Privacy Policy

#Who we are

Theorise is a daily money workout: short games that teach everyday money decisions. It is education, not financial advice. Theorise is run by Holit Ltd ("we", "us"), which is responsible for the personal data described here (the data controller). Registered address: 71–75 Shelton Street, London WC2H 9JQ, United Kingdom. For any privacy question, or to use any of your rights, e-mail [email protected].

#What we collect, and why

Your account

Your e-mail address, or the identifier Apple or Google gives us when you sign in with them (with Apple's Hide My Email we only see the relay address). An account is required: it is how you sign in and how your progress follows you to another phone. Sign-in is run by Supabase.

Your profile

Your display name and avatar, your age group, your country (which decides your question pack), your language, your focus areas, your daily goal and your reminder time — the answers you give when you start. They shape your workouts and how you appear on boards.

Your progress

Scores, streak, tier, the questions you answered, your games and the workouts you finished. It is saved to your account on our servers so you can sign in on another phone and carry on where you left off.

How the app is used

Records of what happens in the app — for example a game opened or finished, a screen reached, an error — so we can make Theorise work and improve it. Each record carries a random install id, the app version, your account id while you are signed in, a country (the one you chose, or else the one your connection comes from) and, for abuse prevention, only the network part of your IP address (the last part is removed) or a one-way scrambled form of it. Some of these records are forwarded to Mixpanel, our analytics provider, which stores them in its EU region. They are kept for 90 days.

What you send us

Feedback you type in the app, and notes you add when you flag a question. We use them to fix problems and improve questions.

E-mail

We send sign-in codes and account e-mails through an e-mail delivery provider. We do not send marketing e-mail.

Friends and invites

Your invite code, the friends you add and the requests you send, the Inbox items about what your friends did, and the days of Theorise+ an invite has earned you.

#The AI coach

When you ask the coach to explain an answer another way, we send the question text, the answer options and the answer you chose to an AI provider — Anthropic or OpenAI — which writes the reply. We send no name, e-mail address, account id or anything you typed. Replies are labelled as written by AI. We keep a record of each coach request (the question, the reply and what it cost) for 90 days, linked to your account so we can apply your plan's allowance.

#What other players see

On the weekly boards (Global, Country and Friends) other players see your display name and your weekly score, next to a face from the app's illustrated cast. Friends also see Inbox items about you, such as when you played or passed them. Choose a display name you are happy for others to see. You can turn off Show me on leaderboards in Settings at any time.

#Who processes data for us

These providers process data on our instructions, only to run Theorise:

• Supabase — sign-in and accounts.
• Cloudflare — our servers and database, and this website.
• Mixpanel — product analytics, in its EU region.
• Anthropic and OpenAI — writing the coach's replies (see above).
• Our e-mail delivery provider — sign-in codes and account e-mails.
• Expo — delivering app updates.
• Apple and Google — when you sign in with them, and the app stores.

#Coming with the next app version not active yet

The next version of the app adds the following. None of it is active today; this section moves into the ones above when it ships.

• Subscriptions. Theorise+ and Theorise Pro go on sale. Payment is handled by the App Store (and Google Play once it is available) — we never see your card details. RevenueCat, our subscription provider, receives your purchase records and your account id so your plan works on every phone you sign in on.
• Push notifications. If you allow them, we keep your phone's push token to send reminders and friend and league updates, with a switch for each kind.
• Invite links. Shared invite links are measured by Airbridge. Only if you allow tracking when your phone asks (asked once, never of players aged 16 or 17) does Airbridge read your device's advertising identifier, to tell us which invite brought a new player. Saying no changes nothing you can see.
• Protected mode for players aged 16 and 17 — see Ages 16 and over.

#What we do not do

• We do not sell your personal data.
• There are no ads in Theorise, and today the app reads no advertising identifier.
• We never ask for bank details, and no real money moves in the app.
• We do not make automated decisions about you that have legal or similarly significant effects.

#How long we keep it

• Your account, profile, progress, friends, feedback and flags: while your account exists.
• Records of how the app is used: 90 days, then deleted.
• Coach requests: 90 days, then deleted.
• After you delete your account: a note that it was deleted is kept for a few days, so an old sign-in cannot bring it back.

#Deleting your account

In the app: Me → Settings → Delete account (at the bottom). It removes everything your account holds: your sign-in account, your saved progress, your leaderboard place, your friends, friend code and invite rewards, the questions you flagged and the feedback you sent while signed in, and the records of how you used the app. The coach's replies stay only as cost records that no longer point to you, and a note that the account was deleted is kept for a few days so an old sign-in cannot bring it back. It cannot be undone.

Without the app: see Delete your account.

#Your rights

Under the Nigeria Data Protection Act 2023, the UK GDPR and, where it applies, the EU GDPR, you can ask to see the personal data we hold about you, to correct it, to delete it, to receive a copy you can take elsewhere, and to object to or restrict how we use it. E-mail [email protected] from the address on your account; we answer within the time the law allows. You can also complain to a data protection authority — in Nigeria the Nigeria Data Protection Commission, in the UK the Information Commissioner's Office, or the authority where you live.

#Ages 16 and over

Theorise is for people aged 16 and over; you choose your age group when you start. We do not knowingly collect data from anyone younger. If you think someone under 16 has an account, e-mail us and we will delete it.

Today there are no ads, no tracking prompt and no marketing e-mail in Theorise for anyone. When the next app version ships, players aged 16 and 17 are in a protected mode: they never see the tracking prompt or ads, get no marketing e-mail, have no analytics profile, and appear by their initials on public boards.

#Where data is processed

Our providers work in several countries, so your data may be processed outside the country you live in — including outside Nigeria, the UK and the EEA. Where the law requires it, transfers rely on safeguards such as standard contractual clauses.

#Security

Everything the app sends travels encrypted (HTTPS). Access to our systems is limited to the people who run Theorise.

#This website

This website uses no analytics, no ads and no cookies. If you choose a light or dark theme, the Calm setting or a calculator currency, that choice is saved only in your own browser. The calculators run in your browser; nothing you type into them is sent to us. On the delete-account page, the e-mail address and code you enter go to Supabase and our server only to check it is you and delete your account; the page keeps nothing in your browser.

#Changes and contact

When this policy changes we update the date at the top and, for anything important, tell you in the app. Questions: [email protected].