Privacy Policy
Last updated: 15 September 2026
1. Who we are
tenby10 is a product of PivotalPoint OÜ, a company registered in Estonia (Harju maakond, Tallinn). We are the controller of the personal data described below.
2. What we collect
| On your device only | The desktop app records your activity locally — window titles and keystroke/click counts — in a database you control. It takes no screenshots of any kind. This never leaves your machine. |
| Sent to our cloud | Only when you pair a device and share a link: signed 10-minute slot summaries — timestamps, a focus score, activity-category counts, keystroke/click counts, your scoring configuration (auditing rules and the AI auditor prompt), and cryptographic hashes and signatures. No screenshots, window titles, or keystroke content. |
| Daily work notes | If you connect your own AI, it writes a short note each day describing what you worked on, from your active time. Those notes sync and appear on links you share. They are written on your machine from your own activity — we never see the window titles behind them. You can turn notes off in Settings, and withdraw any note at any time — it stops appearing on every link. |
| Account | Your name, email and user ID, whether you sign in with Google or with an email and password (Firebase Authentication), plus when your account was created and when you last used it. |
| How you found us | If you create an account, we store the website you arrived from — its name only, such as “news.ycombinator.com”, and any campaign tags in the link you clicked. Recorded once, when the account is created, and never changed after that. We keep the site's name and not the page, because the page can say more about you than we need to know. Nothing is recorded for visitors who don't sign up, and we set no cookie and no cross-site identifier to do this. |
| Page views | We keep a daily tally of how many times each page was viewed, and which advertising campaign the visit came from when the link carried a campaign tag. That is a counter going up. It holds no cookie, no IP address, no advertising click identifier, no session and no record of you as a visitor, so these numbers can tell us that a page was viewed two hundred times and can never tell us that you viewed it. |
| Website | Aggregated usage statistics via Google Analytics 4 — loaded only if you accept cookies. No analytics cookies are set until you consent. |
| Verified link opens | When a verified link is opened we record that it was opened, and when — a count and a timestamp on the link itself, so the person who shared it can see whether their client looked. We do not record who opened it: no cookie, no IP address, no device fingerprint, and no per-viewer record of any kind. Opening a verified link does not identify you to us or to the person who shared it. |
| Weekly summary emails | If you switch on the weekly summary for a link, we store the email address you give us for your client, and send them that week's hours and notes each week. You can switch it off at any time, and every email has a one-click unsubscribe. |
| Server logs | Like most websites, our hosting keeps a log of each request, including the IP address and browser, for 30 days, to run and secure the service. The counters above never read these logs. |
We never receive the contents of your screen, your keystrokes, your clipboard, or the titles of your windows. A daily work note is the one piece of text that reaches us, and only because it is written to be read by the person you share a link with.
3. How we use it
To provide the service (verify your signed hours and serve the links you share), operate your account, and improve the product using aggregate analytics. We do not sell your data or use it for advertising.
4. Who we share it with
We use a small number of processors, each handling only what their function requires:
- Google Firebase: sign-in, database and hosting, on Google Cloud in the United States.
- Scaleway: sends account emails, like confirming your address or resetting your password, and the weekly summary emails you switch on, from France. It deletes each email's content once it is sent, and keeps a delivery record (the address, subject and delivery status) while we use its service.
- Google Analytics 4: website usage analytics, loaded only with your cookie consent.
A verified link you create is viewable by anyone you share its URL with — no account is required to view it. We do not sell data to anyone.
When a company runs a team pilot, it decides how its team's records are used, and we process them for it under a data processing agreement.
5. Where it's processed & your rights
Your account and synced records are stored on Google Cloud in the United States: the database in Iowa and the app servers in Virginia. That is a transfer outside the EEA, made under standard contractual safeguards. Account and weekly summary emails are sent through Scaleway in France. Under the GDPR you can access, correct, export, or delete your personal data — email privacy@pivotalpoint.io.
6. Changes & contact
We may update this policy; material changes will be reflected in the date above. Questions: privacy@pivotalpoint.io. PivotalPoint OÜ, Tallinn, Estonia.