Privacy policy

This policy has two parts: the thinkfirst.app website and the Think First iPhone app. Both are deliberately built to collect as little as possible.

Last updated: August 2026

Controller

Company
HBJ-Solutions GbR
Address
Haardter Str. 13, 67433 Neustadt an der Weinstraße, Germany

Represented by its partners Hugo Endele, Ben Grégory Seiler, Julius Maximilian Spindler.

Part 1 — This website

Visiting the website requires no registration. There are no accounts, no forms and no embedded third-party services.

Hosting and delivery

The website is hosted by Lovable Labs Incorporated (San Francisco, USA) and delivered through the global edge network of Cloudflare, Inc. For technical reasons pages are served from the nearest data centre, which for visitors from Germany is normally located inside the EU. The legal basis is our legitimate interest in operating the site securely and quickly (Art. 6(1)(f) GDPR). Data processing agreements are in place with both providers, and EU standard contractual clauses cover transfers to the USA.

Server log files

When a page is requested, the hosting provider automatically processes technical access data:

  • IP address of the requesting device
  • date and time of the request
  • the address requested and the volume of data transferred
  • browser type and operating system (user agent)
  • referring page, where transmitted

Legal basis and retention of log files

This data is processed to deliver the page, detect faults and defend against attacks, on the basis of Art. 6(1)(f) GDPR. Log files are stored briefly and deleted after 30 days at the latest; they are never combined with other data.

Audience measurement

Page views are counted using the cookie-free, aggregated statistics feature of our hosting provider Lovable Labs Incorporated. Only aggregated values are recorded: the page requested, the referrer, the device type and a country value derived from the IP address. No cookies are set, no IP addresses are stored permanently, no cross-device identifiers are created and nothing is passed to ad networks. The legal basis is Art. 6(1)(f) GDPR. Aggregated reports are deleted after 12 months.

Cookies

This website sets no cookies and does not track you across sessions or devices. Only your language choice (German or English) is stored locally in your browser (localStorage) and never leaves your device. That is why there is deliberately no cookie banner here.

Fonts and external content

No external fonts, maps, videos or social media plugins are loaded. Typography uses the system fonts already on your device, and every image and file is served from our own hosting. Visiting the site therefore opens no connections to third-party servers beyond delivering this website itself.

App Store links

The download buttons are plain links. A connection to Apple is only established once you click one; from that point Apple's privacy policy applies.

Part 2 — The iOS app

Statistics, schedules, limits, progress and settings are stored exclusively on your iPhone. There is no user account and no cloud sync.

Screen Time

Apps are selected in Apple's system picker. Think First receives neither the names of the selected apps nor any usage data — only the ability to protect your anonymous selection.

Friends feature (optional)

Only if you add friends are a nickname of your choosing and a daily count of resisted impulses sent to our server. No app names, timestamps or usage durations are transmitted. The legal basis is Art. 6(1)(b) GDPR (providing the feature you requested). You can delete your profile in the app at any time, which removes the server-side data.

No tracking, no ads in the app

The app contains no analytics SDKs and no ad networks, and builds no profiles. Purchases and subscriptions are handled by Apple; we receive no payment data.

Your rights

You have the following rights at any time:

  • access to the data stored about you (Art. 15 GDPR)
  • rectification of inaccurate data (Art. 16 GDPR)
  • erasure (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • objection to processing based on legitimate interests (Art. 21 GDPR)

Right to complain

An email to hello@thinkfirst.app is enough for any request. You may also lodge a complaint with a data protection authority, for example the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate, Hintere Bleiche 34, 55116 Mainz, Germany.