3-5-10 App · Legal
Effective Date: April 20, 2026
The short version: Your personal milestones, goals, and reflections are stored only on your device. Nothing is sent to our servers without your explicit action. Social features are entirely opt-in. You can export and delete all your data at any time.
3-5-10 is a personal life and career milestone tracking application developed by TenshiGames LLC. References to "we," "us," or "our" in this policy refer to TenshiGames LLC, the developer of the 3-5-10 application.
Contact: enable JavaScript to view email address
On AI features and your data: Certain AI-generated features — including the Monthly Narrative (available to free trial users and Pro subscribers) and all other AI features (Pro only) — require a minimal summary of your data to be sent transiently to Google Cloud Vertex AI. Your data is never used to train AI models. It is not retained on 3-5-10 servers after the response is returned. Google may briefly retain prompt data for abuse and safety monitoring per the Google Cloud Data Processing Addendum — this is distinct from model training, which Google's Vertex AI terms explicitly prohibit. You will be notified before any AI feature is triggered for the first time. Full details, including a complete subprocessor disclosure, are in Section 2c below.
The following data is stored exclusively on your device using local storage (Hive). It never leaves your device unless you explicitly export it yourself.
If you choose to create a social account to use social features (friends, shared milestones, collaborative goals), the following data is stored in Firebase, operated by Google:
| Data | Stored In | When |
|---|---|---|
| Email address and password hash | Firebase Authentication | When you create a social account |
| Google OAuth token | Firebase Authentication | If you sign in with Google |
| Apple Sign-In token | Firebase Authentication | If you sign in with Apple |
| Username and display name | Firestore (users, social_users) |
When you create a social account |
| Bio (optional) | Firestore (users) |
If you choose to add one |
| Milestones you mark as "Friends" or "Public" | Firestore (social_milestones) |
Only when you explicitly share a milestone |
| Friend connections and requests | Firestore (connections) |
When you send/accept friend requests |
| Cheers and comments on shared milestones | Firestore (cheers, comments) |
When you interact with shared content |
| Village / group membership and status | Firestore (village_connections) |
When you join or create a village group |
| Village shared goals | Firestore (village_shared_goals) |
When your group shares a goal together |
| Collaborative goal invitations | Firestore (goal_invites) |
When you send or receive a goal invitation |
| Pending invite delivery records (a copy of each invitation placed in the recipient's account to ensure delivery) | Firestore (users/{recipientUid}/pending_invites) |
When a Build village invitation is sent to another user; automatically deleted when the recipient accepts or declines |
| Collaborative goal data | Firestore (collaborative_goals) |
When you create or join a collaborative goal |
| Build village per-member finance records (income sources, budget categories, net worth, and financial intentions entered by each member in the Village Finance tab) | Firestore (collaborative_goals/{goalId}/finance/{memberUid}) |
When any village member adds or edits their finance data inside a collaborative goal |
| Build village tasks, member comments, and activity log entries | Firestore (collaborative_goals/{goalId}/tasks, collaborative_goals/{goalId}/comments, collaborative_goals/{goalId}/activity) |
When any village member creates a task, posts a comment, or takes an action that generates an activity log entry inside a collaborative goal |
| Village Treasure: shared financial transactions, net worth snapshots, and financial intentions | Firestore (collaborative_goals/{id}/village_transactions, village_net_worth, village_intentions) |
When any village member adds a transaction, records a net worth snapshot, or sets shared financial intentions in Village Treasure |
| Notification records | Firestore (notifications) |
When social actions trigger notifications |
| Device push token (FCM token) | Firestore (users/{uid}/private/device — readable only by the account owner; inaccessible to other users) |
When you grant notification permission |
| Pro subscription status flag (hasPro) | Firestore | When you purchase or restore a Pro subscription, or when you join a Family Plan group |
| Family Plan group data (owner UID, member UIDs, invite code, group status) | Firestore (family_groups) |
When you purchase a Family Plan subscription (owner) or join a Family Plan group (member) |
| Crash reports | Firebase Crashlytics | Automatically, if the app crashes |
Important: All milestones are private by default. Finance and Spiritual milestones are locked to private. Only milestones you explicitly change to "Friends" or "Public" visibility are written to Firestore.
