Privacy Policy

This Privacy Policy explains how Tenzle ("Tenzle", "we", "us", or "our") collects, uses, stores, and protects your personal data when you use the Tenzle application and website at tenzle.com (together, the "Service").

Tenzle is currently operated by an individual, not a registered company. Under the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and the Data Protection Act 2018, the operator of Tenzle is the "controller" of your personal data and is responsible for it. If Tenzle later becomes a registered business, we will update this policy with the legal entity's name and address.

If you have any questions about this policy or how we handle your data, contact us at admin@tenzle.com.

1. Who We Are

Tenzle is an AI-powered personal life-coaching and productivity application, delivered as an installable progressive web app (PWA) and accessible through your browser at tenzle.com. The Service helps you set goals, plan your day, reflect on your progress, and stay connected to the people who matter to you, with an AI assistant that builds an evolving understanding of you over time. Tenzle is operated by an individual.

Tenzle is currently offered on an invite-only (alpha/beta) basis to a closed group of users.

2. What This Policy Covers

This policy covers all personal data we process through:

• the Tenzle web application (including the installable PWA);
• the tenzle.com website and landing pages;
• our background processes (such as scheduled morning briefs, evening reminders, and notifications); and
• any email or push communications we send you as part of the Service.

It does not cover third-party services that you may reach through links from Tenzle, which have their own privacy policies.

3. The Data We Collect

As explained above, the substance of what Tenzle holds about you is the information you choose to provide. We do not collect personal data from third-party sources or build a picture of you from outside Tenzle. In addition to what you provide, we collect a limited amount of technical data automatically in order to run and secure the Service. The full picture is set out below.

3.1 Information you provide directly

Account and identity data. When you create an account, we collect your name, email address, and (if you sign up with email rather than Google) a password. Passwords are handled and stored by our authentication provider (Supabase Auth) and are never stored in our application database.

Goals. The goals you set, including their title, description, focus area, your reason for pursuing them ("why"), target dates, and status.

Daily check-ins. Your evening reflections, including your mood (great, good, neutral, bad, or awful), an energy score from 1 to 10, and any free-text notes you write.

People and relationships. Records you create about people who matter to you, including their name, your relationship to them, how often you want to stay in touch, when you last contacted them, and any free-text notes you keep about them. Please see Section 11 for important information about data concerning other people.

Tasks, habits, commitments, and captures. Your task and habit items and their completion status; your daily commitments (including the time slot you choose, whether something is your "big thing" for the day, and any notes about what got in the way); and quick "brain dump" items you add to your inbox.

Notes and reflections. Free-text notes and thoughts you record.

Profile and onboarding answers. Your answers to onboarding questions and to the daily and deep questions the assistant asks, which may include context about your goals, focus areas, and life circumstances.

AI preferences. Free-text standing instructions you give the assistant (for example, "keep nudges gentle").

Settings. Your timezone, your chosen morning brief and evening check-in times, your selected coach personality, your theme, and your capture style.

Feedback. Any bug reports, feature requests, or other messages you send us.

3.2 Information we collect automatically

Technical and usage data. Your IP address (logged on requests that change data, and used for security and rate-limiting), and timestamps recording when records are created or updated and when you take actions such as checking in or completing tasks.

Behavioural signals. Information we derive from your use of the Service, such as your completion streaks, completion patterns, your capture style, and how regularly you contact people you track.

AI-derived inferences. An evolving profile of your personality and working style (your "user model") and weekly summaries, generated by AI from the data above. See Section 6.

Push notification data. If you enable notifications, we store the technical subscription details your browser provides (an endpoint URL and cryptographic keys) so we can send you notifications. See Section 5.

Analytics data. Limited product-analytics and website-analytics data, described in Section 7 and in our Cookie Policy.

4. Sensitive ("Special Category") Data

Because Tenzle is a personal life-coaching tool, the data you enter may reveal information that UK/EU law treats as special category data under Article 9 of the GDPR. In particular:

• Health and mental wellbeing. Your mood ratings, energy scores, and free-text journaling routinely reveal information about your emotional and mental state. The assistant's user model may also infer psychological patterns about you.
• Other sensitive information. Your free-text fields (goals, notes, check-ins, inbox items) may contain whatever you choose to write, which could include information about your health, beliefs, relationships, or other sensitive topics.

We process this data only to provide the Service to you. Where the data you provide falls within Article 9, our lawful basis is your explicit consent, which you give by choosing to enter this information into Tenzle. You can withdraw that consent at any time by deleting the relevant data or your account (see Section 12).

We ask that you only enter sensitive information about yourself that you are comfortable having processed as described in this policy, and that you take particular care before entering sensitive information about other people (see Section 11).

5. How We Use Your Data

We use your personal data to:

• Provide the core Service — generate your personalised morning brief and daily focus list, present your commitment deck, send just-in-time nudges, run your evening check-in and step check, produce weekly reflections, and track your goals, habits, people, and streaks;
• Personalise your coaching — build and maintain your user model so the assistant's guidance becomes more tailored over time (see Section 6);
• Send notifications and emails — deliver your morning brief, evening reminders, and task nudges by push notification and/or email;
• Maintain and secure the Service — authenticate you, prevent abuse, apply rate limits, and keep the Service working;
• Understand and improve the product — through limited, privacy-protective analytics (see Section 7); and
• Communicate with you — respond to your feedback and support requests.

6. AI Processing and Automated Profiling

Tenzle's core functionality relies on artificial intelligence. We want to be clear about how this works.

AI provider. We use Google's Gemini models to generate the assistant's output — your morning briefs, evening observations, coaching and deep questions, goal plans, and the weekly updates to your user model.

