Privacy Policy

#Who we are

Theorise is a daily money workout: short games that teach everyday money decisions. It is education, not financial advice. Theorise is run by Holit Ltd ("we", "us"), which is responsible for the personal data described here (the data controller). Registered address: 71–75 Shelton Street, London WC2H 9JQ, United Kingdom. For any privacy question, or to use any of your rights, e-mail [email protected].

#What we collect, and why

Your account

Your e-mail address, and the identifier Google or Apple gives us if you sign in with them (with Apple's Hide My Email we only see the relay address). If you sign in with Google or Apple, the app uses your first name to suggest a display name, which you can change. Sign in with Apple is offered on iPhone only. An account is required: it is how you sign in and how your progress follows you to another phone. Sign-in is run by Supabase.

Your profile

Your display name and avatar, your age group, your country (which decides the currency of your examples), your language, your focus areas — outside Nigeria, these include whether you send money to family in another country — and your daily goal: the answers you give when you start. They are saved to your account, shape your workouts and decide how you appear on boards. Your reminder time is saved only on your phone; when you set or change it, that is noted in the usage records below.

Your progress

Scores, streak, tier, the questions you answered, your games and the workouts you finished. It is saved to your account on our servers so you can sign in on another phone and carry on where you left off.

How the app is used

Records of what happens in the app — for example a game opened or finished, a screen reached, an error — so we can make Theorise work and improve it. Each record carries a random install id, the app version, your account id while you are signed in, a country (the one you chose, or else the one your connection comes from) and, for abuse prevention, only the network part of your IP address (the last part is removed) or a one-way scrambled form of it. From app version 1.1, usage events also record the kind of device (phone or tablet), its model, its operating-system version and the size of the app's window. We use this only to find and fix problems on particular devices. Some of these records are forwarded to Mixpanel, our analytics provider, which stores them in its EU region; you can stop this phone forwarding them with Share usage analytics in Settings. We delete the detailed records after 90 days; Mixpanel deletes its copy after 2 years, or sooner when you delete your account. We keep a short summary of each install — when it was used, its platform and country, and your account id once you sign in — so we can count active players.

What you send us

Feedback you type in the app, notes you add when you flag a question, any report you make about another player (with the note you type) and the players you block. We use them to fix problems, improve questions and keep the boards safe.

E-mail

We send sign-in codes and account e-mails through our e-mail provider, Twilio SendGrid, and — only if you ask for it in the browser taster — one e-mail with a link to the app (see Playing in your browser). We do not send marketing e-mail.

Friends and invites

Your invite code, the friends you add and the requests you send, the Inbox items about what your friends did, the invite code you entered, and the days of Theorise+ an invite has earned you.

From app version 1.1, the app also sends an identifier for your phone when you sign in, when you enter a friend's invite code and when you use days an invite has earned. We scramble it one way with a secret key before it is stored, and use it only for invites: so that each phone can earn an invite reward once, and so that your own code cannot earn a reward on your own phone.

Organisations

From app version 1.1, if your college, employer or another organisation gives you a Theorise place, you take it by typing the organisation's code in the app. We record which organisation you joined and when, so your Theorise+ lasts as long as the organisation's licence. The organisation sees only how many places are used and when they were taken: never your name, e-mail address, answers or scores.

If you buy places for an organisation on this website, you sign in with your work e-mail address, and we keep it with your organisation's name, type, country and website, your role if you give it, any purchase-order number, the places bought and the state of the payments. Stripe takes the payment on its own page and keeps the billing details: we never see card numbers. We use these details to run the licence, send its e-mails (when it's ready, before it renews, if a payment fails, when places are nearly full) and keep the records the law requires. The Organisation Terms apply to the purchase.

