Privacy Policy
Last updated: 10 September 2026
This Privacy Policy explains how Think Again ("Think Again", "we", "us", or "our") collects, uses, stores, and protects your personal data when you use the Think Again iOS app and its website (together, the "Service").
Think Again is operated by an individual, not a registered company. Under the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and the Data Protection Act 2018, the operator of Think Again is the "controller" of your personal data and is responsible for it. If Think Again later becomes a registered business, we will update this policy with the legal entity's name and address.
If you have any questions about this policy or how we handle your data, contact us at admin@tenzle.com.
1. Who We Are
Think Again is a brain-training and screen-time app for iPhone, distributed through the Apple App Store. Each day it gives you a short set of cognitive games and a calm timer to help you spend time away from your phone. The Service is a paid subscription. The website only hosts information about the app and these legal pages; the app does not run in a web browser.
2. What This Policy Covers
This policy covers all personal data we process through:
- the Think Again iOS app;
- our website, including this page and our Terms of Service; and
- any email you send us, and our replies.
It does not cover third-party services you may reach through links from Think Again, which have their own privacy policies.
3. The Data We Collect
3.1 Information you provide
Account and identity data. You create an account by signing in with Apple or Google. We do not offer password accounts, and we never see or store a password. Our authentication provider (Supabase Auth) stores your email address and a unique account identifier. If you use Sign in with Apple and choose to hide your email, Apple gives us a private relay address instead of your real one. See Section 6 for exactly what Apple and Google share.
Age and gender. During setup we ask for your age (you must be 18 or over) and your gender, for which "Prefer not to say" is an option. Your answers are stored with your account. They are never shown to other users and never used for advertising.
Practice and game data. To run the Service and sync your progress across devices, we store the record of your daily practice: your daily game plan; which games and calm-timer sessions you start, complete, or abandon; how you performed in each game (for example, number of rounds, accuracy, response times, and the level you reached); your daily scores, streaks, and practice time; and your device's timezone offset, so that days line up with your local time.
Friends data. If you use the Friends feature, we store the display name you choose, the friend requests you send and receive, and the people you are connected to. If you never open the Friends screen, none of this exists for your account. Section 7 explains exactly what other users can see.
Settings. Whether reminders are turned on, your calm-timer preferences, and whether you have turned on analytics are stored with your account so they follow you between devices.
Purchase information. Subscriptions are sold by Apple through the App Store and managed by our subscription provider, RevenueCat. We receive your subscription status (for example trial, active, expired, or cancelled), the product you bought, its renewal dates, and an app-store customer identifier linked to your account. We never see or store your payment card or bank details; those are handled entirely by Apple.
Support messages. If you email us, we keep your message, your email address, and our reply so we can help you.
3.2 Information we collect automatically
Technical data. When the app talks to our server, your IP address is used briefly, in memory, to protect the Service with rate limits. This happens only for requests you make before you are signed in. We do not store your IP address in our database. Our hosting provider (Render) may keep short-lived technical logs of requests reaching our server, for security and debugging.
Analytics data. Analytics is off unless you turn it on in Settings. If you turn it on, we may use PostHog to record product usage events linked to your account identifier, so we can understand how the app is used and improve it. You can turn it off again in Settings at any time, and leaving it off does not affect any feature.
3.3 Information that stays on your device
- Reminders. Reminder notifications are scheduled on your iPhone using iOS local notifications. We do not collect a push token, and we do not send notifications from our servers.
- Sign-in session. Your sign-in token is kept in the iOS Keychain on your device.
- Share cards. If you share a progress card, it is created on your device and sent through the iOS share sheet to the app you pick. We do not receive a copy.
What we don't collect. We do not use advertising networks or ad SDKs, do not track you across other companies' apps or websites, do not sell your personal data, and do not ask for access to your contacts, location, photos, camera, or microphone.
4. How We Use Your Data
We use your personal data to:
- Provide the Service: create your account and keep you signed in, build your daily plan, run the games and calm timer, record your scores and streaks, and sync your progress and settings across your devices;
- Run the Friends feature: let other users find your display name, send and answer friend requests, and show scores between friends;
- Handle subscriptions: check whether you have an active subscription so we can unlock the app, and restore purchases on a new device;
- Understand our users: understand, in aggregate, the ages and genders of the people who use Think Again;
- Improve the product: through analytics, only if you turn it on;
- Maintain and secure the Service: authenticate you, prevent abuse, apply rate limits, and fix problems; and
- Communicate with you: reply to your emails and support requests.
We do not use your data to train AI models, and we do not share it with data brokers.
5. Third-Party Service Providers
We rely on the following third parties to run the Service. Each processes personal data only as needed to perform its function for us.
| Provider | Function | Data shared | Location |
|---|---|---|---|
| Supabase | Database and authentication (our primary data store) | All account and Service data described in Section 3.1 | EU region |
| Render | Hosting for our server and website | Friends requests and subscription checks pass through it; short-lived technical logs | United States |
| Apple | Sign in with Apple; App Store payments | Sign-in tokens during sign-in; your payment, which Apple processes | United States |
| Sign in with Google | Sign-in tokens during sign-in | United States | |
| RevenueCat | Subscription management | App-store customer identifier, purchase and subscription status (no card details) | United States |
| PostHog | Product analytics (only if you turn it on in Settings) | Your account identifier and usage events | United States |
We may update this list as our providers change, and we will keep this section current.
