Thinkable — Privacy Policy
Last updated: 7 July 2026 · Operated by Pardalis Solutions Ltd (company number 13962306)
1. Who we are
Thinkable is operated by Pardalis Solutions Ltd ("Pardalis", "we", "us"), a company registered in England and Wales (company number 13962306). We are the data controller for personal data processed through Thinkable.
Contact: info@pardalis.co.uk
2. What we collect
Account information: Email address and password (stored as a salted hash, never in plain text); onboarding preferences (theme interests, notification time slot).
Usage data: Lessons read, skipped, or pinned; notes attached to saved lessons; reminder settings; engagement history.
Payment data: We do not store your card details. Payment is processed by Stripe, who collects and stores card information under their own PCI-compliant systems. We hold a Stripe customer reference ID, subscription status, and billing history only.
Technical data: Push notification token (if enabled), device/browser type, IP address (used for currency localisation and security), and standard server logs.
3. How we use your data
- To provide the daily lesson service and remember what you've read or pinned
- To generate lesson content using the Anthropic API
- To process payments, trials, and gift subscriptions via Stripe
- To send transactional email (password resets, trial reminders, gift codes) via Resend
- To send daily lesson notifications via web push, if enabled
- To maintain, secure, and improve the product
4. Legal basis for processing (UK GDPR)
- Performance of a contract — providing the account and subscription you've signed up for
- Legitimate interests — maintaining service security, preventing abuse, understanding aggregate usage to improve the product
- Consent — where you've opted in to notifications or marketing communications, which you may withdraw at any time
5. Who we share data with
We share limited data with the following subprocessors, solely to operate the service. We do not sell personal data to any third party: Stripe (payment processing), Resend (transactional email), Anthropic (AI lesson generation), Neon (database hosting), Vercel (application hosting).
6. International data transfers
Some of our subprocessors (including Anthropic, Vercel, and Neon) may process data outside the UK/EEA. Where this occurs, we rely on Standard Contractual Clauses or equivalent safeguards to ensure your data remains protected to UK GDPR standards.
7. Data retention
We retain account data for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain billing records for tax/accounting purposes (typically 6 years under UK law).
8. Your rights
Under UK GDPR, you have the right to access, correct, request erasure of, restrict or object to processing of, and request portability of your personal data. Contact info@pardalis.co.uk to exercise these rights. You may also complain to the UK Information Commissioner's Office (ico.org.uk).
9. Cookies
Thinkable uses only strictly necessary cookies required to keep you logged in. We do not currently use analytics or advertising cookies. If this changes, we will update this policy and, where required, request your consent.
10. Children
Thinkable is not directed at, and is not intended for use by, anyone under the age of 16.
11. Changes to this policy
We may update this policy from time to time. We will notify active subscribers of material changes by email.
12. Contact
Pardalis Solutions Ltd. Email: info@pardalis.co.uk.