The information we gather or process is used solely for core functionality of Lenny Tab and to improve the quality and security of our service. Your information isn’t and has never been sold to third parties.
Your name, email, account settings, and application data (such as to-dos and links) are transferred and stored securely, solely for your usage within our application and not shared with any other third parties, except as specified in this policy.
To upgrade to Lenny Tab Plus, your credit card number, credit card expiration date, security code, name, country and postal code are required. All payment processing is done through a PCI compliant third party (Stripe, Inc.). When paying by a credit card, the card details do not pass through our servers, they are sent directly to Stripe and are stored securely, as per their Privacy and Security policies.
To perform requested changes to or inquiries about your Lenny Tab Plus account (cancelling, refunding, or changing payment details), authorized members of Lenny Tab’s support team could potentially view payment-related information contained in Stripe’s databases (this is limited to billing name, billing address, postal code, the last four digits of credit card(s), and credit card expiry date(s)) while accessing subscription information via Stripe’s payment dashboard. This information will only be accessed upon your request.
WebExtension APIs used within Chrome Extensions, Safari Extensions, Edge Add-ons, and Firefox Add-ons have fine-grained permission levels that are enforced by the Web Browser, restricting information that our application has access to within your Browser. The Lenny Tab application can only access specific information that you have explicitly granted permission for. We can not and do not track your browsing history.
Additional optional permissions may be requested when you enable specific features. When you enable a feature that requests an optional permission, your Web Browser will make it clear what permission(s) are being requested. The feature will be accessible once you choose to allow the requested permission(s).
To improve the content, features and overall experience, we gather and log data on how our users access and use the application. For example, we may log actions like clicking on a photo source, favoriting a quote, or completing a to-do (not the content of the to-do, just the action of completing it).
We send emails including a series of welcome emails, updates on new features, and newsletters, to the extent that you have provided consent consistent with notice and opt-out rights to receive such communications under applicable law. You can opt-out of these communications at any time by unsubscribing via the link provided in the emails or by contacting us. Please be aware that you will always receive certain emails from us related to the proper functioning of your account.
We use several vendors/sub-processors to conduct various aspects of our business.
|Hetzner||Hetzner powers our core Cloud infrastructure (providing the necessary hardware, software, networking, storage, and other related technology required to run Lenny Tab). The bulk of our user data is hosted in Hetzner.|
|Stripe||Credit card data, payments and renewals are processed by Stripe.|
|Unsplash||Some photos/backgrounds are retrieved from Unsplash. A request is made from your IP address to download photos.|
|Google Analytics||Google Analytics is an industry standard third-party analytics service that we use to better understand the usage and performance of our services. The information is anonymized so that it is not tied to your IP address.|
|Yandex.Metrica||Yandex.Metrica is an industry standard third-party analytics service that we use to better understand the usage and performance of our services. The information is anonymized so that it is not tied to your IP address.|
|Gmail||Used for internal communications. User data may be discussed for support purposes.|
|Google Forms||We use Google Forms to provide surveys and gather insights into how we can improve our offerings. You may voluntarily enter info into surveys.|
By using Lenny Tab Dashboard, you may exercise the following rights:
The voluntary Personal Data you provide to us is an integral part of your use of Lenny Tab Dashboard. You can choose to forego the provision of that data, but you will be restricted from using our services.
Through your use of Lenny Tab Dashboard, you can access and amend your own data at any time. This includes changing your email, name, and payment information on your Profile page. As well as adding, editing and deleting other Lenny Tab data like your to-dos, links, notes, countdowns, daily focus’, etc.
You can manually delete your account by clicking Delete my account on your Lenny Tab account’s Profile page at any time. See the “What happens to my data when I delete my account?” section below to learn more about the deletion process.
Upon request, we will provide a data export of all your data stored in our system. If you wish to receive an export of your data, or have any problems deleting your account, please contact us.
If you have a complaint about the way in which your Personal Data is handled, please contact us. After submitting a complaint, we will reply within five (5) business days to confirm that we have received your complaint. After receiving your complaint, we will investigate it and provide you with our response within two (2) weeks.
If you are a resident of the European Union, and you are not satisfied with the outcome of the complaint submitted to us, you have the right to lodge a complaint with your local data protection authority.
Upon account deletion, your account is flagged as deleted and your data is no longer accessible. This data is stored for a grace period (90 days) to allow for account recovery in the case of accidental or malicious deletion, or your desire to reopen your account. Upon request, you can expedite the process of performing a hard delete to remove all of your personal data from our databases. After a hard delete, your data will be deleted from our system, but could still be present in encrypted database backups for up to an additional 35 days.
To request an expedited hard delete, please contact us.
Data security is a priority at all times. We use a Tier 1 cloud provider to run our operations (Microsoft Azure).
All data communication in transit to and from our servers is secured using HTTPS/TLS. All Lenny Tab domains have HTTP Strict Transport Security (HSTS) enabled and are in the HSTS Preload list on the major browsers supporting this feature.
All data in our databases and their associated backups are encrypted at rest.