6. Signing in with Apple or Google
Apple. When you Sign in with Apple, Apple shares your email address with us, or a private relay address if you choose to hide it. Apple forwards anything we send to that address to you. Apple may also share your name the first time you sign in; if it does, it is kept on your device only and is not sent to our servers. We never receive your Apple password.
Google. When you sign in with Google, Google shares your email address, your name, and your profile picture link with us. Supabase Auth stores these as part of your sign-in record. We do not display your name or picture in the app, and we never receive your Google password.
Your use of Apple or Google sign-in is also governed by that company's own privacy policy.
7. What Other Users Can See
If you never open the Friends screen, nothing about you is visible to anyone else. There is no public profile, and nobody can find you by your email address.
If you choose a display name on the Friends screen, other users can find it by searching and can send you a friend request. Search shows only the name, not your scores or anything else about you. Your display name is one you pick: it is never taken from your Apple or Google account, and it does not have to be your real name.
Becoming friends takes both of you: one person sends a request and the other accepts it. You can decline any request, and you can withdraw a request you sent. Once you are friends, each of you can see the other's:
- display name; and
- daily scores and weekly totals, including scores from before you became friends.
That is the whole list. A friend cannot see which games you played, how accurately or quickly you played them, your streak, your settings, your age or gender, or your email address. You can remove a friend at any time, after which neither of you can see the other's scores.
8. Legal Bases for Processing
Under the UK/EU GDPR, we must have a lawful basis for processing your personal data. We rely on the following:
- Performance of a contract: to provide the Service you signed up for, including your account, daily plan, games, scores, Friends feature, settings, and subscription.
- Your consent: for analytics, which is off unless you turn it on.
- Our legitimate interests: to secure the Service, prevent abuse, fix problems, and understand who uses Think Again, balanced against your rights and freedoms.
- Legal obligation: where the law requires us to keep certain records.
Where we rely on consent, you can withdraw it at any time. This does not affect processing carried out before you withdrew it.
9. Data Retention
We keep your data only for as long as necessary.
- Account, profile, practice, settings, and Friends data: kept while your account is active, and deleted when you delete your account.
- Friend requests: kept until the request is accepted, declined, or withdrawn, or until either account is deleted.
- Subscription records: your subscription status is kept while your account is active. Purchase event records from RevenueCat are deleted automatically 30 days after we process them. A purchase made before you sign in is held until it can be matched to your account.
- Server logs: held only by our hosting provider, and discarded automatically after a short period set by their service.
- Support emails: kept for as long as needed to deal with your request.
Apple and RevenueCat keep their own purchase records under their own retention policies.
10. Your Rights
Under the UK/EU GDPR you have the right to:
- Access: request a copy of the personal data we hold about you.
- Rectification: correct inaccurate or incomplete data.
- Erasure: delete your data. You can delete your account at any time from Settings → Delete account in the app. This permanently removes your account, profile, practice history, settings, Friends data, and subscription records from our database, and deletes your sign-in record. If you cannot use the app, email admin@tenzle.com from the address linked to your account and we will delete it for you.
- Restriction: ask us to limit how we process your data.
- Portability: request your data in a structured, machine-readable format.
- Objection: object to processing based on our legitimate interests.
- Withdraw consent: turn analytics off in Settings at any time.
Deleting your account does not cancel your subscription. App Store subscriptions are managed by Apple. Cancel yours in Settings → [your name] → Subscriptions on your iPhone, or it will keep renewing after your account is gone.
To exercise any of these rights, contact us at admin@tenzle.com. We will respond within the time the law requires, normally one month.
11. International Data Transfers
Our database and authentication (Supabase) are hosted in the EU. However, some of our providers are based in the United States: Render (which hosts our server), Apple (Sign in with Apple and App Store payments), Google (Sign in with Google), RevenueCat (subscription management), and PostHog (analytics, only if you turn it on). Where your data is transferred outside the UK/EEA, we rely on safeguards recognised under UK/EU law, such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, together with the providers' own certifications where applicable. You can ask us for more detail about these safeguards.
12. Data Security
We take reasonable technical and organisational measures to protect your data, including:
- database access rules, so each user can read only their own data (and, for friends, only each other's display name and scores);
- storing your sign-in session in the iOS Keychain;
- encryption of data in transit (HTTPS) and at rest through our database provider;
- rate limiting on our server; and
- access controls on our infrastructure and API keys.
No system is completely secure, and we cannot guarantee absolute security, but we work to protect your data and to fix any weaknesses promptly.
13. Children
Think Again is not directed at children. You must be at least 18 years old to use the Service, and we do not knowingly collect personal data from anyone under 18. If you believe someone under 18 has given us personal data, contact us at admin@tenzle.com and we will delete it.
14. Changes to This Policy and How to Contact Us
We may update this policy from time to time. If we make material changes, we will tell you in the app or by email. The "Last updated" date at the top shows when this policy was last revised.
For any privacy question or request, contact us at admin@tenzle.com.
If you are in the UK and are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO). If you are in the EU, you may complain to your local data protection supervisory authority.