Thumbstone Labs

Privacy Policy

Last updated: January 8, 2026

Thumbstone Labs Ltd customer privacy notice

This privacy notice tells you what to expect us to do with your personal information when you use our mobile apps and related services (including subscriptions), and when you contact support.

Contact details

Email: support@thumbstonelabs.com

What information we collect, use, and why

To provide services and goods (including delivery)

We collect or use:

  • Names and contact details (eg email)
  • Account information (eg login identifiers, profile settings)
  • Purchase or account history (eg subscription status, entitlement information)
  • Health information (eg weight and body measurements you choose to record)
  • Photographs or video recordings (eg progress photos/videos you upload)
  • Website and app user information (including user journeys and cookie tracking, where applicable)

Payments note: If you subscribe via Apple in-app purchases, we do not receive your full card/bank details. Apple processes payments and we receive subscription/transaction status information needed to provide access.

For service updates

We may use:

  • Names and contact details
  • Account information
  • Purchase or account history

(For example: important service notices, security updates, receipts, and subscription access changes.)

For marketing purposes (only if you opt in)

We may collect or use:

  • Marketing preferences
  • Records of consent, where appropriate
  • Names and contact details (eg email)

For research or archiving purposes (product improvement)

We collect or use:

  • Website and app user journey information
  • Purchase or viewing history (eg subscription state and key in-app events)

(For example: analytics and crash/bug diagnostics to improve stability and user experience.)

To comply with legal requirements

We collect or use:

  • Any other personal information required to comply with legal obligations

For dealing with queries, complaints or claims

We collect or use:

  • Names and contact details
  • Account information
  • Purchase or service history
  • Information relating to complaints (where relevant)

Lawful bases and data protection rights

Under UK data protection law, we must have a "lawful basis" for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR:

You can find out more about your data protection rights (and exemptions that may apply) on the ICO's website:

If you make a request, we must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

Our lawful bases for the collection and use of your data

To provide services (accounts, app features, subscriptions)

  • Contract – processing is necessary for a contract we have with you (or because you asked us to take specific steps before entering into a contract).

Health information (weight/measurements) you choose to provide

  • Contract – to provide core app functionality you request; and
  • Explicit consent – because health information can be special category data. You can withdraw your consent at any time (this may affect your ability to use features that rely on this data).

For service updates (transactional and important notices)

  • Contract – necessary to deliver the service; and/or
  • Legitimate interests – to keep users informed about important service/security issues.

For marketing purposes

  • Consent – you have given permission. You can withdraw your consent at any time.

For research / archiving (product improvement, analytics, crash reporting)

  • Legitimate interests – to understand app performance and improve reliability, features, and user experience.

To comply with legal requirements

  • Legal obligation – where we must process certain information to meet legal or regulatory requirements.

For dealing with queries, complaints or claims

  • Legitimate interests – to respond to support requests, handle complaints, and manage potential disputes; and/or
  • Legal obligation – where we are required to keep or provide certain information.

Where we get personal information from

  • Directly from you (eg when you sign up, upload photos, enter measurements, or contact support)
  • From your device/app activity (eg app usage events, diagnostic/crash information)
  • From platform and subscription providers (eg Apple/Google subscription status information)

How long we keep information

We keep personal information only for as long as necessary for the purposes described in this notice.

Typical retention periods:

  • Account/profile data: for as long as your account is active; deleted or anonymised within 30 days after you delete your account (unless we must keep something longer for legal reasons).
  • Photos/videos you upload: stored until you delete them; if you delete your account, deleted within 30 days.
  • Health entries (weight/measurements): stored until you delete them; if you delete your account, deleted within 30 days.
  • Subscription and entitlement records: kept while needed to manage access and for basic accounting/audit purposes; typically up to 7 years where required for legal/tax reasons.
  • Analytics data (user journeys/events): typically up to 14 months (or less if configured).
  • Crash/diagnostic logs: typically 90 days (or less if configured).
  • Support communications: typically 24 months after the ticket is closed.

If you ask us to delete your information, we will do so unless we have a legal obligation or another valid reason to keep it.

How to complain

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.

If you remain unhappy with how we've used your data after raising a complaint with us, you can also complain to the ICO:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113
Website: https://ico.org.uk/make-a-complaint/

Last updated

8 Jan 2026