Certain AI-generated features require a minimal, anonymised summary of your data to be sent from your device to a secure server-side Cloud Function for processing. This data leaves your device. You will be shown a clear notice before any AI feature is triggered for the first time.
Tier availability:
What data is sent:
Subprocessor: Google Cloud Vertex AI
| Detail | Information |
|---|---|
| Provider | Google LLC — Google Cloud Vertex AI (@google-cloud/vertexai SDK) |
| Processing location | United States — us-central1 (Iowa) |
| Data categories sent | Goal and milestone titles; Life Goal WHY statements; financial category summaries (monthly totals and Finance Intentions); Examen and Mirror Moment reflection responses (where applicable). No payment details or raw transaction data. Your display name may be included in the prompt for AI features that personalise the narrative by name (AI Check-In, AI Mirror, Monthly Narrative, 6-Month Narrative, Annual Truth Report). |
| Model training | No. Google does not use API inputs submitted via the Vertex AI API to train or improve its models. This is expressly prohibited by the Google Cloud Data Processing Addendum (DPA). |
| Retention by Google | Not retained on 3-5-10 servers after the response is returned. Google may briefly retain prompt data for abuse and safety monitoring in accordance with the Google Cloud Data Processing Addendum. This is distinct from model training, which Google's Vertex AI terms explicitly prohibit. |
| Retention on our servers | The AI-generated output (your narrative, check-in summary, mirror insight, or truth report) is stored in your own Firestore account under your user subcollections (e.g., users/{uid}/narratives, users/{uid}/checkins), where it is accessible only to you. It is retained for 30 days from generation or until you delete your account — see the Data Retention table in Section 6. The input prompt data (your milestone, goal, and reflection content sent to generate the response) is not independently stored by 3-5-10 after the response is returned. |
3-5-10 complies with the Google Cloud Data Processing Addendum, which is aligned with Google Play data safety requirements and Apple App Store data use policies. All AI features are strictly opt-in. Most AI features are user-initiated — you must tap to generate a check-in, mirror, or narrative. The one exception is the Annual Truth Report, which is automatically generated for active Pro subscribers between January 1–3 each year. By subscribing to Pro, you consent to this automated year-end report generation. If you do not wish to receive it, you may cancel your Pro subscription before January 1.
If you purchase a Pro subscription, transaction and entitlement data is managed by RevenueCat, Inc. RevenueCat receives the following data from your device:
RevenueCat does not receive your personal milestones, goals, reflections, or financial data. RevenueCat acts as a data processor on our behalf in accordance with their Data Processing Addendum (DPA). See RevenueCat's full privacy policy at revenuecat.com/privacy.
If you report content or block another user, the following records are created:
reports Firestore collection. Contains: your user ID (reporter), the reported content's type and ID, the reason category you selected, and any details you provide. Read access is locked to developer review only. Reports are not visible to the reported user. Retained until your account is deleted.connections Firestore document. Used to filter the blocked user's content from your social feed. The blocked user is not notified of the block. Retained until you unblock or delete your account.Neither report records nor block records are shared with third parties, sold, or used for advertising.
We do not sell your personal data. We do not share your data with advertisers. The only third parties who receive any data are:
@google-cloud/vertexai SDK) — Transient AI processing. The Monthly Narrative is available to free trial and Pro users; all other AI features are Pro-only. Processing occurs in the United States (us-central1, Iowa). Google does not train models on API inputs per the Google Cloud DPA. Data is not retained on 3-5-10 servers post-response; Google may briefly retain prompt data for abuse and safety monitoring per the Google Cloud DPA.Pro subscribers can export a complete copy of all their local data at any time: Profile → Backup & Export → Export JSON. What happens step by step:
.json file. Nothing leaves your device at this point.Your responsibility after export: Once data has been exported from the app, it is no longer protected by 3-5-10. You are solely responsible for how exported data is stored, shared, or uploaded to third-party platforms. 3-5-10 has no visibility into and accepts no responsibility for what happens to your data after it leaves the app. Treat exported files containing personal financial or life information with the same care as any sensitive personal document.