Playing in your browser

You can play one free workout in your browser before you make an account. If you then give us your e-mail address, we use it for two things only: to send you one e-mail with a link to get the Theorise app, and to keep that workout's progress (your answers, game results and points) for up to 30 days, so that when you then make your Theorise account in the app with the same address, the workout is added to it. An account that already existed before you played does not take it: the saved workout is deleted instead. We do not store your e-mail address: we keep only a coded fingerprint of it (a keyed hash) to recognise it when you sign in, and the address itself is used only to send these e-mails, through our e-mail provider, Twilio SendGrid. SendGrid keeps a delivery record (the address, the time and the outcome) for a limited time, and keeps an address that bounces or reports spam on its suppression list so we never e-mail it again. We never use your address for newsletters or marketing, never add it to a mailing list and never share it with anyone else, and we send at most three of these e-mails to one address a day. If you do not sign in, the saved progress and the fingerprint are deleted automatically about 30 days after you last entered your address; to delete them sooner, e-mail [email protected]. We do this because you asked us to. The browser taster is for ages 16 and over.

#The AI coach

When you ask the coach to explain an answer another way, our server sends OpenAI the question, its answer options, the explanation you were shown and the answer you chose, and OpenAI writes the reply. Anthropic checks a sample of the replies for accuracy, with the same question details. Neither receives your name, e-mail address, account id or anything you typed. Replies are labelled as written by AI. We keep a record of each coach request (the question, the reply, your thumbs up or down and what it cost) for 90 days, linked to your account so we can apply your plan's allowance.

#What other players see

On the weekly boards (Global, Country and Friends) other players see your display name, a face from the app's illustrated cast, your streak and your points for the week. The Global and Country boards can be seen by anyone and also show your total score; a Country board shows your country. Friends also see Inbox items about you, such as when you played or passed them. Choose a display name you are happy for others to see. Players in protected mode (see Ages 16 and over) appear by their initials on every board. You can turn off Show me on leaderboards in Settings at any time: you then leave the public boards and your friends' boards.

#Who processes data for us

These providers process data on our instructions, only to run Theorise:

• Supabase — sign-in and accounts.
• Cloudflare — our servers and database, this website and the browser taster, and the taster's bot check (Turnstile) and this website’s visit counts (Cloudflare Web Analytics).
• Mixpanel — product analytics, in its EU region.
• OpenAI — writing the coach's replies, and Anthropic — checking a sample of them for accuracy (see The AI coach).
• Twilio SendGrid — sign-in codes and account e-mails, and the e-mail you ask for from the browser taster: it receives your e-mail address and the e-mail's content, keeps a delivery record for a limited time, and keeps an address that bounces or reports spam on its suppression list.
• Expo — app updates, push tokens and, once we switch them on, delivering push notifications.
• Airbridge — invite links, this website's "Get the app" links and, on iPhone, which link brought a new player (see the tracking question).
• RevenueCat — subscriptions bought through the App Store or Google Play (see Subscriptions).
• Apple and Google — when you sign in with them, the app stores and their payments, and delivering notifications to your phone.
• Stripe — payments for organisations that buy places on this website (see Organisations).

#What we do not do

• We do not sell your personal data.
• There are no ads in Theorise.
• The app reads your device's advertising identifier only if you are 18 or over and allow tracking when your iPhone asks (see the tracking question).
• We never ask for your bank or card details. The games use pretend money: the only real money is an optional subscription, paid to Apple or Google through their own purchase sheet, or places an organisation buys, paid on Stripe's own page.
• We do not make automated decisions about you that have legal or similarly significant effects.

