Version 2026-10-13 · Effective 2026-10-13
Privacy Policy
What we collect, why we use it, who we share it with, and the choices you have.
Scope and roles
Mlabs, MB (company code 307689679), a small partnership established in Lithuania, operates 10k and is the controller of the personal information described in this policy. Contact us through the public support form or at help@10k.live; an account is not required. The Legal Notice lists our full company details.
This policy covers the app, website, authentication, activity tracking, offline sync, messaging, clubs, support, and related services. 10k offers free access during its public free-launch period. Purchases and trials are disabled, and Feed publishing and comments are unavailable. Billing and Feed disclosures apply to retained records and to those functions if offered.
Providers that process information on our instructions act as processors. Identity providers, app stores, payment providers, and security providers may also process information for their own purposes under their own privacy notices.
Information we collect
Information you provide
- Account information, including name, email, username, password or sign-in method, profile details, language, region, date of birth, age-gate status, and legal acceptance versions.
- Profile, activity, time tracking, goal, schedule, dashboard, club, post, comment, message, support, report, moderation appeal, and preference information.
- Billing contact details, purchase metadata, plan status, trial status, tax region, invoices, refund requests, and payment-provider identifiers. Full card details are handled by payment providers.
Information from use of the service
- Timer events, manual entries, edits, offline changes, sync state, device state, notifications, feature usage, search queries, support interactions, and actions taken in the app.
- Technical information such as IP address, device type, browser, operating system, app version, network data, error and diagnostic records, cookie identifiers, and security events.
- If you allow product analytics, account-linked page views, feature-use events, event times, app platform, page paths, analytics session identifiers, and limited event metadata.
- If you allow advertising measurement, whether a delivered ad became viewable or you selected it. Campaign-level delivery totals are counted without identifying whether a particular person allowed optional measurement.
- If an eligible adult explicitly opts in to location recommendations, an approximate geographic area derived on the device from its location. Precise latitude and longitude are not sent to or stored by 10k.
- Social and community information such as follows, club membership, reports, blocks, messages, visibility settings, and interactions with other users.
- Invite links you create, and, if you join or add a friend with someone's invite link, whose invite you used and when.
- Push-notification registration tokens, browser push subscriptions, device or installation identifiers, notification preferences, delivery state, and the notification payload needed to reach your device. Notification previews may appear on a lock screen depending on your device settings.
- For end-to-end encrypted direct messages, device public keys, encrypted message content and attachments, your encrypted key vault and the protected entries for the passkeys or recovery code that unlock it, sender and recipient identifiers, reactions, attachment sizes, timestamps, and delivery or read state. We cannot open the key vault or read the encrypted content. Club and support message content is processed in readable form by our servers.
- When you add a link to a message, the URL and page metadata that our server retrieves from the linked website to build the preview.
Information from connected services
- Information received when you choose a supported identity provider, including account identifiers, name, email, and any age information you authorize. If you later use an available payment or app-store purchase flow, we receive purchase, entitlement, and reconciliation information from that provider. A calendar view inside 10k does not itself connect to an external calendar.
- Information another user provides about you, such as messages, comments, reports, club membership actions, or support context.
Activity, location, and sensitive information
Depending on the features you use, 10k may process activity, productivity, schedule, location-derived, wellness-related, or performance information. You decide what to add, import, publish, share, or enable.
Location recommendations are optional and available only to eligible adults. After an eligible adult accepts the standalone disclosure, the app asks the device for foreground location access and immediately converts latitude and longitude into a coarse area of roughly 36 square kilometres. Only the area identifier is sent to and stored by 10k.
The approximate area is used only as one signal to rank friend and Club recommendations. It is not displayed on your profile, used for advertising, or obtained from your IP address. If you decline or location is unavailable, recommendations use non-location signals.
You can update the stored area or withdraw consent in Privacy settings. Turning the feature off deletes the stored area from the active account record. The app may refresh an opted-in area after 30 days only when device permission is already granted; it does not request background location.
We do not sell sensitive information. We use sensitive information only to provide requested features, maintain security, enforce policies, comply with law, or support you.
How we use information
- Provide accounts, authentication, time tracking, activities, dashboards, statistics, goals, calendar views, offline sync, notifications, messaging, clubs, social features, subscriptions, and support.
- Personalize the product experience, remember settings, recommend useful in-app actions, and make controls work across devices.
- When an eligible adult opts in, use an approximate area as one signal for friend and Club recommendations.
- Process subscriptions, trials, renewals, invoices, taxes, refunds, cancellation requests, fraud checks, and payment-provider reconciliation.
- Respond to support tickets, investigate bugs, diagnose sync issues, and communicate about account, billing, legal, safety, or product matters.
- Detect spam, abuse, fraud, security incidents, policy violations, unauthorized access, and attempts to bypass technical or billing controls.
