Privacy policy

Effective and last updated: 2026-10-13

This policy explains how KP Think Private Limited ("we", "us") handles information in the Tenglow mobile app for iOS and Android (the "App"). In short: an account is optional. Your workout data stays on your device unless you choose to back it up by signing in. Tenglow has no ads, no third-party analytics or advertising, and no tracking; anonymous crash reports go to Sentry (you can turn them off).

1. Information stored on your device

The App stores the following on your device using local storage. If you do not create an account, we do not receive it and it is not stored on our servers:

• Your setup answers: goal, fitness level, equipment, minutes available and training days
• Your workout history, streaks and progress
• Weights you choose to log
• Your reminder preference, if you turn reminders on

If you do not sign in, this data never leaves your device, so we cannot access, recover or delete it for you, and we do not back it up. If you sign in, see section 2.

2. Optional account and cloud backup

You can use Tenglow without an account. If you choose to sign in, your data is backed up to our servers so you can restore it on another device. You can sign in with Sign in with Apple, or with your email address and a one-time 6-digit code we email you. We never ask for or store a password.

What we store on our servers when you sign in:

• Your email address (or the private relay email address Apple gives us, if you choose to hide your email)
• Authentication identifiers: an internal user ID, your sign-in method, and session and sign-in timestamps
• A copy of your app data: setup answers, settings, logged weights and workout history

We use this only to run your account, back up and sync your data between your devices, and keep the service secure. We do not use it for advertising, analytics or profiling, and we do not sell it. Signing in does not change your subscription: purchases are still handled by Apple or Google, and after you sign in your account ID is also used as your user ID at RevenueCat so your purchases follow you across devices.

Processor: account and backup data is hosted by Supabase, Inc. ("Supabase"), our service provider, which processes it on our behalf. Sign in with Apple is provided by Apple under Apple's privacy policy. Data is encrypted in transit and at rest, and each account can only access its own data.

Retention and deletion: we keep account data while your account exists. In the App, go to Settings > Delete account to delete your account. This removes your sign-in record and your backed-up data from our servers immediately in practice and in any case within 30 days (backup copies expire on a short schedule). Data on your device is not removed by this; use "Delete my data and restart setup" or uninstall. Export: you can export your data from Settings in the App.

International transfers and location: our servers are located in the United States. If you are in a different country, your data is transferred there; for transfers out of the EEA/UK/Switzerland we rely on appropriate safeguards such as standard contractual clauses.

3. Information processed to run subscriptions

The App offers an optional subscription through Apple's App Store or Google Play in-app purchase. To validate and manage subscriptions we use RevenueCat, Inc. ("RevenueCat"), a service provider that acts as our processor. When the App checks subscription status, or when you purchase or restore, RevenueCat receives:

• An app user ID: an anonymous ID generated by the RevenueCat SDK, or, if you have signed in, your Tenglow account ID (a random identifier, not your name or email)
• Purchase and entitlement information (for example, which product, whether a trial or subscription is active, and dates)
• Basic device and operating system information, and your IP address, which is transmitted with any internet request

We use this only to unlock subscription features, restore purchases and keep your access accurate. We do not use it for advertising. See RevenueCat's privacy policy at revenuecat.com/privacy.

Payments are processed by Apple or Google. We never receive your card number or payment details. Apple and Google handle your payment information under their own privacy policies.

4. Optional Apple Health and Health Connect (write-only)

This is off by default. If you turn on "Save workouts to Health" in Settings, each time you finish a workout the App writes a record to Apple Health (iOS) or Health Connect (Android) on your device. The record contains the start time, end time, duration, an estimated calorie number and a title such as "Lower body 20".

• Tenglow only writes to Health. It never reads any health data from Apple Health or Health Connect.
• The data goes to your own Health store on your device. We do not send it to our servers or to anyone else, and we do not use it for advertising, analytics or profiling.
• You can turn the setting off in Settings at any time, and you can review or revoke the permission in the Health app (iOS) or in Health Connect settings (Android). Records already saved stay in your Health store until you delete them there.

5. Crash reports

The App sends crash and error reports so we can find and fix problems. This is on by default and you can turn it off in Settings under "Send crash reports".

What a report contains: crash or error diagnostics only: the stack trace, the app version, the operating system version and device model, and an anonymous install ID. A report does not contain your email, your name, your workout or health data, or your location, and your IP address is scrubbed (we do not send default personal data). There is no analytics, no session replay, no tracking and no ads.