#How long we keep it

• Your account, profile, progress, friends, feedback, flags, and the reports and blocks you make: while your account exists.
• Records of how the app is used: 90 days, then deleted (Mixpanel's copy: 2 years). The one-line summary for each install: until you delete your account, or 12 months after the app was last used if it was never signed in.
• Coach requests: 90 days, then deleted.
• Push tokens: switched off when you sign out, turn notifications off or have not opened the app for 180 days, and deleted 30 days after that; deleted at once if you delete your account. The record of notifications sent: 90 days.
• A workout saved from the browser taster, and the fingerprint of your e-mail address: about 30 days after you last entered your address, unless you sign in with it in the app first.
• Records of store purchases and renewals: kept as records of the payments; after you delete your account they no longer point to you.
• Which organisation you joined, and when: while your account exists, and deleted with it. An organisation's purchase records (what it bought, when and from whom): for as long as UK law requires us to keep accounting records, usually six years.
• After you delete your account: a note that it was deleted, for 8 days, and a one-way scrambled form of your account id, so that an old sign-in or a later store renewal cannot bring the account back.
• From app version 1.1, after you delete your account, if an invite code you entered had already earned its reward: the scrambled phone identifier from that claim, for 12 months from the day the reward was earned, so the same phone cannot claim it again. It no longer points to you, and it is then deleted. A claim that had not yet earned its reward loses its phone identifier with your account.

#Deleting your account

In the app: Me → Settings → Delete account (at the bottom). It deletes your sign-in account, your progress, your leaderboard place, your friends and invites, the questions you flagged, the feedback you sent and the records of how you used the app, and we ask Mixpanel and RevenueCat to delete their records of you. A few records stay, no longer pointing to you: coach requests until their 90 days are up, the record that you used someone's invite code (so their invite limits stay right), reports you made (without your note) and store purchase records. A note that the account was deleted is kept for 8 days, and a one-way scrambled form of your account id is kept, so an old sign-in or a later store renewal cannot bring it back. On an iPhone, Airbridge's records of when the app was installed and opened are tied to your phone, not your account, and are not deleted. Deleting your account does not cancel a subscription: cancel it in the App Store or Google Play too. It cannot be undone.

Without the app: see Delete your account.

#Your rights

Under the Nigeria Data Protection Act 2023, the UK GDPR and, where it applies, the EU GDPR, you can ask to see the personal data we hold about you, to correct it, to delete it, to receive a copy you can take elsewhere, and to object to or restrict how we use it. E-mail [email protected] from the address on your account; we answer within the time the law allows. You can also complain to a data protection authority — in Nigeria the Nigeria Data Protection Commission, in the UK the Information Commissioner's Office, or the authority where you live.

#Ages 16 and over

Theorise is for people aged 16 and over; you choose your age group when you start. We do not knowingly collect data from anyone younger. If you think someone under 16 has an account, e-mail us and we will delete it.

There are no ads and no marketing e-mail in Theorise.

Players aged 16 or 17 — and anyone aged 16 to 20 who has not told us whether they are under 18 — are in a protected mode: they are never asked the tracking question, Airbridge does not track them, we build no analytics profile about them, and they appear by their initials on every board, Friends included.

#Where data is processed

Our providers work in several countries, so your data may be processed outside the country you live in — including outside Nigeria, the UK and the EEA. Where the law requires it, transfers rely on safeguards such as standard contractual clauses.

#Security

Everything the app sends travels encrypted (HTTPS). Access to our systems is limited to the people who run Theorise.

#This website

This website counts visits with Cloudflare Web Analytics, which sets no cookies and does not fingerprint or follow you: it records the page, the site you came from, your browser, operating system, device type and country, and how quickly the page loaded. There are no ads and no cookies. The “Get the app” buttons go through Airbridge, the service that runs our app links. Airbridge sees the click — your device type, browser and IP address — to send you to the right place for your device and to count the clicks on each button. On an iPhone, for players aged 18 or over who have answered the tracking question, it can also tell us that an install came from this website. If you choose a light or dark theme, the Calm setting, hide the app banner or a calculator currency, that choice is saved only in your own browser. The calculators run in your browser; nothing you type into them is sent to us. On the delete-account page, the e-mail address and code you enter go to Supabase and our server only to check it is you and delete your account; the page keeps nothing in your browser.

#Changes and contact

When this policy changes we update the date at the top. If a change matters to you, we tell you before it takes effect, by e-mail or in the app. Questions: [email protected].