Privacy Policy

1. The short version

This policy is provided by Leonard Chee Hao Jie, trading as CONSISTENCYAU.COM, ABN 75 267 956 505, an Australian sole trader in Victoria. Contact support@consistencyau.com.

We collect the information described below to provide and protect the app. We do not sell your data and we do not run advertising. The only other companies that receive your data are the ones that make the app work, and they are named below. Friends see only what you are doing right now. Account deletion removes linked app data but some independent records and provider copies may remain as described in section 8.

2. What we collect

• Account: your email address and a password, which our sign-in provider stores only as a secure hash.
• Policy acceptance: at first sign-in, we record your confirmation that you are at least 18, the version of the Terms and Privacy Policy you accepted, and the time you accepted them. Your confirmation is not independent proof of your age.
• Profile: your name, your time zone, your appearance setting (light, dark or system), and your reminder settings (on or off, and the hour). If you gave your age in an earlier version of the app, that is kept too.
• Your normal week: your answers to the opening questions, such as where your work or study schedule is, when you go to bed and when you get up, and any hours you put in yourself.
• What Lenny plans, and your sessions: the study, training and work you ask Lenny to plan and how much time each one asks for, the sessions placed for them, any note you add, what you ticked, which sessions you said did not happen, how you said you felt when you started a session, and when a session was moved.
• Check-ins and check-outs: which days you opened and closed, and how you answered Lenny’s Sunday question (whether anything is new next week). How you said you were feeling in the morning is not stored.
• Calendar: the dated things you add, such as exams and interviews.
• Schedules you import: if you import a schedule from a file (a PDF; a PNG, JPEG, WebP or HEIC picture, such as a photo or screenshot; a Word .docx; an Excel .xlsx; or a CSV file; older Word .doc and Excel .xls files are refused), we keep only the items you approve from it (each one’s name, kind, day or date, and times), saved like anything you type. For each file we also keep a fingerprint of it (a SHA-256 hash, which cannot be turned back into the file), its name and when you imported it, so the same file is not imported twice. We do not keep the file. What happens to it is in section 4.
• Calendars linked in an earlier version. Linking another calendar by its private link is no longer offered, and the app no longer reads linked calendars when it opens. If you linked one before 14 October 2026, its link is still stored with your account, is not shown to friends and is not shared with anyone; the events it brought stay in your Calendar as ordinary events, which you can delete. Start over and Delete account delete the link, or write to us. To stop the link working anywhere, turn it off or reset it in the calendar it came from. Google, Outlook and Apple each let you. Moodle does not: its link stops only when your Moodle password changes, and where you sign in through your university, only the university can stop it.
  If you turned on the calendar feed in an earlier version of the app, your sessions are published at a private link that any calendar app holding the link can read. Write to us to switch it off.
• Conversations: what you write to Lenny in the chat, and the replies.
• Friends: your friend code, the requests you send and receive, and who you are friends with.
• Payment status: your Stripe customer and subscription identifiers and whether your subscription is active. Card numbers go straight to Stripe and never reach us.
• Notifications: if you turn them on in your browser, the address your browser gives us for delivering reminders. The phone app sets its reminders on the phone itself and sends us nothing to deliver them.
• Photos, camera and files (phone app): the app asks for your photos or camera only when you choose to import a picture of your schedule, and opens your files only when you choose to import a document. It uses only the picture or file you pick or take. What happens to it is in section 4.
• Technical basics: standard server logs, such as IP address and browser type, rate-limit subjects and device information, kept for security and to stop abuse. Signup invitation and access-grant records may include your email and access history.

3. What stays on your device

So the app still works without a connection, your browser, or the phone app, keeps a copy of your week, what Lenny plans and your recent sessions. The opening questions run on your device, and their answers are saved to your account when you finish. Your weekly report is worked out on your device from your own sessions. On the phone, your sign-in is kept in the phone’s secure storage (the Keychain on an iPhone, the Keystore on Android), and how long before a task its reminder rings is kept on the phone only. Signing out, or deleting your account, removes the copy on that device.

4. What the AI sees

On the paid plan, the chat with Lenny and some wording in the app (such as Lenny’s line over your weekly report) are written with the help of an AI model from a third-party provider: Anthropic. The service also supports Google Gemini and OpenAI when configured; optional iPhone dictation uses OpenAI when enabled. When you write to Lenny, we send the provider your message and the context needed to answer it, such as your name, the names of what Lenny plans for you, your next session, how many sessions you have done this week, your streak and the conversation so far. For other wording, the app works out the facts itself and sends only those facts to be put into words; for your weekly report, those are its numbers (such as planned, done, missed and moved), your streak and the names of what Lenny plans. Without an AI entitlement, a Free account cannot send AI requests. With a subscription, eligible access grant or remaining legacy trial, messages to Lenny may be sent to the configured provider. New accounts start on Free without a trial.