Processor: reports are processed by Sentry (Functional Software, Inc.), our service provider, on our behalf. See sentry.io/privacy. Retention: about 90 days; the owner may shorten this in the Sentry project settings. Legal basis (EEA/UK/Switzerland): our legitimate interest in keeping the App stable; you can opt out at any time in Settings.

6. What we do not collect

• No passwords, and no names; we collect an email address only if you choose to sign in
• No camera, microphone, location, contacts or photos, and we never read health-platform data (such as HealthKit or Health Connect); the optional write-only setting in section 4 only saves your finished workouts
• No advertising identifiers, no ads, no ad or analytics SDKs, and no cross-app or cross-site tracking. The only third-party SDKs that receive data are RevenueCat (subscriptions) and Sentry (crash reports, which you can turn off)
• No social features and no user content shared with others (the optional invite link in section 7b contains only a random code)

7. Notifications

If you enable workout reminders, the App schedules local notifications on your device. They are not sent from a server, and no push notification service is used. You can turn them off in the App or in your device settings.

7a. Home screen widgets

Tenglow offers optional home screen widgets on iOS and Android. They show today's next workout, your streak, your week progress and your rest-day shield. The App writes this information to storage on your phone that the widget can read (an App Group on iOS). It stays on your device: nothing is sent to us or to anyone else because of the widget, and the widget shows no health data. Remove the widget from your home screen at any time.

7b. Invite a friend

Settings > Invite a friend, and the Share button after a workout, open your phone's share sheet with a message and a link such as https://tenglow.app/get?ref=ABC123. The code after ref= is a random 6-character ID generated on your phone. It is not linked to your name, your account or any device identifier, and we have no referral tracking system or reward today. The link opens a page on our website that only sends the visitor to the App Store or Google Play; that page does not store or log the code or anything else about the visit. The store links include a campaign tag (ct=invite on Apple, utm_source=invite on Google Play), so App Store Connect and Google Play may show aggregate counts of installs that came from invite links. We do not receive anything that identifies you from this. What you share and with whom is your choice, and the message is sent by the app you pick, under that app's own privacy policy.

8. Messages to support

If you email us, we receive your email address and whatever you include. We use it only to respond to you and keep it only as long as needed to help you and meet legal obligations.

9. How long we keep data and how to delete it

• Account and backup data (if you signed in): kept until you delete your account in Settings > Delete account, then removed within 30 days at most (immediately in practice).
• On-device data: kept until you remove it. Use "Delete my data and restart setup" (Settings) in the App to clear your answers and history, or uninstall the App to remove all of its local data.
• Subscription data at RevenueCat: retained as needed to provide subscription services and meet legal and accounting obligations. To request access or deletion, email support@tenglow.app. Because the app user ID is anonymous, we may ask for details, such as your purchase receipt, to locate your record.
• Purchase records at Apple/Google: controlled by Apple and Google, not us.

10. Sharing

We do not sell or "share" personal information (as those terms are used in California law) and we do not use it for targeted advertising. We disclose data only to Supabase (section 2), RevenueCat (section 3) and Sentry (section 5) as our service providers, to Apple and Google for purchases, and where required by law.

11. Your rights

EEA, UK and Switzerland (GDPR): our legal bases are performance of a contract (providing the subscription and the account and backup you request) and our legitimate interest in operating a secure, working App (including crash reports, which you can turn off in Settings). You may have the right to access, correct, delete, restrict or object to processing of your data, and to lodge a complaint with your data protection authority. Transfers to Supabase, RevenueCat and Sentry outside your region rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms.

California and other US states (CCPA/CPRA and similar laws): you may have the right to know what we collect, to request deletion or correction, and to not be discriminated against for exercising your rights. We do not sell or share personal information.

To exercise any right, email support@tenglow.app. We will respond within the time required by applicable law. You can also delete your account and export your data yourself in the App, and data on your device you can delete as described above.

12. Children

Tenglow is intended for adults 18 and over and is not directed to anyone under 18. We do not knowingly collect personal information from minors. If you believe a minor has used the App, contact us and we will help remove any related subscription data.

13. Security

All requests to our servers, to RevenueCat and to Sentry are sent over encrypted connections, account data is encrypted at rest, and sign-in tokens are kept in your device's secure storage (iOS Keychain or Android Keystore). Data on your device is protected by your device's own security; please keep your device locked and updated. No method is perfectly secure.

14. International use

Our service providers (Supabase, RevenueCat and Sentry) may process data in the United States and other countries where they or their sub-processors operate. See section 2 for where account data is hosted.

15. Changes

If we change this policy we will update the date above and, for material changes, notify you in the App or on this page.

16. Contact

KP Think Private Limited, India
support@tenglow.app