Privacy

An app about breaking a scrolling habit has no business harvesting your attention. This is everything ThenThat does with your data.

Without an account

Everything you make — hooks, check-ins, the urges you caught — stays in this browser, on this device. It is not sent anywhere. Clearing the browser's data deletes it.

With an account

The same records are kept on our server so they open on your other devices, and proof photos you add are stored there as files. Only your account can read them; there is no public profile and no feed of other people. Your email address and password are used to sign you in; the password is stored only as a slow, salted hash. If you sign in with Google, we receive your email address and an identifier from Google, and nothing else. Each sign-in is logged with its IP address for 90 days.

Email

We email you when something about your account needs it — for example, if someone tries to sign up with your address when it already has an account. The evening nudge is off until you turn it on in your account, and every one has a link that stops it.

Payments

If you subscribe to Plus, Stripe handles the payment. We store the Stripe customer id and the state of the subscription, never your card.

Measurement

We count visits and signed-in users with lytics, an analytics service run by the same people as ThenThat. It records which account signed in by its internal id, never by email address. There are no ads and no advertising trackers.

Deleting

Deleting a hook or a check-in in the app deletes it everywhere it was synced. To close your account and erase everything in it, write to us with the address you signed up with.