If you import a schedule (with an AI entitlement), your device first checks what kind of file each one is and works out its fingerprint; the phone app turns a photo into a JPEG before sending it. The files then go to our server, which reads them in memory. A PDF or a picture is sent as it is to our AI provider (a HEIC photo is first turned into a JPEG, and refused if it cannot be); a Word, Excel or CSV file is turned into text on our server, and that text is sent. The provider reads the classes, shifts and dates in them and sends them back. Our server does not save the files or their text: not to disk, not to our database, not to file storage and not to our logs. You check what was found on your device, and nothing is added until you tap Add. What you add is saved like anything you type.

Anthropic is the active text-AI provider. The service also supports OpenAI and Google Gemini when configured. Optional iPhone dictation sends audio to OpenAI when enabled. Providers may retain or process submissions under their own terms; we do not promise zero retention or that submissions are never used for model training. See the AI Usage Disclosure.

5. What friends see

Only people whose friend request you accepted, or who accepted yours, can see anything, and the app shows them one thing: the task you are doing right now, its name and when it ends (“Until 4pm”), or that you are free. Our servers work out “right now” in your own time zone, so a friend cannot look up any other hour. Our servers also answer a friend’s app with when that task started and with your streak (how many days in a row you closed); the app shows neither. Friends never see your week, timetable, notes, what Lenny plans, record or conversations. Removing a friend stops this at once.

6. Who receives your data

• Supabase: our database and sign-in provider. The database has been configured for Seoul, South Korea.
• Anthropic: the active text-AI provider. The service also supports OpenAI and Google Gemini when configured. Optional iPhone dictation uses OpenAI when enabled.
• Stripe: subscription payments, invoices and billing management.
• Resend: sends password-reset emails, using your email address only.
• Your browser’s push service (for example Apple, Google or Mozilla): delivers reminders if you turn them on in your browser. The phone app’s reminders are set on the phone and pass through no one.
• Vercel: hosts the app; server functions have been configured to process requests in the United States.

Some account, planning and AI information is therefore processed outside Australia, including in South Korea and the United States. Provider-specific storage, onward transfer and retention terms vary by provider. We do not run Plausible or other product-usage analytics.

We do not sell personal data and we do not share it with advertisers.

7. Cookies

We use only the cookies needed to keep you signed in. There are no advertising or cross-site tracking cookies or product-usage analytics.

8. Keeping and deleting data

We keep your data while your account exists. Start over (in Settings) deletes what Lenny plans, every session and day, your normal week, the events in your Calendar, your conversations with Lenny, the fingerprints of the schedules you imported and any calendar link from an earlier version, and keeps your account and your friends. Undo, right after an import, removes what that import added and its fingerprints. Delete account (in Settings) cancels any subscription, then removes your account and linked app data, including approved imports, after cancellation and account deletion succeed. Invitation records linked to the account or matching its current email are removed on deletion, but older records that cannot be linked may remain until unclaimed invitations are cleaned up. Applicable billing and audit records are retained for five years, subject to legal exceptions; they are reviewed operationally rather than purged automatically at five years. Eligible rate-limit hits older than 90 days are scheduled for daily cleanup; a failed job can delay removal. A legacy trial account may leave an email fingerprint and trial date; the fingerprint is a deterministic hash that can be linked by guessing an address. It is removed when the closed-trial safeguard is no longer required. Stripe, backups, logs and AI providers may retain copies under their own policies. Their periods depend on provider terms. See the Data Retention and Account Deletion Policy for the records that can survive. If you would like a copy of your data, write to us.

9. Security

Data is encrypted in transit and passwords are managed by our authentication provider as hashes. Account-linked app data is protected by access controls. What friends can see is decided on our servers, not in your browser. No system is perfectly secure; if we learn of a breach affecting your data, we will tell you as the law requires.

10. Your rights

Depending on applicable law, you may have rights to access, correct, receive a copy of or delete your personal data, and to complain to a regulator. Write to support@consistencyau.com for requests or complaints. Where applicable you may also contact the OAIC at oaic.gov.au. We handle requests under applicable privacy law.

11. Changes

If this policy changes in a way that matters, we will tell you in the app or by email before the change takes effect. The date at the top is always the date of the current version.