Summary: We collect only what's necessary to run the service. Your data is stored in the EU, never sold, and you can export or delete it yourself at any time.

1. Who we are

Treeny is an independent brain-training service operated by Marc van Bekkum, based in France. For the purposes of the EU General Data Protection Regulation (GDPR), Marc van Bekkum is the data controller. You can reach us any time at hello [at] treeny [dot] me (a postal address is available on request).

2. Information We Collect

Information you provide

Account: your email address. Treeny uses a passwordless "magic link" for sign-in — we never set, see, or store a password.
Profile: optional details you choose to share, such as a display name, age range, goals, and pace preferences, used to personalise your training.
Payment: if you subscribe, payment is processed by Lemon Squeezy, our Merchant of Record. Lemon Squeezy handles billing and EU VAT; we never receive or store your card details.

Information collected automatically

Usage data: game and assessment performance, session length, and progress, so the app can adapt and show your trends.
Device & log data: basic technical information such as browser type, device type, and IP address, used for security and to keep the service running.

3. How We Use Your Information

Provide and personalise your training and progress reports
Process your subscription and handle support and refunds
Send you sign-in links and important service messages
Send optional updates only with your consent
Keep the service secure and prevent abuse

4. Where Your Data Lives

Your account and training data are stored on our server in the European Union (hosted in France by OVH). Data is encrypted in transit (TLS) and protected by access controls. We keep your data only while your account is active.

5. Service Providers We Share Data With

We do not sell your personal information. We use a small number of trusted providers ("processors") who handle data only to provide their service to us:

Lemon Squeezy — payments and subscription billing (Merchant of Record).
PostHog — privacy-friendly, EU-hosted product analytics.
Resend — delivery of sign-in links and service emails.
Anthropic — generates your coach Flo's written guidance and reports, when Flo is enabled.
OpenAI — generates Flo's voice (text-to-speech), when you use the voice features.
OVH — our EU hosting provider.

Some AI providers operate in the United States. Where data is transferred outside the EU, it is covered by standard contractual clauses and limited to what is needed to generate a response. We may also disclose data if required by law.

6. Your Rights (GDPR)

You have the right to:

Access & portability: get a copy of your data — you can download it yourself at any time from your account.
Erasure: delete your account and data yourself ("right to be forgotten").
Rectification: correct inaccurate or incomplete data.
Objection & restriction: object to or limit certain processing.

You can export your data at treeny.me/account/export and delete your account at treeny.me/account/delete, or email us at hello [at] treeny [dot] me. You also have the right to lodge a complaint with your local data protection authority.

7. Cookies

We use essential cookies to keep you signed in and the app working. With your consent, we also use PostHog analytics to understand how the service is used. You can manage cookie preferences in your browser.

8. Children's Privacy

Treeny is designed for adults and is not intended for anyone under 18. We do not knowingly collect data from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We'll note the date above and, for significant changes, tell you by email or in the app.

10. Contact Us

Controller: Marc van Bekkum (France)
Email: hello [at] treeny [dot] me