What is sent to the AI. To generate relevant output, we assemble a context from your data and send it to Google's Gemini API. This context can include your goals, recent check-in notes and moods, the names of and notes about people you track, your tasks, inbox items, notes, profile answers, and your user model. This data is transmitted to Google for processing. Google acts as our processor for this purpose. We do not use your data to train third-party AI models, and our use of the Gemini API is subject to Google's applicable terms.

Profiling. The assistant maintains an evolving "user model" — a narrative profile of your personality, working style, recurring themes, and stated preferences — which it regenerates periodically from your activity and injects into future prompts to personalise your coaching. This constitutes profiling under the GDPR. However, this profiling is used only to tailor coaching suggestions; Tenzle does not make any automated decisions that produce legal effects or similarly significant effects on you within the meaning of Article 22 of the GDPR. You retain full control over the data that feeds the model, and you can delete it (see Section 12).

If you would like more information about the logic involved, or you object to this profiling, contact us at admin@tenzle.com.

7. Third-Party Service Providers (Sub-Processors)

We rely on the following third parties to operate the Service. Each processes personal data only as needed to provide its function.

We may update this list as our providers change, and we will keep this section current.

8. "Sign in with Google" (OAuth)

If you choose to sign in with Google, Google shares a standard set of profile information with us through the OpenID Connect standard: your email address, your name, and your Google profile picture. We store your email and name in our database and display your profile picture in the app. We do not receive your Google password. Your use of Google sign-in is also governed by Google's own privacy policy.

9. Legal Bases for Processing

Under the UK/EU GDPR, we must have a lawful basis for processing your personal data. We rely on the following:

• Performance of a contract — to provide the Service you have signed up for, including generating briefs, running check-ins, sending Service notifications, and maintaining your account.
• Your consent — for processing special category data you enter (Section 4), for non-essential analytics that rely on consent (Section 7 and the Cookie Policy), and for sending push notifications where required.
• Our legitimate interests — to secure the Service, prevent abuse, debug problems, and improve the product, balanced against your rights and freedoms.

Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

10. Data Retention

We keep your data only for as long as necessary.

• Rolling Service data. Morning briefs, AI responses, check-ins, commitments, and processed inbox items are automatically deleted after 90 days by a daily clean-up process.
• Content you manage. Your goals, people, notes, miscellaneous tasks, habits/actions, and profile answers are retained until you delete them or close your account.
• Your user model and weekly summaries. These are retained until you close your account, because they form the assistant's long-term understanding of you. You can ask us to reset them at any time.
• Server access logs. Logs that may contain your IP address are retained for approximately 30 days for security and debugging.
• Push subscriptions. Retained until you unsubscribe, your subscription becomes invalid, or you close your account.

When you delete your account, we delete your data as described in Section 12.

11. Data About Other People

Tenzle lets you record information about other people — for example, in your "people" records and in notes or check-ins that mention friends, family, or colleagues. This is personal data about individuals who are not Tenzle users and who have not themselves agreed to this policy.

You are responsible for ensuring you have a proper basis for recording information about others, and for limiting it to what is reasonable for your own personal organisation. We process this data only to provide the Service to you (for example, to remind you to stay in touch) and we do not use it to contact those people. If someone believes you hold information about them in Tenzle and wishes to exercise their rights, they can contact us at admin@tenzle.com and we will work with you to respond appropriately.

Please be especially cautious about entering sensitive information about other people.

12. Your Rights

Under the UK/EU GDPR you have the following rights:

• Access — request a copy of the personal data we hold about you.
• Rectification — correct inaccurate or incomplete data (most of which you can edit directly in the app).
• Erasure — delete your data. You can delete your account at any time from Profile → Delete account, which removes your data from our database (including goals, people, check-ins, notes, AI responses, your user model, weekly summaries, push subscriptions, and feedback) and deletes your authentication record.
• Restriction — ask us to limit how we process your data.
• Portability — request your data in a structured, machine-readable format. We currently handle portability requests manually; contact us at admin@tenzle.com and we will provide an export of your data.
• Objection — object to processing based on our legitimate interests, including profiling.
• Withdraw consent — where we rely on consent (including for sensitive data and non-essential analytics).
• Rights relating to automated processing — see Section 6.

To exercise any of these rights, contact us at admin@tenzle.com. We will respond within the timeframes required by law (normally one month). You also have the right to complain to a supervisory authority (see Section 16).

13. International Data Transfers

Our database and authentication (Supabase) and our product analytics (PostHog) are hosted in the EU. However, some of our providers are based in the United States — in particular Google (for Gemini AI processing, Google sign-in, and Google Fonts).

Where your data is transferred outside the UK/EEA, we rely on appropriate safeguards recognised under UK/EU law, such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, together with the providers' own certifications where applicable. You can ask us for more detail about these safeguards.

14. Data Security

We take reasonable technical and organisational measures to protect your data, including:

• per-user database access controls (Row-Level Security), so each user can only access their own data;
• session tokens stored in secure, HTTP-only cookies;
• cross-site request forgery (CSRF) protection and rate limiting;
• encryption of data in transit (HTTPS); and
• access controls on our infrastructure and API keys.

No system is completely secure, and we cannot guarantee absolute security, but we work to protect your data and to address any vulnerabilities promptly.

15. Children

Tenzle is not directed at children. You must be at least 16 years old to use the Service. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact us at admin@tenzle.com and we will delete it.

16. Changes to This Policy and How to Contact Us

We may update this policy from time to time. If we make material changes, we will notify you through the Service or by email. The "Last updated" date at the top shows when this policy was last revised.

For any privacy question or request, contact us at admin@tenzle.com.

If you are in the UK and you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk. If you are in the EU, you may complain to your local data protection supervisory authority.