Privacy Policy
Last updated: 13 July 2026
1. Who we are
tenby10 is a product of PivotalPoint OÜ, a company registered in Estonia (Harju maakond, Tallinn). We are the controller of the personal data described below.
2. What we collect
| On your device only | The desktop app records your activity locally — blurred, locally-summarised screenshots, window titles, and keystroke/click counts — in a database you control. This never leaves your machine. |
| Sent to our cloud | Only when you pair a device and share a link: signed 10-minute slot summaries — timestamps, a focus score, activity-category counts, keystroke/click counts, your scoring configuration (auditing rules and the AI auditor prompt), and cryptographic hashes and signatures. No screenshots, window titles, or keystroke content. |
| Account | Your name, email, and user ID when you sign in with Google (Firebase Authentication). |
| Waitlist | Your email and the role you select, if you join our waitlist. |
| Website | Aggregated usage statistics via Google Analytics 4 — loaded only if you accept cookies. No analytics cookies are set until you consent. |
We never receive the contents of your screen, your keystrokes, your clipboard, or the titles of your windows.
3. How we use it
To provide the service (verify your signed hours and serve the links you share), operate your account, and improve the product using aggregate analytics. We do not sell your data or use it for advertising.
4. Who we share it with
We use a small number of processors, each handling only what their function requires:
- Google Firebase — authentication, database, and hosting.
- Google Analytics 4 — website usage analytics, loaded only with your cookie consent.
- Formspree — waitlist form submissions.
A verified link you create is viewable by anyone you share its URL with — no account is required to view it. We do not sell data to anyone.
5. Where it's processed & your rights
Data is processed on Google Cloud infrastructure, which may involve transfers outside the EEA under standard contractual safeguards. Under the GDPR you can access, correct, export, or delete your personal data — email privacy@pivotalpoint.io.
6. Changes & contact
We may update this policy; material changes will be reflected in the date above. Questions: privacy@pivotalpoint.io. PivotalPoint OÜ, Tallinn, Estonia.