- Maintain operational logs needed for reliability, security, fraud prevention, support, sync, and requested service functions.
- When you allow product analytics, measure account-linked page views and feature use so we can improve the product.
- When you allow advertising measurement, record viewable impressions and ad selections and report campaign-level measurement coverage and performance.
- Comply with legal obligations, enforce terms, preserve records, defend claims, and respond to valid legal requests.
Legal bases for processing
We use contract performance to create and authenticate accounts and provide the activities, timers, dashboards, synchronization, sharing, messages, clubs, exports, and support you request.
We rely on legitimate interests in operating a reliable and safe service for necessary diagnostics, access controls, abuse prevention, moderation, and the investigation and defence of claims. We assess those interests against your rights; this does not replace consent for optional measurement or location recommendations.
Product analytics, advertising measurement, and approximate-location recommendations each require the relevant optional consent. You can withdraw it in Privacy settings. Withdrawal stops the consent-based processing going forward and does not invalidate processing that was lawful before withdrawal.
Where relevant, legal obligations support accounting, tax, regulatory responses, and the handling of data-protection requests. Billing processing applies only where there is an actual billing relationship. We retain evidence of consent and privacy requests to demonstrate compliance.
Public visibility and social features
Your profile, activities, statistics, clubs, posts, comments, and messages may be visible to others depending on your settings and feature choices. Review privacy settings before sharing information that could reveal sensitive routines, locations, schedules, relationships, or habits.
When you share your personal invite link, anyone who opens it can see your name and profile photo, even without an account. You can see how many people joined with your invite, and you are told who when one of them adds you as a friend.
Content you make public or share with others may be copied, saved, searched, or reshared by people outside your intended audience. Deleting content from 10k may not remove copies others already made.
Direct messages are end-to-end encrypted, as described in Security and Integrity. Conversation participants can also save or share content they receive.
Club chats are protected in transit but are readable by our servers. Eligible current club members can access the shared chat history, including earlier messages. Adding or removing a club conversation from Messenger does not change club membership or define who can read the club chat. Club owners and administrators can moderate messages.
Support conversations and their attachments are accessible to authorized support staff. Relevant support records may remain after account deletion under the retention rules below.
A link preview causes our server to contact the linked website and request metadata for that URL. The destination receives that server request, and the resulting preview can be shown in the conversation. In direct messages the preview is sent inside the encrypted message, so our server knows the link it fetched but not the conversation.
Security and integrity
We use access controls, encrypted transport for hosted service connections, security logging, administrative controls, and provider safeguards. Club and support messages are server-readable. Authorized staff access is limited to service operation, support, security, moderation, and applicable legal needs.
No service can guarantee perfect security. You can help protect your account by using a strong password, keeping devices secure, reviewing connected services, and contacting support if something looks wrong.
End-to-end encrypted direct messages
Messages and photos in direct chats are end-to-end encrypted. Your device encrypts them before they are sent, with keys that only you and the people in the conversation hold, so 10k cannot read their content.
Your keys are kept in an encrypted key vault that only a passkey or recovery code you hold can unlock. If you lose every device where your chats are unlocked and every passkey and recovery code, earlier encrypted messages cannot be recovered, including by us. Resetting encrypted chats starts again with new keys and hides the earlier history.
End-to-end encryption does not hide everything:
- Our servers still see who talks to whom and when, reactions, attachment sizes, and delivery or read state.
- Link previews are fetched by our server, which sees the link but not the conversation.
- Notifications about direct messages pass through push services, such as Firebase Cloud Messaging or your browser's push service. They include the sender's name, while the message preview stays encrypted.
- Club chats and support conversations are not end-to-end encrypted.
- The web app is delivered by our servers each time it loads, so its protection relies on those servers. The Android app from Google Play bundles its code.
Retention
We retain active account data while needed to provide the features you use. The periods below explain normal recovery and retention. A specific legal obligation or documented legal hold can require relevant evidence to be kept longer; unrelated account data is not retained for that reason.
Account deletion immediately disables sessions and ordinary app access. Permanent deletion begins after a 30-day recovery period unless you cancel it. The process deletes or minimizes account-owned data and preserves only the shared records and retained evidence described here. Processing or verification failures may require a retry or staff review.
Other participants may retain copies of conversations or content they received. Shared conversations and club records may remain with your identity removed or replaced. Retained encrypted messages may remain readable on participants’ devices. Support content is subject to its separate retention period.
Restricted provider recovery copies and migration recovery archives are separate from active account data. Deletion from active systems does not immediately remove those copies. They are retained only for their recovery, security, or legal purpose and removed when that purpose ends under the applicable recovery lifecycle. Contact us for information about copies relevant to your request.
