Privacy policy
Last updated 13/11/2026
This policy explains what THDY collects, why, who can see it and what you can do about it. THDY is operated by Tothiq AI Services & Solutions, Kuwait.
What we collect
- Account details: your email address, and the name, time zone and language you choose.
- Challenge activity: the challenges you join, your check-ins, and any numbers, links, notes or photos you send.
- Creator details: your public profile, challenges, plans and packages, if you run challenges.
- Messages: what you send through the contact form or to our support address, and waitlist sign-ups.
- Security data: your IP address and browser details, used to keep sign-in and forms safe from abuse.
Why we use it
- To run THDY: sign you in, show your challenges and progress, and let creators run their rounds.
- To send emails you need: sign-in codes, evening reminders (you can turn these off), and news about challenges you asked to hear about.
- To answer support requests, prevent abuse and meet our legal obligations.
We do not sell your data, and we do not use advertising trackers.
Who can see it
- Creators of challenges you join see your name, email, package, progress and the photos, links and notes you submit to them.
- Other members do not see your progress unless you choose to show your name in a round.
- Service providers who run parts of THDY for us: Cloudflare (hosting, storage, email sending and the Turnstile security check) and, for paid packages, our payment provider.
- Authorities, only when the law requires it.
Cookies
We use only the cookies THDY needs: one that keeps you signed in, and one that remembers which home page picture you last saw so the next visit shows a different one. Cloudflare's Turnstile check may set its own cookie to tell people from bots.
Where it is kept and for how long
Your data is stored with Cloudflare, mainly in data centres in Europe. We keep account and challenge data while your account exists. Sign-in codes expire after 10 minutes. Support messages are kept for up to two years. When you ask us to delete your account, we delete or anonymise your data within 30 days, except records we must keep by law, such as payment records.
Your choices
- Change your name, time zone and reminder emails any time in your profile.
- Every reminder email has a link to turn reminders off.
- Ask for a copy of your data, a correction, or deletion of your account by sending us a message.
Children
THDY is not meant for children under 13. Members under 18 need permission from a parent or guardian.
Changes
If we change this policy in a significant way, we will tell you on the site or by email before the change applies.
Contact
Privacy questions or requests? Send us a message and choose “Privacy request”.