You can permanently delete your social account and all associated Firestore data at any time: Profile → Settings → Delete Account. If you no longer have access to the app, you can also request deletion via our account deletion page. This action:
users/{uid} including private subcollections), public username index (social_users/{uid}), shared milestones (social_milestones), friend connections (connections), village connections (village_connections), village shared goals you own (village_shared_goals), goal invitations sent and received (goal_invites), collaborative goal memberships (collaborative_goals), cheers, comments, notifications, rate-limit records (checkin_rate_limits, ai_mirror_rate_limits, village_checkin_rate_limits), all AI-generated output subcollections (narratives, growth_narratives, truth_reports), and AI context and signal subcollections (ai_context, checkin_history, narrative_signal_history, truth_report_signals)Uninstalling the app removes all locally stored Hive data from your device permanently.
You can manage all push notification preferences within the app: Profile → Settings → Notifications. You can also revoke notification permission at the OS level at any time.
| Data Category | Retention Period |
|---|---|
| On-device Hive data (milestones, goals, reflections, finance) | Until you uninstall the app or delete your profile locally |
| Firebase Authentication credentials | Until you delete your account |
| Firestore social data (profile, milestones, connections, cheers, comments, village data) | Until you delete the specific content or delete your account |
AI Mirror output (ai_mirrors subcollection) |
Until you delete your account. Data is stored in your private Firestore account subcollection, encrypted at rest by Google, and accessible only to you and TenshiGames LLC (via server-side administrative access required to operate the service). |
Monthly Narrative output (narratives subcollection) |
Until you delete your account. Data is stored in your private Firestore account subcollection, encrypted at rest by Google, and accessible only to you and TenshiGames LLC (via server-side administrative access required to operate the service). |
AI Growth Narrative output (growth_narratives subcollection) |
Until you delete your account. Data is stored in your private Firestore account subcollection, encrypted at rest by Google, and accessible only to you and TenshiGames LLC (via server-side administrative access required to operate the service). |
Annual Truth Report output (truth_reports subcollection) and associated behavioral signals (truth_report_signals subcollection) |
Until you delete your account. Both the report output and behavioral signals are stored in your private Firestore account subcollections, encrypted at rest by Google, and accessible only to you and TenshiGames LLC (via server-side administrative access required to operate the service). |
AI Check-In behavioral signals (checkin_history subcollection — per-category activity summaries; no raw milestone content) |
Retained until account deletion |
AI Growth Narrative behavioral signals (narrative_signal_history subcollection — latest signal only; no raw milestone content) |
Retained until account deletion |
| Device push token (FCM token) | Until you sign out or delete your account |
Report records (reports) |
Until your account is deleted (retained for moderation integrity) |
Block records (connections status flag) |
Until you unblock or delete your account |
| Crash reports (Firebase Crashlytics) | 90 days — Crashlytics default rolling retention |
| AI processing input (transient) | Not retained on 3-5-10 servers after the response is returned. Google may briefly retain prompt data for abuse and safety monitoring per the Google Cloud Data Processing Addendum. Not used for model training. |
| RevenueCat subscription data (purchase receipt, device identifier, device type/OS) | Retained by RevenueCat per their own retention policy (see revenuecat.com/privacy). We do not independently store this data. |
3-5-10 is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at enable JavaScript to view email address and we will delete it promptly.
Your local data is protected by your device's own security (device encryption, screen lock). Firebase data is protected by Firebase Security Rules — each user can only read and write their own data. Social data (shared milestones, connections) is accessible only to authenticated users according to the rules defined in our Firestore security configuration. AI processing is performed via authenticated Firebase Cloud Functions — your data is never sent to the AI model directly from your device. All data transmitted between the App and our backend services (Firebase, Google Cloud Vertex AI, RevenueCat) uses TLS encryption in transit.
