Privacy Policy

Who we are

PTOD (Positive Thought of the Day) is an app made by L33 Solutions Ltd.

What we collect

We collect as little as possible. Here is everything we hold about you, and why:

Email address	To verify your account and send your magic link to sign in
Birth month and year	To confirm you are 13 or over — we do not store your full date of birth
Username	A randomly generated three-word name used within the app
Posts you write	These are the content of the app
Posts you save	To show you your saved collection
Posts you have seen	To make sure you never see the same post twice in your daily feed

That is the complete list. We do not collect your name, phone number, location, device identifiers, browsing behaviour, or any other personal information.

What we never do

• — Never sell your data to anyone, for any reason
• — Never use your data for advertising
• — Never track your behaviour across other apps or websites
• — Never share your data with third parties except as described below
• — Never use your data for any purpose other than making the app work

AI moderation

Every post you submit is reviewed by an automated AI system before it is published. This checks that posts meet our community guidelines — positive intent, no hate speech, no harmful content.

This is an automated process. The AI does not store your post or use it for any purpose other than reviewing whether it meets our guidelines. Rejected posts are not retained.

Under GDPR Article 22, you have rights relating to automated decision-making. If your post is rejected, we always provide a clear explanation of why. There is no formal appeal process, but you are always welcome to rewrite and resubmit.

Third-party services

We use a small number of third-party services to operate PTOD:

Cloudflare	Hosting, database, and infrastructure	EU and US
Anthropic Claude API	AI moderation of posts	US (data processed, not retained)

We do not use any third-party analytics, advertising networks, or data brokers.

How long we keep your data

Account data	Until you delete your account
Your posts	Until they expire (30 days without a save) or you delete your account
Your saved posts	Until you unsave them or delete your account
Seen post history	Until you delete your account
All personal data after deletion	Purged within 30 days

When you delete your account, your posts remain in the app but are permanently and completely anonymised — no link back to you is retained. They are then subject to the normal 30-day rule.

Your rights

Under UK GDPR, you have the following rights:

To exercise any of these rights, contact us at privacy@l33.co.uk. If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office at ico.org.uk.

Right to access

You can ask us what data we hold about you. We will respond within one calendar month.

Right to erasure

You can delete your account at any time within the app. All personal data is purged within 30 days. Posts you wrote remain anonymously.

Right to data portability

You can ask us to provide a copy of your data in a portable format.

Right to rectification

If any data we hold about you is incorrect, you can ask us to correct it.

Right to object

You can object to our processing of your personal data in certain circumstances.

Children

PTOD is available to users aged 13 and over. We do not knowingly collect data from children under 13. If we become aware that a user is under 13, we will delete their account immediately.

If you believe a child under 13 is using PTOD, please contact us at privacy@l33.co.uk.

Security

We take reasonable technical and organisational measures to protect your data. Your account is protected by magic link authentication — there is no password to be stolen or guessed.

No method of transmission over the internet is 100% secure. If we become aware of a data breach that affects your rights, we will notify you and the ICO as required by law.

International transfers

PTOD is available globally. Your data may be processed on servers in the EU and the United States. Where data is transferred outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR.

Changes to this policy

If we make significant changes to this policy, we will notify you within the app. The current version will always be available at ptod.app/privacy.

Contact us