- Recycled activities and their recorded time: recoverable for 30 days after the server accepts the removal. Permanent deletion can be requested sooner; expired items are removed by scheduled cleanup. This period is separate from account-deletion recovery.
- Unfinished email sign-ups: an account whose email address is never confirmed, or that never gives a date of birth meeting the age requirement, is deleted 30 days after it was created, without a further recovery period.
- Downloadable personal-data export archives: expire 24 hours after generation.
- New production product-analytics events: expire 25 months after ingestion.
- Consent-audit evidence: up to three years from the recorded consent decision. Account deletion pseudonymizes this evidence without restarting or extending its original expiry. Pseudonymized evidence is still protected as personal information.
- After account deletion, minimized security and system-error evidence is normally retained for 12 months; support and moderation evidence for 24 months; and privacy-request and compliance audit evidence for three years.
- Where billing records exist, necessary accounting and tax evidence is retained for ten years after account deletion under the app’s accounting-retention schedule. Deletion-related renewal-processing records expire after 90 days.
- Aggregate campaign counters that do not retain a person’s event history may remain. Routine operational records follow their operational retention rules and are minimized or removed during account deletion where applicable.
Your privacy rights and choices
Under applicable data-protection law, you may request access, correction, erasure, restriction, portability, and objection to processing. You can withdraw consent for optional processing. These rights apply subject to their legal conditions and do not require a paid plan.
Use account settings to request a personal-data export or account deletion. The public account-deletion page is also available without signing in, after identity verification. Exports are prepared as downloadable archives, and third-party identifiers or information may be limited to protect other people. Export downloads expire after 24 hours.
Manage product analytics and advertising measurement through Privacy choices or Settings → Privacy. Withdrawal stops new optional collection; the device clears its unsent analytics state when it receives the updated choice, and the server rejects events backed by outdated consent. Approximate-location consent is a separate Privacy setting.
For other requests, contact Mlabs, MB through the public support form or at help@10k.live. We may request proportionate information to verify your identity. We normally respond within one month; where the law permits an extension for a complex or numerous request, we explain the extension within that first month.
You can complain to the Lithuanian State Data Protection Inspectorate (VDAI), or another competent supervisory authority, including one in the EU/EEA country where you live or work. Contacting us first may help resolve the issue, but is not a requirement for exercising that right.
Adult-only service and age information
10k is intended only for people who are at least 18 years old. We collect and use date of birth to apply this eligibility rule, prevent underage access, and support safety and legal compliance.
When you sign up with Google or Apple, we ask for your date of birth before the account is created. When you sign up with email, we create the account and send a confirmation link first, and ask for your date of birth the first time you log in. The account cannot be used until you give it.
If the date of birth you give does not meet the age requirement, the account stays unusable and is deleted as an unfinished sign-up, as described under Retention. If we otherwise learn that an account holder is under 18, we may restrict access and delete or retain related information as required by applicable law, safety needs, dispute handling, and abuse prevention.
International transfers
The production service uses Microsoft Azure application and data services in France Central, France (EU). Static web hosting uses globally distributed Azure Static Web Apps. Website delivery, provider support, and the global operations of identity, push-notification, security, and payment providers can involve processing outside the European Economic Area. We do not promise that all processing remains in Lithuania or the EEA.
For international transfers for which we are responsible, the applicable provider data-processing terms supply the relevant safeguards, such as the European Commission’s standard contractual clauses or an applicable adequacy decision. Microsoft and Firebase publish their data-processing terms below. Independent provider processing is also described in the provider notices linked in this policy.
You can use our public support form to ask which transfer safeguards apply to your data and to request a copy or further information, subject to necessary protection of confidential information.
Legal requests, safety, and compliance
We may preserve, use, or disclose information if we believe it is reasonably necessary to comply with law, respond to legal process, protect users, prevent fraud or abuse, investigate security incidents, enforce terms, or protect rights and safety.
Changes and contact
The version and effective date above identify this policy. We may revise it as the service, providers, or processing practices change, and will provide any notice or obtain any consent required by applicable law.
Contact Mlabs, MB through the public support form or at help@10k.live for privacy questions, rights requests, and deletion or export assistance. You do not need an account for either channel.
Related policies
- Terms of Service
The agreement for using 10k: your account, your content and the rules we both follow.
- Cookie Policy
The storage 10k needs to work, and the optional measurement you can turn on or off.
- Community Guidelines
What’s allowed in clubs, messages and profiles, and what we remove.
- Subscription Terms
Rules for existing purchases and any paid plans or trials offered in a future release.
- Refund and Cancellation Policy
How cancellation and refund requests work for existing purchases.
- Moderation and Appeals Policy
How we review reports, the actions we can take, and how to appeal a decision.
- Legal Notice
Who runs 10k, and how to reach us as a user or an authority.