The data controller for personal data processed by 3-5-10 is TenshiGames LLC, reachable at enable JavaScript to view email address. Firebase (Google LLC) and RevenueCat, Inc. act as data processors under agreements aligned with GDPR requirements, including Google's Cloud Data Processing Addendum and RevenueCat's Data Processing Addendum.
We process personal data only where we have a lawful basis:
| Processing Activity | Legal Basis (GDPR Art. 6) | Explanation |
|---|---|---|
| Account creation and authentication | Contract performance — Art. 6(1)(b) | Necessary to provide the social account you request |
| Social features (connections, shared milestones, cheers, village) | Contract performance — Art. 6(1)(b) | Necessary to deliver the social features you opt into |
| Collaborative goals | Contract performance — Art. 6(1)(b) | Necessary to facilitate the shared goal you create or join |
| AI-generated features (Monthly Narrative — free trial & Pro; all other AI features — Pro only). Data processed by Google Cloud Vertex AI (us-central1, Iowa) per Google Cloud DPA. | Contract performance — Art. 6(1)(b) | Necessary to deliver the AI feature you explicitly trigger |
| Subscription management (RevenueCat) | Contract performance — Art. 6(1)(b) | Necessary to fulfil and verify your Pro subscription |
| Crash reporting (Crashlytics) | Legitimate interest — Art. 6(1)(f) | We have a legitimate interest in identifying and fixing software defects to maintain a safe, functional app. Crash reports contain no milestone or personal content. |
| Push notifications | Consent — Art. 6(1)(a) | You grant notification permission explicitly via the OS permission prompt. You can withdraw consent at any time via OS settings or in-app Notification Settings. |
| Moderation records (reports, blocks) | Legitimate interest — Art. 6(1)(f) | We have a legitimate interest in maintaining a safe user community and complying with app store guidelines requiring content moderation for user-generated content platforms. |
Under GDPR, EU/EEA residents have the right to:
To submit a Subject Access Request or exercise any of the rights above, email enable JavaScript to view email address with the subject line "Data Access Request". Include the email address associated with your 3-5-10 account. We will respond within 30 days.
For immediate data deletion, use the in-app flow: Profile → Settings → Delete Account (described in Section 5). This is the fastest way to exercise your right of erasure — it purges all Firestore data within seconds. If you no longer have the app installed, you can request deletion via our account deletion page.
Where we rely on your consent (push notifications), you may withdraw consent at any time by:
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
If you are not satisfied with our response to a privacy concern, you have the right to lodge a complaint with the supervisory authority in your EU member state of residence.
Firebase and Google Cloud Vertex AI are both operated by Google LLC (USA). RevenueCat, Inc. is also a US-based processor. Personal data may be transferred to and processed in the United States and other data centers outside the EU/EEA. Transfers to Google services are covered by Google's Standard Contractual Clauses (SCCs) and the Google Cloud Data Processing Addendum. Transfers to RevenueCat are covered by RevenueCat's Data Processing Addendum. Both provide appropriate safeguards under GDPR Chapter V.
We do not sell personal information. We do not share personal information for cross-context behavioral advertising.
Residents of California (CCPA/CPRA) and Washington State (SB 5062) have the following rights:
Under CCPA and Washington SB 5062, we are required to name third-party service providers who receive personal data. Each provider listed below is bound by contract to use your data solely for the stated purpose and is prohibited from selling or using it for their own commercial purposes:
| Provider | Data Received | Purpose |
|---|---|---|
| Google LLC — Firebase (Authentication, Firestore, Crashlytics, Cloud Messaging) | Account credentials, social profile data, shared milestones, crash reports, device push token | Account management, social features, crash diagnostics, push notifications |
Google LLC — Google Cloud Vertex AI (@google-cloud/vertexai SDK) |
Goal/milestone content, financial category summaries, reflection responses (transient — not stored post-response) | Generating AI narratives and reflections. Data is not retained by Google after the response is returned and is not used by Google to train models (Google Cloud DPA). |
| RevenueCat, Inc. | Anonymous purchase receipt, device identifier, and basic device technical information (device type, operating system) | Subscription entitlement management |
| Apple App Store / Google Play | Payment and transaction data | Subscription billing (governed by their respective policies) |
Contact enable JavaScript to view email address with the subject line "CA/WA Privacy Request". We will respond within 45 days (extendable by an additional 45 days where reasonably necessary).
