Privacy notice
Last updated 18 August 2026
Who we are
DECODER™ is operated by ThinkSprint ("we", "us"), based in New Zealand. This notice explains what information we hold when your leadership team works through a DECODER™ programme, and what we do with it.
Privacy questions and requests: privacy@thinksprint.co.nz.
What we collect
- Account details — your name and email address, and a password if you create one rather than signing in with Google.
- Sprint content — the answers and conversation you contribute during each sprint, plus any documents your team uploads.
- Programme records — which team you belong to, which sprints you have completed, and the reports generated from your team's answers.
- Basic technical logs — standard records kept by our hosting and database providers to keep the service running and secure.
We do not use advertising trackers or sell any information to third parties.
How we use it
Your answers are used to run your programme: to guide the conversation, to generate the theme analysis and reports for your organisation, and to let your strategist support you. We also use aggregate, non-identifying usage information to improve the product.
Who can see your content
- You can see your own sprint conversations and summaries.
- Your organisation's administrators and the ThinkSprint strategist assigned to your programme can see your team's sprint records and reports.
- Members of other organisations can never see your content. Access is enforced in the database, not only in the interface.
AI processing
The coaching conversation and report analysis are produced using third-party AI models accessed through our platform provider. Content is sent to those models only to produce your output. We do not permit your content to be used to train AI models.
Where it is stored
Information is stored with our cloud hosting and database providers, which may process data outside New Zealand. Providers are bound by contractual obligations to protect it.
How long we keep it
We keep your programme content for the duration of your engagement and for 24 months afterwards, so your team can revisit its strategy history. After that it is deleted or anonymised, unless you ask us to remove it sooner or we are required to keep it by law.
Your choices
You may ask for a copy of the information we hold about you, ask us to correct it, or ask us to delete your account and its content. Email privacy@thinksprint.co.nz and we will respond within 20 working days.
Changes
If we change this notice, we will update the date above and, where the change is significant, tell participants by email.