model. Your check-ins and task completions involve no AI either.

What is sent to the AI. For a given task, we assemble only the data that task needs — for example, the goals, plan, and activity relevant to the review — and send it to Google's Gemini API for processing. Google acts as our processor for this purpose. We do not use your data to train Google's or any other third party's AI models, and our use of the Gemini API is subject to Google's applicable terms.

Some of your free text is deliberately never sent to the AI. The reason you give for committing to a task, and the note you may add about what got in the way, are kept for you alone and are never included in any prompt. Where the weekly review takes account of the times you did part of a task rather than all of it, it uses only the number of those occasions — never anything you wrote.

No standing profile, no automated decisions about you. Tenzle does not build or store an evolving profile of your personality, mood, or psychology, and it does not score or rank you as a person. The weekly review looks at your plan and your activity to keep the plan useful; it does not produce a lasting judgement about you. Tenzle does not make any automated decisions that produce legal effects or similarly significant effects on you within the meaning of Article 22 of the GDPR.

If you would like more information about how the AI features work, contact us at admin@tenzle.com.

7. Third-Party Service Providers (Sub-Processors)

We rely on the following third parties to operate the Service. Each processes personal data only as needed to provide its function.

We may update this list as our providers change, and we will keep this section current.

8. Signing in with Google or Apple

Google. If you choose to sign in with Google, Google shares a standard set of profile information with us through the OpenID Connect standard: your email address, your name, and your Google profile picture. We store your email and name in our database and display your profile picture in the app. We do not receive your Google password. Your use of Google sign-in is also governed by Google's own privacy policy.

Apple. If you choose to Sign in with Apple, Apple shares your name and email address with us. You can choose to hide your email, in which case Apple gives us a unique, Apple-generated private-relay address instead of your real one, and forwards to you anything we send to it. We do not receive your Apple password. Your use of Apple sign-in is also governed by Apple's own privacy policy.

9. Legal Bases for Processing

Under the UK/EU GDPR, we must have a lawful basis for processing your personal data. We rely on the following:

• Performance of a contract — to provide the Service you have signed up for, including generating briefs, running check-ins, sending Service notifications, and maintaining your account.
• Your consent — for processing special category data you enter (Section 4), for non-essential analytics that rely on consent (Section 7 and the Cookie Policy), and for sending push notifications where required.
• Our legitimate interests — to secure the Service, prevent abuse, debug problems, and improve the product, balanced against your rights and freedoms.

Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

10. Data Retention

We keep your data only for as long as necessary.

• Goals and plan content. Your goals, their generated plans, milestones, habits, and onboarding answers are retained until you delete the relevant goal or item, or close your account.
• Daily records — deleted automatically after 90 days. A scheduled daily clean-up permanently deletes the following once they are more than 90 days old: your daily briefs, your daily commitments (including the free text you added to them), your check-in records, your day-by-day habit completion records, our record of notifications sent to you, and any AI observations from the weekly review. This means your day-level history is a rolling 90-day window rather than a permanent archive.
• Structural events. The key structural actions in your event log (such as milestone completions and phase advances) are kept as a permanent part of your account history, until you close your account.
• Day-to-day activity events. The higher-volume events in your log are retained and are not automatically deleted. They are only ever aged out if we configure a retention window, which we do not currently do. They are removed when you close your account.
• Subscription records. Records of your subscription status are retained while your account is active and are deleted when you close your account. A minimal billing audit record is kept after that for our own financial and fraud-prevention records, with your account identifier removed so it is no longer linked to you.
• Waitlist emails. If your email is on our early-access waitlist, we keep it until you use an invitation to join (after which it forms part of your account) or you ask us to remove it.
• Server access logs. Logs that may contain your IP address are held only by our hosting provider, for security and debugging, and are automatically discarded after a short retention period set by our hosting plan — currently 7 days. We do not copy them anywhere else and we do not store your IP address in our database.
• Push subscriptions. Retained until you unsubscribe, your subscription becomes invalid, or you close your account.

When you delete your account, we delete your data as described in Section 12.

11. Data About Other People

The free text you enter — for example in a goal's description, or a note about what got in the way of a commitment — may mention other people, such as friends, family, or colleagues. This is personal data about individuals who are not Tenzle users and who have not themselves agreed to this policy.

You are responsible for ensuring you have a proper basis for recording information about others, and for limiting it to what is reasonable for your own personal organisation. We process this data only to provide the Service to you, and we do not use it to contact those people. If someone believes you hold information about them in Tenzle and wishes to exercise their rights, they can contact us at admin@tenzle.com and we will work with you to respond appropriately.

Please be especially cautious about entering sensitive information about other people.

12. Your Rights

Under the UK/EU GDPR you have the following rights:

• Access — request a copy of the personal data we hold about you.
• Rectification — correct inaccurate or incomplete data (most of which you can edit directly in the app).
• Erasure — delete your data. You can delete your account at any time from Settings → Delete account in the app, which removes your data from our database (including your goals, plans, tasks and completions, check-ins, event history, push subscriptions, subscription records, and feedback) and deletes your authentication record. If you cannot use the app, you can request deletion from our Delete your account page. As noted in Section 10, an anonymised billing audit record is retained.
  Note: deleting your Tenzle account does not cancel an active App Store subscription. Store subscriptions are managed by Apple, so you must cancel yours separately in your device's subscription settings — otherwise it will keep renewing even after your account is gone.
• Restriction — ask us to limit how we process your data.
• Portability — request your data in a structured format. You can export your own data at any time from Settings → Download my data in the app, which produces a document containing everything in your account. If you would prefer we send it to you, contact us at admin@tenzle.com.
• Objection — object to processing based on our legitimate interests, including profiling.
• Withdraw consent — where we rely on consent (including for sensitive data and non-essential analytics).
• Rights relating to automated processing — see Section 6.

To exercise any of these rights, contact us at admin@tenzle.com. We will respond within the timeframes required by law (normally one month). You also have the right to complain to a supervisory authority (see Section 16).

13. International Data Transfers

Our database and authentication (Supabase) and our product analytics (PostHog) are hosted in the EU. However, some of our providers are based in the United States — in particular Render (which hosts the application server that runs the Service) and Vercel (which hosts our website and routes app requests), Google (for Gemini AI processing, Google sign-in, Firebase Cloud Messaging, and Google Fonts), Apple (for Sign in with Apple and App Store subscriptions), and RevenueCat (for subscription management).

Where your data is transferred outside the UK/EEA, we rely on appropriate safeguards recognised under UK/EU law, such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, together with the providers' own certifications where applicable. You can ask us for more detail about these safeguards.

14. Data Security

We take reasonable technical and organisational measures to protect your data, including:

• application-level access controls, so each user can only access their own data;
• session tokens stored in the device's protected app storage in the iOS app, and in secure, HTTP-only cookies on the web;
• cross-site request forgery (CSRF) protection and rate limiting;
• encryption of data in transit (HTTPS); and
• access controls on our infrastructure and API keys.

No system is completely secure, and we cannot guarantee absolute security, but we work to protect your data and to address any vulnerabilities promptly.

15. Children

Tenzle is not directed at children. You must be at least 16 years old to use the Service. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact us at admin@tenzle.com and we will delete it.

16. Changes to This Policy and How to Contact Us

We may update this policy from time to time. If we make material changes, we will notify you through the Service or by email. The "Last updated" date at the top shows when this policy was last revised.

For any privacy question or request, contact us at admin@tenzle.com.

If you are in the UK and you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk. If you are in the EU, you may complain to your local data protection supervisory authority.