The data controller for personal data processed by 3-5-10 is TenshiGames LLC. The UK General Data Protection Regulation (UK GDPR), as retained in UK law by the Data Protection Act 2018, applies to residents of the United Kingdom.
The legal bases for processing are the same as those set out in Section 9 (EU/EEA — GDPR). UK GDPR Art. 6 applies equivalently.
UK residents have the same rights as EU/EEA residents described in Section 9, including the rights of access, rectification, erasure, restriction, data portability, and objection. To exercise any of these rights, email enable JavaScript to view email address with the subject line "UK Data Request". We will respond within 30 days.
Firebase infrastructure and Google Cloud Vertex AI are both operated by Google LLC (USA). Transfers of personal data from the UK to the United States are covered by Google's UK International Data Transfer Agreement (UK IDTA) or the UK Addendum to the EU Standard Contractual Clauses, which provide appropriate safeguards under UK GDPR Chapter V. RevenueCat processes data in the United States under equivalent transfer mechanisms.
If you are not satisfied with our response to a privacy concern, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint.
The Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) apply to TenshiGames LLC in relation to personal information collected from Australian residents.
We collect personal information only where reasonably necessary to provide the App's features. The categories of personal information collected are set out in Section 2. We do not collect sensitive information (as defined under the Privacy Act) unless you explicitly provide it within your private on-device journal entries, which we never access.
We use personal information solely for the purposes described in Section 3. Personal information is disclosed to third-party service providers (Google Firebase, Google Cloud Vertex AI, RevenueCat) as described in Section 4, solely to provide the App's features. We do not sell personal information or disclose it for advertising purposes.
Personal information collected from Australian residents may be disclosed to or processed by the following overseas recipients: Google LLC (United States — Firebase, Vertex AI) and RevenueCat, Inc. (United States). We take reasonable steps to ensure these overseas recipients handle personal information consistently with the Australian Privacy Principles.
To exercise any of these rights, email enable JavaScript to view email address with the subject line "AU Privacy Request". We will respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au/privacy/privacy-complaints.
The Personal Information Protection and Electronic Documents Act (PIPEDA), and applicable provincial privacy legislation, applies to TenshiGames LLC in relation to personal information collected from Canadian residents in the course of commercial activity.
We collect, use, and disclose personal information only with your knowledge and consent, or where otherwise permitted by law. Consent is obtained at the point of use for each feature category: social account creation, AI features, and push notifications. You may withdraw consent at any time, subject to legal or contractual restrictions, by using the in-app account deletion flow or by contacting us directly.
TenshiGames LLC is responsible for personal information under our custody and control. You have the right to access personal information we hold about you and to challenge its accuracy. To submit an access request, email enable JavaScript to view email address with the subject line "PIPEDA Privacy Request". We will respond within 30 days.
Personal information may be transferred to and processed in the United States (Google Firebase, Google Cloud Vertex AI, RevenueCat). When personal information is transferred outside Canada, it may be subject to the laws of the receiving jurisdiction, including lawful access by courts, law enforcement, and national security authorities. We use contractual protections with our processors to maintain comparable privacy standards.
If you believe we have handled your personal information in a manner inconsistent with PIPEDA, you may file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca/en/report-a-concern.
We may update this privacy policy from time to time. The "Effective Date" at the top of this page will be updated accordingly. For material changes, we will notify users via an in-app notice. Continued use of the app after changes constitutes acceptance of the revised policy.
Questions or concerns about this privacy policy or your data:
enable JavaScript to view email address
Data requests: email with the relevant subject line — see Sections 9 (EU/EEA), 11 (UK), 12 (Australia), 13 (Canada), or use subject line "Data Access Request" for general requests.