Prelaunch draft
Privacy Notice
Not ready for public launch. The operator's legal identity, contact details, applicable legal bases, and launch-market disclosures must be completed and reviewed by qualified counsel.
Version prelaunch-1 · Updated
What THINE is
THINE is a private, single-account personal-growth service for goals, todos, observed habits, and personal spending. It is designed for adults and does not contain advertising, third-party analytics, or behavioral tracking.
Information processed
- Account and security information: username, email, password hash, verification state, acceptance evidence, sessions, and security request metadata.
- Personal-space content: settings, goals, todos, habits and occurrences, contribution links, categories, budgets, allocations, and money entries.
- Operational information: limited first-party error, email-delivery, worker, backup, and security events. Operational logs must not include goal, todo, habit, note, or financial content.
How information is used
Information is used to operate the requested features, secure and recover the account, send essential account messages, deliver explicitly enabled reminders or forecasts, maintain service reliability, and meet deletion and recovery obligations. THINE does not sell personal information.
Email privacy
Verification, recovery, and email-change messages contain the recipient address and required security link. Goal and todo reminders are generic. Budget forecast emails contain allocation percentages and forecast dates, not money amounts. Sensitive personal-space descriptions and notes are not included in operational email.
Retention and deletion
- Unverified registrations expire after 48 hours. Immediate pending-account deletion is also available.
- Personal-space records remain until the user deletes the applicable data or account.
- Account deletion has a 72-hour restoration window before permanent deletion.
- Generated exports are removed after their first download, when the panel closes, or after at most 24 hours.
- Encrypted daily backups are retained for 30 days. Permanent-deletion records are reapplied during restoration so deleted accounts are not reactivated.
- Operational-log retention is temporarily indefinite and must be replaced with a justified period before public launch.
Service providers and international processing
THINE may process data outside Pakistan. Providers receive only the information needed for their role. The current prelaunch inventory and configured regions are listed on the service-provider page. Cross-border processing and provider terms require review before public launch.
User choices and rights
The product provides settings, correction flows, machine-readable export, record deletion where applicable, and complete account deletion. The final notice must describe the legally applicable access, correction, deletion, objection, restriction, portability, complaint, and appeal rights for each launch market, together with a working privacy contact.
Cookies and local browser storage
THINE uses essential authentication and account-state cookies. It does not use advertising or analytics cookies. The installable web application may cache public application assets, but the initial release requires an active connection and does not provide offline personal-data entry.
Children
Registration is restricted to people who declare that they are at least 18 years old. The sufficiency of this declaration and the handling of child-data risk must receive legal review before public registration.
Security and limitations
THINE uses access controls, server-side sessions, password hashing, encrypted transport, private exports, and encrypted backups. No system can promise absolute security. Security concerns and privacy requests cannot be accepted publicly until the operator publishes verified contact details.