Privacy
Thought Manager is a place to put thoughts you don’t want to lose. The whole product collapses if you can’t trust it with what you put in. So here is exactly what we do with your data — every third party, every endpoint, no soft language.
What you give us
When you use the app, you create entries — typed text, voice memos, photos. We also generate things about your entries: a short summary, a category, a few tags, the transcript of a voice memo, the text extracted from a photo. All of that is yours.
What we store, and where
- The sensitive parts of an entry — the original content, the AI summary, the transcript, OCR text — are encrypted at rest before they touch our database. Only the metadata needed to rank, filter, and show your feed (timestamp, category, tag labels, action kind) is stored unencrypted.
- Voice memo audio and photo originals live in private object storage scoped to your account.
- Vector embeddings — the math that lets you find a thought by describing it vaguely — are stored alongside the summary, scoped per user.
- A device push token, only if you’ve enabled notifications.
- Anonymous usage events (which screen you visited, how long an action took, whether something errored) so we can spot bugs and slow paths.
Storage lives in Cloudflare’s WNAM region by default. We do not store payment information ourselves; if and when paid plans ship, that goes through a payments processor with their own controls.
Who else processes your data
- Cloudflare runs our database, file storage, vector index, and edge worker. Every request flows through them.
- Anthropic (Claude) categorizes and summarizes the text content of your entries, runs the “find that thought” recall, and generates your end-of-day retrospective. Content is sent per-request and is not retained by Anthropic beyond the response, per their commercial API terms.
- Apple Push Notification service delivers any notifications you opt into. Apple sees the notification body — typically a one-line snippet from a thought you wrote yourself.
We do not sell your data. We do not share it with advertisers. There are no third-party tracking pixels, analytics SDKs, or attribution services in the app.
Your rights
- Export — request a copy of every entry, transcript, and OCR result we hold for you. We send a JSON archive within seven days.
- Delete — delete your account from the app and we purge live data immediately and backups within thirty days.
- Correct — fix or remove individual entries from the feed any time.
- Decline — turn off any of microphone, camera, photo library, or notifications and the corresponding feature stops; the rest of the app still works.
To exercise any of these, write to us at the address below. We don’t require you to fill out a form.
Children
The app is rated 4+ but we do not knowingly collect data from children under 13. If you believe a minor has registered, contact us and we will delete the account.
Changes
When our practices change, we’ll update this page and revise the effective date at the top. Material changes will be communicated via email if you have an account.